last executing test programs: 13.98317005s ago: executing program 3 (id=786): r0 = socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) syz_usb_connect(0x0, 0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b010203010902"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) getsockopt$inet6_buf(r0, 0x29, 0x22, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000001440)=ANY=[@ANYBLOB="03031b003a003200060063000000004488ff00000000000000000000ffffac141419ff020000000000000000000000000001", @ANYRESHEX=0x0], 0x76) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000096, 0x0, 0x8000000000000004}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e580000c1000002a8c008344"], 0x0}, 0x0) 10.961506033s ago: executing program 3 (id=794): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000140)="420f2135c482ed8e4d4ec4e251b7d721f58fe8c8a29c8f0c0000008fe6000f08c744240063000000c744240262000000ff1c3440f499", 0x36}], 0x1, 0x44, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000083512020000000102030109028600030180e007080b0101010a200009040020000924010200032600c511240806060000020002000200feff03000c2403fd0004a80206f9ff0a09040100000102200009040101010102200009050109400005040008250181090902000d040200000102200009040201010102200009058209ff0305040208250183000a0200"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='fuseblk\x00', &(0x7f0000000d00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x9b\x9bO\x88/\t\xcf\x9b\x9f\b\xb6\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcd\x89F\xd0#\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88\x1d\bn\x7f\x0e\x85\xa5\xb4\x05?_\xc9\xef\xe0Q\xdb\xb6\x935\xf1\x18\xac\xe0\x15\xf3\xde\xbd\xb5\xa1\x06\xfd7\x87\xe1\f\x0f\xf8\xc5\x8a\xdc!\x00\x00@\x00'/119, 0x0) read(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x10201, 0x0, 0x40000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x100000000000017c, 0x2, 0x2, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.082806452s ago: executing program 3 (id=813): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @mcast1, 0x10001}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @mcast1, 0x10001}, 0x1c) prctl$PR_SET_VMA(0x41555856, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x12, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001600)='f2fs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) 8.560576696s ago: executing program 3 (id=816): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@wrmsr={0x65, 0x20, {0x400000f1}}], 0x20}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000003000)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648, 0x8001}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000040)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="9802") 7.004922559s ago: executing program 2 (id=832): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) getxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=""/69, 0x45) 6.628896417s ago: executing program 3 (id=833): r0 = syz_usb_connect(0x0, 0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902300002010080320904000001ffffff000705b6020000010904010702ffffff000705820240000007050202"], 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4, 0x3, "502eb3"}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wg2\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4, 0x3, "502eb3"}}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000000380)={0x50, 0x0, 0x2004b3404, {0x7, 0x2d, 0x5, 0x40110428, 0xb, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x100, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000400)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x80000004}}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) (async) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@md0, r4, &(0x7f0000000580)={0x5ee5, 0xd30}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000800) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0281, 0x4f) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c0281, 0x4f) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, &(0x7f00000005c0)={0x20, 0x9, 0x100, {0x100, 0x24, "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"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000780)={0x0, 0x17, 0x3f, "b843b712035abfbc22c5b96f89e6d8658e2ec818ac2d089c0696e8f4bd6a314b99e8596997118c674f26b339e39100c02db411f3cdbdd5d3855bf81bd1b375"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x10}}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 5.572348127s ago: executing program 2 (id=844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x5e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x80000003) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x2, 0x2, 0x9}, 0x20) 5.429873843s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x100000a) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3430) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 5.240045722s ago: executing program 2 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) getxattr(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=""/69, 0x45) 5.012852273s ago: executing program 2 (id=858): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket(0x1, 0x5, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syslog(0x2, &(0x7f0000002100)=""/153, 0x99) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x40021, &(0x7f0000000300)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x2}}, {@stats}], [{@appraise_type}, {@measure}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'wfdno'}}]}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="49ba", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000000006f808050ae500"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x8, &(0x7f0000000100)="a101000000000000") 3.318988473s ago: executing program 3 (id=863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f000000b000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x305c3, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) rename(&(0x7f0000000140)='./file7/file0\x00', &(0x7f0000000180)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80700, 0x0) 1.90606023s ago: executing program 1 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18b001a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) mremap(&(0x7f0000880000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) futex_waitv(&(0x7f0000002cc0)=[{0x8, &(0x7f0000000200)=0x7, 0x82}], 0x1, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x8) 1.878108671s ago: executing program 1 (id=875): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000000000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.076317379s ago: executing program 1 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.075940519s ago: executing program 0 (id=877): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x5c, 0x65a) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) r2 = socket$inet6(0xa, 0x2, 0x3a) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd2d, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x28}}, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/85, 0x55, 0x0, 0x1d}, @flat=@binder={0x73622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}}], 0xab, 0x0, &(0x7f0000000580)="c922cff97cf8130195fd0c254bd740a183c35987c61b6e8e8cde3c346f15629cc8671c724a8c6536960a675a8802ef46c364f745e4a7b34339816d8e969bca63c1069d7da0ded5de41c5133a96b7bb32c6f0e973e0f99f78ae39973fb9d6c28a9d33b51a5ddf36e6f8fe61e4edd1b7426d491129d6062ec3c621e5672d9703f482e1a9115f8aff5c34657a83309db335add06edcf1da3ae7be3f7804aaf97f45d8cf4292348e7f18dcb081"}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r7, 0x65, 0x5, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000100)={0x0, 0x49, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r6) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="fa000000", @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf250f000000"], 0x14}}, 0x40000) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 1.065896789s ago: executing program 1 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000900)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0xec80, 0x9, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xeb}, {0x7, 0x0, 0xfd, '\x00', 0x5b}, {0x2, 0x4, 0xc, '\x00', 0x8}, {0x5, 0x2, 0x3, '\x00', 0xf1}, {0x3, 0x2, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x2, 0x3, 0xf, '\x00', 0xfe}, {0x76, 0x0, 0x5, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0xf5}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x6, 0x4, 0x7, '\x00', 0x6}, {0x81, 0x6, 0x4, '\x00', 0x48}, {0x2, 0x3, 0x0, '\x00', 0x7f}, {0x7d, 0x0, 0xa3, '\x00', 0x2}, {0x7, 0x1, 0x6, '\x00', 0x6}, {0x62, 0x4, 0x6, '\x00', 0x6}, {0x8, 0x80, 0x7c, '\x00', 0xb}, {0x3, 0x89, 0x85, '\x00', 0x5}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x28, 0x5, '\x00', 0x9}, {0x3, 0x0, 0xb, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c4c2fd281cfeb9190b0000b868e60000ba000000000f30b8f27f00000f23d00f21f8350000000b0f23f866ba4000edf2c045a177440f20c03509000000440f22c0c4c2c19b14c9670f789d84000f416fee66b821010f00d8", 0x58}], 0x1, 0x8, &(0x7f0000000180), 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="400f00d0d86600430f634e3cc4212c5f4cde00b8010000000f01d966b848008ed0d9e1c4c17a2c2563000000672e263e0f72f5770f01d1", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.030151211s ago: executing program 1 (id=879): socket$netlink(0x10, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB=',ro']) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYRESOCT=r0], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000090101000101000000eb7d4f2593c24265d019"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x25) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f00000005c0)={0x74, 0x0, 0x21}) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) r6 = socket$inet6(0xa, 0x2, 0x4000) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x100010, r4, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) readv(r6, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000840)=""/240, 0xf0}], 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) pwritev2(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="a76054", 0x3}], 0x1, 0x0, 0x0, 0x17) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r6, 0x0, 0x0, 0x4}]) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 947.651165ms ago: executing program 0 (id=880): syz_genetlink_get_family_id$tipc(&(0x7f00000037c0), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) socket(0x840000000002, 0x3, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 921.214866ms ago: executing program 0 (id=881): r0 = socket$inet6(0xa, 0x2, 0x11) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback={0xff000000}}, 0x1c) 819.036821ms ago: executing program 0 (id=882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r2, 0x0, 0x0, 0x0, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="3e3e360f782166b815008ec8b8010000000f01c16764430f239826430f01f6f30f09c401705f5f02c4a2199a4f0d47dec5db7cec98", 0x35}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 733.817465ms ago: executing program 0 (id=883): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x4000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 524.025175ms ago: executing program 0 (id=884): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000424000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, 0x0, 0x44084) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 75.025316ms ago: executing program 1 (id=885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001180), r1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x8}, 0xdb) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000011c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fddbdf250300000038000c8034000b800800090011cd0b4608000a0051d1000008000a00b71200000800090018e93f4008000a000b25000008000a0022ae000008000200020000000400088058000c8024000b8008000900e2866103000000009ac9017108000a00c7f0000008000a0072f8000014000b8008000900adc13e2008000a00849400001c000b8008000900beaf503608000a007735000008000a00d6da0800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004850}, 0x4) setpriority(0x0, 0x0, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_open_dev$evdev(&(0x7f00000001c0), 0x10001, 0x14000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000007000/0x2000)=nil, 0x2000}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xf9, 0x38}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x5, 0x100000000005, 0x20, 0x3, 0x4, 0x80000000106c, 0x100, 0x8000000000000, 0x8000000400007d, 0x1c00000, 0x8, 0x0, 0x4, 0x3, 0xc], 0x1, 0x3c4210}) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]}) 74.819936ms ago: executing program 2 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', 0x0, 0x0) 0s ago: executing program 32 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 3:0x7feeb845d5a0 [ 51.580793][ T1105] Code: 85 72 0b 00 00 45 85 c0 74 16 48 8b 44 24 20 0f b6 00 41 88 45 00 41 f6 c0 02 0f 85 58 0c 00 00 4d 01 c6 48 8d 83 00 91 00 00 <43> c6 04 3e f4 41 83 f8 08 0f 83 41 07 00 00 41 f6 c0 04 0f 85 17 [ 51.580804][ T1105] RSP: 002b:00007feeb94754b0 EFLAGS: 00010206 [ 51.580818][ T1105] RAX: 0000200000fe0100 RBX: 0000200000fd7000 RCX: 0000000000000000 [ 51.580828][ T1105] RDX: 00007feeb94759f0 RSI: 0000000000000000 RDI: 00007feeb94759f0 [ 51.580837][ T1105] RBP: 0000200000fd8000 R08: 0000000000000000 R09: 0000000000000038 [ 51.580853][ T1105] R10: 0000000000000038 R11: 0000000000000008 R12: 0000200000fd8800 [ 51.580861][ T1105] R13: 0000200000fd7000 R14: 0000200000fd7000 R15: 0000000000000000 [ 51.580872][ T1105] [ 51.580881][ T1105] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 51.997578][ T526] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.018851][ T526] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 52.050276][ T526] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.070210][ T526] usb 4-1: config 0 interface 0 has no altsetting 0 [ 52.076922][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.098430][ T526] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 52.107666][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.127545][ T526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.135738][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 52.151286][ T526] usb 4-1: config 0 descriptor?? [ 52.162769][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.171097][ T1095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.182692][ T9] usb 2-1: config 0 descriptor?? [ 53.500507][ T526] hid-steam 0003:28DE:1205.0005: item fetching failed at offset 0/3 [ 53.513329][ T9] hid-led 0003:27B8:01ED.0006: ignoring exceeding usage max [ 53.520923][ T526] hid-steam 0003:28DE:1205.0005: steam_probe:parse of hid interface failed [ 53.529655][ T526] hid-steam 0003:28DE:1205.0005: probe with driver hid-steam failed with error -22 [ 54.368675][ T36] audit: type=1400 audit(1789852098.210:296): avc: denied { ioctl } for pid=1094 comm="syz.3.227" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.458059][ T1137] overlayfs: failed to clone upperpath [ 54.839822][ T65] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 54.849218][ T9] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 54.898286][ T9] usb 2-1: USB disconnect, device number 9 [ 55.010447][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 55.028249][ T65] usb 1-1: language id specifier not provided by device, defaulting to English [ 55.048439][ T65] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 55.061225][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.070697][ T65] usb 1-1: Product: syz [ 55.075936][ T65] usb 1-1: Manufacturer: syz [ 55.099886][ T65] usb 1-1: SerialNumber: syz [ 55.404982][ T9] usb 4-1: USB disconnect, device number 10 [ 55.430994][ T1159] ./dev/sda1: Can't lookup blockdev [ 57.499362][ T1145] incfs_lookup_dentry err:-4 [ 57.514215][ T1145] incfs: Can't find or create .index dir in ./file0 [ 57.536544][ T1145] incfs: mount failed -4 [ 57.612167][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 57.635217][ T65] usb 1-1: USB disconnect, device number 11 [ 57.733538][ T36] audit: type=1400 audit(1789852101.570:297): avc: denied { write } for pid=1173 