last executing test programs: 4.702279681s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) 4.384675566s ago: executing program 2 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (fail_nth: 5) 3.736340446s ago: executing program 3 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x350, 0xffff8881f6e4ec80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) 3.597416372s ago: executing program 3 (id=128): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22682, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="0800080007038300020014000000682af55501450600fc000000000000000000000000000001ff0200000000000000000000000000012c03000000000000c91020010000000000000000000000000000c204fffffffe010a04053c50ff03ff020000e6000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffe0000001fc0000000000000000000000000000012f04020f00000000fc020000000000000000000000000001000000000000000000000000000000014e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7104000590780004080a0000000800001557fe06e2d4c3d913124231c1a1fe12654e7577a0235e7c64d3fe10f989036c3ed096db49393a21989afe088f55bcf88fdf220c261e31522922822ddcb20000f4bfa53a5cbe69c0a4d8681492a2acb601b7a97c1709120819c263aa830e8cbae75b43182e849f82dc655abd2e5e0bb36da3bc3499572ca40fbbe0f6af15dbab2c1eecf2f73efc0d8a"], 0x17b) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="a101000000000000") r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000001}, 0x2004) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 3.535864675s ago: executing program 2 (id=129): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 2.568986111s ago: executing program 2 (id=134): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) (async, rerun: 32) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="0aaab0418c288b8955cecb9c04fe051ac7c9efb9a79699ed77e701f46134e42dd6f18f846edb709738020bddc43aba31f17b60511bfa94e2ea7bd5efe1246f55a1", 0x41}, {0x0}], 0x2) (async) r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000100)=r4, 0x12) (async) syz_usb_control_io$uac3(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1]}, 0x0) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0x8) 2.274151794s ago: executing program 1 (id=137): r0 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() flistxattr(r0, &(0x7f0000000100)=""/218, 0xda) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x1908, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000080)={0x2, 0x9}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003200)=[{{&(0x7f0000000940)={0xa, 0x4e23, 0xffffff01, @remote, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="1400000000000000290000003e0000000100080000000000"], 0x18}}], 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) syz_clone3(&(0x7f00000003c0)={0x20100, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0x9}, &(0x7f0000000280)=""/123, 0x7b, &(0x7f0000000300)=""/80, &(0x7f0000000380)=[r3], 0x1, {r2}}, 0x58) 2.048918315s ago: executing program 1 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000ff8)=@ethtool_sfeatures={0x3b, 0x2}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) unshare(0x22020400) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) 1.806089756s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x100) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r1, &(0x7f0000000040)="1823209c0ad5666d", 0x8) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001900010004000000fedbdf250e00000001000000320c000004000280"], 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) write(r2, &(0x7f0000000000)='7', 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x4, 0x2, 0x2000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x5, &(0x7f0000000000)=[@efer={0x2, 0x801}], 0x1) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) openat$cgroup(r2, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) userfaultfd(0x801) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f00000003c0)=0x90f1498b481f079) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@filename='./proc\x00', r8, &(0x7f00000001c0)) (async) accept$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000340)=0x1c) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) vmsplice(r0, &(0x7f0000002fc0)=[{&(0x7f0000000440)="d3cb5d4705c8b2bffdb1d008e77f0e303a0fecb5763f7b5d711294a5738177cc3c928e49010224a5d40e7a2321c8a914fa8f818b842f08e839d2dab1be694efa3b06b7ce04848417d195bb78c5", 0x4d}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="cbf7652f61a8680100e9b2d6b6726327149a1e419916f16b9716c835d6c54e71d6bde5602220ecfbaba76f3b2bc734218d4cb44b13d61f55ac4f8953eeb7c7412a0918c90fd2b2694e25c891fea8de80cf98602df7cc08f5c9251efbbb89c4d7021fe91802300ee1a70dab61d1f6b86a906d8a27061db9e5b4295dbf10178169b7594e790cf972830525e9cc19ee5b493adea05929", 0x95}, {&(0x7f0000001dc0)="2ae81b0f60b96138e98267c5c405e8cac48c2d6cfd1e8f8459a4d85fd651d208a2252d8904041e6f4ab02a940bbd05fb25dda7a9028a9d452ca100bb670dd1b582c383ea9e1b433e6495c624d53b55f64b1aa0a92754b01776629fd99b1bd3661d01706a89c2a8528f2c952bdf610a5d2fa24ef4d2c8", 0x76}, {&(0x7f0000001e40)="da47379d345c08631bfa9d4936d9ea9d47f2c8aa99ec4af19d8ec8751955ed6cd671d3ffb7c89f07a47dc5de9210d22d453bebb87b14d444b9aed81fd137eeac6bbf8fd03eacb5585e514ae1203c6f308224aebe662b905765f5ff39e47516f83ab903bf4e4c0000cd9f6eee2bc0cf5be9dacb72071aa6c1a0e8e3c62a7f86223058f57df42ab8952f299597dd4cf490650f8a269f311043e9030767a17c562d31018c189070813d9d6a48", 0xab}, {&(0x7f0000001f00)="c4c1eb6303955bbe651bdce64abeccdb44f11951360ee31e90c639b926e5342b774ecccf0d8351f58c1319f50cc67578c10385f6c97158bc3ef116d3b76ab0d70289655ff16710a01ba7f2a2d1ac440852383f6761df0f4e301719489dfba595877f6807996897887f823b07ee0f46500356a841526f725d689dc1baad502ea992a452481886e8a105d2f3e7bca4c965f2bb8c6608c2a2", 0x97}, {&(0x7f0000001fc0)="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", 0x1000}], 0x7, 0xd) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000280)={0x7, 0x4b, 0x2}, 0x7) ioctl$FIBMAP(r9, 0x2284, 0x0) 1.794979776s ago: executing program 3 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (fail_nth: 6) 1.652786833s ago: executing program 3 (id=142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) (fail_nth: 2) 1.200407944s ago: executing program 0 (id=144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x10008947, &(0x7f00000001c0)="8d557f1b1ff6ccd094c16b42289734959273b57ef1d453bebe85fbbe6c71e6226732bc85836358a4d39599268911f86dd60deaaf0be012c8924161071004458424fe45e65a223795ab2f72dd7a88739efa3ea40606325bd849ea0050a755f48e9c305a74f054f82282c2f6c6e89d4ad03beba67e39a0f5c2ee7c2c887803760e5ab6d2c1000000000000000099582c93c328e23799d0fa063d77979dbb975d233daf204060cb7e7eb30a87904371b9c5d60543fb01255051cc") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) 1.07427877s ago: executing program 3 (id=145): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 850.170791ms ago: executing program 3 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) (async, rerun: 64) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r2, @ANYRESDEC=r1, @ANYBLOB="54366137abd15adeb731dafc3bc2a681ffd7d69b185ca7e2e5f8ac3af34029e5f1e8c58ee2a7173c72ab71789184f021ee2fd05cddb367b4210da501e8936501a8e95c19966f16195fe6236a750059f72c49ce000094f8eced21eedefae300"/104], 0x2c}}, 0x4000844) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="00022abd7000fedbdf250a0000000800028004000100680003001bf68712321d7114025b6a1d32dc7e1b8f3f2869ff4fde3a777b1299e90fb9cf255a9c012593bc99733778059c7d6fa9dc1d804dd004c187f50ffaf2bef2e8622d628c42801ee06e4bc45c2e9f7c33ad32002640a8df4f615ec1cc9798a1a5f33e5e0c5b0800028004000100"], 0x8c}}, 0x10) (async) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000000)) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) (async, rerun: 32) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) (async, rerun: 64) pread64(r7, &(0x7f0000000200)=""/82, 0x9a, 0x2000000fc) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x1, 0x7fe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x7, 0x85b, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x7b}}}, &(0x7f0000000300)) 849.94628ms ago: executing program 1 (id=147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) 727.488417ms ago: executing program 0 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008061c010800060400"], 0x32) (fail_nth: 2) 670.582409ms ago: executing program 1 (id=149): r0 = socket$tipc(0x1e, 0x5, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r1, 0x0, 0x16, 0x0, &(0x7f0000000100)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) (async) socket(0x10, 0x3, 0x0) (async) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES32=r2]) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r7) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7098077aa43a1d"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4004000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4044084) (async) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x4058040, &(0x7f0000000500)={0x11, 0x1, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r10, 0x408) (async) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}, 0x2}}, 0x10) 458.260389ms ago: executing program 1 (id=150): r0 = syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22682, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="0800080007038300020014000000682af55501450600fc000000000000000000000000000001ff0200000000000000000000000000012c03000000000000c91020010000000000000000000000000000c204fffffffe010a04053c50ff03ff020000e6000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffe0000001fc0000000000000000000000000000012f04020f00000000fc020000000000000000000000000001000000000000000000000000000000014e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7104000590780004080a0000000800001557fe06e2d4c3d913124231c1a1fe12654e7577a0235e7c64d3fe10f989036c3ed096db49393a21989afe088f55bcf88fdf220c261e31522922822ddcb20000f4bfa53a5cbe69c0a4d8681492a2acb601b7a97c1709120819c263aa830e8cbae75b43182e849f82dc655abd2e5e0bb36da3bc3499572ca40fbbe0f6af15dbab2c1eecf2f73efc0d8a"], 0x17b) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="a101000000000000") r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24000001}, 0x2004) 458.064729ms ago: executing program 0 (id=151): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) write(r1, &(0x7f0000000080)='4', 0x1) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x4) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x1, 0x1000}) 440.52465ms ago: executing program 2 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) 327.690985ms ago: executing program 0 (id=153): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000300000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/4096) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 210.255561ms ago: executing program 0 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x81, 0xa, 0x5}, {0x3, 0x0, 0x31, 0xa}, {0x200, 0x8, 0x7, 0xe}, {0x7, 0x6d, 0x6, 0x6}]}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) 92.249516ms ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (fail_nth: 7) 0s ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@svm={0xc, 0x1, 0x1080, {0x7000}, {"e6c33a86947eee6e28c2aa4cf85e4ba6473dae99c7aaf4d2942670c3fa8fcb90c26dc38a0dc20a2a3c99a60e1a72e95f51efacc97240d88970e5e88cc86392ec58f2ccde7d1ed1461127c46ddaa7e0abf5c9f040a786678b1a2278ce94fb46096f5748c6d8055972800650c8f63dcbd808be9cf6fa918011e8edc7b5a764fb14484b1e4d51e08beda29a186b029f795675fa5f42b59dd0421322d5c9811016520f542c54c7cb461fb4d74e78bf7489ad27a1a60d28d018ed8bcbb42c305e152ae0fb7fca72d2175add0bccf8bfcefbedd0dd81079db0cba7f132d19a0d48752c09898b81fbb662895fc9ae1c4ba810584e14e9322efc3306a991a3fa6915120c2d6338e248d2b68d099840f40e3fc82102f2d2bdeb08ec5479da8c85be067a53048cf24c82a75712d4fed4f00384439c6175feb1aa7723c8a8ab65d6506f5d461153bf09247a0c8053c9f25ff4a4a5c1c75d641af13164852d8037453f888ba632b831a598189349e502112ae0f9ca4672560635e86642232e46132b1f419275d4790183bf05695f5186c81311bb96176fc189bb1a62571505cb4438b9403559ce3938903394afbb491c6f2a861995eb82e6f2027c65c2c290da2e4fe19a5500e71f1d00ccbb9e18a9377a7528470a670f948a36d59fdf0e89fa220bd72c8339d897664e53df3c937678dd4d08c66451a499f4fb9b4e75ed17022ae8a0829ce2dac7e760b7fe67769adddd6d2b5665bc9657b6a3365525466c850cc5330da816a03eb2c3c28a98ab90d8830776f2b65b95d6aa6e3f4827f9ac78a97f56bd387195596a809bb93d5c6929c96b2fe3684e7847e69d440308779b3a1d0328906b8c8401e4f898e09f8c47d7cc2fa48b2ed2e3e151f84f8ceb277056c60cbaab8a8cb436e114f7f3907ebdd5542d9e09a0e365804374c4988fda453a129076a3a7ee0a3b9f07daeca8693cca391ee099eb2b23bf7ae0179b20c9dec2eb0425cc220543caacca07d5d843c8e0a2258dac735ebe831617924ccc870570ed21d9235c53b22de2dc17618d81a8a26524ab5183f93337d91cec24214fb54c415e5e1e1973a6d0edbbc7e26e29c5667aea5d292fc48380d40f31cfecf2424f090dcc408046b8162129754eaf0252387ecb932efb79f422464f748d3189dd6273914feb1ebfe52058a525a2d286c35a95f428661687857e8b997ccec0e6ee0c24338042ef95b1b0292f6ffb901210dc2e2c43f1b16e7e57bfcf0185341867d35d8b361ede335fd62ed3a0a79fc0254546c991fd48eb01b2e78c8b1bbc392a22aca59dfc50b237248a67eed018e3a4389906351c646e4c6e5591383e71d5ea741079a66b3f1ee3546512f8aae505ccf0edcbfef012955c490095314af90789db0cc2671f2247d8c006d61dfcac1e0dce84fedc6f3acb143ce9fd3e6e76924dedda1f65e0aa52336bc70db19be06b6b2577c778f3099b5a98d36a2189a4fe03f4b55c84b32917e3a181a1cad0e8952abcc43155d6a890da434df6c8545c38fd744455f81767d3105a719a2eb021a801bbaf7b58b43dc259da1cf4f49a8fe989ed433576c548f04e6ddf4397e3455ac3cc7a508ae5ff86ec685460849542fc981da16239ec0752ac301a825a9931c4f1ebdbd47dec7a730a09446d1cc7a14c38cec59c87c96fdd456c328345c8782663f48ddb88054ac9fa1ec1cf6af648b41dc23cc297a1a8e9703066ee71d8cbb9adb6a3b404d43e23ff354db59fe4d1555c92fca777887cc6cb3d5df888c2c8b6dcdd09aacc080388c71b34ca6eacd6f2581f5efaa1835e4507b444c3eae7d8b35d870bbbb9510bcd11ae4bdfa8d165be2e572a9d949af94c660663da40f9cc6cdea6194309f711e89afab914ee9757ed0617dd9d55b12a5bbebd1f645755d605db6399efa77b119b0aea775dbe4fffd6f443190e9a7128e3934796e3d662c3554f04d8a15fa689cc71237c101384d687a9cdda46910b2bb79d0d91c9ae3498943516e935903465fb74f3808e0f8b230e26657d2ac09cac609462af6910ee4e64a7cdc2ee029d51f55cd105ae5106af673288270d1d779afc7a244d31cafb0959904cee7fb3480f274030006874a6f0338d0a42d9d3e2079efa2d08ed5c3fa4f69ba25c8da5bf747e78b3c9e91444fcf3d98883a6a71cba3bac5182229b878f7b2af226941706f2aab35d457c025bbdc2276d00b227f86fef2276c144898ed732af1b22298da62f5596679b94243a005548eb6981632c3fe9a8a1d0d6109ab565bb8a15ba0d907c3e97a8ba5ed3cee824f3b682fecf51ce4506d2f728f99ebb6bfc6c0b9102a30d827c66b1b76c7b60c74905615c5488bd6d6df3c547e1fb1901446eff2f1d399b06faea04591e0b6d9608796ce14df8077656e68dae3f303324c9d6e1d5dffd5f053ab056a3049fd7d752ea0339b34b8ea0623b149d9297607333acd8b2f31cfe8764ce84d1c70df7a27632ae286bbb9bbc585ab25a01a56ae11e68dfc0c64d5612a73e9b25b4fe8bddc5603fe357149dbaeaaa360fb28c6a60e766630babf1e5b4596e20ed19e43bad3d66b5be35bfef63db1a4cb754cd156a79cb220487661c6e246f2b61285be433c5abc39ab10a6cfa92f4602457edf1dc335196358966b40705dc6c3e83e78c0e851a85b73e6bd583f2db6ca445ab8145abff713c4fdb1fdff352b2a0f95f5de9c227099f2cfbf07489df41f1b139e83f6e63486b54667158672707b3de39e92018220c54e0479459c31a4f5caff51148f9a268135d5f931260cd434bfe3e072868e3e47b4607e1f24dd0942d05c8f427dc2a8b62e03c17ffc3de4c2721691e0a400df369bd1ed49b95f697320560a12cb85f673f5cd1b710afd8e9c1e524b491479b939f5d73aeea7457a8ab14026232aa884e4281a809fa8bf059881562f49de80f73818345ee5fd8a69febe8233dccf92be6680745e72f93db82c05d4500a275bba4f6e78f04169c2d5c88a0cd527fd62239685a2688e5ae5cdd746953e1ca65b7f73d5243a2615888ff08c51262b701acae9cbe301689e137586e00026da9b3acb19934beca4155b4973c2ed1920c04e55096455c5087db2574662bb18f302ad7e4ab98945019fa37fd184e949ea5ab2edc19e55d852c017e78222a971904fe7ca037642ba49ae558f53deab9aa04947375e61f548a5e59fe8800a8668f3e2d3e87e0eb9eaa84f288262d233b6a63783f3c10a25824cf869950b63e73f6aaa62441b53864480df63d8728f219497e672870729cbc79e89bcafaac4becdab41daec1028d0f486b36a08eeb1f76d5274ac0c1669e82cd532e5d7867f8e0c5b4fea7535124a2013f8a45368366c7271f0a547c6b443da1ac55375211862caa17e01505907df8e0738fe46c9001d4b3c830c8c2a32f38f8fbcf797519ed01bfa01db66ae45cad94f1a32defad3c166de674d6b039ff512deeb18115bf97130457b8c88002a0b257e37b3c49cb541d8ec381c10d6d124c9b55f667768000dba324bf30e51a85bbe177086d23becdacddc5036fb8ef12840a98ed97f9ef9c47a36d2c9d13a1e210c8133e9af0393a90a5fda175a9dc465cf611acfa3c04670c5c838584941d5736b1e8ead5f5ffab4fbbef4c0e379e14cc77a9db39888667fa42b2614ca4b77a7eafc6b92ff700754013b7dfa910a13fa40e0c4a83c7af553e8016343d297e85721d6249c58f7ec79a0d7d1465e7b023dbb2b11874071ba81b596eba9ef3d9def2281503fee36613e85f559f2f57863886f26b63e86c81f2f5719bd8a44a46e91d98d1a26f655e3c2acdb9cc041f712943dd27cd25ee4cf33db8e2a119cc98c80368ca1b0d09b68dea92da79f131da292997053f59b0b21f35e7f37a79fe5fb1b4aef4ddf6703c936392a4d06ecda44b9b44c2af60dc24c13a559171b508edaeddc6604c84d327c02e54a8537d3459fe3297a438b2001cebcac0d0d5852141709676f149a9128a9905b107b1629e7a7add62b36662f72097c553b96ced469ccab8665c01d076723f11ffd626d632c30b04dc08c54230a067047e40f56689fb3fe929019470b1eaebbfa1f956714eccd7aa42a3fb997bcef1bd45b3a2551a1f156ce9a8eea09cf935f299c0972b10909657dbc4e0feab2e53ee9d7d036131e59681f2290cf1d48cf7c81cbc5c9a0be8c8b671c62e1ad65e3e01dfcb60205643142b83686d03a955141a5cc3361e8410d569afbd016e1f8fe2380172f07f81aed2099c27e9abe9b286d3fe18bc3d1c2d97a9b07d6d520f5d3d5303b05b3b522951df8de7ef9f0e183a2e21c96722ee083edccb77e162446b3bc5860c70d37fd50c551512e0827e55397a8d4291e3f2338e0ceb6c59c02a12653c2a7038977c23355b546a218921c5cd758b572924dc5921d55053f4fac013bae37f2b74397814d3d4181aa3b57c6b300c021fb69e42d05836fbd5fbd07518f64743277deb8ea60289922c79f199271dacad92c1daf42feb8d15c4e2772603f477a4fb0c3be38b0e451e95f3d8fe206e66a57c261403708aa48d3cacd3a129ca78de51fa8618915be518ba8bbe999ef84b7ff33147d0791fc6dc9bdc741f52706d8917612af76303fe7fb3bbe5d53378428da1a14806ba35c5750010562ddca7f86ed6bc0683054b307b53edd2b14b880a0ccfb47aad7b6c2f075a0ddeeb0155f210c2e334bab60ca6a6e685ea19d155cd9ffffda1ada8fea35a556c90349e8a206d07bb9042a4e83c00c862c9fcbe75f7e1fbde053bc7bf7a1d04cbfdade2002206fc0c32118b36e7359dd8c72281410e8bd2a8a99376476a7850cda4d26735f1ddd8a4d7e0b366ce28457f0e5b0e1da84ff4891c650883653cf98f701230ec7066197f0777bee751ea179459ea6615f34ecbd23fffef8feb4ee3d724786525eda79be3af10435ab4a522ad5dbe8de96c7135c24852ef3b9d891454078c8a5b3efe21484c66e6e5086fcb3b786d54450a2e204372ba8dbbdec35fb16714282115bf9103d32d9c3b27ef81f2e4e225a4c4b4cb70c8ee4bbbbcf6a96ec330ef4c67d66def0abec1a6ef97745eb733001cb2b647e068449020bc64a854a47afc095640907f7e5080b29bcb44015643bb7188392944d8bdda4d98ba6d1b7227391179a83c36302e8da74d620da3da15e71121ec6e1ffa3a5067015f17001c325d46c71afba5287e9fcc5d7d58d24bf90be1c2336fbb970a6fbf523b8105aa20c04b4818878c05409b63d7d05d83b036dfa577c8903e5c61989438a5de11556ca449941ec3044b54d2c3a705f199538fa972270c5d392680687a568aa1f32275b5d52c93ef2050ee5479cec90206ed2fa93709d0c0fb3c7b5273fbcc5243627c62cce9053b5c26fdc9d2da73b738af87838fc792e5a60644b841c8649b55940ead9d8315ae5189594a31d47682670761293bcb5a07b5c084dd88838b74e87d0aa46ea5ca1871d8cb488fa06f208d2ad7f23e97f8e2d885388546289bdb9b2e32eab3e05ff630c8dd080ac9eba740ccbdaf441e485db6e4ac9abdaea870ec8fdc6bda22e4cfa2dab146f70de8e4021aed872be6c7189d52d17c4226b3eae907ea832c4fcaeffffe3bf3acbf1b9e4b016896b82c43f78dc7cdff1581dc9c5a30933602ac74d4c24fe7977fc9d67da634d6aeb3d466c66c97c29b3d3cf8d2966bbbc49a5000b1351adae637a29b0aaf4e31935d24211c0b865871bab5c75873181d1b1a9d224fc872fb63a45e1261ab2dc891551bb4d87a5b158db421bd4adbb015ac7036627695b64a9e6ce7ea12"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/154, 0x10000, 0x1000, 0x1, 0x2}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 20.631358][ T36] audit: type=1400 audit(1789141298.450:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.632536][ T273] cgroup: Unknown subsys name 'net' [ 20.654125][ T36] audit: type=1400 audit(1789141298.450:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.681635][ T36] audit: type=1400 audit(1789141298.480:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.681794][ T273] cgroup: Unknown subsys name 'devices' [ 20.804450][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.810078][ T273] cgroup: Unknown subsys name 'rlimit' [ 20.923034][ T36] audit: type=1400 audit(1789141298.750:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.946642][ T36] audit: type=1400 audit(1789141298.750:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.971562][ T36] audit: type=1400 audit(1789141298.750:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.980742][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.003440][ T36] audit: type=1400 audit(1789141298.830:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.029205][ T36] audit: type=1400 audit(1789141298.830:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.062912][ T36] audit: type=1400 audit(1789141298.890:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.088576][ T36] audit: type=1400 audit(1789141298.890:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.088727][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.377383][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.384617][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.391719][ T297] bridge_slave_0: entered allmulticast mode [ 22.398122][ T297] bridge_slave_0: entered promiscuous mode [ 22.406303][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.413492][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.420566][ T297] bridge_slave_1: entered allmulticast mode [ 22.427106][ T297] bridge_slave_1: entered promiscuous mode [ 22.454878][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.461943][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.469245][ T296] bridge_slave_0: entered allmulticast mode [ 22.475664][ T296] bridge_slave_0: entered promiscuous mode [ 22.482289][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.489547][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.496761][ T296] bridge_slave_1: entered allmulticast mode [ 22.502980][ T296] bridge_slave_1: entered promiscuous mode [ 22.541505][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.548615][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.555737][ T294] bridge_slave_0: entered allmulticast mode [ 22.561939][ T294] bridge_slave_0: entered promiscuous mode [ 22.571631][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.578845][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.586110][ T294] bridge_slave_1: entered allmulticast mode [ 22.592278][ T294] bridge_slave_1: entered promiscuous mode [ 22.619269][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.626449][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.633687][ T295] bridge_slave_0: entered allmulticast mode [ 22.640011][ T295] bridge_slave_0: entered promiscuous mode [ 22.663537][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.670685][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.677853][ T295] bridge_slave_1: entered allmulticast mode [ 22.684173][ T295] bridge_slave_1: entered promiscuous mode [ 22.816755][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.823854][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.831133][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.838190][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.851199][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.858369][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.865757][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.872832][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.881419][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.888486][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.895872][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.902913][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.911888][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.918991][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.926556][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.933705][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.991757][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.999276][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.007024][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.014834][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.022068][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.029521][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.037326][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.053668][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.060725][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.070249][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.077345][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.089531][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.096634][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.104386][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.111423][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.123362][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.130427][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.144291][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.151525][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.163640][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.170782][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.221667][ T296] veth0_vlan: entered promiscuous mode [ 23.230550][ T295] veth0_vlan: entered promiscuous mode [ 23.246187][ T297] veth0_vlan: entered promiscuous mode [ 23.269375][ T295] veth1_macvtap: entered promiscuous mode [ 23.276548][ T296] veth1_macvtap: entered promiscuous mode [ 23.286887][ T294] veth0_vlan: entered promiscuous mode [ 23.294526][ T297] veth1_macvtap: entered promiscuous mode [ 23.336435][ T294] veth1_macvtap: entered promiscuous mode [ 23.347213][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.398726][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.743761][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.784266][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 23.872620][ T88] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.922439][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 23.929867][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.940665][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.954126][ T66] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 23.963363][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 23.971172][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.979426][ T66] usb 4-1: Product: syz [ 23.983877][ T66] usb 4-1: Manufacturer: syz [ 23.988868][ T66] usb 4-1: SerialNumber: syz [ 23.993647][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.004370][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 24.016515][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.032999][ T10] usb 1-1: Found UVC 1.00 device (046d:0825) [ 24.035982][ T88] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.056038][ T88] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 24.065901][ T88] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.074229][ T88] usb 2-1: Product: syz [ 24.078525][ T88] usb 2-1: Manufacturer: syz [ 24.083245][ T88] usb 2-1: SerialNumber: syz [ 24.096692][ T88] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 24.102878][ T88] cdc_wdm 2-1:1.0: Unknown control protocol [ 24.228199][ T66] usb 4-1: 0:2 : does not exist [ 24.244824][ T66] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 24.258172][ T66] usb 4-1: USB disconnect, device number 2 [ 24.320717][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.445614][ T10] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 24.595686][ T10] usb 2-1: USB disconnect, device number 2 [ 24.665810][ T31] usb 1-1: USB disconnect, device number 2 [ 24.963923][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 24.989334][ T355] overlayfs: missing 'lowerdir' [ 25.002404][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.012313][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.035589][ T355] overlayfs: missing 'lowerdir' [ 25.041650][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.052189][ T355] overlayfs: missing 'lowerdir' [ 25.059638][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.069894][ T355] overlayfs: missing 'lowerdir' [ 25.077795][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.088709][ T355] overlayfs: missing 'lowerdir' [ 25.096283][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.106455][ T355] overlayfs: missing 'lowerdir' [ 25.123611][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.152654][ T355] overlayfs: missing 'lowerdir' [ 25.172169][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.216480][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.224263][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.242643][ T355] overlayfs: missing 'lowerdir' [ 25.263494][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.275297][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.288669][ T66] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 25.312640][ T355] overlayfs: missing 'lowerdir' [ 25.320550][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.335729][ T66] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 25.353037][ T355] overlayfs: missing 'lowerdir' [ 25.358118][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.358736][ T361] Zero length message leads to an empty skb [ 25.369503][ T66] usb 3-1: Product: syz [ 25.378233][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.388543][ T66] usb 3-1: Manufacturer: syz [ 25.393514][ T355] overlayfs: missing 'lowerdir' [ 25.398466][ T66] usb 3-1: SerialNumber: syz [ 25.405226][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.416715][ T355] overlayfs: missing 'lowerdir' [ 25.435091][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.445951][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.459091][ T355] overlayfs: missing 'lowerdir' [ 25.464753][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.476910][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.486282][ T10] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 25.495790][ T355] overlayfs: missing 'lowerdir' [ 25.501138][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.510927][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.522697][ T10] usb 4-1: config 0 descriptor?? [ 25.531218][ T355] overlayfs: missing 'lowerdir' [ 25.538218][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.547686][ T355] overlayfs: missing 'lowerdir' [ 25.559101][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.562438][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.568688][ T355] overlayfs: missing 'lowerdir' [ 25.582786][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.592605][ T355] overlayfs: missing 'lowerdir' [ 25.601679][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.610980][ T355] overlayfs: missing 'lowerdir' [ 25.617550][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.627609][ T355] overlayfs: missing 'lowerdir' [ 25.633731][ T36] kauditd_printk_skb: 362 callbacks suppressed [ 25.633747][ T36] audit: type=1400 audit(1789141303.460:436): avc: denied { mounton } for pid=353 comm="syz.3.12" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.665107][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.674774][ T355] overlayfs: missing 'lowerdir' [ 25.681841][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.691855][ T36] audit: type=1400 audit(1789141303.500:437): avc: denied { ioctl } for pid=362 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.716806][ T355] overlayfs: missing 'lowerdir' [ 25.723331][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.733043][ T36] audit: type=1400 audit(1789141303.500:438): avc: denied { mounton } for pid=353 comm="syz.3.12" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.742454][ T355] overlayfs: missing 'lowerdir' [ 25.774115][ T36] audit: type=1400 audit(1789141303.530:439): avc: denied { write } for pid=345 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 25.795947][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.796768][ T36] audit: type=1400 audit(1789141303.530:440): avc: denied { write } for pid=345 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 25.814329][ T355] overlayfs: missing 'lowerdir' [ 25.825514][ T36] audit: type=1400 audit(1789141303.550:441): avc: denied { mounton } for pid=353 comm="syz.3.12" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.853529][ T36] audit: type=1400 audit(1789141303.580:442): avc: denied { ioctl } for pid=353 comm="syz.3.12" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.854010][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.879782][ T36] audit: type=1400 audit(1789141303.580:443): avc: denied { ioctl } for pid=353 comm="syz.3.12" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.889977][ T355] overlayfs: missing 'lowerdir' [ 25.913175][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.919756][ T36] audit: type=1400 audit(1789141303.610:444): avc: denied { mounton } for pid=353 comm="syz.3.12" path="/2/sys" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.934712][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 25.947809][ T36] audit: type=1400 audit(1789141303.620:445): avc: denied { mounton } for pid=353 comm="syz.3.12" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 25.959096][ T31] usb 2-1: config 1 has an invalid interface number: 116 but max is 0 [ 25.980703][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 25.999050][ T355] overlayfs: missing 'lowerdir' [ 26.007800][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.022386][ T31] usb 2-1: config 1 has no interface number 0 [ 26.025787][ T355] overlayfs: missing 'lowerdir' [ 26.032408][ T31] usb 2-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 26.045909][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.055690][ T355] overlayfs: missing 'lowerdir' [ 26.062724][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.072406][ T31] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 26.074749][ T355] overlayfs: missing 'lowerdir' [ 26.088932][ T31] usb 2-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 26.101191][ T31] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 26.102613][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.113563][ T31] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x3 has invalid maxpacket 155, setting to 64 [ 26.122626][ T355] overlayfs: missing 'lowerdir' [ 26.133588][ T31] usb 2-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 26.150918][ T31] usb 2-1: config 1 interface 116 has no altsetting 0 [ 26.153707][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.162598][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 26.167410][ T355] overlayfs: missing 'lowerdir' [ 26.177936][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.189348][ T31] usb 2-1: Product: syz [ 26.190917][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.194476][ T31] usb 2-1: Manufacturer: syz [ 26.203599][ T355] overlayfs: missing 'lowerdir' [ 26.208344][ T31] usb 2-1: SerialNumber: syz [ 26.218579][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.229653][ T363] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.237174][ T355] overlayfs: missing 'lowerdir' [ 26.244392][ T363] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.244908][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.252001][ T363] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 26.261356][ T355] overlayfs: missing 'lowerdir' [ 26.274605][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.283862][ T355] overlayfs: missing 'lowerdir' [ 26.290144][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.299546][ T355] overlayfs: missing 'lowerdir' [ 26.305976][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.315636][ T355] overlayfs: missing 'lowerdir' [ 26.321863][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.331206][ T355] overlayfs: missing 'lowerdir' [ 26.337418][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.346761][ T355] overlayfs: missing 'lowerdir' [ 26.353205][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.362544][ T355] overlayfs: missing 'lowerdir' [ 26.369035][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.378360][ T355] overlayfs: missing 'lowerdir' [ 26.385131][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.394706][ T355] overlayfs: missing 'lowerdir' [ 26.400948][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.410158][ T355] overlayfs: missing 'lowerdir' [ 26.416757][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.426680][ T355] overlayfs: missing 'lowerdir' [ 26.432910][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.442062][ T355] overlayfs: missing 'lowerdir' [ 26.448459][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.457730][ T355] overlayfs: missing 'lowerdir' [ 26.464864][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.474144][ T355] overlayfs: missing 'lowerdir' [ 26.479361][ T31] ums-usbat 2-1:1.116: USB Mass Storage device detected [ 26.487929][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.509052][ T355] overlayfs: missing 'lowerdir' [ 26.516413][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.526174][ T355] overlayfs: missing 'lowerdir' [ 26.532296][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.541563][ T355] overlayfs: missing 'lowerdir' [ 26.548650][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.553454][ T31] ums-usbat 2-1:1.116: probe with driver ums-usbat failed with error -5 [ 26.558269][ T355] overlayfs: missing 'lowerdir' [ 26.571806][ T31] usb 2-1: USB disconnect, device number 3 [ 26.583541][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.593440][ T355] overlayfs: missing 'lowerdir' [ 26.600184][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.609699][ T355] overlayfs: missing 'lowerdir' [ 26.616520][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.626576][ T355] overlayfs: missing 'lowerdir' [ 26.633272][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.642716][ T355] overlayfs: missing 'lowerdir' [ 26.649419][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.659465][ T355] overlayfs: missing 'lowerdir' [ 26.665466][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.674948][ T355] overlayfs: missing 'lowerdir' [ 26.682077][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.691693][ T355] overlayfs: missing 'lowerdir' [ 26.697839][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.707910][ T355] overlayfs: missing 'lowerdir' [ 26.713914][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.723149][ T355] overlayfs: missing 'lowerdir' [ 26.729010][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.738781][ T355] overlayfs: missing 'lowerdir' [ 26.744800][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.753999][ T355] overlayfs: missing 'lowerdir' [ 26.760244][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.769420][ T355] overlayfs: missing 'lowerdir' [ 26.775378][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.784590][ T355] overlayfs: missing 'lowerdir' [ 26.790461][ T355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 26.799605][ T355] overlayfs: missing 'lowerdir' [ 26.806242][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 26.812443][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 26.821444][ T10] usb 4-1: USB disconnect, device number 3 [ 27.225837][ T385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 27.302437][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.420678][ T392] rust_binder: 391:392 error while translating object: EBADF [ 27.428516][ T392] rust_binder: Failure in copy_transaction_data: EBADF [ 27.428542][ T392] rust_binder: 391:392 transaction async to 391:0 failed EBADF, code 0 size 88-24 [ 27.462400][ T10] usb 2-1: device descriptor read/64, error -71 [ 27.573355][ T45] rust_binder: 391: undelivered TRANSACTION_ERROR: 29201 [ 27.600187][ T66] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.622546][ T66] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 27.651941][ T66] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 27.652406][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.661920][ T400] overlayfs: maximum fs stacking depth exceeded [ 27.679508][ T66] usb 3-1: USB disconnect, device number 2 [ 27.732418][ T10] usb 2-1: device descriptor read/64, error -71 [ 27.798712][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.865558][ T312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.893334][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 27.906672][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.916351][ T312] usb 4-1: Product: syz [ 27.922381][ T312] usb 4-1: Manufacturer: syz [ 27.938318][ T312] usb 4-1: SerialNumber: syz [ 27.961764][ T312] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 27.968748][ T312] cdc_wdm 4-1:1.0: Unknown control protocol [ 27.982410][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.122396][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.238421][ T415] fuse: Unknown parameter '0xffffffffffffffff' [ 28.251682][ T415] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 28.362402][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.472984][ T10] usb usb2-port1: attempt power cycle [ 28.487273][ T66] usb 4-1: USB disconnect, device number 4 [ 28.570645][ T425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.705959][ T430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.822410][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.859700][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.003694][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.252525][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.276989][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.417050][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.480868][ T460] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 29.532500][ T10] usb usb2-port1: unable to enumerate USB device [ 29.732471][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.782468][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.882423][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 29.945371][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.967082][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.984349][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 29.993680][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.001967][ T45] usb 4-1: Product: syz [ 30.006853][ T312] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 30.015902][ T45] usb 4-1: Manufacturer: syz [ 30.020588][ T312] usb 3-1: can't read configurations, error -71 [ 30.030683][ T45] usb 4-1: SerialNumber: syz [ 30.048704][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 30.064835][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 30.508837][ T45] usb 4-1: USB disconnect, device number 5 [ 30.643072][ T36] kauditd_printk_skb: 1744 callbacks suppressed [ 30.643091][ T36] audit: type=1400 audit(1789141308.470:2190): avc: denied { create } for pid=470 comm="syz.0.53" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.672199][ T36] audit: type=1400 audit(1789141308.470:2191): avc: denied { map } for pid=470 comm="syz.0.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.674718][ T471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 30.702993][ T471] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 30.712633][ T36] audit: type=1400 audit(1789141308.470:2192): avc: denied { read write } for pid=470 comm="syz.0.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.714659][ T471] audit: backlog limit exceeded [ 30.737997][ T36] audit: type=1400 audit(1789141308.470:2193): avc: denied { map } for pid=470 comm="syz.0.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.752091][ T471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 30.766943][ T36] audit: type=1400 audit(1789141308.470:2194): avc: denied { read write } for pid=470 comm="syz.0.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.772902][ T471] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 31.112582][ T537] tipc: MTU too low for tipc bearer [ 31.782415][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 31.823073][ T582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 31.969345][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.997740][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 32.012403][ T312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.017502][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.038238][ T10] usb 2-1: Product: syz [ 32.042501][ T10] usb 2-1: Manufacturer: syz [ 32.047124][ T10] usb 2-1: SerialNumber: syz [ 32.065180][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 32.071135][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 32.172425][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 32.204549][ T312] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 32.222391][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.230588][ T312] usb 4-1: Product: syz [ 32.234837][ T312] usb 4-1: Manufacturer: syz [ 32.240692][ T312] usb 4-1: SerialNumber: syz [ 32.402457][ T466] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.526606][ T312] usb 4-1: unit 0 not found! [ 32.534018][ T398] usb 2-1: USB disconnect, device number 8 [ 32.543351][ T312] usb 4-1: USB disconnect, device number 6 [ 32.590469][ T466] usb 1-1: config 0 has no interfaces? [ 32.596055][ T466] usb 1-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 32.610062][ T466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.635134][ T466] usb 1-1: config 0 descriptor?? [ 32.699419][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.868716][ T312] usb 1-1: USB disconnect, device number 3 [ 33.316676][ T606] netlink: 48 bytes leftover after parsing attributes in process `syz.3.76'. [ 33.352604][ T312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 33.490298][ T612] FAULT_INJECTION: forcing a failure. [ 33.490298][ T612] name failslab, interval 1, probability 0, space 0, times 1 [ 33.518272][ T612] CPU: 1 UID: 0 PID: 612 Comm: syz.0.78 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 33.518306][ T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.518317][ T612] Call Trace: [ 33.518324][ T612] [ 33.518331][ T612] __dump_stack+0x21/0x30 [ 33.518370][ T612] dump_stack_lvl+0x140/0x1c0 [ 33.518395][ T612] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.518423][ T612] ? __kasan_check_write+0x18/0x20 [ 33.518445][ T612] ? proc_fail_nth_write+0x184/0x220 [ 33.518474][ T612] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 33.518502][ T612] dump_stack+0x19/0x20 [ 33.518527][ T612] should_fail_ex+0x3c2/0x510 [ 33.518552][ T612] should_failslab+0xac/0x100 [ 33.518577][ T612] kmem_cache_alloc_noprof+0x42/0x410 [ 33.518599][ T612] ? getname_flags+0xcc/0x6b0 [ 33.518621][ T612] ? __cfi_vfs_write+0x10/0x10 [ 33.518643][ T612] getname_flags+0xcc/0x6b0 [ 33.518665][ T612] getname+0x1b/0x30 [ 33.518686][ T612] do_sys_openat2+0xda/0x1d0 [ 33.518713][ T612] ? fput+0x1a4/0x230 [ 33.518738][ T612] ? do_sys_open+0x100/0x100 [ 33.518765][ T612] ? ksys_write+0x1f3/0x260 [ 33.518786][ T612] ? __cfi_ksys_write+0x10/0x10 [ 33.518808][ T612] __x64_sys_openat+0x13a/0x170 [ 33.518836][ T612] x64_sys_call+0xe69/0x2ee0 [ 33.518855][ T612] do_syscall_64+0x57/0xf0 [ 33.518874][ T612] ? clear_bhb_loop+0x50/0xa0 [ 33.518898][ T612] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.518921][ T612] RIP: 0033:0x7feac655e98e [ 33.518938][ T612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.518955][ T612] RSP: 002b:00007feac73e6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.518979][ T612] RAX: ffffffffffffffda RBX: 00007feac73e76c0 RCX: 00007feac655e98e [ 33.518993][ T612] RDX: 0000000000000002 RSI: 00007feac73e6f90 RDI: ffffffffffffff9c [ 33.519006][ T612] RBP: 00007feac73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.519019][ T612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.519031][ T612] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 33.519048][ T612] [ 33.746448][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 33.756288][ T312] usb 2-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 33.766360][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.776539][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 33.787622][ T312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 33.797928][ T312] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.817170][ T312] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 33.826285][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.834319][ T312] usb 2-1: Product: syz [ 33.838506][ T312] usb 2-1: Manufacturer: syz [ 33.843154][ T312] usb 2-1: SerialNumber: syz [ 33.873596][ T603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.079221][ T618] FAULT_INJECTION: forcing a failure. [ 34.079221][ T618] name failslab, interval 1, probability 0, space 0, times 0 [ 34.136116][ T618] CPU: 1 UID: 0 PID: 618 Comm: syz.0.80 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 34.136152][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.136168][ T618] Call Trace: [ 34.136175][ T618] [ 34.136183][ T618] __dump_stack+0x21/0x30 [ 34.136217][ T618] dump_stack_lvl+0x140/0x1c0 [ 34.136244][ T618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.136272][ T618] ? cred_has_capability+0x296/0x3a0 [ 34.136297][ T618] dump_stack+0x19/0x20 [ 34.136326][ T618] should_fail_ex+0x3c2/0x510 [ 34.136351][ T618] should_failslab+0xac/0x100 [ 34.136376][ T618] kmem_cache_alloc_noprof+0x42/0x410 [ 34.136396][ T618] ? create_new_namespaces+0x48/0x6f0 [ 34.136425][ T618] create_new_namespaces+0x48/0x6f0 [ 34.136452][ T618] ? ns_capable+0x90/0xf0 [ 34.136470][ T618] unshare_nsproxy_namespaces+0x124/0x180 [ 34.136499][ T618] ksys_unshare+0x4f9/0x920 [ 34.136526][ T618] ? fput+0x1a4/0x230 [ 34.136554][ T618] ? __cfi_ksys_unshare+0x10/0x10 [ 34.136580][ T618] ? __kasan_check_write+0x18/0x20 [ 34.136601][ T618] __x64_sys_unshare+0x3c/0x50 [ 34.136626][ T618] x64_sys_call+0x2998/0x2ee0 [ 34.136644][ T618] do_syscall_64+0x57/0xf0 [ 34.136662][ T618] ? clear_bhb_loop+0x50/0xa0 [ 34.136688][ T618] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.136712][ T618] RIP: 0033:0x7feac659e159 [ 34.136730][ T618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.136746][ T618] RSP: 002b:00007feac73e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 34.136768][ T618] RAX: ffffffffffffffda RBX: 00007feac6825fa0 RCX: 00007feac659e159 [ 34.136783][ T618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 34.136795][ T618] RBP: 00007feac663503b R08: 0000000000000000 R09: 0000000000000000 [ 34.136808][ T618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.136820][ T618] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 34.136836][ T618] [ 34.519178][ T312] usb 2-1: MIDIStreaming interface descriptor not found [ 34.532313][ T312] usb 2-1: USB disconnect, device number 9 [ 34.712208][ T349] udevd[349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.882401][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.042399][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 35.070647][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 35.086296][ T10] usb 4-1: config 0 has no interface number 0 [ 35.103954][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 35.119763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.133810][ T10] usb 4-1: Product: syz [ 35.138112][ T10] usb 4-1: Manufacturer: syz [ 35.162472][ T10] usb 4-1: SerialNumber: syz [ 35.179624][ T10] usb 4-1: config 0 descriptor?? [ 35.190860][ T10] smsc95xx v2.0.0 [ 35.601868][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 35.622386][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.653129][ T36] kauditd_printk_skb: 1567 callbacks suppressed [ 35.653145][ T36] audit: type=1400 audit(1789141313.480:3524): avc: denied { ioctl } for pid=619 comm="syz.3.81" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.692449][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 35.709858][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 35.766363][ T36] audit: type=1400 audit(1789141313.590:3525): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.811285][ T36] audit: type=1400 audit(1789141313.620:3526): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.856736][ T36] audit: type=1400 audit(1789141313.620:3527): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.902439][ T36] audit: type=1400 audit(1789141313.680:3528): avc: denied { read write } for pid=635 comm="syz.1.84" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.928901][ T36] audit: type=1400 audit(1789141313.680:3529): avc: denied { read write open } for pid=635 comm="syz.1.84" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.954347][ T36] audit: type=1400 audit(1789141313.680:3530): avc: denied { ioctl } for pid=635 comm="syz.1.84" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.984573][ T36] audit: type=1400 audit(1789141313.680:3531): avc: denied { ioctl } for pid=635 comm="syz.1.84" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.012407][ T36] audit: type=1400 audit(1789141313.680:3532): avc: denied { ioctl } for pid=635 comm="syz.1.84" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.041244][ T36] audit: type=1400 audit(1789141313.680:3533): avc: denied { ioctl } for pid=635 comm="syz.1.84" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.132428][ T312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.305580][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.326956][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 36.339699][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.351109][ T312] usb 2-1: Product: syz [ 36.356528][ T312] usb 2-1: Manufacturer: syz [ 36.362405][ T312] usb 2-1: SerialNumber: syz [ 36.384867][ T312] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 36.391984][ T312] cdc_wdm 2-1:1.0: Unknown control protocol [ 36.814007][ T66] usb 2-1: USB disconnect, device number 10 [ 37.395257][ T66] usb 4-1: USB disconnect, device number 7 [ 37.645951][ T576] syz.2.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 37.689887][ T576] CPU: 1 UID: 0 PID: 576 Comm: syz.2.