comm="syz.3.253" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.810672][ T36] audit: type=1400 audit(1789852101.640:298): avc: denied { read } for pid=1177 comm="syz.3.255" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.931623][ T36] audit: type=1400 audit(1789852101.780:299): avc: denied { map } for pid=1182 comm="syz.3.257" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.975595][ T1183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14104 sclass=netlink_route_socket pid=1183 comm=syz.3.257 [ 57.988317][ T36] audit: type=1400 audit(1789852101.820:300): avc: denied { write } for pid=1182 comm="syz.3.257" name="tcp6" dev="proc" ino=4026532572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.119810][ T1192] overlayfs: failed to clone upperpath [ 58.184965][ T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 59.206546][ T36] audit: type=1400 audit(1789852103.050:301): avc: denied { create } for pid=1198 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.893917][ T36] audit: type=1400 audit(1789852103.730:302): avc: denied { search } for pid=1204 comm="syz.3.264" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.919042][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 59.926555][ T36] audit: type=1400 audit(1789852103.730:303): avc: denied { write } for pid=1204 comm="syz.3.264" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.949592][ T65] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 59.957831][ T65] usb 1-1: config 0 has no interface number 0 [ 59.964155][ T36] audit: type=1400 audit(1789852103.770:304): avc: denied { mounton } for pid=1204 comm="syz.3.264" path="/51/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 60.020856][ T65] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 60.057917][ T65] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.073177][ T1217] overlayfs: failed to clone upperpath [ 60.078765][ T65] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.090085][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 60.106203][ T65] usb 1-1: config 0 interface 196 has no altsetting 0 [ 60.120424][ T65] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 60.129783][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.137877][ T65] usb 1-1: Product: syz [ 60.147848][ T1223] overlayfs: failed to clone upperpath [ 60.156800][ T65] usb 1-1: Manufacturer: syz [ 60.164581][ T65] usb 1-1: SerialNumber: syz [ 60.177355][ T65] usb 1-1: config 0 descriptor?? [ 60.188487][ T1189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 60.205363][ T1227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1227 comm=syz.2.272 [ 60.249158][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 60.255353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.266600][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.276550][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.289481][ T446] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.297481][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.306679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.317071][ T9] usb 2-1: config 0 descriptor?? [ 60.440398][ T446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.451423][ T446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.461320][ T446] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 60.470919][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.482371][ T446] usb 4-1: config 0 descriptor?? [ 60.731017][ T9] microsoft 0003:045E:07DA.0007: unknown global tag 0xd [ 60.753128][ T9] microsoft 0003:045E:07DA.0007: item 0 4 1 13 parsing failed [ 60.760911][ T1230] futex_wake_op: syz.2.273 tries to shift op by 144; fix this program [ 60.769521][ T9] microsoft 0003:045E:07DA.0007: parse failed [ 60.785740][ T9] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 60.797726][ T65] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 60.820484][ T65] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 60.890210][ T446] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0 [ 60.915442][ T446] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0 [ 60.928465][ T1197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.938167][ T36] audit: type=1400 audit(1789852104.790:305): avc: denied { read } for pid=1242 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.971633][ T446] hid-led 0003:1D34:000A.0008: unknown main item tag 0x0 [ 60.979281][ T1197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.020771][ T36] audit: type=1400 audit(1789852104.810:306): avc: denied { open } for pid=1242 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.061443][ T65] usb 1-1: USB disconnect, device number 12 [ 61.088612][ T65] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 61.105639][ T446] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -71 [ 61.141300][ T446] usb 4-1: USB disconnect, device number 11 [ 61.155533][ T36] audit: type=1400 audit(1789852104.810:307): avc: denied { getattr } for pid=1242 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.224779][ T36] audit: type=1400 audit(1789852104.810:308): avc: denied { bpf } for pid=1238 comm="syz.2.275" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.256808][ T36] audit: type=1400 audit(1789852105.050:309): avc: denied { write } for pid=1241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.294988][ T36] audit: type=1400 audit(1789852105.050:310): avc: denied { add_name } for pid=1241 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.339642][ T36] audit: type=1400 audit(1789852105.050:311): avc: denied { create } for pid=1241 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.169584][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.195891][ T9] usb 2-1: USB disconnect, device number 10 [ 62.217700][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.248781][ T1318] overlayfs: failed to clone upperpath [ 62.254440][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.275621][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.301306][ T1320] overlayfs: failed to clone upperpath [ 62.308753][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.344576][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.368141][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.390574][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.400981][ T446] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 62.419120][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.444051][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 62.488116][ T1331] ./dev/sda1: Can't lookup blockdev [ 62.578943][ T446] usb 4-1: device descriptor read/64, error -71 [ 62.818877][ T446] usb 4-1: device descriptor read/64, error -71 [ 63.041579][ T1355] netlink: 'syz.1.307': attribute type 4 has an invalid length. [ 63.058834][ T446] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 63.198858][ T446] usb 4-1: device descriptor read/64, error -71 [ 63.218814][ T65] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 63.368798][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 63.375095][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.386381][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.399387][ T65] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 63.414817][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.427212][ T1365] overlayfs: failed to clone upperpath [ 63.433273][ T65] usb 1-1: config 0 descriptor?? [ 63.440438][ T446] usb 4-1: device descriptor read/64, error -71 [ 63.558998][ T446] usb usb4-port1: attempt power cycle [ 63.856601][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 63.872728][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 63.893307][ T65] usb 1-1: USB disconnect, device number 13 [ 63.908813][ T446] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 63.935242][ T1386] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 63.949821][ T446] usb 4-1: device descriptor read/8, error -71 [ 64.003359][ T1399] overlayfs: failed to clone upperpath [ 64.089642][ T446] usb 4-1: device descriptor read/8, error -71 [ 64.328737][ T446] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 64.360479][ T446] usb 4-1: device descriptor read/8, error -71 [ 64.490618][ T446] usb 4-1: device descriptor read/8, error -71 [ 64.608743][ T446] usb usb4-port1: unable to enumerate USB device [ 64.658648][ T445] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 64.809835][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.820913][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.830857][ T445] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 64.840340][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.851700][ T445] usb 1-1: config 0 descriptor?? [ 65.260406][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.277880][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.285919][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.292898][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.299834][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.306666][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.313773][ T445] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 65.324748][ T445] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 65.395397][ T1441] overlayfs: failed to clone upperpath [ 65.467922][ T445] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 65.475963][ T445] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 65.484146][ T445] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -5 [ 65.563670][ T446] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 65.670412][ T445] usb 1-1: USB disconnect, device number 14 [ 65.702028][ T446] usb 4-1: device descriptor read/64, error -71 [ 65.938514][ T446] usb 4-1: device descriptor read/64, error -71 [ 65.969708][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 65.969721][ T36] audit: type=1400 audit(1789852109.821:343): avc: denied { listen } for pid=1453 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.996597][ T36] audit: type=1400 audit(1789852109.851:344): avc: denied { read } for pid=1453 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.166786][ T1462] overlayfs: failed to clone upperpath [ 66.188455][ T446] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 66.209707][ T36] audit: type=1400 audit(1789852110.051:345): avc: denied { connect } for pid=1465 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.242347][ T36] audit: type=1400 audit(1789852110.081:346): avc: denied { ioctl } for pid=1465 comm="syz.2.340" path="socket:[16795]" dev="sockfs" ino=16795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.267239][ T36] audit: type=1400 audit(1789852110.091:347): avc: denied { connect } for pid=1467 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.368437][ T446] usb 4-1: device descriptor read/64, error -71 [ 66.608484][ T446] usb 4-1: device descriptor read/64, error -71 [ 66.718711][ T446] usb usb4-port1: attempt power cycle [ 66.952970][ T1494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 66.970630][ T1494] kvm: user requested TSC rate below hardware speed [ 67.058358][ T446] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 67.079480][ T446] usb 4-1: device descriptor read/8, error -71 [ 67.116788][ T1497] fuse: Bad value for 'fd' [ 67.122489][ T36] audit: type=1400 audit(1789852110.971:348): avc: denied { remount } for pid=1496 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.209375][ T446] usb 4-1: device descriptor read/8, error -71 [ 67.230874][ T1503] raw_sendmsg: syz.2.353 forgot to set AF_INET. Fix it! [ 67.448373][ T446] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.469276][ T446] usb 4-1: device descriptor read/8, error -71 [ 67.489549][ T1505] __nla_validate_parse: 25 callbacks suppressed [ 67.489562][ T1505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 67.517743][ T36] audit: type=1400 audit(1789852111.361:349): avc: denied { write } for pid=1506 comm="syz.0.355" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 67.609381][ T446] usb 4-1: device descriptor read/8, error -71 [ 67.718412][ T446] usb usb4-port1: unable to enumerate USB device [ 67.757681][ T1509] overlayfs: failed to clone upperpath [ 67.828268][ T445] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 67.970472][ T36] audit: type=1400 audit(1789852111.821:350): avc: denied { bind } for pid=1514 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.998416][ T1517] netlink: 104 bytes leftover after parsing attributes in process `syz.2.360'. [ 68.008613][ T445] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.028027][ T445] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.044150][ T36] audit: type=1400 audit(1789852111.891:351): avc: denied { listen } for pid=1518 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.064222][ T445] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.071077][ T445] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 68.080304][ T36] audit: type=1400 audit(1789852111.921:352): avc: denied { accept } for pid=1518 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.099692][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.108305][ T445] usb 1-1: config 0 descriptor?? [ 68.521256][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.530789][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.537928][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.545423][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.552701][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.560160][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.567311][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.574752][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.582765][ T445] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 68.590345][ T445] logitech 0003:046D:C286.000A: No inputs registered, leaving [ 68.608322][ T445] logitech 0003:046D:C286.000A: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 68.625500][ T445] logitech 0003:046D:C286.000A: no inputs found [ 68.677195][ T1537] netlink: 104 bytes leftover after parsing attributes in process `syz.2.366'. [ 68.722887][ T445] usb 1-1: USB disconnect, device number 15 [ 68.748161][ T446] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 68.919072][ T446] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.942676][ T446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 68.956101][ T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 68.973490][ T446] usb 4-1: Product: syz [ 68.982092][ T446] usb 4-1: Manufacturer: syz [ 68.992267][ T446] usb 4-1: SerialNumber: syz [ 69.203995][ T446] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.216232][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.228202][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.243487][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.260275][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.278434][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.318666][ T1547] 9pnet_fd: Insufficient options for proto=fd [ 69.326438][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.352415][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.402393][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.428800][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.467380][ T1555] overlayfs: failed to clone upperpath [ 69.478678][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.503281][ T446] usb 4-1: USB disconnect, device number 20 [ 69.519185][ T446] usblp0: removed [ 69.567963][ T1570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.379'. [ 69.577276][ T1570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 69.718180][ T445] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 69.869232][ T445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.879494][ T445] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.889458][ T445] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.903787][ T445] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 69.913043][ T445] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.921249][ T445] usb 1-1: Product: syz [ 69.925487][ T445] usb 1-1: Manufacturer: syz [ 69.930208][ T445] usb 1-1: SerialNumber: syz [ 69.938085][ T1556] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 69.945749][ T445] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 69.958407][ T445] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 69.969345][ T445] usbserial_generic 1-1:1.0: generic converter detected [ 69.979897][ T445] usb 1-1: generic converter now attached to ttyUSB0 [ 70.032659][ T1576] 9pnet_fd: Insufficient options for proto=fd [ 70.163778][ T1556] syzkaller1: entered promiscuous mode [ 70.172615][ T1556] syzkaller1: entered allmulticast mode [ 70.213768][ T445] usb 1-1: USB disconnect, device number 16 [ 70.225656][ T445] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 70.235636][ T445] usbserial_generic 1-1:1.0: device disconnected [ 70.357946][ T446] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 70.518942][ T446] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.540029][ T446] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.560971][ T446] usb 4-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 70.570247][ T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 70.587910][ T446] usb 4-1: Product: syz [ 70.598673][ T446] usb 4-1: Manufacturer: syz [ 70.770982][ T1604] netlink: 'syz.0.392': attribute type 12 has an invalid length. [ 70.923447][ T1606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14369 sclass=netlink_route_socket pid=1606 comm=syz.1.393 [ 70.960153][ T1613] overlayfs: failed to clone upperpath [ 70.987643][ T1617] ./dev/sda1: Can't lookup blockdev [ 71.009981][ T446] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:046D:C299.000B/input/input9 [ 71.022114][ T446] logitech 0003:046D:C299.000B: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.3-1/input0 [ 71.033960][ T446] logitech 0003:046D:C299.000B: Force feedback support for Logitech Gaming Wheels [ 71.043338][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 71.209228][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.219504][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 71.230368][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.244856][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 71.254255][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.262478][ T10] usb 1-1: Product: syz [ 71.266795][ T10] usb 1-1: Manufacturer: syz [ 71.271657][ T10] usb 1-1: SerialNumber: syz [ 71.452463][ T1588] can0: slcan on ptm0. [ 71.482903][ T1588] can0 (unregistered): slcan off ptm0. [ 71.511186][ T446] usb 4-1: USB disconnect, device number 21 [ 71.565419][ T1628] fuse: Bad value for 'fd' [ 71.582786][ T1628] fuse: Bad value for 'fd' [ 71.836338][ T1669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1669 comm=syz.2.405 [ 72.063422][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 72.063437][ T36] audit: type=1400 audit(1789852115.912:388): avc: denied { create } for pid=1671 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 72.214860][ T446] usb 1-1: USB disconnect, device number 17 [ 72.271939][ T36] audit: type=1400 audit(1789852116.122:389): avc: denied { bind } for pid=1675 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.291131][ T1676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 72.318753][ T1676] mmap: syz.0.408 (1676) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.341013][ T36] audit: type=1400 audit(1789852116.192:390): avc: denied { create } for pid=1677 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.383012][ T1678] netlink: 328 bytes leftover after parsing attributes in process `syz.1.409'. [ 72.394609][ T1683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'. [ 72.425184][ T36] audit: type=1400 audit(1789852116.192:391): avc: denied { write } for pid=1677 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.502033][ T36] audit: type=1400 audit(1789852116.192:392): avc: denied { nlmsg_write } for pid=1677 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.571367][ T36] audit: type=1400 audit(1789852116.232:393): avc: denied { execute } for pid=1677 comm="syz.1.409" path="pipe:[2997]" dev="pipefs" ino=2997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 72.911874][ T1700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.418'. [ 72.922015][ T36] audit: type=1400 audit(1789852116.772:394): avc: denied { mounton } for pid=1699 comm="syz.3.418" path="/bus" dev="ramfs" ino=18515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 72.979597][ T36] audit: type=1400 audit(1789852116.802:395): avc: denied { execute } for pid=1699 comm="syz.3.418" path="/bus/file1" dev="ramfs" ino=18518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 73.002137][ T1705] netlink: 340 bytes leftover after parsing attributes in process `syz.3.420'. [ 73.097908][ T1715] futex_wake_op: syz.2.422 tries to shift op by 144; fix this program [ 73.121999][ T36] audit: type=1400 audit(1789852116.972:396): avc: denied { mounton } for pid=1716 comm="syz.3.424" path="/69/file0" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.147658][ T1715] futex_wake_op: syz.2.422 tries to shift op by 144; fix this program [ 73.230764][ T36] audit: type=1400 audit(1789852117.072:397): avc: denied { remount } for pid=1716 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 73.371779][ T1749] input: syz1 as /devices/virtual/input/input10 [ 73.402838][ T1747] syzkaller1: entered promiscuous mode [ 73.460724][ T1769] process '/newroot/156/file0' started with executable stack [ 73.482148][ T1747] syzkaller1: entered allmulticast mode [ 73.527880][ T1750] cgroup: fork rejected by pids controller in /syz0 [ 73.677528][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 73.837507][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 73.853770][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.871710][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 163, changing to 7 [ 73.894255][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 42223, setting to 1024 [ 73.935212][ T10] usb 1-1: string descriptor 0 read error: -22 [ 73.946847][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 73.966414][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.986736][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.299809][ T1813] netlink: 'syz.1.444': attribute type 12 has an invalid length. [ 75.197365][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 75.337367][ T9] usb 4-1: device descriptor read/64, error -71 [ 75.577336][ T9] usb 4-1: device descriptor read/64, error -71 [ 75.709447][ T1837] netlink: 'syz.2.451': attribute type 30 has an invalid length. [ 75.821421][ T1835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.829922][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 75.916898][ T1850] fuse: Bad value for 'fd' [ 75.977238][ T9] usb 4-1: device descriptor read/64, error -71 [ 76.015082][ T1835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.217244][ T9] usb 4-1: device descriptor read/64, error -71 [ 76.330288][ T9] usb usb4-port1: attempt power cycle [ 76.404053][ T293] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 76.462376][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 76.462403][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.462411][ T293] Call Trace: [ 76.462415][ T293] [ 76.462421][ T293] __dump_stack+0x21/0x30 [ 76.462444][ T293] dump_stack_lvl+0x140/0x1c0 [ 76.462461][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.462480][ T293] ? ___ratelimit+0x41c/0x5c0 [ 76.462495][ T293] ? __kasan_check_write+0x18/0x20 [ 76.462509][ T293] dump_stack+0x19/0x20 [ 76.462524][ T293] dump_header+0xd9/0x460 [ 76.462540][ T293] oom_kill_process+0x35d/0x640 [ 76.462556][ T293] out_of_memory+0x5d1/0xa20 [ 76.462570][ T293] ? __cfi_out_of_memory+0x10/0x10 [ 76.462584][ T293] ? mutex_lock_killable+0x97/0x1d0 [ 76.462600][ T293] ? __cfi_mutex_lock_killable+0x10/0x10 [ 76.462616][ T293] mem_cgroup_out_of_memory+0x2c5/0x390 [ 76.462638][ T293] ? css_next_descendant_pre+0x1ec/0x210 [ 76.462654][ T293] ? __kasan_check_write+0x18/0x20 [ 76.462667][ T293] ? drain_obj_stock+0xec0/0xec0 [ 76.462681][ T293] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 76.462695][ T293] try_charge_memcg+0x925/0xe10 [ 76.462713][ T293] ? __cfi_try_charge_memcg+0x10/0x10 [ 76.462730][ T293] ? __alloc_pages_noprof+0x35a/0x7e0 [ 76.462748][ T293] __mem_cgroup_charge+0xfc/0x420 [ 76.462760][ T293] ? filemap_get_entry+0x41b/0x490 [ 76.462775][ T293] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 76.462788][ T293] filemap_add_folio+0x57/0x3e0 [ 76.462802][ T293] __filemap_get_folio+0x829/0xe80 [ 76.462817][ T293] ? downgrade_write+0x470/0x470 [ 76.462836][ T293] ? __cfi___filemap_get_folio+0x10/0x10 [ 76.462851][ T293] ? down_read+0x7f/0xe0 [ 76.462865][ T293] ? __cfi_down_read+0x10/0x10 [ 76.462880][ T293] ? filemap_map_pages+0x17c0/0x1b80 [ 76.462896][ T293] ? __kasan_check_write+0x18/0x20 [ 76.462909][ T293] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 76.462925][ T293] filemap_fault+0xb8e/0x1ad0 [ 76.462942][ T293] ? __cfi_filemap_fault+0x10/0x10 [ 76.462957][ T293] ? __kasan_check_write+0x18/0x20 [ 76.462969][ T293] ? __cfi_filemap_map_pages+0x10/0x10 [ 76.462985][ T293] ? __schedule+0x149e/0x20b0 [ 76.462999][ T293] ? vma_data_pages+0x105/0x140 [ 76.463011][ T293] do_pte_missing+0x3649/0x4440 [ 76.463028][ T293] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 76.463041][ T293] ? hrtimer_start_range_ns+0x123f/0x2030 [ 76.463058][ T293] ? pte_marker_clear+0x1b0/0x1b0 [ 76.463074][ T293] ? __kasan_check_write+0x18/0x20 [ 76.463086][ T293] ? irqentry_exit+0x4a/0x60 [ 76.463101][ T293] ? sysvec_call_function_single+0x11/0x90 [ 76.463117][ T293] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 76.463133][ T293] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 76.463147][ T293] handle_mm_fault+0x1189/0x1ba0 [ 76.463163][ T293] ? __cfi_handle_mm_fault+0x10/0x10 [ 76.463177][ T293] ? lock_vma_under_rcu+0x4cf/0x590 [ 76.463193][ T293] ? __cfi___x64_sys_wait4+0x10/0x10 [ 76.463211][ T293] do_user_addr_fault+0x951/0x1230 [ 76.463224][ T293] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 76.463241][ T293] exc_page_fault+0x58/0xc0 [ 76.463256][ T293] asm_exc_page_fault+0x2b/0x30 [ 76.463270][ T293] RIP: 0033:0x7feeb846c014 [ 76.463282][ T293] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a0 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 99 96 ee 00 48 01 d1 [ 76.463293][ T293] RSP: 002b:00007ffe1b8b9af0 EFLAGS: 00010202 [ 76.463307][ T293] RAX: 0000001b2ed24000 RBX: 000000000000015a RCX: 00000000000128e0 [ 76.463317][ T293] RDX: 0000000006026e70 RSI: 00007ffe1b8b9b80 RDI: 0000000000000001 [ 76.463326][ T293] RBP: 00007ffe1b8b9b2c R08: 0000000016eca66c R09: 4000000000000000 [ 76.463335][ T293] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 76.463344][ T293] R13: 00000000000927c0 R14: 0000000000012937 R15: 00007ffe1b8b9b80 [ 76.463354][ T293] [ 76.464099][ T293] memory: usage 307200kB, limit 307200kB, failcnt 24676 [ 76.866934][ T1873] overlayfs: failed to resolve './file1': -2 [ 76.885244][ T293] memory+swap: usage 432160kB, limit 9007199254740988kB, failcnt 0 [ 76.893371][ T293] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.900313][ T293] Memory cgroup stats for /syz0: [ 76.900423][ T293] cache 314236928 [ 76.909210][ T293] rss 299008 [ 76.912419][ T293] rss_huge 0 [ 76.915625][ T293] shmem 314236928 [ 76.919450][ T293] mapped_file 12288 [ 76.923268][ T293] dirty 0 [ 76.926232][ T293] writeback 0 [ 76.929757][ T293] workingset_refault_anon 16 [ 76.934359][ T293] workingset_refault_file 0 [ 76.938896][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 76.946795][ T293] swap 127959040 [ 76.950428][ T293] swapcached 36864 [ 76.954188][ T293] pgpgin 168062 [ 76.958081][ T293] pgpgout 91773 [ 76.961662][ T293] pgfault 56817 [ 76.965230][ T293] pgmajfault 10 [ 76.969097][ T293] inactive_anon 130125824 [ 76.973468][ T9] usb 4-1: device descriptor read/8, error -71 [ 76.979871][ T293] active_anon 184446976 [ 76.984055][ T293] inactive_file 0 [ 76.987853][ T293] active_file 0 [ 76.991376][ T293] unevictable 0 [ 76.994845][ T293] hierarchical_memory_limit 314572800 [ 77.000803][ T293] hierarchical_memsw_limit 9223372036854771712 [ 77.010935][ T293] total_cache 314236928 [ 77.015142][ T293] total_rss 299008 [ 77.019051][ T293] total_rss_huge 0 [ 77.022841][ T293] total_shmem 314236928 [ 77.027007][ T293] total_mapped_file 12288 [ 77.031762][ T293] total_dirty 0 [ 77.035278][ T293] total_writeback 0 [ 77.039212][ T293] total_workingset_refault_anon 16 [ 77.044373][ T293] total_workingset_refault_file 0 [ 77.049719][ T293] total_swap 127959040 [ 77.053898][ T293] total_swapcached 36864 [ 77.058484][ T293] total_pgpgin 168062 [ 77.062515][ T293] total_pgpgout 91773 [ 77.066586][ T293] total_pgfault 56817 [ 77.071035][ T293] total_pgmajfault 10 [ 77.075187][ T293] total_inactive_anon 130125824 [ 77.081965][ T293] total_active_anon 184446976 [ 77.096960][ T293] total_inactive_file 0 [ 77.101818][ T293] total_active_file 0 [ 77.105851][ T293] total_unevictable 0 [ 77.110143][ T293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.431,pid=1753,uid=0 [ 77.125211][ T293] Memory cgroup out of memory: Killed process 1753 (syz.0.431) total-vm:49264kB, anon-rss:0kB, file-rss:28988kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 77.142005][ T9] usb 4-1: device descriptor read/8, error -71 [ 77.191433][ T1782] syz.0.431 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 77.265865][ T1782] CPU: 0 UID: 0 PID: 1782 Comm: syz.0.431 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 77.265891][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.265899][ T1782] Call Trace: [ 77.265903][ T1782] [ 77.265909][ T1782] __dump_stack+0x21/0x30 [ 77.265932][ T1782] dump_stack_lvl+0x140/0x1c0 [ 77.265949][ T1782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.265969][ T1782] ? ___ratelimit+0x41c/0x5c0 [ 77.265983][ T1782] ? __kasan_check_write+0x18/0x20 [ 77.265998][ T1782] dump_stack+0x19/0x20 [ 77.266013][ T1782] dump_header+0xd9/0x460 [ 77.266029][ T1782] oom_kill_process+0x35d/0x640 [ 77.266044][ T1782] out_of_memory+0x5d1/0xa20 [ 77.266059][ T1782] ? __cfi_out_of_memory+0x10/0x10 [ 77.266073][ T1782] ? mutex_lock_killable+0x115/0x1d0 [ 77.266089][ T1782] ? __cfi_mutex_lock_killable+0x10/0x10 [ 77.266106][ T1782] mem_cgroup_out_of_memory+0x2c5/0x390 [ 77.266120][ T1782] ? css_next_descendant_pre+0x1ec/0x210 [ 77.266135][ T1782] ? __kasan_check_write+0x18/0x20 [ 77.266148][ T1782] ? drain_obj_stock+0xec0/0xec0 [ 77.266163][ T1782] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 77.266176][ T1782] try_charge_memcg+0x925/0xe10 [ 77.266192][ T1782] ? static_key_count+0x45/0x70 [ 77.266208][ T1782] ? lruvec_init+0x211/0x280 [ 77.266222][ T1782] ? __cfi_try_charge_memcg+0x10/0x10 [ 77.266239][ T1782] ? __alloc_pages_noprof+0x35a/0x7e0 [ 77.266257][ T1782] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.266275][ T1782] __mem_cgroup_charge+0xfc/0x420 [ 77.266287][ T1782] ? folio_add_lru+0x116/0x400 [ 77.266302][ T1782] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 77.266316][ T1782] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 77.266333][ T1782] ? shmem_replace_folio+0x9b0/0x9b0 [ 77.266348][ T1782] ? shmem_huge_global_enabled+0x2da/0x360 [ 77.266362][ T1782] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 77.266377][ T1782] ? __kasan_check_write+0x18/0x20 [ 77.266389][ T1782] ? _raw_spin_lock+0x92/0x120 [ 77.266402][ T1782] shmem_get_folio_gfp+0x5cd/0x12e0 [ 77.266417][ T1782] ? shmem_get_folio+0xc0/0xc0 [ 77.266430][ T1782] ? follow_page_pte+0x8fb/0xba0 [ 77.266448][ T1782] ? inode_to_bdi+0x6d/0x100 [ 77.266465][ T1782] shmem_write_begin+0xf4/0x260 [ 77.266480][ T1782] generic_perform_write+0x32c/0x970 [ 77.266498][ T1782] ? __cfi_generic_perform_write+0x10/0x10 [ 77.266514][ T1782] ? generic_write_checks_count+0x426/0x540 [ 77.266538][ T1782] ? file_update_time+0xa3/0x210 [ 77.266556][ T1782] shmem_file_write_iter+0x105/0x130 [ 77.266573][ T1782] __kernel_write_iter+0x462/0x900 [ 77.266586][ T1782] ? __cfi___kernel_write_iter+0x10/0x10 [ 77.266600][ T1782] ? get_dump_page+0x165/0x220 [ 77.266616][ T1782] ? __asan_memset+0x39/0x50 [ 77.266628][ T1782] ? iov_iter_bvec+0xc0/0x180 [ 77.266646][ T1782] dump_user_range+0xb8b/0xe60 [ 77.266661][ T1782] ? __cfi_dump_user_range+0x10/0x10 [ 77.266675][ T1782] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 77.266693][ T1782] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 77.266712][ T1782] ? elf_core_dump+0x23cf/0x3840 [ 77.266728][ T1782] elf_core_dump+0x2d61/0x3840 [ 77.266745][ T1782] ? __cfi_elf_core_dump+0x10/0x10 [ 77.266760][ T1782] ? mas_next_slot+0xf01/0xfd0 [ 77.266779][ T1782] ? dump_interrupted+0xf0/0xf0 [ 77.266792][ T1782] ? filp_open+0x199/0x1f0 [ 77.266808][ T1782] ? 