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 37.689920][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.689932][ T576] Call Trace: [ 37.689939][ T576] [ 37.689946][ T576] __dump_stack+0x21/0x30 [ 37.689976][ T576] dump_stack_lvl+0x140/0x1c0 [ 37.690010][ T576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.690034][ T576] ? ___ratelimit+0x41c/0x5c0 [ 37.690055][ T576] ? __kasan_check_write+0x18/0x20 [ 37.690077][ T576] dump_stack+0x19/0x20 [ 37.690102][ T576] dump_header+0xd9/0x460 [ 37.690129][ T576] oom_kill_process+0x35d/0x640 [ 37.690151][ T576] out_of_memory+0x5d1/0xa20 [ 37.690172][ T576] ? __cfi_out_of_memory+0x10/0x10 [ 37.690191][ T576] ? mutex_lock_killable+0x97/0x1d0 [ 37.690213][ T576] ? __cfi_mutex_lock_killable+0x10/0x10 [ 37.690237][ T576] mem_cgroup_out_of_memory+0x2c5/0x390 [ 37.690257][ T576] ? css_next_descendant_pre+0x1ec/0x210 [ 37.690279][ T576] ? __kasan_check_write+0x18/0x20 [ 37.690297][ T576] ? drain_obj_stock+0xec0/0xec0 [ 37.690318][ T576] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 37.690339][ T576] try_charge_memcg+0x925/0xe10 [ 37.690364][ T576] ? static_key_count+0x45/0x70 [ 37.690388][ T576] ? lruvec_init+0x201/0x280 [ 37.690410][ T576] ? __cfi_try_charge_memcg+0x10/0x10 [ 37.690438][ T576] ? __alloc_pages_noprof+0x35a/0x7e0 [ 37.690467][ T576] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.690494][ T576] __mem_cgroup_charge+0xfc/0x420 [ 37.690512][ T576] ? folio_add_lru+0x116/0x400 [ 37.690534][ T576] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 37.690554][ T576] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 37.690579][ T576] ? shmem_replace_folio+0x9b0/0x9b0 [ 37.690603][ T576] ? shmem_huge_global_enabled+0x2da/0x360 [ 37.690634][ T576] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 37.690656][ T576] ? __kasan_check_write+0x18/0x20 [ 37.690673][ T576] ? _raw_spin_lock+0x92/0x120 [ 37.690690][ T576] shmem_get_folio_gfp+0x5cd/0x12e0 [ 37.690713][ T576] ? shmem_get_folio+0xc0/0xc0 [ 37.690732][ T576] ? follow_page_pte+0x8fb/0xba0 [ 37.690757][ T576] ? inode_to_bdi+0x6d/0x100 [ 37.690783][ T576] shmem_write_begin+0xf4/0x260 [ 37.690808][ T576] generic_perform_write+0x32c/0x970 [ 37.690835][ T576] ? __cfi_generic_perform_write+0x10/0x10 [ 37.690859][ T576] ? generic_write_checks_count+0x426/0x540 [ 37.690884][ T576] ? file_update_time+0xa3/0x210 [ 37.690911][ T576] shmem_file_write_iter+0x105/0x130 [ 37.690935][ T576] __kernel_write_iter+0x462/0x900 [ 37.690955][ T576] ? __cfi___kernel_write_iter+0x10/0x10 [ 37.690973][ T576] ? get_dump_page+0x165/0x220 [ 37.691007][ T576] ? __asan_memset+0x39/0x50 [ 37.691026][ T576] ? iov_iter_bvec+0xc0/0x180 [ 37.691054][ T576] dump_user_range+0xb8b/0xe60 [ 37.691077][ T576] ? __cfi_dump_user_range+0x10/0x10 [ 37.691099][ T576] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 37.691129][ T576] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 37.691158][ T576] ? elf_core_dump+0x23cf/0x3840 [ 37.691184][ T576] elf_core_dump+0x2d61/0x3840 [ 37.691211][ T576] ? __cfi_elf_core_dump+0x10/0x10 [ 37.691233][ T576] ? mas_next_slot+0xf01/0xfd0 [ 37.691262][ T576] ? dump_interrupted+0xf0/0xf0 [ 37.691281][ T576] ? 0xffffffffff600000 [ 37.691295][ T576] ? put_dmabuf_info+0xf5/0x200 [ 37.691322][ T576] do_coredump+0x20d2/0x3050 [ 37.691343][ T576] ? __cfi_do_coredump+0x10/0x10 [ 37.691362][ T576] ? asm_exc_page_fault+0x2b/0x30 [ 37.691392][ T576] ? __kasan_slab_free+0x6a/0x80 [ 37.691416][ T576] ? get_signal+0xa2a/0x1490 [ 37.691442][ T576] get_signal+0x11bf/0x1490 [ 37.691469][ T576] arch_do_signal_or_restart+0xbc/0x700 [ 37.691487][ T576] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 37.691506][ T576] ? __kasan_check_read+0x15/0x20 [ 37.691525][ T576] irqentry_exit_to_user_mode+0x4d/0xb0 [ 37.691549][ T576] irqentry_exit+0x16/0x60 [ 37.691574][ T576] exc_page_fault+0x65/0xc0 [ 37.691598][ T576] asm_exc_page_fault+0x2b/0x30 [ 37.691619][ T576] RIP: 0033:0x7f1d67d9e161 [ 37.691636][ T576] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 37.691651][ T576] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 37.691669][ T576] RAX: 0000000000000000 RBX: 00007f1d68026090 RCX: 00007f1d67d9e159 [ 37.691683][ T576] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000068411 [ 37.691695][ T576] RBP: 00007f1d67e3503b R08: 0000000000000000 R09: 0000000000000000 [ 37.691707][ T576] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 37.691719][ T576] R13: 00007f1d68026128 R14: 00007f1d68026090 R15: 00007fff49316588 [ 37.691734][ T576] [ 37.691742][ T576] memory: usage 307200kB, limit 307200kB, failcnt 20860 [ 37.732533][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 37.813578][ T576] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 37.855574][ T647] FAULT_INJECTION: forcing a failure. [ 37.855574][ T647] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.872176][ T576] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 37.892432][ T647] CPU: 0 UID: 0 PID: 647 Comm: syz.0.90 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 37.892463][ T647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.892473][ T647] Call Trace: [ 37.892479][ T647] [ 37.892486][ T647] __dump_stack+0x21/0x30 [ 37.892515][ T647] dump_stack_lvl+0x140/0x1c0 [ 37.892538][ T647] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.892563][ T647] dump_stack+0x19/0x20 [ 37.892585][ T647] should_fail_ex+0x3c2/0x510 [ 37.892607][ T647] should_fail+0xf/0x20 [ 37.892626][ T647] should_fail_usercopy+0x1e/0x30 [ 37.892649][ T647] strncpy_from_user+0x29/0x280 [ 37.892670][ T647] getname_flags+0x106/0x6b0 [ 37.892691][ T647] getname+0x1b/0x30 [ 37.892710][ T647] do_sys_openat2+0xda/0x1d0 [ 37.892734][ T647] ? fput+0x1a4/0x230 [ 37.892755][ T647] ? do_sys_open+0x100/0x100 [ 37.892778][ T647] ? ksys_write+0x1f3/0x260 [ 37.892797][ T647] ? __cfi_ksys_write+0x10/0x10 [ 37.892816][ T647] __x64_sys_openat+0x13a/0x170 [ 37.892841][ T647] x64_sys_call+0xe69/0x2ee0 [ 37.892867][ T647] do_syscall_64+0x57/0xf0 [ 37.892884][ T647] ? clear_bhb_loop+0x50/0xa0 [ 37.892912][ T647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.892932][ T647] RIP: 0033:0x7feac655e98e [ 37.892948][ T647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 37.892962][ T647] RSP: 002b:00007feac73e6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.892982][ T647] RAX: ffffffffffffffda RBX: 00007feac73e76c0 RCX: 00007feac655e98e [ 37.892996][ T647] RDX: 0000000000000002 RSI: 00007feac73e6f90 RDI: ffffffffffffff9c [ 37.893015][ T647] RBP: 00007feac73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.893027][ T647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.893044][ T647] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 37.893059][ T647] [ 38.052397][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 38.056392][ T576] Memory cgroup stats for [ 38.071051][ T10] usb 2-1: config 87 has an invalid interface number: 229 but max is 1 [ 38.071632][ T576] /syz2 [ 38.082476][ T10] usb 2-1: config 87 has no interface number 1 [ 38.085487][ T576] : [ 38.109590][ T10] usb 2-1: config 87 interface 229 has no altsetting 0 [ 38.171288][ T576] cache 314441728 [ 38.178609][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 38.205785][ T576] rss 53248 [ 38.248391][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.304214][ T651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.92'. [ 38.310490][ T10] usb 2-1: Product: syz [ 38.335678][ T576] rss_huge 0 [ 38.348238][ T10] usb 2-1: Manufacturer: syz [ 38.429327][ T576] shmem 314392576 [ 38.446830][ T10] usb 2-1: SerialNumber: syz [ 38.459300][ T576] mapped_file 0 [ 38.492854][ T576] dirty 0 [ 38.495864][ T576] writeback 0 [ 38.499396][ T576] workingset_refault_anon 39 [ 38.507052][ T576] workingset_refault_file 2478 [ 38.511941][ T576] swap 127918080 [ 38.516802][ T576] swapcached 77824 [ 38.520566][ T576] pgpgin 137824 [ 38.526404][ T576] pgpgout 61024 [ 38.529923][ T576] pgfault 9813 [ 38.534369][ T576] pgmajfault 116 [ 38.539538][ T576] inactive_anon 297218048 [ 38.547329][ T576] active_anon 17305600 [ 38.557502][ T576] inactive_file 0 [ 38.561310][ T576] active_file 49152 [ 38.566583][ T576] unevictable 0 [ 38.570093][ T576] hierarchical_memory_limit 314572800 [ 38.575614][ T576] hierarchical_memsw_limit 9223372036854771712 [ 38.581825][ T576] total_cache 314441728 [ 38.586094][ T576] total_rss 53248 [ 38.589789][ T576] total_rss_huge 0 [ 38.593630][ T576] total_shmem 314392576 [ 38.597870][ T576] total_mapped_file 0 [ 38.601881][ T576] total_dirty 0 [ 38.605643][ T576] total_writeback 0 [ 38.609515][ T576] total_workingset_refault_anon 39 [ 38.614749][ T576] total_workingset_refault_file 2478 [ 38.620062][ T576] total_swap 127918080 [ 38.624184][ T576] total_swapcached 77824 [ 38.628650][ T576] total_pgpgin 137824 [ 38.632928][ T576] total_pgpgout 61024 [ 38.636992][ T576] total_pgfault 9813 [ 38.640938][ T576] total_pgmajfault 116 [ 38.646662][ T576] total_inactive_anon 297218048 [ 38.651939][ T576] total_active_anon 17305600 [ 38.657144][ T576] total_inactive_file 0 [ 38.661432][ T576] total_active_file 49152 [ 38.669990][ T576] total_unevictable 0 [ 38.674169][ T576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=586,uid=0 [ 38.692711][ T10] usb 2-1: bad CDC descriptors [ 38.703319][ T10] usb 2-1: USB disconnect, device number 11 [ 38.723206][ T576] Memory cgroup out of memory: Killed process 586 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:21992kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 38.770526][ T643] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 38.824877][ T643] CPU: 1 UID: 0 PID: 643 Comm: syz-executor Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 38.824912][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.824924][ T643] Call Trace: [ 38.824930][ T643] [ 38.824938][ T643] __dump_stack+0x21/0x30 [ 38.824971][ T643] dump_stack_lvl+0x140/0x1c0 [ 38.825009][ T643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.825035][ T643] ? ___ratelimit+0x41c/0x5c0 [ 38.825057][ T643] ? __kasan_check_write+0x18/0x20 [ 38.825080][ T643] dump_stack+0x19/0x20 [ 38.825106][ T643] dump_header+0xd9/0x460 [ 38.825132][ T643] oom_kill_process+0x35d/0x640 [ 38.825156][ T643] out_of_memory+0x5d1/0xa20 [ 38.825179][ T643] ? __cfi_out_of_memory+0x10/0x10 [ 38.825201][ T643] ? mutex_lock_killable+0x115/0x1d0 [ 38.825226][ T643] ? __cfi_mutex_lock_killable+0x10/0x10 [ 38.825252][ T643] mem_cgroup_out_of_memory+0x2c5/0x390 [ 38.825276][ T643] ? css_next_descendant_pre+0x1ec/0x210 [ 38.825301][ T643] ? __kasan_check_write+0x18/0x20 [ 38.825322][ T643] ? drain_obj_stock+0xec0/0xec0 [ 38.825346][ T643] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 38.825368][ T643] try_charge_memcg+0x925/0xe10 [ 38.825394][ T643] ? static_key_count+0x45/0x70 [ 38.825420][ T643] ? lruvec_init+0x201/0x280 [ 38.825443][ T643] ? __cfi_try_charge_memcg+0x10/0x10 [ 38.825470][ T643] ? __alloc_pages_noprof+0x35a/0x7e0 [ 38.825498][ T643] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.825527][ T643] __mem_cgroup_charge+0xfc/0x420 [ 38.825546][ T643] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 38.825566][ T643] ? folio_add_lru+0x116/0x400 [ 38.825591][ T643] ? vma_data_pages+0x105/0x140 [ 38.825611][ T643] folio_prealloc+0x67/0x220 [ 38.825636][ T643] do_wp_page+0x187e/0x2e80 [ 38.825662][ T643] ? folio_put+0x90/0x90 [ 38.825684][ T643] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.825702][ T643] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 38.825724][ T643] handle_mm_fault+0x1017/0x1ba0 [ 38.825751][ T643] ? __cfi_handle_mm_fault+0x10/0x10 [ 38.825773][ T643] ? lock_vma_under_rcu+0x4cf/0x590 [ 38.825800][ T643] ? __se_sys_rt_sigprocmask+0x230/0x2a0 [ 38.825831][ T643] do_user_addr_fault+0x951/0x1230 [ 38.825862][ T643] ? __kasan_check_read+0x15/0x20 [ 38.825883][ T643] exc_page_fault+0x58/0xc0 [ 38.825907][ T643] asm_exc_page_fault+0x2b/0x30 [ 38.825929][ T643] RIP: 0033:0x7f1d67d97af0 [ 38.825948][ T643] Code: 0d fc ff 8b 00 f6 c4 80 75 d8 48 89 df e8 68 0d fc ff 48 8b 80 88 00 00 00 48 c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 eb b8 <48> 83 05 48 4c dc 00 04 48 8b 05 29 5a dc 00 66 0f ef c0 48 c7 05 [ 38.825964][ T643] RSP: 002b:00007fff493167d0 EFLAGS: 00010246 [ 38.825993][ T643] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1d67d3f7a7 [ 38.826007][ T643] RDX: 0000000000000000 RSI: 00007fff493167a0 RDI: 0000000000000002 [ 38.826019][ T643] RBP: 00007fff4931692c R08: 00007f1d68b58060 R09: 0000000000000000 [ 38.826033][ T643] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 38.826045][ T643] R13: 00000000000927c0 R14: 00000000000090f1 R15: 00007fff49316980 [ 38.826062][ T643] [ 38.826070][ T643] memory: usage 299000kB, limit 307200kB, failcnt 22029 [ 39.140965][ T643] memory+swap: usage 423616kB, limit 9007199254740988kB, failcnt 0 [ 39.162830][ T643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 39.176252][ T643] Memory cgroup stats for /syz2: [ 39.176400][ T643] cache 314236928 [ 39.186805][ T643] rss 65536 [ 39.212281][ T643] rss_huge 0 [ 39.215716][ T643] shmem 305897472 [ 39.219379][ T643] mapped_file 8192000 [ 39.223440][ T643] dirty 0 [ 39.256572][ T643] writeback 0 [ 39.259922][ T643] workingset_refault_anon 44 [ 39.264620][ T88] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.302383][ T643] workingset_refault_file 5006 [ 39.331627][ T643] swap 119242752 [ 39.349717][ T643] swapcached 98304 [ 39.357531][ T643] pgpgin 142882 [ 39.361021][ T643] pgpgout 66127 [ 39.364557][ T643] pgfault 10026 [ 39.368030][ T643] pgmajfault 124 [ 39.371766][ T643] inactive_anon 290349056 [ 39.376147][ T643] active_anon 15671296 [ 39.380225][ T643] inactive_file 3416064 [ 39.384415][ T643] active_file 4923392 [ 39.388407][ T643] unevictable 0 [ 39.392397][ T643] hierarchical_memory_limit 314572800 [ 39.397967][ T643] hierarchical_memsw_limit 9223372036854771712 [ 39.434132][ T88] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.453125][ T643] total_cache 314236928 [ 39.462625][ T88] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 39.470840][ T643] total_rss 65536 [ 39.480873][ T88] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.486026][ T643] total_rss_huge 0 [ 39.494027][ T88] usb 1-1: Product: syz [ 39.501561][ T673] FAULT_INJECTION: forcing a failure. [ 39.501561][ T673] name failslab, interval 1, probability 0, space 0, times 0 [ 39.504442][ T88] usb 1-1: Manufacturer: syz [ 39.518977][ T88] usb 1-1: SerialNumber: syz [ 39.522421][ T643] total_shmem 305897472 [ 39.524084][ T673] CPU: 1 UID: 0 PID: 673 Comm: syz.3.100 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 39.524112][ T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.524122][ T673] Call Trace: [ 39.524128][ T673] [ 39.524135][ T673] __dump_stack+0x21/0x30 [ 39.524164][ T673] dump_stack_lvl+0x140/0x1c0 [ 39.524188][ T673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.524212][ T673] dump_stack+0x19/0x20 [ 39.524234][ T673] should_fail_ex+0x3c2/0x510 [ 39.524256][ T673] should_failslab+0xac/0x100 [ 39.524278][ T673] kmem_cache_alloc_noprof+0x42/0x410 [ 39.524296][ T673] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 39.524317][ T673] ? alloc_empty_file+0xbf/0x270 [ 39.524349][ T673] ? arch_stack_walk+0x10a/0x170 [ 39.524368][ T673] alloc_empty_file+0xbf/0x270 [ 39.524390][ T673] path_openat+0xf4/0x35a0 [ 39.524412][ T673] ? stack_depot_save_flags+0x38/0x800 [ 39.524436][ T673] ? kasan_save_track+0x4f/0x80 [ 39.524455][ T673] ? kasan_save_track+0x3e/0x80 [ 39.524474][ T673] ? kasan_save_alloc_info+0x3a/0x50 [ 39.524491][ T673] ? __kasan_slab_alloc+0x73/0x90 [ 39.524511][ T673] ? getname+0x1b/0x30 [ 39.524529][ T673] ? do_sys_openat2+0xda/0x1d0 [ 39.524553][ T673] ? __x64_sys_openat+0x13a/0x170 [ 39.524576][ T673] ? x64_sys_call+0xe69/0x2ee0 [ 39.524591][ T673] ? do_syscall_64+0x57/0xf0 [ 39.524610][ T673] ? do_filp_open+0x440/0x440 [ 39.524634][ T673] do_filp_open+0x1f2/0x440 [ 39.524656][ T673] ? __cfi_do_filp_open+0x10/0x10 [ 39.524681][ T673] ? alloc_fd+0x4c1/0x570 [ 39.524702][ T673] do_sys_openat2+0x134/0x1d0 [ 39.524726][ T673] ? fput+0x1a4/0x230 [ 39.524748][ T673] ? do_sys_open+0x100/0x100 [ 39.524771][ T673] ? ksys_write+0x1f3/0x260 [ 39.524789][ T673] ? __cfi_ksys_write+0x10/0x10 [ 39.524808][ T673] __x64_sys_openat+0x13a/0x170 [ 39.524833][ T673] x64_sys_call+0xe69/0x2ee0 [ 39.524849][ T673] do_syscall_64+0x57/0xf0 [ 39.524865][ T673] ? clear_bhb_loop+0x50/0xa0 [ 39.524887][ T673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.524907][ T673] RIP: 0033:0x7f7c34b5e98e [ 39.524923][ T673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.524937][ T673] RSP: 002b:00007f7c335e2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.524958][ T673] RAX: ffffffffffffffda RBX: 00007f7c335e36c0 RCX: 00007f7c34b5e98e [ 39.524971][ T673] RDX: 0000000000000002 RSI: 00007f7c335e2f90 RDI: ffffffffffffff9c [ 39.524984][ T673] RBP: 00007f7c335e3090 R08: 0000000000000000 R09: 0000000000000000 [ 39.524996][ T673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.525007][ T673] R13: 00007f7c34e26038 R14: 00007f7c34e25fa0 R15: 00007fff637bc0a8 [ 39.525021][ T673] [ 39.567391][ T88] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 39.587845][ T643] total_mapped_file 8192000 [ 39.591353][ T88] cdc_wdm 1-1:1.0: Unknown control protocol [ 39.606357][ T643] total_dirty 0 [ 39.833709][ T643] total_writeback 0 [ 39.839373][ T643] total_workingset_refault_anon 44 [ 39.849075][ T643] total_workingset_refault_file 5006 [ 39.854494][ T643] total_swap 119242752 [ 39.858836][ T643] total_swapcached 98304 [ 39.863164][ T643] total_pgpgin 142882 [ 39.867378][ T643] total_pgpgout 66127 [ 39.871424][ T643] total_pgfault 10026 [ 39.875483][ T643] total_pgmajfault 124 [ 39.879620][ T643] total_inactive_anon 290349056 [ 39.885040][ T643] total_active_anon 15671296 [ 39.895527][ T643] total_inactive_file 3416064 [ 39.905700][ T643] total_active_file 4923392 [ 39.915777][ T643] total_unevictable 0 [ 39.924286][ T643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=577,uid=0 [ 39.953254][ T643] Memory cgroup out of memory: Killed process 577 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:22072kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 40.052580][ T398] usb 1-1: USB disconnect, device number 4 [ 40.302406][ T564] syz.2.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 40.397477][ T564] CPU: 0 UID: 0 PID: 564 Comm: syz.2.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 40.397512][ T564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.397524][ T564] Call Trace: [ 40.397530][ T564] [ 40.397538][ T564] __dump_stack+0x21/0x30 [ 40.397570][ T564] dump_stack_lvl+0x140/0x1c0 [ 40.397596][ T564] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.397632][ T564] ? ___ratelimit+0x41c/0x5c0 [ 40.397654][ T564] ? __kasan_check_write+0x18/0x20 [ 40.397675][ T564] dump_stack+0x19/0x20 [ 40.397700][ T564] dump_header+0xd9/0x460 [ 40.397725][ T564] oom_kill_process+0x35d/0x640 [ 40.397750][ T564] out_of_memory+0x5d1/0xa20 [ 40.397772][ T564] ? __cfi_out_of_memory+0x10/0x10 [ 40.397803][ T564] ? mutex_lock_killable+0x115/0x1d0 [ 40.397826][ T564] ? __cfi_mutex_lock_killable+0x10/0x10 [ 40.397850][ T564] mem_cgroup_out_of_memory+0x2c5/0x390 [ 40.397871][ T564] ? css_next_descendant_pre+0x1ec/0x210 [ 40.397894][ T564] ? __kasan_check_write+0x18/0x20 [ 40.397913][ T564] ? drain_obj_stock+0xec0/0xec0 [ 40.397935][ T564] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 40.397956][ T564] try_charge_memcg+0x925/0xe10 [ 40.397980][ T564] ? static_key_count+0x45/0x70 [ 40.398004][ T564] ? lruvec_init+0x201/0x280 [ 40.398025][ T564] ? __cfi_try_charge_memcg+0x10/0x10 [ 40.398052][ T564] ? __alloc_pages_noprof+0x35a/0x7e0 [ 40.398081][ T564] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.398109][ T564] __mem_cgroup_charge+0xfc/0x420 [ 40.398128][ T564] ? do_pte_missing+0x3894/0x4440 [ 40.398153][ T564] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 40.398174][ T564] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 40.398201][ T564] ? shmem_replace_folio+0x9b0/0x9b0 [ 40.398224][ T564] ? shmem_huge_global_enabled+0x2da/0x360 [ 40.398247][ T564] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 40.398270][ T564] ? __kasan_check_write+0x18/0x20 [ 40.398288][ T564] ? _raw_spin_lock+0x92/0x120 [ 40.398305][ T564] shmem_get_folio_gfp+0x5cd/0x12e0 [ 40.398328][ T564] ? shmem_get_folio+0xc0/0xc0 [ 40.398349][ T564] ? __kasan_check_write+0x18/0x20 [ 40.398368][ T564] ? inode_to_bdi+0x6d/0x100 [ 40.398394][ T564] shmem_write_begin+0xf4/0x260 [ 40.398419][ T564] generic_perform_write+0x32c/0x970 [ 40.398445][ T564] ? inode_update_timestamps+0x4d1/0x6e0 [ 40.398474][ T564] ? __cfi_generic_perform_write+0x10/0x10 [ 40.398499][ T564] ? generic_write_checks_count+0x426/0x540 [ 40.398525][ T564] ? mnt_get_write_access_file+0x1af/0x3b0 [ 40.398553][ T564] ? mnt_put_write_access_file+0xc2/0x100 [ 40.398579][ T564] ? file_update_time+0x1de/0x210 [ 40.398607][ T564] shmem_file_write_iter+0x105/0x130 [ 40.398633][ T564] __kernel_write_iter+0x462/0x900 [ 40.398655][ T564] ? __cfi___kernel_write_iter+0x10/0x10 [ 40.398675][ T564] ? get_dump_page+0x165/0x220 [ 40.398701][ T564] ? __asan_memset+0x39/0x50 [ 40.398720][ T564] ? iov_iter_bvec+0xc0/0x180 [ 40.398748][ T564] dump_user_range+0xb8b/0xe60 [ 40.398771][ T564] ? __cfi_dump_user_range+0x10/0x10 [ 40.398803][ T564] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 40.398831][ T564] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 40.398860][ T564] ? elf_core_dump+0x23cf/0x3840 [ 40.398885][ T564] elf_core_dump+0x2d61/0x3840 [ 40.398912][ T564] ? __cfi_elf_core_dump+0x10/0x10 [ 40.398935][ T564] ? mas_next_slot+0xf01/0xfd0 [ 40.398966][ T564] ? dump_interrupted+0xf0/0xf0 [ 40.398986][ T564] ? 0xffffffffff600000 [ 40.399001][ T564] ? put_dmabuf_info+0xf5/0x200 [ 40.399030][ T564] do_coredump+0x20d2/0x3050 [ 40.399052][ T564] ? __cfi_do_coredump+0x10/0x10 [ 40.399071][ T564] ? asm_exc_page_fault+0x2b/0x30 [ 40.399101][ T564] ? __kasan_slab_free+0x6a/0x80 [ 40.399125][ T564] ? get_signal+0xa2a/0x1490 [ 40.399151][ T564] get_signal+0x11bf/0x1490 [ 40.399179][ T564] arch_do_signal_or_restart+0xbc/0x700 [ 40.399199][ T564] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 40.399219][ T564] ? __kasan_check_read+0x15/0x20 [ 40.399239][ T564] irqentry_exit_to_user_mode+0x4d/0xb0 [ 40.399265][ T564] irqentry_exit+0x16/0x60 [ 40.399287][ T564] exc_page_fault+0x65/0xc0 [ 40.399311][ T564] asm_exc_page_fault+0x2b/0x30 [ 40.399332][ T564] RIP: 0033:0x7f1d67d9e161 [ 40.399349][ T564] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 40.399365][ T564] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 40.399384][ T564] RAX: 0000000000000000 RBX: 00007f1d68026090 RCX: 00007f1d67d9e159 [ 40.399398][ T564] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000068411 [ 40.399411][ T564] RBP: 00007f1d67e3503b R08: 0000000000000000 R09: 0000000000000000 [ 40.399424][ T564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.399436][ T564] R13: 00007f1d68026128 R14: 00007f1d68026090 R15: 00007fff49316588 [ 40.399453][ T564] [ 40.399461][ T564] memory: usage 304776kB, limit 307200kB, failcnt 26628 [ 40.442399][ T88] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.712297][ T564] memory+swap: usage 426204kB, limit 9007199254740988kB, failcnt 0 [ 40.872555][ T36] kauditd_printk_skb: 334 callbacks suppressed [ 40.872573][ T36] audit: type=1400 audit(1789141318.540:3868): avc: denied { mounton } for pid=690 comm="syz.1.106" path="/16/config" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.872885][ T564] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 40.891117][ T36] audit: type=1400 audit(1789141318.540:3869): avc: denied { read write } for pid=694 comm="syz.0.107" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.960752][ T564] Memory cgroup stats for /syz2: [ 40.967452][ T564] cache 313106432 [ 40.976599][ T564] rss 61440 [ 40.980285][ T564] rss_huge 0 [ 40.984560][ T36] audit: type=1400 audit(1789141318.540:3870): avc: denied { read write open } for pid=694 comm="syz.0.107" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.009828][ T88] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.027914][ T88] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.044185][ T564] shmem 310325248 [ 41.047867][ T564] mapped_file 2543616 [ 41.051869][ T564] dirty 8192 [ 41.075087][ T88] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.093886][ T88] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.103766][ T36] audit: type=1400 audit(1789141318.540:3871): avc: denied { ioctl } for pid=686 comm="syz.3.105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.129123][ T88] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.144272][ T88] usb 4-1: config 0 descriptor?? [ 41.162386][ T36] audit: type=1400 audit(1789141318.540:3872): avc: denied { ioctl } for pid=686 comm="syz.3.105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.241163][ T36] audit: type=1400 audit(1789141318.550:3873): avc: denied { ioctl } for pid=686 comm="syz.3.105" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.268333][ T707] FAULT_INJECTION: forcing a failure. [ 41.268333][ T707] name failslab, interval 1, probability 0, space 0, times 0 [ 41.272124][ T704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 41.302388][ T707] CPU: 1 UID: 0 PID: 707 Comm: syz.1.110 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 41.302421][ T707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.302433][ T707] Call Trace: [ 41.302439][ T707] [ 41.302448][ T707] __dump_stack+0x21/0x30 [ 41.302478][ T707] dump_stack_lvl+0x140/0x1c0 [ 41.302509][ T707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.302538][ T707] dump_stack+0x19/0x20 [ 41.302562][ T707] should_fail_ex+0x3c2/0x510 [ 41.302586][ T707] should_failslab+0xac/0x100 [ 41.302608][ T707] kmem_cache_alloc_noprof+0x42/0x410 [ 41.302628][ T707] ? security_file_alloc+0x49/0x220 [ 41.302646][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 41.302665][ T707] security_file_alloc+0x49/0x220 [ 41.302685][ T707] init_file+0x9e/0x210 [ 41.302712][ T707] alloc_empty_file+0xd9/0x270 [ 41.302738][ T707] path_openat+0xf4/0x35a0 [ 41.302762][ T707] ? stack_depot_save_flags+0x38/0x800 [ 41.302786][ T707] ? kasan_save_track+0x4f/0x80 [ 41.302807][ T707] ? kasan_save_track+0x3e/0x80 [ 41.302827][ T707] ? kasan_save_alloc_info+0x3a/0x50 [ 41.302844][ T707] ? __kasan_slab_alloc+0x73/0x90 [ 41.302867][ T707] ? getname+0x1b/0x30 [ 41.302888][ T707] ? do_sys_openat2+0xda/0x1d0 [ 41.302916][ T707] ? __x64_sys_openat+0x13a/0x170 [ 41.302942][ T707] ? x64_sys_call+0xe69/0x2ee0 [ 41.302968][ T707] ? do_syscall_64+0x57/0xf0 [ 41.302987][ T707] ? do_filp_open+0x440/0x440 [ 41.303012][ T707] do_filp_open+0x1f2/0x440 [ 41.303036][ T707] ? __cfi_do_filp_open+0x10/0x10 [ 41.303065][ T707] ? alloc_fd+0x4c1/0x570 [ 41.303089][ T707] do_sys_openat2+0x134/0x1d0 [ 41.303116][ T707] ? fput+0x1a4/0x230 [ 41.303139][ T707] ? do_sys_open+0x100/0x100 [ 41.303163][ T707] ? ksys_write+0x1f3/0x260 [ 41.303182][ T707] ? __cfi_ksys_write+0x10/0x10 [ 41.303202][ T707] __x64_sys_openat+0x13a/0x170 [ 41.303229][ T707] x64_sys_call+0xe69/0x2ee0 [ 41.303248][ T707] do_syscall_64+0x57/0xf0 [ 41.303265][ T707] ? clear_bhb_loop+0x50/0xa0 [ 41.303290][ T707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.303312][ T707] RIP: 0033:0x7f2902f5e98e [ 41.303329][ T707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.303345][ T707] RSP: 002b:00007f2903ee7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.303368][ T707] RAX: ffffffffffffffda RBX: 00007f2903ee86c0 RCX: 00007f2902f5e98e [ 41.303382][ T707] RDX: 0000000000000002 RSI: 00007f2903ee7f90 RDI: ffffffffffffff9c [ 41.303396][ T707] RBP: 00007f2903ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 41.303409][ T707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.303420][ T707] R13: 00007f2903226038 R14: 00007f2903225fa0 R15: 00007fff40040998 [ 41.303437][ T707] [ 41.305047][ T707] audit: audit_backlog=65 > audit_backlog_limit=64 [ 41.346324][ T704] audit: audit_lost=82 audit_rate_limit=0 audit_backlog_limit=64 [ 41.350672][ T36] audit: type=1400 audit(1789141318.550:3874): avc: denied { create } for pid=643 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.542419][ T564] writeback 0 [ 41.685193][ T564] workingset_refault_anon 45 [ 41.690195][ T564] workingset_refault_file 5798 [ 41.706410][ T564] swap 125689856 [ 41.718906][ T564] swapcached 81920 [ 41.732256][ T564] pgpgin 152972 [ 41.738190][ T564] pgpgout 76500 [ 41.741708][ T564] pgfault 10468 [ 41.746206][ T564] pgmajfault 134 [ 41.749906][ T564] inactive_anon 163422208 [ 41.755440][ T564] active_anon 146747392 [ 41.759671][ T564] inactive_file 0 [ 41.769236][ T564] active_file 2781184 [ 41.812142][ T564] unevictable 0 [ 41.860604][ T564] hierarchical_memory_limit 314572800 [ 41.888466][ T564] hierarchical_memsw_limit 9223372036854771712 [ 41.895439][ T564] total_cache 313106432 [ 41.899628][ T564] total_rss 61440 [ 41.903296][ T564] total_rss_huge 0 [ 41.907164][ T564] total_shmem 310325248 [ 41.911331][ T564] total_mapped_file 2543616 [ 41.916312][ T564] total_dirty 8192 [ 41.920061][ T564] total_writeback 0 [ 41.923911][ T564] total_workingset_refault_anon 45 [ 41.929040][ T564] total_workingset_refault_file 5798 [ 41.934464][ T564] total_swap 125689856 [ 41.938722][ T564] total_swapcached 81920 [ 41.943177][ T564] total_pgpgin 152972 [ 41.947168][ T564] total_pgpgout 76500 [ 41.951230][ T564] total_pgfault 10468 [ 41.955246][ T564] total_pgmajfault 134 [ 41.959330][ T564] total_inactive_anon 163422208 [ 41.964217][ T564] total_active_anon 146747392 [ 41.969009][ T564] total_inactive_file 0 [ 41.973207][ T564] total_active_file 2781184 [ 41.977722][ T564] total_unevictable 0 [ 41.981704][ T564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=593,uid=0 [ 41.996634][ T564] Memory cgroup out of memory: Killed process 593 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 42.089827][ T584] syz.2.