0xffffffffff600000 [ 77.266818][ T1782] do_coredump+0x20d2/0x3050 [ 77.266833][ T1782] ? __cfi_do_coredump+0x10/0x10 [ 77.266846][ T1782] ? asm_exc_page_fault+0x2b/0x30 [ 77.266864][ T1782] ? __kasan_slab_free+0x6a/0x80 [ 77.266879][ T1782] ? get_signal+0xa2a/0x1490 [ 77.266896][ T1782] get_signal+0x11bf/0x1490 [ 77.266912][ T1782] arch_do_signal_or_restart+0xbc/0x700 [ 77.266926][ T1782] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 77.266939][ T1782] ? fpregs_restore_userregs+0x11c/0x260 [ 77.266955][ T1782] irqentry_exit_to_user_mode+0x4d/0xb0 [ 77.266972][ T1782] irqentry_exit+0x16/0x60 [ 77.266987][ T1782] exc_page_fault+0x65/0xc0 [ 77.267001][ T1782] asm_exc_page_fault+0x2b/0x30 [ 77.267016][ T1782] RIP: 0033:0x7feeb859e159 [ 77.267031][ T1782] Code: Unable to access opcode bytes at 0x7feeb859e12f. [ 77.267038][ T1782] RSP: 002b:0000000000000010 EFLAGS: 00010246 [ 77.267051][ T1782] RAX: 0000000000000000 RBX: 00007feeb8826360 RCX: 00007feeb859e159 [ 77.267061][ T1782] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 77.267070][ T1782] RBP: 00007feeb863506b R08: 0000000000000000 R09: 0000000000000000 [ 77.267078][ T1782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.267087][ T1782] R13: 00007feeb88263f8 R14: 00007feeb8826360 R15: 00007ffe1b8b9788 [ 77.267098][ T1782] [ 77.787019][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 77.807988][ T9] usb 4-1: device descriptor read/8, error -71 [ 77.937997][ T9] usb 4-1: device descriptor read/8, error -71 [ 78.049839][ T9] usb usb4-port1: unable to enumerate USB device [ 78.197130][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 78.197159][ T36] audit: type=1400 audit(1789852121.922:401): avc: denied { create } for pid=1896 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.450470][ T36] audit: type=1400 audit(1789852122.302:402): avc: denied { listen } for pid=1910 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.508758][ T1782] memory: usage 307200kB, limit 307200kB, failcnt 27783 [ 78.524499][ T1782] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0 [ 78.542227][ T1782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 78.558014][ T1782] Memory cgroup stats for /syz0: [ 78.558133][ T1782] cache 314449920 [ 78.587085][ T1782] rss 32768 [ 78.590293][ T1782] rss_huge 0 [ 78.597088][ T1782] shmem 314445824 [ 78.607029][ T1782] mapped_file 0 [ 78.612710][ T1782] dirty 0 [ 78.619081][ T1782] writeback 0 [ 78.626695][ T1782] workingset_refault_anon 16 [ 78.636823][ T1782] workingset_refault_file 185 [ 78.648065][ T1782] swap 127905792 [ 78.655851][ T1782] swapcached 90112 [ 78.663976][ T1782] pgpgin 175472 [ 78.679615][ T1782] pgpgout 99183 [ 78.695386][ T1782] pgfault 57291 [ 78.703341][ T1782] pgmajfault 24 [ 78.715551][ T1782] inactive_anon 264437760 [ 78.731054][ T1782] active_anon 50130944 [ 78.746314][ T1782] inactive_file 0 [ 78.755316][ T1782] active_file 4096 [ 78.762960][ T1918] overlayfs: empty lowerdir [ 78.767556][ T36] audit: type=1400 audit(1789852122.612:403): avc: denied { watch_reads } for pid=1916 comm="syz.1.475" path="/125" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 78.792277][ T1782] unevictable 0 [ 78.802203][ T1782] hierarchical_memory_limit 314572800 [ 78.819214][ T1782] hierarchical_memsw_limit 9223372036854771712 [ 78.843897][ T1782] total_cache 314449920 [ 78.859023][ T1782] total_rss 32768 [ 78.868129][ T1782] total_rss_huge 0 [ 78.884124][ T1782] total_shmem 314445824 [ 78.896891][ T1782] total_mapped_file 0 [ 78.907701][ T1782] total_dirty 0 [ 78.920040][ T1782] total_writeback 0 [ 78.926485][ T36] audit: type=1400 audit(1789852122.773:404): avc: denied { nlmsg_read } for pid=1920 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.955440][ T1782] total_workingset_refault_anon 16 [ 78.972005][ T1782] total_workingset_refault_file 185 [ 78.988554][ T1782] total_swap 127905792 [ 79.002006][ T1782] total_swapcached 90112 [ 79.007569][ T446] kernel read not supported for file [fscontext] (pid: 446 comm: kworker/0:4) [ 79.026389][ T1782] total_pgpgin 175472 [ 79.042791][ T1782] total_pgpgout 99183 [ 79.055038][ T1782] total_pgfault 57291 [ 79.065169][ T1782] total_pgmajfault 24 [ 79.074617][ T1782] total_inactive_anon 264437760 [ 79.082760][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 79.093676][ T1782] total_active_anon 50130944 [ 79.118920][ T1782] total_inactive_file 0 [ 79.129522][ T1782] total_active_file 4096 [ 79.139099][ T1782] total_unevictable 0 [ 79.143107][ T1782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.431,pid=1756,uid=0 [ 79.180223][ T1782] Memory cgroup out of memory: Killed process 1756 (syz.0.431) total-vm:49264kB, anon-rss:0kB, file-rss:30140kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 79.447384][ T1766] syz.0.431 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 79.486824][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 79.537639][ T1766] CPU: 0 UID: 0 PID: 1766 Comm: syz.0.431 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 79.537665][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.537673][ T1766] Call Trace: [ 79.537677][ T1766] [ 79.537683][ T1766] __dump_stack+0x21/0x30 [ 79.537714][ T1766] dump_stack_lvl+0x140/0x1c0 [ 79.537731][ T1766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.537748][ T1766] ? ___ratelimit+0x41c/0x5c0 [ 79.537762][ T1766] ? __kasan_check_write+0x18/0x20 [ 79.537776][ T1766] dump_stack+0x19/0x20 [ 79.537792][ T1766] dump_header+0xd9/0x460 [ 79.537808][ T1766] oom_kill_process+0x35d/0x640 [ 79.537823][ T1766] out_of_memory+0x5d1/0xa20 [ 79.537837][ T1766] ? __cfi_out_of_memory+0x10/0x10 [ 79.537852][ T1766] ? mutex_lock_killable+0x115/0x1d0 [ 79.537868][ T1766] ? __cfi_mutex_lock_killable+0x10/0x10 [ 79.537884][ T1766] mem_cgroup_out_of_memory+0x2c5/0x390 [ 79.537898][ T1766] ? css_next_descendant_pre+0x1ec/0x210 [ 79.537914][ T1766] ? __kasan_check_write+0x18/0x20 [ 79.537927][ T1766] ? drain_obj_stock+0xec0/0xec0 [ 79.537941][ T1766] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 79.537955][ T1766] try_charge_memcg+0x925/0xe10 [ 79.537971][ T1766] ? static_key_count+0x45/0x70 [ 79.537988][ T1766] ? lruvec_init+0x211/0x280 [ 79.538001][ T1766] ? __cfi_try_charge_memcg+0x10/0x10 [ 79.538019][ T1766] ? __alloc_pages_noprof+0x35a/0x7e0 [ 79.538042][ T1766] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 79.538059][ T1766] __mem_cgroup_charge+0xfc/0x420 [ 79.538072][ T1766] ? folio_add_lru+0x116/0x400 [ 79.538087][ T1766] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 79.538101][ T1766] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 79.538118][ T1766] ? shmem_replace_folio+0x9b0/0x9b0 [ 79.538133][ T1766] ? shmem_huge_global_enabled+0x2da/0x360 [ 79.538148][ T1766] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 79.538162][ T1766] ? __kasan_check_write+0x18/0x20 [ 79.538175][ T1766] ? _raw_spin_lock+0x92/0x120 [ 79.538186][ T1766] shmem_get_folio_gfp+0x5cd/0x12e0 [ 79.538202][ T1766] ? shmem_get_folio+0xc0/0xc0 [ 79.538215][ T1766] ? __kasan_check_write+0x18/0x20 [ 79.538227][ T1766] ? inode_to_bdi+0x6d/0x100 [ 79.538245][ T1766] shmem_write_begin+0xf4/0x260 [ 79.538260][ T1766] generic_perform_write+0x32c/0x970 [ 79.538276][ T1766] ? inode_update_timestamps+0x4d1/0x6e0 [ 79.538295][ T1766] ? __cfi_generic_perform_write+0x10/0x10 [ 79.538311][ T1766] ? generic_write_checks_count+0x426/0x540 [ 79.538328][ T1766] ? mnt_get_write_access_file+0x1af/0x3b0 [ 79.538345][ T1766] ? mnt_put_write_access_file+0xc2/0x100 [ 79.538363][ T1766] ? file_update_time+0x1de/0x210 [ 79.538380][ T1766] shmem_file_write_iter+0x105/0x130 [ 79.538398][ T1766] __kernel_write_iter+0x462/0x900 [ 79.538412][ T1766] ? __cfi___kernel_write_iter+0x10/0x10 [ 79.538425][ T1766] ? get_dump_page+0x165/0x220 [ 79.538441][ T1766] ? __asan_memset+0x39/0x50 [ 79.538454][ T1766] ? iov_iter_bvec+0xc0/0x180 [ 79.538471][ T1766] dump_user_range+0xb8b/0xe60 [ 79.538486][ T1766] ? __cfi_dump_user_range+0x10/0x10 [ 79.538500][ T1766] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 79.538525][ T1766] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 79.538543][ T1766] ? elf_core_dump+0x23cf/0x3840 [ 79.538559][ T1766] elf_core_dump+0x2d61/0x3840 [ 79.538576][ T1766] ? __cfi_elf_core_dump+0x10/0x10 [ 79.538591][ T1766] ? mas_next_slot+0xf01/0xfd0 [ 79.538610][ T1766] ? dump_interrupted+0xf0/0xf0 [ 79.538623][ T1766] ? filp_open+0x199/0x1f0 [ 79.538639][ T1766] ? 0xffffffffff600000 [ 79.538650][ T1766] do_coredump+0x20d2/0x3050 [ 79.538665][ T1766] ? __cfi_do_coredump+0x10/0x10 [ 79.538677][ T1766] ? asm_exc_page_fault+0x2b/0x30 [ 79.538696][ T1766] ? __kasan_slab_free+0x6a/0x80 [ 79.538711][ T1766] ? get_signal+0xa2a/0x1490 [ 79.538728][ T1766] get_signal+0x11bf/0x1490 [ 79.538745][ T1766] arch_do_signal_or_restart+0xbc/0x700 [ 79.538758][ T1766] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 79.538771][ T1766] ? fpregs_restore_userregs+0x11c/0x260 [ 79.538787][ T1766] irqentry_exit_to_user_mode+0x4d/0xb0 [ 79.538804][ T1766] irqentry_exit+0x16/0x60 [ 79.538819][ T1766] exc_page_fault+0x65/0xc0 [ 79.538834][ T1766] asm_exc_page_fault+0x2b/0x30 [ 79.538854][ T1766] RIP: 0033:0x7feeb859e159 [ 79.538871][ T1766] Code: Unable to access opcode bytes at 0x7feeb859e12f. [ 79.538878][ T1766] RSP: 002b:0000000000000010 EFLAGS: 00010246 [ 79.538891][ T1766] RAX: 0000000000000000 RBX: 00007feeb8826360 RCX: 00007feeb859e159 [ 79.538901][ T1766] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 79.538910][ T1766] RBP: 00007feeb863506b R08: 0000000000000000 R09: 0000000000000000 [ 79.538918][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.538927][ T1766] R13: 00007feeb88263f8 R14: 00007feeb8826360 R15: 00007ffe1b8b9788 [ 79.538937][ T1766] [ 79.538943][ T1766] memory: usage 307200kB, limit 307200kB, failcnt 30189 [ 80.046515][ T1944] ./dev/sda1: Can't lookup blockdev [ 80.060745][ T1946] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 80.077445][ T1948] tipc: Enabling of bearer rejected, failed to enable media [ 80.102889][ T10] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 80.112303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.123819][ T10] usb 4-1: Product: syz [ 80.128955][ T1952] overlayfs: failed to resolve './file0': -2 [ 80.135185][ T10] usb 4-1: Manufacturer: syz [ 80.149135][ T10] usb 4-1: SerialNumber: syz [ 80.165552][ T1954] fuse: Bad value for 'fd' [ 80.171019][ T10] usb-storage 4-1:1.0: USB Mass Storage device detected [ 80.186445][ T10] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 80.195875][ T1955] 9pnet: Could not find request transport: xen [ 80.214639][ T10] scsi host1: usb-storage 4-1:1.0 [ 80.236628][ T1766] memory+swap: usage 432112kB, limit 9007199254740988kB, failcnt 0 [ 80.244801][ T1766] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 80.251767][ T1766] Memory cgroup stats for /syz0: [ 80.251864][ T1766] cache 314454016 [ 80.260594][ T1766] rss 32768 [ 80.263718][ T1766] rss_huge 0 [ 80.267165][ T1766] shmem 314449920 [ 80.271055][ T1766] mapped_file 0 [ 80.274506][ T1766] dirty 0 [ 80.283406][ T1766] writeback 0 [ 80.289194][ T1766] workingset_refault_anon 16 [ 80.293895][ T1766] workingset_refault_file 185 [ 80.298727][ T1766] swap 127909888 [ 80.302266][ T1766] swapcached 86016 [ 80.306026][ T1766] pgpgin 183022 [ 80.309623][ T1766] pgpgout 106733 [ 80.313165][ T1766] pgfault 57763 [ 80.316807][ T1766] pgmajfault 24 [ 80.320258][ T1766] inactive_anon 237252608 [ 80.340337][ T1766] active_anon 77316096 [ 80.344476][ T1766] inactive_file 0 [ 80.353915][ T1766] active_file 4096 [ 80.357891][ T1964] netlink: 'syz.2.490': attribute type 8 has an invalid length. [ 80.365782][ T1766] unevictable 0 [ 80.369414][ T1766] hierarchical_memory_limit 314572800 [ 80.376424][ T10] usb 4-1: USB disconnect, device number 26 [ 80.386634][ T1766] hierarchical_memsw_limit 9223372036854771712 [ 80.397230][ T1766] total_cache 314454016 [ 80.401389][ T1766] total_rss 32768 [ 80.405051][ T1766] total_rss_huge 0 [ 80.408970][ T1766] total_shmem 314449920 [ 80.413123][ T1766] total_mapped_file 0 [ 80.417360][ T1766] total_dirty 0 [ 80.420898][ T1766] total_writeback 0 [ 80.424711][ T1766] total_workingset_refault_anon 16 [ 80.430093][ T1766] total_workingset_refault_file 185 [ 80.435760][ T1766] total_swap 127909888 [ 80.440942][ T1766] total_swapcached 86016 [ 80.445248][ T1766] total_pgpgin 183022 [ 80.449420][ T1766] total_pgpgout 106733 [ 80.453521][ T1766] total_pgfault 57763 [ 80.457629][ T1766] total_pgmajfault 24 [ 80.461674][ T1766] total_inactive_anon 237252608 [ 80.466544][ T1766] total_active_anon 77316096 [ 80.471381][ T1766] total_inactive_file 0 [ 80.475707][ T1766] total_active_file 4096 [ 80.480149][ T1766] total_unevictable 0 [ 80.484148][ T1766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.431,pid=1774,uid=0 [ 80.499040][ T1766] Memory cgroup out of memory: Killed process 1774 (syz.0.431) total-vm:49264kB, anon-rss:0kB, file-rss:32956kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 80.733556][ T1781] syz.0.431 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 80.828500][ T1781] CPU: 0 UID: 0 PID: 1781 Comm: syz.0.431 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 80.828527][ T1781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.828536][ T1781] Call Trace: [ 80.828540][ T1781] [ 80.828545][ T1781] __dump_stack+0x21/0x30 [ 80.828574][ T1781] dump_stack_lvl+0x140/0x1c0 [ 80.828591][ T1781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.828608][ T1781] ? ___ratelimit+0x41c/0x5c0 [ 80.828623][ T1781] ? __kasan_check_write+0x18/0x20 [ 80.828637][ T1781] dump_stack+0x19/0x20 [ 80.828653][ T1781] dump_header+0xd9/0x460 [ 80.828669][ T1781] oom_kill_process+0x35d/0x640 [ 80.828685][ T1781] out_of_memory+0x5d1/0xa20 [ 80.828699][ T1781] ? __cfi_out_of_memory+0x10/0x10 [ 80.828713][ T1781] ? mutex_lock_killable+0x97/0x1d0 [ 80.828728][ T1781] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.828744][ T1781] mem_cgroup_out_of_memory+0x2c5/0x390 [ 80.828759][ T1781] ? css_next_descendant_pre+0x1ec/0x210 [ 80.828774][ T1781] ? __kasan_check_write+0x18/0x20 [ 80.828786][ T1781] ? drain_obj_stock+0xec0/0xec0 [ 80.828800][ T1781] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 80.828814][ T1781] try_charge_memcg+0x925/0xe10 [ 80.828831][ T1781] ? static_key_count+0x45/0x70 [ 80.828847][ T1781] ? lruvec_init+0x211/0x280 [ 80.828861][ T1781] ? __cfi_try_charge_memcg+0x10/0x10 [ 80.828878][ T1781] ? __alloc_pages_noprof+0x35a/0x7e0 [ 80.828896][ T1781] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 80.828915][ T1781] __mem_cgroup_charge+0xfc/0x420 [ 80.828927][ T1781] ? folio_add_lru+0x116/0x400 [ 80.828942][ T1781] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 80.828955][ T1781] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 80.828972][ T1781] ? shmem_replace_folio+0x9b0/0x9b0 [ 80.828987][ T1781] ? shmem_huge_global_enabled+0x2da/0x360 [ 80.829002][ T1781] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 80.829016][ T1781] ? __kasan_check_write+0x18/0x20 [ 80.829029][ T1781] ? _raw_spin_lock+0x92/0x120 [ 80.829042][ T1781] shmem_get_folio_gfp+0x5cd/0x12e0 [ 80.829057][ T1781] ? shmem_get_folio+0xc0/0xc0 [ 80.829070][ T1781] ? follow_page_pte+0x8fb/0xba0 [ 80.829087][ T1781] ? inode_to_bdi+0x6d/0x100 [ 80.829105][ T1781] shmem_write_begin+0xf4/0x260 [ 80.829119][ T1781] generic_perform_write+0x32c/0x970 [ 80.829137][ T1781] ? __cfi_generic_perform_write+0x10/0x10 [ 80.829154][ T1781] ? generic_write_checks_count+0x426/0x540 [ 80.829171][ T1781] ? file_update_time+0xa3/0x210 [ 80.829188][ T1781] shmem_file_write_iter+0x105/0x130 [ 80.829205][ T1781] __kernel_write_iter+0x462/0x900 [ 80.829219][ T1781] ? __cfi___kernel_write_iter+0x10/0x10 [ 80.829233][ T1781] ? get_dump_page+0x165/0x220 [ 80.829248][ T1781] ? __asan_memset+0x39/0x50 [ 80.829261][ T1781] ? iov_iter_bvec+0xc0/0x180 [ 80.829278][ T1781] dump_user_range+0xb8b/0xe60 [ 80.829293][ T1781] ? __cfi_dump_user_range+0x10/0x10 [ 80.829306][ T1781] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 80.829325][ T1781] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 80.829344][ T1781] ? elf_core_dump+0x23cf/0x3840 [ 80.829360][ T1781] elf_core_dump+0x2d61/0x3840 [ 80.829377][ T1781] ? __cfi_elf_core_dump+0x10/0x10 [ 80.829392][ T1781] ? mas_next_slot+0xf01/0xfd0 [ 80.829411][ T1781] ? dump_interrupted+0xf0/0xf0 [ 80.829424][ T1781] ? filp_open+0x199/0x1f0 [ 80.829440][ T1781] ? 0xffffffffff600000 [ 80.829451][ T1781] do_coredump+0x20d2/0x3050 [ 80.829466][ T1781] ? __cfi_do_coredump+0x10/0x10 [ 80.829478][ T1781] ? asm_exc_page_fault+0x2b/0x30 [ 80.829497][ T1781] ? __kasan_slab_free+0x6a/0x80 [ 80.829512][ T1781] ? get_signal+0xa2a/0x1490 [ 80.829528][ T1781] get_signal+0x11bf/0x1490 [ 80.829549][ T1781] arch_do_signal_or_restart+0xbc/0x700 [ 80.829567][ T1781] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 80.829581][ T1781] ? fpregs_restore_userregs+0x11c/0x260 [ 80.829596][ T1781] irqentry_exit_to_user_mode+0x4d/0xb0 [ 80.829613][ T1781] irqentry_exit+0x16/0x60 [ 80.829628][ T1781] exc_page_fault+0x65/0xc0 [ 80.829643][ T1781] asm_exc_page_fault+0x2b/0x30 [ 80.829656][ T1781] RIP: 0033:0x7feeb859e159 [ 80.829672][ T1781] Code: Unable to access opcode bytes at 0x7feeb859e12f. [ 80.829679][ T1781] RSP: 002b:0000000000000010 EFLAGS: 00010246 [ 80.829692][ T1781] RAX: 0000000000000000 RBX: 00007feeb8826360 RCX: 00007feeb859e159 [ 80.829702][ T1781] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 80.829710][ T1781] RBP: 00007feeb863506b R08: 0000000000000000 R09: 0000000000000000 [ 80.829719][ T1781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.829727][ T1781] R13: 00007feeb88263f8 R14: 00007feeb8826360 R15: 00007ffe1b8b9788 [ 80.829738][ T1781] [ 80.832771][ T1781] memory: usage 307200kB, limit 307200kB, failcnt 33006 [ 81.321543][ T36] audit: type=1400 audit(1789852125.163:405): avc: denied { setopt } for pid=1970 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.349255][ T1973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 81.388830][ T1977] overlayfs: failed to resolve './file0': -2 [ 81.538827][ T1985] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.539169][ T36] audit: type=1400 audit(1789852125.393:406): avc: denied { create } for pid=1974 comm="syz.3.495" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 81.744503][ T1781] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 81.852996][ T36] audit: type=1400 audit(1789852125.483:407): avc: denied { mounton } for pid=1974 comm="syz.3.495" path="/80/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 81.878962][ T36] audit: type=1400 audit(1789852125.483:408): avc: denied { mounton } for pid=1974 comm="syz.3.495" path="/80/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 81.949247][ T1781] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.966284][ T1781] Memory cgroup stats for /syz0: [ 81.966386][ T1781] cache 314507264 [ 81.980498][ T1781] rss 32768 [ 81.992264][ T1781] rss_huge 0 [ 81.998791][ T1781] shmem 314499072 [ 82.005717][ T1781] mapped_file 0 [ 82.016792][ T1781] dirty 0 [ 82.023063][ T1781] writeback 0 [ 82.030752][ T1781] workingset_refault_anon 50 [ 82.040879][ T1781] workingset_refault_file 1134 [ 82.050012][ T1781] swap 127930368 [ 82.056603][ T1781] swapcached 32768 [ 82.073792][ T1781] pgpgin 192358 [ 82.080626][ T1781] pgpgout 116069 [ 82.086382][ T1781] pgfault 58452 [ 82.094240][ T1781] pgmajfault 59 [ 82.104253][ T1781] inactive_anon 216891392 [ 82.112982][ T1781] active_anon 97673216 [ 82.123130][ T1781] inactive_file 8192 [ 82.129354][ T1781] active_file 0 [ 82.136592][ T1781] unevictable 0 [ 82.146912][ T1781] hierarchical_memory_limit 314572800 [ 82.156479][ T1781] hierarchical_memsw_limit 9223372036854771712 [ 82.170265][ T1781] total_cache 314507264 [ 82.178823][ T1781] total_rss 32768 [ 82.201671][ T1781] total_rss_huge 0 [ 82.218497][ T1781] total_shmem 314499072 [ 82.268722][ T1781] total_mapped_file 0 [ 82.286681][ T1781] total_dirty 0 [ 82.294076][ T1781] total_writeback 0 [ 82.299253][ T2053] overlayfs: failed to resolve './file0': -2 [ 82.305592][ T1781] total_workingset_refault_anon 50 [ 82.314716][ T1781] total_workingset_refault_file 1134 [ 82.323420][ T1781] total_swap 127930368 [ 82.335621][ T1781] total_swapcached 32768 [ 82.353062][ T1781] total_pgpgin 192358 [ 82.359133][ T1781] total_pgpgout 116069 [ 82.363313][ T1781] total_pgfault 58452 [ 82.367534][ T1781] total_pgmajfault 59 [ 82.371657][ T1781] total_inactive_anon 216891392 [ 82.376701][ T1781] total_active_anon 97673216 [ 82.381308][ T1781] total_inactive_file 8192 [ 82.385734][ T1781] total_active_file 0 [ 82.390019][ T1781] total_unevictable 0 [ 82.394022][ T1781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.431,pid=1768,uid=0 [ 82.409197][ T1781] Memory cgroup out of memory: Killed process 1768 (syz.0.431) total-vm:49264kB, anon-rss:0kB, file-rss:32956kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 82.470205][ T1766] syz.0.431 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 82.499509][ T1766] CPU: 0 UID: 0 PID: 1766 Comm: syz.0.431 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 82.499533][ T1766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.499542][ T1766] Call Trace: [ 82.499546][ T1766] [ 82.499551][ T1766] __dump_stack+0x21/0x30 [ 82.499573][ T1766] dump_stack_lvl+0x140/0x1c0 [ 82.499589][ T1766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.499606][ T1766] ? ___ratelimit+0x41c/0x5c0 [ 82.499620][ T1766] ? __kasan_check_write+0x18/0x20 [ 82.499634][ T1766] dump_stack+0x19/0x20 [ 82.499650][ T1766] dump_header+0xd9/0x460 [ 82.499666][ T1766] oom_kill_process+0x35d/0x640 [ 82.499681][ T1766] out_of_memory+0x5d1/0xa20 [ 82.499695][ T1766] ? __cfi_out_of_memory+0x10/0x10 [ 82.499710][ T1766] ? mutex_lock_killable+0x115/0x1d0 [ 82.499725][ T1766] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.499742][ T1766] mem_cgroup_out_of_memory+0x2c5/0x390 [ 82.499756][ T1766] ? css_next_descendant_pre+0x1ec/0x210 [ 82.499771][ T1766] ? __kasan_check_write+0x18/0x20 [ 82.499784][ T1766] ? drain_obj_stock+0xec0/0xec0 [ 82.499798][ T1766] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 82.499811][ T1766] try_charge_memcg+0x925/0xe10 [ 82.499827][ T1766] ? static_key_count+0x45/0x70 [ 82.499843][ T1766] ? lruvec_init+0x211/0x280 [ 82.499857][ T1766] ? __cfi_try_charge_memcg+0x10/0x10 [ 82.499874][ T1766] ? __alloc_pages_noprof+0x35a/0x7e0 [ 82.499892][ T1766] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.499910][ T1766] __mem_cgroup_charge+0xfc/0x420 [ 82.499923][ T1766] ? folio_add_lru+0x116/0x400 [ 82.499939][ T1766] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 82.499952][ T1766] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 82.499969][ T1766] ? shmem_replace_folio+0x9b0/0x9b0 [ 82.499984][ T1766] ? shmem_huge_global_enabled+0x2da/0x360 [ 82.499998][ T1766] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 82.500013][ T1766] ? __kasan_check_write+0x18/0x20 [ 82.500025][ T1766] ? _raw_spin_lock+0x92/0x120 [ 82.500038][ T1766] shmem_get_folio_gfp+0x5cd/0x12e0 [ 82.500053][ T1766] ? shmem_get_folio+0xc0/0xc0 [ 82.500066][ T1766] ? follow_page_pte+0x8fb/0xba0 [ 82.500083][ T1766] ? inode_to_bdi+0x6d/0x100 [ 82.500100][ T1766] shmem_write_begin+0xf4/0x260 [ 82.500115][ T1766] generic_perform_write+0x32c/0x970 [ 82.500134][ T1766] ? __cfi_generic_perform_write+0x10/0x10 [ 82.500150][ T1766] ? generic_write_checks_count+0x426/0x540 [ 82.500167][ T1766] ? file_update_time+0xa3/0x210 [ 82.500186][ T1766] shmem_file_write_iter+0x105/0x130 [ 82.500203][ T1766] __kernel_write_iter+0x462/0x900 [ 82.500216][ T1766] ? __cfi___kernel_write_iter+0x10/0x10 [ 82.500229][ T1766] ? get_dump_page+0x165/0x220 [ 82.500245][ T1766] ? __asan_memset+0x39/0x50 [ 82.500258][ T1766] ? iov_iter_bvec+0xc0/0x180 [ 82.500275][ T1766] dump_user_range+0xb8b/0xe60 [ 82.500291][ T1766] ? __cfi_dump_user_range+0x10/0x10 [ 82.500305][ T1766] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 82.500324][ T1766] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 82.500342][ T1766] ? elf_core_dump+0x23cf/0x3840 [ 82.500362][ T1766] elf_core_dump+0x2d61/0x3840 [ 82.500379][ T1766] ? __cfi_elf_core_dump+0x10/0x10 [ 82.500412][ T1766] ? mas_next_slot+0xf01/0xfd0 [ 82.500431][ T1766] ? dump_interrupted+0xf0/0xf0 [ 82.500444][ T1766] ? filp_open+0x199/0x1f0 [ 82.500461][ T1766] ? 0xffffffffff600000 [ 82.500478][ T1766] do_coredump+0x20d2/0x3050 [ 82.500493][ T1766] ? __cfi_do_coredump+0x10/0x10 [ 82.500505][ T1766] ? asm_exc_page_fault+0x2b/0x30 [ 82.500524][ T1766] ? __kasan_slab_free+0x6a/0x80 [ 82.500540][ T1766] ? get_signal+0xa2a/0x1490 [ 82.500557][ T1766] get_signal+0x11bf/0x1490 [ 82.500574][ T1766] arch_do_signal_or_restart+0xbc/0x700 [ 82.500588][ T1766] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 82.500601][ T1766] ? fpregs_restore_userregs+0x11c/0x260 [ 82.500617][ T1766] irqentry_exit_to_user_mode+0x4d/0xb0 [ 82.500635][ T1766] irqentry_exit+0x16/0x60 [ 82.500650][ T1766] exc_page_fault+0x65/0xc0 [ 82.500665][ T1766] asm_exc_page_fault+0x2b/0x30 [ 82.500679][ T1766] RIP: 0033:0x7feeb859e159 [ 82.500694][ T1766] Code: Unable to access opcode bytes at 0x7feeb859e12f. [ 82.500700][ T1766] RSP: 002b:0000000000000010 EFLAGS: 00010246 [ 82.500713][ T1766] RAX: 0000000000000000 RBX: 00007feeb8826360 RCX: 00007feeb859e159 [ 82.500723][ T1766] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000000 [ 82.500731][ T1766] RBP: 00007feeb863506b R08: 0000000000000000 R09: 0000000000000000 [ 82.500740][ T1766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.500748][ T1766] R13: 00007feeb88263f8 R14: 00007feeb8826360 R15: 00007ffe1b8b9788 [ 82.500759][ T1766] [ 82.500841][ T1766] memory: usage 307076kB, limit 307200kB, failcnt 33988 [ 83.153611][ T2062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.172970][ T2062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.186833][ T2062] overlayfs: missing 'workdir' [ 83.279923][ T2068] netlink: 'syz.1.511': attribute type 12 has an invalid length. [ 83.386361][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 83.414454][ T2080] netlink: 5 bytes leftover after parsing attributes in process `syz.1.515'. [ 83.424498][ T2082] overlayfs: failed to resolve './file0': -2 [ 83.514798][ T36] audit: type=1326 audit(1789852127.363:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2085 comm="syz.2.518" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5f4f9e159 code=0x0 [ 83.556314][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 83.566740][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.581263][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.619823][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 83.641194][ T2094] netlink: 'syz.1.520': attribute type 12 has an invalid length. [ 83.653356][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.681692][ T9] usb 4-1: config 0 descriptor?? [ 84.132574][ T9] usb 1-1: USB disconnect, device number 18 [ 84.312097][ T1766] memory+swap: usage 67240kB, limit 9007199254740988kB, failcnt 0 [ 84.320662][ T1766] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 84.327672][ T1766] Memory cgroup stats for /syz0: [ 84.327767][ T1766] cache 45469696 [ 84.336423][ T1766] rss 32768 [ 84.339583][ T1766] rss_huge 0 [ 84.342804][ T1766] shmem 41144320 [ 84.346550][ T1766] mapped_file 0 [ 84.350041][ T1766] dirty 0 [ 84.353004][ T1766] writeback 0 [ 84.356501][ T1766] workingset_refault_anon 54 [ 84.361123][ T1766] workingset_refault_file 2274 [ 84.365913][ T1766] swap 22700032 [ 84.369597][ T1766] swapcached 36864 [ 84.373360][ T1766] pgpgin 220928 [ 84.376928][ T1766] pgpgout 210321 [ 84.380517][ T1766] pgfault 60210 [ 84.384024][ T1766] pgmajfault 67 [ 84.387629][ T1766] inactive_anon 8765440 [ 84.391841][ T1766] active_anon 32448512 [ 84.395961][ T1766] inactive_file 0 [ 84.402019][ T9] usb 4-1: USB disconnect, device number 27 [ 84.426004][ T1766] active_file 4325376 [ 84.437960][ T36] audit: type=1400 audit(1789852128.293:410): avc: denied { accept } for pid=2101 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.471002][ T1766] unevictable 0 [ 84.488892][ T1766] hierarchical_memory_limit 314572800 [ 84.499989][ T2107] overlayfs: failed to resolve './file0': -2 [ 84.506103][ T1766] hierarchical_memsw_limit 9223372036854771712 [ 84.512421][ T36] audit: type=1400 audit(1789852128.343:411): avc: denied { create } for pid=2104 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.535807][ T1766] total_cache 45469696 [ 84.545102][ T1766] total_rss 32768 [ 84.552779][ T1766] total_rss_huge 0 [ 84.559187][ T1766] total_shmem 41144320 [ 84.563433][ T1766] total_mapped_file 0 [ 84.567585][ T1766] total_dirty 0 [ 84.571076][ T1766] total_writeback 0 [ 84.574929][ T1766] total_workingset_refault_anon 54 [ 84.580201][ T1766] total_workingset_refault_file 2274 [ 84.585530][ T1766] total_swap 22700032 [ 84.589738][ T1766] total_swapcached 36864 [ 84.594018][ T1766] total_pgpgin 220928 [ 84.598505][ T1766] total_pgpgout 210321 [ 84.602598][ T1766] total_pgfault 60210 [ 84.606724][ T1766] total_pgmajfault 67 [ 84.610772][ T1766] total_inactive_anon 8765440 [ 84.615462][ T1766] total_active_anon 32448512 [ 84.620235][ T1766] total_inactive_file 0 [ 84.624449][ T1766] total_active_file 4325376 [ 84.629138][ T1766] total_unevictable 0 [ 84.633159][ T1766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.431,pid=1761,uid=0 [ 84.648070][ T1766] Memory cgroup out of memory: OOM victim 1761 (syz.0.431) is already exiting. Skip killing the task [ 84.876157][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 85.026130][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 85.035505][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 189, changing to 11 [ 85.053424][ T9] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 85.065858][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.082577][ T9] usb 4-1: Product: 忱큖硓䞊뷽ᕾ雰ᾷʯ羼쩧珚㡳녆緊伫嚞師෣椮鮚̿疷쐟ͼ㴔踋⣝ [ 85.104744][ T9] usb 4-1: Manufacturer: ᐇ [ 85.113916][ T9] usb 4-1: SerialNumber: 㰷⣞ァ簌箂䘳爫婽␩䜦泇㕰낗뻭ࢍ锛첻鼭呴ⷤᦇᑽ祔⭊ᝳ鎃샮躳♮纰ﰞ蒿緧ਫ਼ᴢ琢讖뤾荎䠣蕴竑䷦￪计鹁낫ṅⷯ撃歱ం픤퀱養ᙺ牗楙誼㼬횝奒븥삅⡟䭊遧纯詒豥ꡦ瘣犫馘뢹뛄칥⼩襁8뜼긿㫽啕쳮蠂㳃ꂛꚔ约೷ሑ쵌኉凌ꤚ؛エ⟁ꡍ [ 85.387374][ T9] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 85.400549][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 85.434423][ T9] usb 4-1: USB disconnect, device number 28 [ 85.799445][ T2124] netlink: 'syz.0.529': attribute type 12 has an invalid length. [ 86.116023][ T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 86.177102][ T2137] overlayfs: failed to resolve './file0': -2 [ 86.210418][ T2143] overlayfs: failed to clone upperpath [ 86.266970][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 86.294090][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 86.311978][ T9] usb 1-1: string descriptor 0 read error: -22 [ 86.321108][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 86.330568][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.341360][ T9] usb 1-1: low speed audio streaming not supported [ 86.351658][ T9] usb 1-1: low speed audio streaming not supported [ 86.513101][ T2155] sock: sock_timestamping_bind_phc: sock not bind to device [ 86.543800][ T9] usb 1-1: USB disconnect, device number 19 [ 86.699878][ T2158] overlayfs: failed to resolve './file1': -2 [ 86.730897][ T2162] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 86.826545][ T2170] netlink: 296 bytes leftover after parsing attributes in process `syz.1.550'. [ 87.009498][ T2172] __vm_enough_memory: pid: 2172, comm: syz.3.551, bytes: 11727414972416 not enough memory for the allocation [ 87.021604][ T2172] __vm_enough_memory: pid: 2172, comm: syz.3.551, bytes: 11727414972416 not enough memory for the allocation [ 87.042958][ T2178] overlayfs: failed to resolve './file1': -2 [ 87.086606][ T36] audit: type=1400 audit(1789852130.944:412): avc: denied { ioctl } for pid=2179 comm="syz.0.554" path="cgroup:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.165664][ T36] audit: type=1400 audit(1789852130.974:413): avc: denied { write } for pid=2182 comm="syz.3.556" name="functions" dev="configfs" ino=8120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.209784][ T2191] netlink: 'syz.0.559': attribute type 12 has an invalid length. [ 87.265043][ T36] audit: type=1400 audit(1789852130.974:414): avc: denied { add_name } for pid=2182 comm="syz.3.556" name="tcm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.535883][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 87.565903][ T445] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 87.577333][ T2199] overlayfs: failed to resolve './file1': -2 [ 87.593310][ T36] audit: type=1400 audit(1789852131.444:415): avc: denied { create } for pid=2200 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 87.628694][ T36] audit: type=1400 audit(1789852131.474:416): avc: denied { ioctl } for pid=2194 comm="syz.3.561" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.695887][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 87.702160][ T9] usb 4-1: unable to get BOS descriptor set [ 87.709075][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.720791][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.730781][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.739115][ T9] usb 4-1: Product: syz [ 87.743485][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.754815][ T445] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.763981][ T9] usb 4-1: Manufacturer: syz [ 87.768783][ T9] usb 4-1: SerialNumber: syz [ 87.773465][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.787509][ T445] usb 1-1: config 0 descriptor?? [ 87.957593][ T2211] netlink: 'syz.2.568': attribute type 12 has an invalid length. [ 87.996513][ T445] usbhid 1-1:0.0: can't add hid device: -71 [ 88.005843][ T445] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 88.025908][ T445] usb 1-1: USB disconnect, device number 20 [ 88.032871][ T2213] vlan0: entered allmulticast mode [ 88.048480][ T2213] veth0_vlan: entered allmulticast mode [ 88.069158][ T2213] vlan0: left allmulticast mode [ 88.079409][ T2213] veth0_vlan: left allmulticast mode [ 88.197853][ T36] audit: type=1400 audit(1789852132.044:417): avc: denied { read write } for pid=2196 comm="syz.0.562" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.242774][ T36] audit: type=1400 audit(1789852132.044:418): avc: denied { open } for pid=2196 comm="syz.0.562" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.515722][ T445] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 88.666727][ T445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.677980][ T445] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.687348][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.698795][ T445] usb 1-1: config 0 descriptor?? [ 88.919385][ T36] audit: type=1400 audit(1789852132.774:419): avc: denied { create } for pid=2236 comm="syz.1.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 88.949945][ T2239] netlink: 'syz.1.577': attribute type 12 has an invalid length. [ 89.105787][ T2197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.114971][ T2197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.124098][ T2197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.133520][ T2197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.494587][ T2246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.232621][ T2255] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 90.318028][ T9] usb 4-1: bad CDC descriptors [ 90.336979][ T9] usb 4-1: USB disconnect, device number 29 [ 90.347504][ T2264] netlink: 'syz.3.586': attribute type 12 has an invalid length. [ 90.410334][ T36] audit: type=1400 audit(1789852134.264:420): avc: denied { read } for pid=2267 comm="syz.3.588" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.434619][ T2268] overlayfs: workdir and upperdir must reside under the same mount [ 90.467370][ T36] audit: type=1400 audit(1789852134.294:421): avc: denied { mounton } for pid=2267 comm="syz.3.588" path="/99/file0" dev="incremental-fs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.492436][ T36] audit: type=1400 audit(1789852134.294:422): avc: denied { getattr } for pid=2267 comm="syz.3.588" name="/" dev="incremental-fs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.524320][ T445] usbhid 1-1:0.0: can't add hid device: -71 [ 90.531143][ T445] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 90.553438][ T445] usb 1-1: USB disconnect, device number 21 [ 90.656563][ T36] audit: type=1326 audit(1789852134.514:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.0.593" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeb859e159 code=0x0 [ 90.794757][ T2282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2282 comm=syz.1.594 [ 90.818529][ T2282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2282 comm=syz.1.594 [ 90.851134][ T36] audit: type=1400 audit(1789852134.704:424): avc: denied { bind } for pid=2281 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.900741][ T2287] netlink: 'syz.1.595': attribute type 12 has an invalid length. [ 91.328755][ T2316] netlink: 'syz.3.604': attribute type 12 has an invalid length. [ 91.585615][ T65] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 91.648897][ T2336] overlayfs: failed to clone upperpath [ 91.655129][ T36] audit: type=1400 audit(1789852135.504:425): avc: denied { mount } for pid=2335 comm="syz.2.612" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.735468][ T445] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 91.745363][ T65] usb 4-1: device descriptor read/64, error -71 [ 91.807753][ T2347] overlay: ./file0 is not a directory [ 91.886256][ T445] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.903925][ T445] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.930590][ T445] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 91.949228][ T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.968250][ T445] net1080 1-1:1.0: probe with driver net1080 failed with error -22 [ 91.986254][ T65] usb 4-1: device descriptor read/64, error -71 [ 92.235527][ T65] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 92.375267][ T65] usb 4-1: device descriptor read/64, error -71 [ 92.615298][ T65] usb 4-1: device descriptor read/64, error -71 [ 92.670853][ T445] usb 1-1: USB disconnect, device number 22 [ 92.700508][ T36] audit: type=1400 audit(1789852136.554:426): avc: denied { remount } for pid=2371 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.720582][ T2372] binder: Unknown parameter 'context' [ 92.736322][ T65] usb usb4-port1: attempt power cycle [ 92.779973][ T2379] fuse: Bad value for 'user_id' [ 92.784928][ T2379] fuse: Bad value for 'user_id' [ 92.797499][ T2372] overlay: ./file0 is not a directory [ 93.003228][ T36] audit: type=1400 audit(1789852136.854:427): avc: denied { execute } for pid=2401 comm="syz.0.636" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.095199][ T65] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 93.116264][ T65] usb 4-1: device descriptor read/8, error -71 [ 93.246430][ T65] usb 4-1: device descriptor read/8, error -71 [ 93.383746][ T2418] futex_wake_op: syz.1.642 tries to shift op by 32; fix this program [ 93.392579][ T36] audit: type=1400 audit(1789852137.244:428): avc: denied { mount } for pid=2417 comm="syz.1.642" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.414722][ T2420] SELinux: Context is not valid (left unmapped). [ 93.485166][ T65] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 93.516186][ T65] usb 4-1: device descriptor read/8, error -71 [ 93.564063][ T2436] overlayfs: failed to clone upperpath [ 93.596073][ T2442] overlayfs: missing 'lowerdir' [ 93.646233][ T65] usb 4-1: device descriptor read/8, error -71 [ 93.755176][ T65] usb usb4-port1: unable to enumerate USB device [ 93.946221][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 94.180155][ T2470] overlayfs: missing 'lowerdir' [ 94.884386][ T2499] overlayfs: missing 'lowerdir' [ 94.901634][ T2501] netlink: 'syz.0.668': attribute type 12 has an invalid length. [ 95.055064][ T2518] ./dev/sda1: Can't lookup blockdev [ 95.146785][ T2521] Built 1 zonelists, mobility grouping on. Total pages: 1727885 [ 95.202336][ T2524] overlayfs: missing 'lowerdir' [ 95.344994][ T2536] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 95.438061][ T2546] overlayfs: missing 'lowerdir' [ 95.570600][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 95.570613][ T36] audit: type=1400 audit(1789852139.425:434): avc: denied { map } for pid=2558 comm="syz.0.690" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.609059][ T36] audit: type=1400 audit(1789852139.465:435): avc: denied { execute } for pid=2558 comm="syz.0.690" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.669343][ T36] audit: type=1400 audit(1789852139.505:436): avc: denied { map } for pid=2565 comm="syz.0.691" path="socket:[23006]" dev="sockfs" ino=23006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.747165][ T36] audit: type=1400 audit(1789852139.515:437): avc: denied { ioctl } for pid=2565 comm="syz.0.691" path="socket:[23003]" dev="sockfs" ino=23003 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.797112][ T2570] kernel read not supported for file /policy (pid: 2570 comm: syz.0.692) [ 95.822577][ T36] audit: type=1400 audit(1789852139.655:438): avc: denied { module_load } for pid=2569 comm="syz.0.692" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 95.924520][ T36] audit: type=1400 audit(1789852139.775:439): avc: denied { map } for pid=2572 comm="syz.0.693" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.981562][ T2577] overlayfs: missing 'lowerdir' [ 96.194914][ T445] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 96.324813][ T445] usb 1-1: device descriptor read/64, error -71 [ 96.521270][ T36] audit: type=1400 audit(1789852140.375:440): avc: denied { bind } for pid=2587 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.542484][ T2588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 96.552362][ T2590] overlayfs: failed to clone upperpath [ 96.564812][ T445] usb 1-1: device descriptor read/64, error -71 [ 96.704746][ T65] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 96.804705][ T445] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 96.864691][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 96.876162][ T65] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 96.888549][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.905154][ T65] usb 4-1: config 0 descriptor?? [ 96.944692][ T445] usb 1-1: device descriptor read/64, error -71 [ 97.184662][ T445] usb 1-1: device descriptor read/64, error -71 [ 97.305820][ T445] usb usb1-port1: attempt power cycle [ 97.344720][ T2610] ./dev/sda1: Can't lookup blockdev [ 97.526168][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 97.549293][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 97.570682][ T65] usb 4-1: USB disconnect, device number 34 [ 97.654607][ T445] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 97.685513][ T445] usb 1-1: device descriptor read/8, error -71 [ 97.815488][ T445] usb 1-1: device descriptor read/8, error -71 [ 98.054555][ T445] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 98.085462][ T445] usb 1-1: device descriptor read/8, error -71 [ 98.215462][ T445] usb 1-1: device descriptor read/8, error -71 [ 98.325177][ T445] usb usb1-port1: unable to enumerate USB device [ 99.708048][ T36] audit: type=1400 audit(1789852143.565:441): avc: denied { setopt } for pid=2638 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.752275][ T2647] netlink: 5 bytes leftover after parsing attributes in process `syz.1.721'. [ 99.769237][ T36] audit: type=1400 audit(1789852143.595:442): avc: denied { mount } for pid=2644 comm="syz.1.720" name="/" dev="ramfs" ino=23623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 99.802537][ T2647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.884544][ T2659] ./dev/sda1: Can't lookup blockdev [ 99.893024][ T2654] overlayfs: failed to clone lowerpath [ 100.104359][ T65] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 100.255941][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.264411][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.274791][ T65] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.285288][ T65] usb 1-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 100.294467][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.302665][ T65] usb 1-1: Product: syz [ 100.307004][ T65] usb 1-1: Manufacturer: syz [ 100.311589][ T65] usb 1-1: SerialNumber: syz [ 100.426511][ T36] audit: type=1400 audit(1789852144.285:443): avc: denied { accept } for pid=2668 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.495109][ T2679] overlayfs: failed to clone lowerpath [ 100.573694][ T2685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2685 comm=syz.0.725 [ 100.625304][ T2691] ./dev/sda1: Can't lookup blockdev [ 100.720317][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 100.720332][ T36] audit: type=1400 audit(1789852144.575:446): avc: denied { map } for pid=2696 comm="syz.3.741" path="/121/dev" dev="tmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.803023][ T2705] can0: slcan on ttyS3. [ 100.874532][ T2704] can0 (unregistered): slcan off ttyS3. [ 101.011792][ T445] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 101.061799][ T445] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.482552][ T2751] netlink: 'syz.2.757': attribute type 58 has an invalid length. [ 101.601259][ T2760] 9pnet_fd: Insufficient options for proto=fd [ 101.804118][ T445] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 101.965049][ T445] usb 4-1: not running at top speed; connect to a high speed hub [ 101.988064][ T445] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 102.004112][ T445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.012973][ T445] usb 4-1: Product: syz [ 102.017759][ T445] usb 4-1: Manufacturer: syz [ 102.023461][ T445] usb 4-1: SerialNumber: syz [ 102.250110][ T36] audit: type=1400 audit(1789852146.105:447): avc: granted { setsecparam } for pid=2755 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 102.275602][ T36] audit: type=1400 audit(1789852146.125:448): avc: denied { ioctl } for pid=2755 comm="syz.3.750" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 102.301860][ T445] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 102.312685][ T445] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.327254][ T445] usb 4-1: USB disconnect, device number 35 [ 102.352329][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.808438][ T36] audit: type=1400 audit(1789852146.665:449): avc: denied { ioctl } for pid=2779 comm="syz.3.760" path="socket:[41049]" dev="sockfs" ino=41049 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.860882][ T2782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.894780][ T65] usb 1-1: MIDIStreaming interface descriptor not found [ 102.919519][ T65] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.961578][ T2784] udevd[2784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.978422][ T65] usb 1-1: USB disconnect, device number 27 [ 103.273926][ T65] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 103.413908][ T65] usb 1-1: device descriptor read/64, error -71 [ 103.586109][ T2813] ./dev/sda1: Can't lookup blockdev [ 103.673958][ T65] usb 1-1: device descriptor read/64, error -71 [ 103.914398][ T65] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 104.063839][ T65] usb 1-1: device descriptor read/64, error -71 [ 104.086008][ T2838] cgroup: fork rejected by pids controller in /syz2 [ 104.313824][ T65] usb 1-1: device descriptor read/64, error -71 [ 104.441435][ T65] usb usb1-port1: attempt power cycle [ 104.593770][ T526] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 104.773756][ T526] usb 4-1: Using ep0 maxpacket: 16 [ 104.785801][ T526] usb 4-1: config 0 has no interfaces? [ 104.792630][ T526] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 104.801756][ T65] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 104.813758][ T526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.842156][ T526] usb 4-1: Product: syz [ 104.852910][ T65] usb 1-1: device descriptor read/8, error -71 [ 104.860228][ T526] usb 4-1: Manufacturer: syz [ 104.883799][ T526] usb 4-1: SerialNumber: syz [ 104.888910][ T526] usb 4-1: config 0 descriptor?? [ 104.985002][ T65] usb 1-1: device descriptor read/8, error -71 [ 105.117638][ T36] audit: type=1400 audit(1789852148.976:450): avc: denied { shutdown } for pid=2884 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.140269][ T526] usb 4-1: USB disconnect, device number 36 [ 105.223713][ T65] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 105.261802][ T65] usb 1-1: device descriptor read/8, error -71 [ 105.394721][ T65] usb 1-1: device descriptor read/8, error -71 [ 105.453696][ T526] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 105.512000][ T65] usb usb1-port1: unable to enumerate USB device [ 105.593650][ T526] usb 4-1: device descriptor read/64, error -71 [ 105.833645][ T526] usb 4-1: device descriptor read/64, error -71 [ 106.086214][ T526] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 106.233587][ T526] usb 4-1: device descriptor read/64, error -71 [ 106.303562][ T65] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 106.473557][ T526] usb 4-1: device descriptor read/64, error -71 [ 106.480975][ T65] usb 1-1: no configurations [ 106.491849][ T65] usb 1-1: can't read configurations, error -22 [ 106.603602][ T526] usb usb4-port1: attempt power cycle [ 106.633532][ T65] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 106.803870][ T65] usb 1-1: no configurations [ 106.808498][ T65] usb 1-1: can't read configurations, error -22 [ 106.823605][ T65] usb usb1-port1: attempt power cycle [ 106.953490][ T526] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 107.002129][ T526] usb 4-1: device descriptor read/8, error -71 [ 107.134444][ T526] usb 4-1: device descriptor read/8, error -71 [ 107.163463][ T65] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 107.194178][ T65] usb 1-1: no configurations [ 107.198788][ T65] usb 1-1: can't read configurations, error -22 [ 107.336327][ T65] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 107.373451][ T526] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 107.395184][ T65] usb 1-1: no configurations [ 107.399801][ T65] usb 1-1: can't read configurations, error -22 [ 107.426373][ T65] usb usb1-port1: unable to enumerate USB device [ 107.833364][ T526] usb 4-1: device not accepting address 40, error -71 [ 107.850556][ T526] usb usb4-port1: unable to enumerate USB device [ 108.153337][ T526] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 108.333307][ T526] usb 4-1: Using ep0 maxpacket: 8 [ 108.339347][ T526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.363327][ T526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.372670][ T2930] ./dev/sda1: Can't lookup blockdev [ 108.396939][ T526] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.409355][ T526] usb 4-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.00 [ 108.428672][ T526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.450828][ T526] usb 4-1: Product: syz [ 108.462656][ T526] usb 4-1: Manufacturer: syz [ 108.473155][ T526] usb 4-1: SerialNumber: syz [ 108.528158][ T2931] overlayfs: failed to resolve './file0': -2 [ 108.613512][ T2937] ./dev/sda1: Can't lookup blockdev [ 108.690591][ T2943] overlayfs: failed to clone upperpath [ 108.737245][ T526] hub 4-1:1.0: bad descriptor, ignoring hub [ 108.759270][ T526] hub 4-1:1.0: probe with driver hub failed with error -5 [ 108.773849][ T36] audit: type=1400 audit(1789852152.636:451): avc: denied { getopt } for pid=2947 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.813564][ T526] usb 4-1: USB disconnect, device number 41 [ 108.839917][ T36] audit: type=1400 audit(1789852152.666:452): avc: denied { cmd } for pid=2949 comm="iou-wrk-2950" path="socket:[48250]" dev="sockfs" ino=48250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.890490][ T2952] overlayfs: failed to clone lowerpath [ 109.105612][ T2960] overlayfs: failed to resolve './file0/file1': -2 [ 109.564316][ T2984] overlayfs: failed to clone upperpath [ 110.013105][ T65] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 110.103102][ T526] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 110.173091][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 110.184760][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.199093][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 110.222300][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 110.248520][ T65] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 110.257814][ T526] usb 1-1: device descriptor read/64, error -71 [ 110.273136][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.291440][ T65] usb 4-1: config 0 descriptor?? [ 110.305937][ T3010] overlayfs: failed to clone upperpath [ 110.513060][ T526] usb 1-1: device descriptor read/64, error -71 [ 110.524941][ T3015] overlayfs: failed to clone upperpath [ 110.727899][ T65] nintendo 0003:057E:2019.000D: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 110.756977][ T526] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 110.784716][ T3021] cgroup: Unknown subsys name 'audit' [ 110.801025][ T3021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.826'. [ 110.923018][ T526] usb 1-1: device descriptor read/64, error -71 [ 111.173001][ T526] usb 1-1: device descriptor read/64, error -71 [ 111.183459][ T65] nintendo 0003:057E:2019.000D: Failed to get joycon info; ret=-71 [ 111.198288][ T65] nintendo 0003:057E:2019.000D: Failed to retrieve controller info; ret=-71 [ 111.217050][ T65] nintendo 0003:057E:2019.000D: Failed to initialize controller; ret=-71 [ 111.235579][ T65] nintendo 0003:057E:2019.000D: probe - fail = -71 [ 111.249887][ T65] nintendo 0003:057E:2019.000D: probe with driver nintendo failed with error -71 [ 111.272148][ T65] usb 4-1: USB disconnect, device number 42 [ 111.303032][ T526] usb usb1-port1: attempt power cycle [ 111.652953][ T526] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 111.683843][ T526] usb 1-1: device descriptor read/8, error -71 [ 111.823944][ T526] usb 1-1: device descriptor read/8, error -71 [ 111.925583][ T3050] netlink: 188 bytes leftover after parsing attributes in process `syz.1.839'. [ 111.942893][ T65] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 111.988507][ T3054] netlink: 'syz.1.841': attribute type 27 has an invalid length. [ 112.018704][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.025950][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.056324][ T3055] overlayfs: failed to clone upperpath [ 112.073172][ T526] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 112.114065][ T65] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 112.125712][ T526] usb 1-1: device descriptor read/8, error -71 [ 112.135785][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 112.155986][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 112.176299][ T65] usb 4-1: config 1 interface 1 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.196259][ T65] usb 4-1: config 1 interface 1 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.216245][ T65] usb 4-1: config 1 interface 1 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.236186][ T65] usb 4-1: config 1 interface 1 has no altsetting 0 [ 112.252097][ T65] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 112.267878][ T526] usb 1-1: device descriptor read/8, error -71 [ 112.275748][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.295747][ T65] pl2303 4-1:1.0: required endpoints missing [ 112.302200][ T65] pl2303 4-1:1.1: required interrupt-in endpoint missing [ 112.382943][ T526] usb usb1-port1: unable to enumerate USB device [ 112.633178][ T3035] overlayfs: failed to clone upperpath [ 112.649366][ T36] audit: type=1400 audit(1789852156.497:453): avc: denied { unmount } for pid=3058 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 112.693603][ T3059] tipc: Enabling of bearer rejected, failed to enable media [ 112.869185][ T3073] ./dev/sda1: Can't lookup blockdev [ 112.935639][ T3075] ./dev/sda1: Can't lookup blockdev [ 112.981230][ T3080] overlayfs: failed to resolve './file0': -2 [ 113.059983][ T3083] netlink: 'syz.0.851': attribute type 16 has an invalid length. [ 113.108268][ T3083] netlink: 51802 bytes leftover after parsing attributes in process `syz.0.851'. [ 113.166042][ T3085] overlayfs: failed to clone upperpath [ 113.245728][ T3093] overlayfs: failed to clone upperpath [ 114.417930][ T296] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 114.495787][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 114.495816][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.495825][ T296] Call Trace: [ 114.495829][ T296] [ 114.495834][ T296] __dump_stack+0x21/0x30 [ 114.495856][ T296] dump_stack_lvl+0x140/0x1c0 [ 114.495873][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.495890][ T296] ? ___ratelimit+0x41c/0x5c0 [ 114.495904][ T296] ? __kasan_check_write+0x18/0x20 [ 114.495918][ T296] dump_stack+0x19/0x20 [ 114.495934][ T296] dump_header+0xd9/0x460 [ 114.495949][ T296] oom_kill_process+0x35d/0x640 [ 114.495964][ T296] out_of_memory+0x5d1/0xa20 [ 114.495978][ T296] ? __cfi_out_of_memory+0x10/0x10 [ 114.495992][ T296] ? mutex_lock_killable+0x97/0x1d0 [ 114.496008][ T296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 114.496024][ T296] mem_cgroup_out_of_memory+0x2c5/0x390 [ 114.496038][ T296] ? css_next_descendant_pre+0x1ec/0x210 [ 114.496054][ T296] ? __kasan_check_write+0x18/0x20 [ 114.496066][ T296] ? drain_obj_stock+0xec0/0xec0 [ 114.496080][ T296] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 114.496094][ T296] try_charge_memcg+0x925/0xe10 [ 114.496111][ T296] ? __cfi_try_charge_memcg+0x10/0x10 [ 114.496129][ T296] ? __alloc_pages_noprof+0x35a/0x7e0 [ 114.496147][ T296] __mem_cgroup_charge+0xfc/0x420 [ 114.496160][ T296] ? filemap_get_entry+0x41b/0x490 [ 114.496174][ T296] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 114.496188][ T296] filemap_add_folio+0x57/0x3e0 [ 114.496202][ T296] __filemap_get_folio+0x829/0xe80 [ 114.496217][ T296] ? downgrade_write+0x470/0x470 [ 114.496235][ T296] ? __cfi___filemap_get_folio+0x10/0x10 [ 114.496250][ T296] ? down_read+0x7f/0xe0 [ 114.496264][ T296] ? __cfi_down_read+0x10/0x10 [ 114.496279][ T296] ? filemap_map_pages+0x17c0/0x1b80 [ 114.496295][ T296] ? __kasan_check_write+0x18/0x20 [ 114.496308][ T296] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 114.496324][ T296] filemap_fault+0xb8e/0x1ad0 [ 114.496340][ T296] ? __cfi_filemap_fault+0x10/0x10 [ 114.496356][ T296] ? __kasan_check_write+0x18/0x20 [ 114.496368][ T296] ? __cfi_filemap_map_pages+0x10/0x10 [ 114.496383][ T296] ? __schedule+0x149e/0x20b0 [ 114.496396][ T296] ? vma_data_pages+0x105/0x140 [ 114.496409][ T296] do_pte_missing+0x3649/0x4440 [ 114.496426][ T296] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 114.496438][ T296] ? hrtimer_start_range_ns+0x123f/0x2030 [ 114.496457][ T296] ? pte_marker_clear+0x1b0/0x1b0 [ 114.496472][ T296] ? __kasan_check_write+0x18/0x20 [ 114.496485][ T296] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 114.496501][ T296] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 114.496514][ T296] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 114.496527][ T296] handle_mm_fault+0x1189/0x1ba0 [ 114.496544][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 114.496558][ T296] ? lock_vma_under_rcu+0x4cf/0x590 [ 114.496574][ T296] ? __cfi___x64_sys_wait4+0x10/0x10 [ 114.496592][ T296] do_user_addr_fault+0x951/0x1230 [ 114.496606][ T296] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 114.496622][ T296] exc_page_fault+0x58/0xc0 [ 114.496638][ T296] asm_exc_page_fault+0x2b/0x30 [ 114.496651][ T296] RIP: 0033:0x7fc5f4e6c014 [ 114.496664][ T296] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a0 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 99 96 ee 00 48 01 d1 [ 114.496682][ T296] RSP: 002b:00007fff12f27d30 EFLAGS: 00010206 [ 114.496696][ T296] RAX: 0000001b2ef24000 RBX: 000000000000033b RCX: 000000000001bd50 [ 114.496706][ T296] RDX: 000000000612d45c RSI: 00007fff12f27dc0 RDI: 0000000000000001 [ 114.496715][ T296] RBP: 00007fff12f27d6c R08: 00000000172b3438 R09: 4000000000000000 [ 114.496725][ T296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 114.496734][ T296] R13: 00000000000927c0 R14: 000000000001bb19 R15: 00007fff12f27dc0 [ 114.496745][ T296] [ 114.497861][ T296] memory: usage 307200kB, limit 307200kB, failcnt 24230 [ 115.035983][ T65] usb 4-1: USB disconnect, device number 43 [ 115.122527][ T36] audit: type=1400 audit(1789852158.917:454): avc: denied { rmdir } for pid=295 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.164516][ T3120] overlayfs: failed to clone upperpath [ 115.170085][ T36] audit: type=1400 audit(1789852158.937:455): avc: denied { mount } for pid=3115 comm="syz.1.871" name="/" dev="pstore" ino=2746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 115.418299][ T296] memory+swap: usage 430836kB, limit 9007199254740988kB, failcnt 0 [ 115.432478][ T296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 115.447378][ T296] Memory cgroup stats for /syz2: [ 115.447470][ T296] cache 314535936 [ 115.461631][ T296] rss 32768 [ 115.467590][ T296] rss_huge 0 [ 115.474132][ T296] shmem 314527744 [ 115.482042][ T296] mapped_file 0 [ 115.488884][ T296] dirty 0 [ 115.491849][ T296] writeback 0 [ 115.495321][ T296] workingset_refault_anon 159 [ 115.500840][ T296] workingset_refault_file 4453 [ 115.505758][ T296] swap 126603264 [ 115.509326][ T296] swapcached 0 [ 115.520132][ T296] pgpgin 268360 [ 115.523746][ T296] pgpgout 192582 [ 115.527313][ T296] pgfault 140692 [ 115.530919][ T296] pgmajfault 137 [ 115.534633][ T296] inactive_anon 66318336 [ 115.538912][ T296] active_anon 248246272 [ 115.543237][ T296] inactive_file 8192 [ 115.547172][ T296] active_file 0 [ 115.550648][ T296] unevictable 0 [ 115.554570][ T296] hierarchical_memory_limit 314572800 [ 115.561727][ T296] hierarchical_memsw_limit 9223372036854771712 [ 115.569388][ T296] total_cache 314535936 [ 115.573701][ T296] total_rss 32768 [ 115.577357][ T296] total_rss_huge 0 [ 115.581110][ T296] total_shmem 314527744 [ 115.585463][ T296] total_mapped_file 0 [ 115.589462][ T296] total_dirty 0 [ 115.593093][ T296] total_writeback 0 [ 115.596927][ T296] total_workingset_refault_anon 159 [ 115.602201][ T296] total_workingset_refault_file 4453 [ 115.607822][ T296] total_swap 126603264 [ 115.613805][ T296] total_swapcached 0 [ 115.619965][ T296] total_pgpgin 268360 [ 115.626982][ T296] total_pgpgout 192582 [ 115.631125][ T296] total_pgfault 140692 [ 115.635569][ T296] total_pgmajfault 137 [ 115.639789][ T296] total_inactive_anon 66318336 [ 115.644761][ T296] total_active_anon 248246272 [ 115.649468][ T296] total_inactive_file 8192 [ 115.655753][ T296] total_active_file 0 [ 115.659785][ T296] total_unevictable 0 [ 115.663973][ T296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.858,pid=3100,uid=0 [ 115.678993][ T296] Memory cgroup out of memory: Killed process 3100 (syz.2.858) total-vm:94236kB, anon-rss:1364kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 115.705001][ T2857] syz.2.780 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 115.722868][ T2857] CPU: 0 UID: 0 PID: 2857 Comm: syz.2.780 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 115.722894][ T2857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.722902][ T2857] Call Trace: [ 115.722905][ T2857] [ 115.722911][ T2857] __dump_stack+0x21/0x30 [ 115.722934][ T2857] dump_stack_lvl+0x140/0x1c0 [ 115.722950][ T2857] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.722967][ T2857] ? ___ratelimit+0x41c/0x5c0 [ 115.722981][ T2857] ? __kasan_check_write+0x18/0x20 [ 115.722995][ T2857] dump_stack+0x19/0x20 [ 115.723011][ T2857] dump_header+0xd9/0x460 [ 115.723027][ T2857] oom_kill_process+0x35d/0x640 [ 115.723043][ T2857] out_of_memory+0x5d1/0xa20 [ 115.723057][ T2857] ? __cfi_out_of_memory+0x10/0x10 [ 115.723071][ T2857] ? mutex_lock_killable+0x115/0x1d0 [ 115.723086][ T2857] ? __cfi_mutex_lock_killable+0x10/0x10 [ 115.723102][ T2857] mem_cgroup_out_of_memory+0x2c5/0x390 [ 115.723116][ T2857] ? css_next_descendant_pre+0x1ec/0x210 [ 115.723131][ T2857] ? __kasan_check_write+0x18/0x20 [ 115.723144][ T2857] ? drain_obj_stock+0xec0/0xec0 [ 115.723158][ T2857] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 115.723172][ T2857] try_charge_memcg+0x925/0xe10 [ 115.723188][ T2857] ? static_key_count+0x45/0x70 [ 115.723204][ T2857] ? lruvec_init+0x211/0x280 [ 115.723218][ T2857] ? __cfi_try_charge_memcg+0x10/0x10 [ 115.723235][ T2857] ? __alloc_pages_noprof+0x35a/0x7e0 [ 115.723253][ T2857] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 115.723271][ T2857] __mem_cgroup_charge+0xfc/0x420 [ 115.723284][ T2857] ? folio_add_lru+0x116/0x400 [ 115.723299][ T2857] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 115.723312][ T2857] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 115.723328][ T2857] ? shmem_replace_folio+0x9b0/0x9b0 [ 115.723343][ T2857] ? shmem_huge_global_enabled+0x2da/0x360 [ 115.723358][ T2857] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 115.723372][ T2857] ? __kasan_check_write+0x18/0x20 [ 115.723384][ T2857] ? _raw_spin_lock+0x92/0x120 [ 115.723396][ T2857] shmem_get_folio_gfp+0x5cd/0x12e0 [ 115.723412][ T2857] ? shmem_get_folio+0xc0/0xc0 [ 115.723425][ T2857] ? follow_page_pte+0x8fb/0xba0 [ 115.723442][ T2857] ? inode_to_bdi+0x6d/0x100 [ 115.723459][ T2857] shmem_write_begin+0xf4/0x260 [ 115.723474][ T2857] generic_perform_write+0x32c/0x970 [ 115.723492][ T2857] ? __cfi_generic_perform_write+0x10/0x10 [ 115.723508][ T2857] ? generic_write_checks_count+0x426/0x540 [ 115.723526][ T2857] ? file_update_time+0xa3/0x210 [ 115.723544][ T2857] shmem_file_write_iter+0x105/0x130 [ 115.723560][ T2857] __kernel_write_iter+0x462/0x900 [ 115.723574][ T2857] ? __cfi___kernel_write_iter+0x10/0x10 [ 115.723587][ T2857] ? get_dump_page+0x165/0x220 [ 115.723603][ T2857] ? __asan_memset+0x39/0x50 [ 115.723616][ T2857] ? iov_iter_bvec+0xc0/0x180 [ 115.723634][ T2857] dump_user_range+0xb8b/0xe60 [ 115.723648][ T2857] ? __cfi_dump_user_range+0x10/0x10 [ 115.723662][ T2857] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 115.723681][ T2857] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 115.723700][ T2857] ? elf_core_dump+0x23cf/0x3840 [ 115.723716][ T2857] elf_core_dump+0x2d61/0x3840 [ 115.723733][ T2857] ? __cfi_elf_core_dump+0x10/0x10 [ 115.723761][ T2857] ? mas_next_slot+0xf01/0xfd0 [ 115.723794][ T2857] ? dump_interrupted+0xf0/0xf0 [ 115.723807][ T2857] ? filp_open+0x199/0x1f0 [ 115.723823][ T2857] ? 0xffffffffff600000 [ 115.723850][ T2857] do_coredump+0x20d2/0x3050 [ 115.723870][ T2857] ? __cfi_do_coredump+0x10/0x10 [ 115.723894][ T2857] ? asm_exc_page_fault+0x2b/0x30 [ 115.723918][ T2857] ? __kasan_slab_free+0x6a/0x80 [ 115.723934][ T2857] ? get_signal+0xa2a/0x1490 [ 115.723950][ T2857] get_signal+0x11bf/0x1490 [ 115.723967][ T2857] arch_do_signal_or_restart+0xbc/0x700 [ 115.723980][ T2857] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 115.723994][ T2857] ? fpregs_restore_userregs+0x11c/0x260 [ 115.724009][ T2857] irqentry_exit_to_user_mode+0x4d/0xb0 [ 115.724026][ T2857] irqentry_exit+0x16/0x60 [ 115.724041][ T2857] exc_page_fault+0x65/0xc0 [ 115.724057][ T2857] asm_exc_page_fault+0x2b/0x30 [ 115.724071][ T2857] RIP: 0033:0x7fc5f4f9e159 [ 115.724087][ T2857] Code: Unable to access opcode bytes at 0x7fc5f4f9e12f. [ 115.724093][ T2857] RSP: 002b:00007fc5f5e20fd8 EFLAGS: 00010206 [ 115.724106][ T2857] RAX: 0000000000000000 RBX: 00007fc5f5226090 RCX: 00007fc5f4f9e159 [ 115.724116][ T2857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100011 [ 115.724124][ T2857] RBP: 00007fc5f503506b R08: 0000000000000000 R09: 0000000000000000 [ 115.724132][ T2857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 115.724141][ T2857] R13: 00007fc5f5226128 R14: 00007fc5f5226090 R15: 00007fff12f279c8 [ 115.724157][ T2857] [ 115.724191][ T2857] memory: usage 307200kB, limit 307200kB, failcnt 24304 [ 116.195959][ T3125] netlink: 'syz.1.868': attribute type 6 has an invalid length. [ 116.356677][ T2857] memory+swap: usage 430836kB, limit 9007199254740988kB, failcnt 0 [ 116.369857][ T2857] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 116.389316][ T2857] Memory cgroup stats for /syz2: [ 116.389418][ T2857] cache 314535936 [ 116.402334][ T2857] rss 32768 [ 116.405456][ T2857] rss_huge 0 [ 116.408635][ T2857] shmem 314527744 [ 116.424924][ T2857] mapped_file 0 [ 116.448448][ T2857] dirty 0 [ 116.451441][ T2857] writeback 0 [ 116.457957][ T2857] workingset_refault_anon 159 [ 116.464271][ T2857] workingset_refault_file 4453 [ 116.470238][ T2857] swap 126603264 [ 116.473988][ T2857] swapcached 0 [ 116.478624][ T2857] pgpgin 268360 [ 116.482888][ T2857] pgpgout 192582 [ 116.486759][ T2857] pgfault 140692 [ 116.490714][ T2857] pgmajfault 137 [ 116.494635][ T2857] inactive_anon 66318336 [ 116.498910][ T2857] active_anon 248246272 [ 116.503624][ T2857] inactive_file 8192 [ 116.507584][ T2857] active_file 0 [ 116.511185][ T2857] unevictable 0 [ 116.515039][ T2857] hierarchical_memory_limit 314572800 [ 116.520547][ T2857] hierarchical_memsw_limit 9223372036854771712 [ 116.527020][ T2857] total_cache 314535936 [ 116.531249][ T2857] total_rss 32768 [ 116.535103][ T2857] total_rss_huge 0 [ 116.538845][ T2857] total_shmem 314527744 [ 116.543561][ T2857] total_mapped_file 0 [ 116.547558][ T2857] total_dirty 0 [ 116.551644][ T2857] total_writeback 0 [ 116.555786][ T2857] total_workingset_refault_anon 159 [ 116.561003][ T2857] total_workingset_refault_file 4453 [ 116.566583][ T2857] total_swap 126603264 [ 116.570663][ T2857] total_swapcached 0 [ 116.574694][ T2857] total_pgpgin 268360 [ 116.578710][ T2857] total_pgpgout 192582 [ 116.582901][ T2857] total_pgfault 140692 [ 116.586957][ T2857] total_pgmajfault 137 [ 116.602473][ T2857] total_inactive_anon 66318336 [ 116.607258][ T2857] total_active_anon 248246272 [ 116.611934][ T2857] total_inactive_file 8192 [ 116.622531][ T2857] total_active_file 0 [ 116.632436][ T2857] total_unevictable 0 [ 116.636533][ T2857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor,pid=296,uid=0 [ 116.658542][ T3139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 116.682730][ T2857] Memory cgroup out of memory: Killed process 296 (syz-executor) total-vm:90132kB, anon-rss:1240kB, file-rss:21652kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 116.958688][ T36] audit: type=1400 audit(1789852160.807:456): avc: denied { read } for pid=295 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 117.012293][ T36] audit: type=1400 audit(1789852160.847:457): avc: denied { open } for pid=295 comm="syz-executor" path="/138/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 117.092271][ T36] audit: type=1400 audit(1789852160.847:458): avc: denied { setattr } for pid=295 comm="syz-executor" path="/138/mnt/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 117.192644][ T3141] overlayfs: failed to clone upperpath [ 117.227644][ T36] audit: type=1400 audit(1789852161.077:459): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 117.272713][ T3145] tipc: Enabling not permitted [ 117.298883][ T3145] tipc: Enabling of bearer rejected, failed to enable media [ 117.322283][ T36] audit: type=1400 audit(1789852161.107:460): avc: denied { append } for pid=3144 comm="syz.0.877" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.423998][ T36] audit: type=1400 audit(1789852161.107:461): avc: denied { open } for pid=3144 comm="syz.0.877" path="/159/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.481135][ T110] udevd[110]: could not touch /run/udev/queue: No such file or directory [ 117.534373][ T36] audit: type=1400 audit(1789852161.117:462): avc: denied { read write } for pid=3144 comm="syz.0.877" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 117.617618][ T36] audit: type=1400 audit(1789852161.207:463): avc: denied { connect } for pid=3144 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 118.532975][ T757] bridge_slave_1: left allmulticast mode [ 118.538925][ T757] bridge_slave_1: left promiscuous mode [ 118.562159][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.582561][ T757] bridge_slave_0: left allmulticast mode [ 118.588232][ T757] bridge_slave_0: left promiscuous mode [ 118.612620][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.638151][ T757] bridge0 (unregistering): left allmulticast mode [ 118.683070][ T757] tipc: Left network mode [ 118.688110][ T757] veth1_macvtap: left promiscuous mode [ 118.693852][ T757] veth0_vlan: left promiscuous mode [ 118.793142][ T757] bridge_slave_1: left allmulticast mode [ 118.798820][ T757] bridge_slave_1: left promiscuous mode [ 118.804724][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.812341][ T757] bridge_slave_0: left allmulticast mode [ 118.818072][ T757] bridge_slave_0: left promiscuous mode [ 118.823819][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.831482][ T757] bridge_slave_1: left allmulticast mode [ 118.837318][ T757] bridge_slave_1: left promiscuous mode [ 118.843109][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.850431][ T757] bridge_slave_0: left allmulticast mode [ 118.856235][ T757] bridge_slave_0: left promiscuous mode [ 118.861886][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.934542][ T757] veth1_macvtap: left promiscuous mode [ 118.940245][ T757] veth0_vlan: left promiscuous mode [ 119.093573][ T757] ------------[ cut here ]------------ [ 119.099109][ T757] WARNING: CPU: 0 PID: 757 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 119.109374][ T757] Modules linked in: [ 119.113296][ T757] CPU: 0 UID: 0 PID: 757 Comm: kworker/u8:13 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 119.125027][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.135092][ T757] Workqueue: netns cleanup_net [ 119.139860][ T757] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 119.145854][ T757] Code: e8 e1 86 d5 fc 4b 83 3c 3e 00 75 19 e8 55 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 47 a3 7c fc 49 83 c7 08 eb c9 e8 3c a3 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 119.165866][ T757] RSP: 0018:ffffc9000e73fb90 EFLAGS: 00010293 [ 119.172048][ T757] RAX: ffffffff850ad734 RBX: ffff888131eca380 RCX: ffff888120d42600 [ 119.180105][ T757] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810437c7e0 [ 119.188110][ T757] RBP: ffffc9000e73fbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 119.196127][ T757] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 119.204595][ T757] R13: dffffc0000000000 R14: ffff88810437c000 R15: 00000000000007e0 [ 119.212597][ T757] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 119.221550][ T757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.228181][ T757] CR2: 0000560c5655aaf8 CR3: 000000010cfd0000 CR4: 00000000003526b0 [ 119.236268][ T757] DR0: 000000000000b000 DR1: 0000000000041000 DR2: 0000000000002ffc [ 119.244302][ T757] DR3: 00000000080a0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 119.252302][ T757] Call Trace: [ 119.255577][ T757] [ 119.258595][ T757] cleanup_net+0x6ba/0xc90 [ 119.263141][ T757] ? __cfi_cleanup_net+0x10/0x10 [ 119.268085][ T757] ? kick_pool+0xb9/0x540 [ 119.272531][ T757] process_scheduled_works+0x7f4/0x1060 [ 119.278073][ T757] worker_thread+0xc99/0x13f0 [ 119.282761][ T757] kthread+0x2c4/0x360 [ 119.286834][ T757] ? __cfi_worker_thread+0x10/0x10 [ 119.292026][ T757] ? __cfi_kthread+0x10/0x10 [ 119.296622][ T757] ret_from_fork+0x64/0xa0 [ 119.301131][ T757] ? __cfi_kthread+0x10/0x10 [ 119.305936][ T757] ret_from_fork_asm+0x1a/0x30 [ 119.310728][ T757] [ 119.313932][ T757] ---[ end trace 0000000000000000 ]--- [ 119.323067][ T757] ------------[ cut here ]------------ [ 119.328543][ T757] WARNING: CPU: 0 PID: 757 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 119.338754][ T757] Modules linked in: [ 119.342668][ T757] CPU: 0 UID: 0 PID: 757 Comm: kworker/u8:13 Tainted: G W syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 119.355888][ T757] Tainted: [W]=WARN [ 119.359680][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.369803][ T757] Workqueue: netns cleanup_net [ 119.374626][ T757] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 119.380711][ T757] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 a3 7c fc 49 81 ff f8 07 00 00 74 1b e8 f2 a2 7c fc 49 83 c7 08 eb c5 e8 e7 a2 7c fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 a2 7c fc 5b 41 5c 41 5e 41 [ 119.400375][ T757] RSP: 0018:ffffc9000e73fb90 EFLAGS: 00010293 [ 119.406506][ T757] RAX: ffffffff850ad789 RBX: ffff88810437c800 RCX: ffff888120d42600 [ 119.414552][ T757] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810437c808 [ 119.422650][ T757] RBP: ffffc9000e73fbb0 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 119.430624][ T757] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: dffffc0000000000 [ 119.438635][ T757] R13: dffffc0000000000 R14: ffff88810437c000 R15: 0000000000000008 [ 119.446649][ T757] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 119.455684][ T757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.462379][ T757] CR2: 0000560c5655aaf8 CR3: 000000010c7f6000 CR4: 00000000003526b0 [ 119.470351][ T757] DR0: 000000000000b000 DR1: 0000000000041000 DR2: 0000000000002ffc [ 119.478550][ T757] DR3: 00000000080a0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 119.486541][ T757] Call Trace: [ 119.489814][ T757] [ 119.492754][ T757] cleanup_net+0x6ba/0xc90 [ 119.497230][ T757] ? __cfi_cleanup_net+0x10/0x10 [ 119.502610][ T757] ? kick_pool+0xb9/0x540 [ 119.508517][ T757] process_scheduled_works+0x7f4/0x1060 [ 119.514216][ T757] worker_thread+0xc99/0x13f0 [ 119.518983][ T757] kthread+0x2c4/0x360 [ 119.523113][ T757] ? __cfi_worker_thread+0x10/0x10 [ 119.528360][ T757] ? __cfi_kthread+0x10/0x10 [ 119.533088][ T757] ret_from_fork+0x64/0xa0 [ 119.537619][ T757] ? __cfi_kthread+0x10/0x10 [ 119.542264][ T757] ret_from_fork_asm+0x1a/0x30 [ 119.547037][ T757] [ 119.550092][ T757] ---[ end trace 0000000000000000 ]--- [ 119.560733][ T757] ------------[ cut here ]------------ [ 119.566267][ T757] WARNING: CPU: 0 PID: 757 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 119.575891][ T757] Modules linked in: [ 119.579855][ T757] CPU: 0 UID: 0 PID: 757 Comm: kworker/u8:13 Tainted: G W syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 119.593236][ T757] Tainted: [W]=WARN [ 119.597046][ T757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.607426][ T757] Workqueue: netns cleanup_net [ 119.612508][ T757] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 119.619118][ T757] Code: 3c 20 00 74 08 48 89 df e8 ff 44 f0 fc 48 8b 3b e8 47 35 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 98 b7 00 cc e8 62 61 97 fc <0f> 0b e9 b0 fd ff ff e8 56 61 97 fc 0f 0b e9 18 fe ff ff e8 4a 61 [ 119.639492][ T757] RSP: 0018:ffffc9000e73fb70 EFLAGS: 00010293 [ 119.645602][ T757] RAX: ffffffff84f0190e RBX: ffff888131eca380 RCX: ffff888120d42600 [ 119.653626][ T757] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888120d42600 [ 119.661603][ T757] RBP: ffffc9000e73fb98 R08: ffffffff87d43f07 R09: 1ffffffff0fa87e0 [ 119.669707][ T757] R10: dffffc0000000000 R11: fffffbfff0fa87e1 R12: 1ffffffff0fa8534 [ 119.677692][ T757] R13: dffffc0000000000 R14: ffff888131ecaf80 R15: dffffc0000000000 [ 119.685779][ T757] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 119.694731][ T757] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.701304][ T757] CR2: 0000560c5655aaf8 CR3: 000000010c7f6000 CR4: 00000000003526b0 [ 119.709328][ T757] DR0: 000000000000b000 DR1: 0000000000041000 DR2: 0000000000002ffc [ 119.717951][ T757] DR3: 00000000080a0000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 119.725988][ T757] Call Trace: [ 119.729273][ T757] [ 119.732228][ T757] xfrm_net_exit+0x31/0x80 [ 119.736668][ T757] cleanup_net+0x6ba/0xc90 [ 119.741111][ T757] ? __cfi_cleanup_net+0x10/0x10 [ 119.746122][ T757] ? kick_pool+0xb9/0x540 [ 119.750456][ T757] process_scheduled_works+0x7f4/0x1060 [ 119.756038][ T757] worker_thread+0xc99/0x13f0 [ 119.760738][ T757] kthread+0x2c4/0x360 [ 119.764873][ T757] ? __cfi_worker_thread+0x10/0x10 [ 119.769988][ T757] ? __cfi_kthread+0x10/0x10 [ 119.774599][ T757] ret_from_fork+0x64/0xa0 [ 119.779129][ T757] ? __cfi_kthread+0x10/0x10 [ 119.783861][ T757] ret_from_fork_asm+0x1a/0x30 [ 119.788625][ T757] [ 119.791762][ T757] ---[ end trace 0000000000000000 ]---