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.092377][ T312] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.118239][ T584] CPU: 0 UID: 0 PID: 584 Comm: syz.2.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 42.118274][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.118288][ T584] Call Trace: [ 42.118294][ T584] [ 42.118311][ T584] __dump_stack+0x21/0x30 [ 42.118344][ T584] dump_stack_lvl+0x140/0x1c0 [ 42.118372][ T584] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.118399][ T584] ? ___ratelimit+0x41c/0x5c0 [ 42.118422][ T584] ? __kasan_check_write+0x18/0x20 [ 42.118444][ T584] dump_stack+0x19/0x20 [ 42.118468][ T584] dump_header+0xd9/0x460 [ 42.118494][ T584] oom_kill_process+0x35d/0x640 [ 42.118519][ T584] out_of_memory+0x5d1/0xa20 [ 42.118542][ T584] ? __cfi_out_of_memory+0x10/0x10 [ 42.118565][ T584] ? mutex_lock_killable+0x97/0x1d0 [ 42.118590][ T584] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.118613][ T584] mem_cgroup_out_of_memory+0x2c5/0x390 [ 42.118636][ T584] ? css_next_descendant_pre+0x1ec/0x210 [ 42.118661][ T584] ? __kasan_check_write+0x18/0x20 [ 42.118682][ T584] ? drain_obj_stock+0xec0/0xec0 [ 42.118706][ T584] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.118728][ T584] try_charge_memcg+0x925/0xe10 [ 42.118753][ T584] ? static_key_count+0x45/0x70 [ 42.118780][ T584] ? lruvec_init+0x201/0x280 [ 42.118803][ T584] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.118830][ T584] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.118860][ T584] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.118887][ T584] __mem_cgroup_charge+0xfc/0x420 [ 42.118905][ T584] ? folio_add_lru+0x116/0x400 [ 42.118930][ T584] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.118953][ T584] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 42.118980][ T584] ? shmem_replace_folio+0x9b0/0x9b0 [ 42.119006][ T584] ? shmem_huge_global_enabled+0x2da/0x360 [ 42.119028][ T584] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 42.119052][ T584] ? __kasan_check_write+0x18/0x20 [ 42.119072][ T584] ? _raw_spin_lock+0x92/0x120 [ 42.119090][ T584] shmem_get_folio_gfp+0x5cd/0x12e0 [ 42.119115][ T584] ? shmem_get_folio+0xc0/0xc0 [ 42.119135][ T584] ? follow_page_pte+0x8fb/0xba0 [ 42.119161][ T584] ? inode_to_bdi+0x6d/0x100 [ 42.119189][ T584] shmem_write_begin+0xf4/0x260 [ 42.119213][ T584] generic_perform_write+0x32c/0x970 [ 42.119241][ T584] ? __cfi_generic_perform_write+0x10/0x10 [ 42.119267][ T584] ? generic_write_checks_count+0x426/0x540 [ 42.119294][ T584] ? file_update_time+0xa3/0x210 [ 42.119330][ T584] shmem_file_write_iter+0x105/0x130 [ 42.119354][ T584] __kernel_write_iter+0x462/0x900 [ 42.119374][ T584] ? __cfi___kernel_write_iter+0x10/0x10 [ 42.119393][ T584] ? get_dump_page+0x165/0x220 [ 42.119415][ T584] ? __asan_memset+0x39/0x50 [ 42.119434][ T584] ? iov_iter_bvec+0xc0/0x180 [ 42.119462][ T584] dump_user_range+0xb8b/0xe60 [ 42.119488][ T584] ? __cfi_dump_user_range+0x10/0x10 [ 42.119510][ T584] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 42.119540][ T584] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.119568][ T584] ? elf_core_dump+0x23cf/0x3840 [ 42.119595][ T584] elf_core_dump+0x2d61/0x3840 [ 42.119623][ T584] ? __cfi_elf_core_dump+0x10/0x10 [ 42.119648][ T584] ? mas_next_slot+0xf01/0xfd0 [ 42.119679][ T584] ? dump_interrupted+0xf0/0xf0 [ 42.119699][ T584] ? 0xffffffffff600000 [ 42.119713][ T584] ? put_dmabuf_info+0xf5/0x200 [ 42.119744][ T584] do_coredump+0x20d2/0x3050 [ 42.119767][ T584] ? __cfi_do_coredump+0x10/0x10 [ 42.119787][ T584] ? asm_exc_page_fault+0x2b/0x30 [ 42.119817][ T584] ? __kasan_slab_free+0x6a/0x80 [ 42.119840][ T584] ? get_signal+0xa2a/0x1490 [ 42.119867][ T584] get_signal+0x11bf/0x1490 [ 42.119895][ T584] arch_do_signal_or_restart+0xbc/0x700 [ 42.119915][ T584] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.119937][ T584] ? __kasan_check_read+0x15/0x20 [ 42.119958][ T584] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.119982][ T584] irqentry_exit+0x16/0x60 [ 42.120004][ T584] exc_page_fault+0x65/0xc0 [ 42.120028][ T584] asm_exc_page_fault+0x2b/0x30 [ 42.120049][ T584] RIP: 0033:0x7f1d67d9e161 [ 42.120071][ T584] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 42.120087][ T584] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 42.120107][ T584] RAX: 0000000000000000 RBX: 00007f1d68026090 RCX: 00007f1d67d9e159 [ 42.120121][ T584] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000068411 [ 42.120134][ T584] RBP: 00007f1d67e3503b R08: 0000000000000000 R09: 0000000000000000 [ 42.120147][ T584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.120168][ T584] R13: 00007f1d68026128 R14: 00007f1d68026090 R15: 00007fff49316588 [ 42.120185][ T584] [ 42.120311][ T584] memory: usage 307200kB, limit 307200kB, failcnt 29915 [ 42.272393][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 42.309766][ T584] memory+swap: usage 423248kB, limit 9007199254740988kB, failcnt 0 [ 42.403135][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.567599][ T584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.575666][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.582696][ T584] Memory cgroup stats for [ 42.586558][ T312] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.592857][ T584] /syz2 [ 42.598419][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.605897][ T584] : [ 42.622470][ T312] usb 2-1: config 0 descriptor?? [ 42.644190][ T584] cache 314494976 [ 42.669598][ T584] rss 61440 [ 42.672755][ T584] rss_huge 0 [ 42.675964][ T584] shmem 314462208 [ 42.679782][ T584] mapped_file 0 [ 42.683362][ T584] dirty 0 [ 42.686434][ T584] writeback 0 [ 42.689726][ T584] workingset_refault_anon 45 [ 42.695540][ T584] workingset_refault_file 9164 [ 42.700316][ T584] swap 127725568 [ 42.703916][ T584] swapcached 36864 [ 42.707663][ T584] pgpgin 165284 [ 42.711214][ T584] pgpgout 88484 [ 42.714697][ T584] pgfault 10952 [ 42.718339][ T584] pgmajfault 196 [ 42.722044][ T584] inactive_anon 118120448 [ 42.726384][ T584] active_anon 196382720 [ 42.730559][ T584] inactive_file 0 [ 42.734253][ T584] active_file 32768 [ 42.738075][ T584] unevictable 0 [ 42.741539][ T584] hierarchical_memory_limit 314572800 [ 42.746947][ T584] hierarchical_memsw_limit 9223372036854771712 [ 42.753142][ T584] total_cache 314494976 [ 42.757302][ T584] total_rss 61440 [ 42.761013][ T584] total_rss_huge 0 [ 42.764811][ T584] total_shmem 314462208 [ 42.768998][ T584] total_mapped_file 0 [ 42.773146][ T584] total_dirty 0 [ 42.776615][ T584] total_writeback 0 [ 42.780416][ T584] total_workingset_refault_anon 45 [ 42.785569][ T584] total_workingset_refault_file 9164 [ 42.790880][ T584] total_swap 127725568 [ 42.794978][ T584] total_swapcached 36864 [ 42.799234][ T584] total_pgpgin 165284 [ 42.803248][ T584] total_pgpgout 88484 [ 42.807236][ T584] total_pgfault 10952 [ 42.811305][ T584] total_pgmajfault 196 [ 42.815429][ T584] total_inactive_anon 118120448 [ 42.820292][ T584] total_active_anon 196382720 [ 42.825143][ T584] total_inactive_file 0 [ 42.829372][ T584] total_active_file 32768 [ 42.833761][ T584] total_unevictable 0 [ 42.837853][ T584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=576,uid=0 [ 42.852571][ T584] Memory cgroup out of memory: Killed process 576 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 42.898161][ T583] syz.2.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.972398][ T583] CPU: 1 UID: 0 PID: 583 Comm: syz.2.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 42.972438][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.972452][ T583] Call Trace: [ 42.972458][ T583] [ 42.972465][ T583] __dump_stack+0x21/0x30 [ 42.972497][ T583] dump_stack_lvl+0x140/0x1c0 [ 42.972524][ T583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.972552][ T583] ? ___ratelimit+0x41c/0x5c0 [ 42.972574][ T583] ? __kasan_check_write+0x18/0x20 [ 42.972597][ T583] dump_stack+0x19/0x20 [ 42.972623][ T583] dump_header+0xd9/0x460 [ 42.972650][ T583] oom_kill_process+0x35d/0x640 [ 42.972674][ T583] out_of_memory+0x5d1/0xa20 [ 42.972696][ T583] ? __cfi_out_of_memory+0x10/0x10 [ 42.972718][ T583] ? mutex_lock_killable+0x115/0x1d0 [ 42.972742][ T583] ? __cfi_mutex_lock_killable+0x10/0x10 [ 42.972769][ T583] mem_cgroup_out_of_memory+0x2c5/0x390 [ 42.972792][ T583] ? css_next_descendant_pre+0x1ec/0x210 [ 42.972817][ T583] ? __kasan_check_write+0x18/0x20 [ 42.972837][ T583] ? drain_obj_stock+0xec0/0xec0 [ 42.972877][ T583] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 42.972900][ T583] try_charge_memcg+0x925/0xe10 [ 42.972928][ T583] ? static_key_count+0x45/0x70 [ 42.972963][ T583] ? lruvec_init+0x201/0x280 [ 42.972986][ T583] ? __cfi_try_charge_memcg+0x10/0x10 [ 42.973015][ T583] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.973044][ T583] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.973075][ T583] __mem_cgroup_charge+0xfc/0x420 [ 42.973094][ T583] ? folio_add_lru+0x116/0x400 [ 42.973119][ T583] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 42.973141][ T583] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 42.973169][ T583] ? shmem_replace_folio+0x9b0/0x9b0 [ 42.973194][ T583] ? shmem_huge_global_enabled+0x2da/0x360 [ 42.973219][ T583] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 42.973242][ T583] ? __kasan_check_write+0x18/0x20 [ 42.973263][ T583] ? _raw_spin_lock+0x92/0x120 [ 42.973282][ T583] shmem_get_folio_gfp+0x5cd/0x12e0 [ 42.973309][ T583] ? shmem_get_folio+0xc0/0xc0 [ 42.973330][ T583] ? follow_page_pte+0x8fb/0xba0 [ 42.973358][ T583] ? inode_to_bdi+0x6d/0x100 [ 42.973386][ T583] shmem_write_begin+0xf4/0x260 [ 42.973411][ T583] generic_perform_write+0x32c/0x970 [ 42.973441][ T583] ? __cfi_generic_perform_write+0x10/0x10 [ 42.973467][ T583] ? generic_write_checks_count+0x426/0x540 [ 42.973496][ T583] ? file_update_time+0xa3/0x210 [ 42.973525][ T583] shmem_file_write_iter+0x105/0x130 [ 42.973554][ T583] __kernel_write_iter+0x462/0x900 [ 42.973577][ T583] ? __cfi___kernel_write_iter+0x10/0x10 [ 42.973599][ T583] ? get_dump_page+0x165/0x220 [ 42.973627][ T583] ? __asan_memset+0x39/0x50 [ 42.973647][ T583] ? iov_iter_bvec+0xc0/0x180 [ 42.973676][ T583] dump_user_range+0xb8b/0xe60 [ 42.973702][ T583] ? __cfi_dump_user_range+0x10/0x10 [ 42.973724][ T583] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 42.973754][ T583] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 42.973785][ T583] ? elf_core_dump+0x23cf/0x3840 [ 42.973813][ T583] elf_core_dump+0x2d61/0x3840 [ 42.973841][ T583] ? __cfi_elf_core_dump+0x10/0x10 [ 42.973865][ T583] ? mas_next_slot+0xf01/0xfd0 [ 42.973897][ T583] ? dump_interrupted+0xf0/0xf0 [ 42.973918][ T583] ? 0xffffffffff600000 [ 42.973934][ T583] ? put_dmabuf_info+0xf5/0x200 [ 42.973971][ T583] do_coredump+0x20d2/0x3050 [ 42.973996][ T583] ? __cfi_do_coredump+0x10/0x10 [ 42.974015][ T583] ? asm_exc_page_fault+0x2b/0x30 [ 42.974047][ T583] ? __kasan_slab_free+0x6a/0x80 [ 42.974071][ T583] ? get_signal+0xa2a/0x1490 [ 42.974098][ T583] get_signal+0x11bf/0x1490 [ 42.974127][ T583] arch_do_signal_or_restart+0xbc/0x700 [ 42.974149][ T583] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 42.974172][ T583] ? __kasan_check_read+0x15/0x20 [ 42.974194][ T583] irqentry_exit_to_user_mode+0x4d/0xb0 [ 42.974221][ T583] irqentry_exit+0x16/0x60 [ 42.974245][ T583] exc_page_fault+0x65/0xc0 [ 42.974270][ T583] asm_exc_page_fault+0x2b/0x30 [ 42.974292][ T583] RIP: 0033:0x7f1d67d9e161 [ 42.974311][ T583] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 42.974328][ T583] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 42.974348][ T583] RAX: 0000000000000000 RBX: 00007f1d68026090 RCX: 00007f1d67d9e159 [ 42.974364][ T583] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000068411 [ 42.974378][ T583] RBP: 00007f1d67e3503b R08: 0000000000000000 R09: 0000000000000000 [ 42.974391][ T583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 42.974404][ T583] R13: 00007f1d68026128 R14: 00007f1d68026090 R15: 00007fff49316588 [ 42.974421][ T583] [ 42.979888][ T583] memory: usage 296204kB, limit 307200kB, failcnt 33062 [ 43.463675][ T88] usbhid 4-1:0.0: can't add hid device: -71 [ 43.469671][ T88] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.480261][ T312] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 43.494677][ T88] usb 4-1: USB disconnect, device number 8 [ 43.501437][ T312] usb 2-1: USB disconnect, device number 12 [ 43.525988][ T583] memory+swap: usage 425860kB, limit 9007199254740988kB, failcnt 0 [ 43.603249][ T583] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 43.656304][ T583] Memory cgroup stats for /syz2: [ 43.656459][ T583] cache 311189504 [ 43.719979][ T583] rss 61440 [ 43.732376][ T583] rss_huge 0 [ 43.735725][ T583] shmem 303419392 [ 43.739380][ T583] mapped_file 7536640 [ 43.754208][ T583] dirty 0 [ 43.772387][ T583] writeback 8192 [ 43.775986][ T583] workingset_refault_anon 45 [ 43.781982][ T716] fido_id[716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 43.858938][ T583] workingset_refault_file 11296 [ 43.900876][ T583] swap 127848448 [ 43.922393][ T88] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.955038][ T583] swapcached 147456 [ 44.014961][ T583] pgpgin 174111 [ 44.071314][ T583] pgpgout 98060 [ 44.082684][ T88] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 44.092226][ T88] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 44.110454][ T88] usb 4-1: Product: syz [ 44.114696][ T88] usb 4-1: Manufacturer: syz [ 44.170876][ T583] pgfault 11245 [ 44.262380][ T583] pgmajfault 204 [ 44.266073][ T583] inactive_anon 117063680 [ 44.270474][ T583] active_anon 185192448 [ 44.353431][ T583] inactive_file 0 [ 44.373681][ T583] active_file 7770112 [ 44.399656][ T583] unevictable 0 [ 44.418226][ T583] hierarchical_memory_limit 314572800 [ 44.490167][ T583] hierarchical_memsw_limit 9223372036854771712 [ 44.525727][ T583] total_cache 311189504 [ 44.533250][ T583] total_rss 61440 [ 44.536969][ T583] total_rss_huge 0 [ 44.540830][ T583] total_shmem 303419392 [ 44.546676][ T583] total_mapped_file 7536640 [ 44.551278][ T583] total_dirty 0 [ 44.556093][ T583] total_writeback 8192 [ 44.560189][ T583] total_workingset_refault_anon 45 [ 44.565427][ T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.577267][ T583] total_workingset_refault_file 11296 [ 44.590055][ T583] total_swap 127848448 [ 44.594769][ T583] total_swapcached 147456 [ 44.600241][ T583] total_pgpgin 174111 [ 44.605183][ T583] total_pgpgout 98060 [ 44.609181][ T583] total_pgfault 11245 [ 44.615182][ T583] total_pgmajfault 204 [ 44.619276][ T583] total_inactive_anon 117063680 [ 44.624273][ T583] total_active_anon 185192448 [ 44.629038][ T583] total_inactive_file 0 [ 44.633224][ T583] total_active_file 7770112 [ 44.637740][ T583] total_unevictable 0 [ 44.641786][ T583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=562,uid=0 [ 44.657392][ T583] Memory cgroup out of memory: Killed process 562 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:22072kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 44.682258][ T561] syz.2.63 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 44.702253][ T561] CPU: 1 UID: 0 PID: 561 Comm: syz.2.63 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 44.702294][ T561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.702308][ T561] Call Trace: [ 44.702315][ T561] [ 44.702324][ T561] __dump_stack+0x21/0x30 [ 44.702354][ T561] dump_stack_lvl+0x140/0x1c0 [ 44.702378][ T561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.702404][ T561] ? ___ratelimit+0x41c/0x5c0 [ 44.702427][ T561] ? __kasan_check_write+0x18/0x20 [ 44.702450][ T561] dump_stack+0x19/0x20 [ 44.702474][ T561] dump_header+0xd9/0x460 [ 44.702499][ T561] oom_kill_process+0x35d/0x640 [ 44.702521][ T561] out_of_memory+0x5d1/0xa20 [ 44.702542][ T561] ? __cfi_out_of_memory+0x10/0x10 [ 44.702565][ T561] ? mutex_lock_killable+0x115/0x1d0 [ 44.702589][ T561] ? __cfi_mutex_lock_killable+0x10/0x10 [ 44.702614][ T561] mem_cgroup_out_of_memory+0x2c5/0x390 [ 44.702637][ T561] ? css_next_descendant_pre+0x1ec/0x210 [ 44.702661][ T561] ? __kasan_check_write+0x18/0x20 [ 44.702681][ T561] ? drain_obj_stock+0xec0/0xec0 [ 44.702704][ T561] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 44.702726][ T561] try_charge_memcg+0x925/0xe10 [ 44.702760][ T561] ? static_key_count+0x45/0x70 [ 44.702787][ T561] ? lruvec_init+0x201/0x280 [ 44.702808][ T561] ? __cfi_try_charge_memcg+0x10/0x10 [ 44.702835][ T561] ? __alloc_pages_noprof+0x35a/0x7e0 [ 44.702865][ T561] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.702893][ T561] __mem_cgroup_charge+0xfc/0x420 [ 44.702913][ T561] ? do_pte_missing+0x3894/0x4440 [ 44.702938][ T561] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 44.702958][ T561] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 44.702986][ T561] ? shmem_replace_folio+0x9b0/0x9b0 [ 44.703010][ T561] ? shmem_huge_global_enabled+0x2da/0x360 [ 44.703032][ T561] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 44.703056][ T561] ? __kasan_check_write+0x18/0x20 [ 44.703077][ T561] ? _raw_spin_lock+0x92/0x120 [ 44.703094][ T561] shmem_get_folio_gfp+0x5cd/0x12e0 [ 44.703117][ T561] ? shmem_get_folio+0xc0/0xc0 [ 44.703140][ T561] ? __kasan_check_write+0x18/0x20 [ 44.703159][ T561] ? inode_to_bdi+0x6d/0x100 [ 44.703185][ T561] shmem_write_begin+0xf4/0x260 [ 44.703210][ T561] generic_perform_write+0x32c/0x970 [ 44.703236][ T561] ? inode_update_timestamps+0x4d1/0x6e0 [ 44.703264][ T561] ? __cfi_generic_perform_write+0x10/0x10 [ 44.703290][ T561] ? generic_write_checks_count+0x426/0x540 [ 44.703317][ T561] ? mnt_get_write_access_file+0x1af/0x3b0 [ 44.703344][ T561] ? mnt_put_write_access_file+0xc2/0x100 [ 44.703374][ T561] ? file_update_time+0x1de/0x210 [ 44.703400][ T561] shmem_file_write_iter+0x105/0x130 [ 44.703424][ T561] __kernel_write_iter+0x462/0x900 [ 44.703443][ T561] ? __cfi___kernel_write_iter+0x10/0x10 [ 44.703461][ T561] ? get_dump_page+0x165/0x220 [ 44.703483][ T561] ? __asan_memset+0x39/0x50 [ 44.703499][ T561] ? iov_iter_bvec+0xc0/0x180 [ 44.703522][ T561] dump_user_range+0xb8b/0xe60 [ 44.703543][ T561] ? __cfi_dump_user_range+0x10/0x10 [ 44.703562][ T561] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 44.703588][ T561] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 44.703614][ T561] ? elf_core_dump+0x23cf/0x3840 [ 44.703638][ T561] elf_core_dump+0x2d61/0x3840 [ 44.703663][ T561] ? __cfi_elf_core_dump+0x10/0x10 [ 44.703685][ T561] ? mas_next_slot+0xf01/0xfd0 [ 44.703713][ T561] ? dump_interrupted+0xf0/0xf0 [ 44.703742][ T561] ? 0xffffffffff600000 [ 44.703756][ T561] ? put_dmabuf_info+0xf5/0x200 [ 44.703783][ T561] do_coredump+0x20d2/0x3050 [ 44.703805][ T561] ? __cfi_do_coredump+0x10/0x10 [ 44.703823][ T561] ? asm_exc_page_fault+0x2b/0x30 [ 44.703848][ T561] ? irqentry_exit+0x4a/0x60 [ 44.703869][ T561] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 44.703891][ T561] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 44.703912][ T561] ? _raw_spin_unlock_irq+0x4e/0x70 [ 44.703929][ T561] get_signal+0x11bf/0x1490 [ 44.703957][ T561] arch_do_signal_or_restart+0xbc/0x700 [ 44.703977][ T561] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 44.703997][ T561] ? __kasan_check_read+0x15/0x20 [ 44.704017][ T561] irqentry_exit_to_user_mode+0x4d/0xb0 [ 44.704041][ T561] irqentry_exit+0x16/0x60 [ 44.704064][ T561] exc_page_fault+0x65/0xc0 [ 44.704087][ T561] asm_exc_page_fault+0x2b/0x30 [ 44.704106][ T561] RIP: 0033:0x7f1d67d9e161 [ 44.704123][ T561] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 44.704139][ T561] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 44.704157][ T561] RAX: 0000000000000000 RBX: 00007f1d68026090 RCX: 00007f1d67d9e159 [ 44.704171][ T561] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000068411 [ 44.704184][ T561] RBP: 00007f1d67e3503b R08: 0000000000000000 R09: 0000000000000000 [ 44.704196][ T561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 44.704208][ T561] R13: 00007f1d68026128 R14: 00007f1d68026090 R15: 00007fff49316588 [ 44.704224][ T561] [ 44.734968][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.764904][ T88] scsi host1: uas [ 44.765241][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.771575][ C1] usb 4-1: stat urb: no pending cmd for uas-tag 78 [ 44.806585][ T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 44.868148][ T561] memory: usage 278108kB, limit 307200kB, failcnt 35059 [ 44.952400][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 44.957828][ T561] memory+swap: usage 393716kB, limit 9007199254740988kB, failcnt 0 [ 44.979749][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.984132][ T561] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.999124][ T66] usb 2-1: Product: syz [ 45.003553][ T561] Memory cgroup stats for [ 45.013421][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.016537][ T561] /syz2 [ 45.021780][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.026044][ T561] : [ 45.042823][ T66] usb 2-1: Manufacturer: syz [ 45.045368][ T561] cache 275128320 [ 45.049834][ T66] usb 2-1: SerialNumber: syz [ 45.050264][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 45.054473][ T561] rss 61440 [ 45.054483][ T561] rss_huge 0 [ 45.054490][ T561] shmem 275116032 [ 45.054497][ T561] mapped_file 0 [ 45.054504][ T561] dirty 0 [ 45.054511][ T561] writeback 0 [ 45.054518][ T561] workingset_refault_anon 46 [ 45.062697][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.072370][ T561] workingset_refault_file 12404 [ 45.091359][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.152526][ T561] swap 127963136 [ 45.158084][ T66] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 45.197645][ T561] swapcached 32768 [ 45.199355][ T66] cdc_wdm 2-1:1.0: Unknown control protocol [ 45.205316][ T561] pgpgin 181944 [ 45.216835][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.282391][ T561] pgpgout 114756 [ 45.393979][ T10] usb 1-1: config 0 descriptor?? [ 45.423226][ T561] pgfault 11604 [ 45.426887][ T561] pgmajfault 231 [ 45.433401][ T561] inactive_anon 79527936 [ 45.437918][ T561] active_anon 195268608 [ 45.442102][ T561] inactive_file 0 [ 45.447166][ T561] active_file 12288 [ 45.451304][ T561] unevictable 0 [ 45.456160][ T561] hierarchical_memory_limit 314572800 [ 45.461570][ T561] hierarchical_memsw_limit 9223372036854771712 [ 45.469198][ T561] total_cache 275128320 [ 45.474313][ T561] total_rss 61440 [ 45.479659][ T561] total_rss_huge 0 [ 45.502366][ T561] total_shmem 275116032 [ 45.506769][ T561] total_mapped_file 0 [ 45.510840][ T561] total_dirty 0 [ 45.522372][ T561] total_writeback 0 [ 45.526340][ T561] total_workingset_refault_anon 46 [ 45.531682][ T561] total_workingset_refault_file 12404 [ 45.557006][ T66] usb 2-1: USB disconnect, device number 13 [ 45.572369][ T561] total_swap 127963136 [ 45.577110][ T561] total_swapcached 32768 [ 45.583801][ T561] total_pgpgin 181944 [ 45.588405][ T561] total_pgpgout 114756 [ 45.622371][ T561] total_pgfault 11604 [ 45.626621][ T561] total_pgmajfault 231 [ 45.630821][ T561] total_inactive_anon 79527936 [ 45.638310][ T561] total_active_anon 195268608 [ 45.644477][ T561] total_inactive_file 0 [ 45.655847][ T561] total_active_file 12288 [ 45.660487][ T561] total_unevictable 0 [ 45.666918][ T561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.63,pid=574,uid=0 [ 45.685433][ T561] Memory cgroup out of memory: Killed process 574 (syz.2.63) total-vm:90396kB, anon-rss:1240kB, file-rss:22208kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 46.006542][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 46.012795][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 46.040120][ T10] usb 1-1: USB disconnect, device number 5 [ 46.089795][ T36] kauditd_printk_skb: 654 callbacks suppressed [ 46.089814][ T36] audit: type=1400 audit(1789141323.910:4133): avc: denied { read write } for pid=295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.150360][ T36] audit: type=1400 audit(1789141323.950:4134): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.211794][ T36] audit: type=1400 audit(1789141323.950:4135): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.256361][ T36] audit: type=1400 audit(1789141323.970:4136): avc: denied { read write } for pid=296 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.292775][ T36] audit: type=1400 audit(1789141323.970:4137): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.346637][ T737] bridge0: port 3(bond_slave_1) entered blocking state [ 46.362390][ T737] bridge0: port 3(bond_slave_1) entered disabled state [ 46.363091][ T36] audit: type=1400 audit(1789141323.970:4138): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.369401][ T737] bond_slave_1: entered allmulticast mode [ 46.407404][ T36] audit: type=1400 audit(1789141324.010:4139): avc: denied { read write } for pid=734 comm="syz.1.119" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.437248][ T36] audit: type=1400 audit(1789141324.010:4140): avc: denied { read write open } for pid=734 comm="syz.1.119" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.452896][ T737] bond_slave_1: entered promiscuous mode [ 46.472442][ T36] audit: type=1400 audit(1789141324.030:4141): avc: denied { mounton } for pid=734 comm="syz.1.119" path="/proc/66/task" dev="proc" ino=5886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 46.505880][ T36] audit: type=1400 audit(1789141324.030:4142): avc: denied { mount } for pid=734 comm="syz.1.119" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.514512][ T737] rust_binder: Failure in copy_transaction_data: EFAULT [ 46.548816][ T737] rust_binder: 736:737 transaction async to 736:0 failed EFAULT, code 0 size 51-24 [ 46.583761][ C1] usb 4-1: cmd cmplt err -71 [ 46.602443][ T312] usb 4-1: USB disconnect, device number 9 [ 46.609738][ T312] scsi 1:0:0:0: tag#0 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 46.617645][ T312] scsi 1:0:0:0: tag#0 CDB: opcode=0x12 12 00 00 00 24 00 [ 46.642492][ T737] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.642519][ T737] rust_binder: Read failure Err(EFAULT) in pid:68 [ 46.661407][ T88] rust_binder: 736: undelivered TRANSACTION_ERROR: 29201 [ 46.984944][ T751] FAULT_INJECTION: forcing a failure. [ 46.984944][ T751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.046071][ T751] CPU: 0 UID: 0 PID: 751 Comm: syz.0.126 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 47.046106][ T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.046119][ T751] Call Trace: [ 47.046126][ T751] [ 47.046135][ T751] __dump_stack+0x21/0x30 [ 47.046168][ T751] dump_stack_lvl+0x140/0x1c0 [ 47.046196][ T751] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.046224][ T751] ? avc_perm_nonode+0x118/0x1d0 [ 47.046249][ T751] ? avc_has_perm_noaudit+0x360/0x360 [ 47.046275][ T751] dump_stack+0x19/0x20 [ 47.046300][ T751] should_fail_ex+0x3c2/0x510 [ 47.046325][ T751] should_fail+0xf/0x20 [ 47.046348][ T751] should_fail_usercopy+0x1e/0x30 [ 47.046374][ T751] _copy_from_iter+0x1a6/0x1520 [ 47.046403][ T751] ? __cfi__copy_from_iter+0x10/0x10 [ 47.046433][ T751] tun_get_user+0x231/0x3720 [ 47.046456][ T751] ? arch_stack_walk+0x10a/0x170 [ 47.046479][ T751] ? ptr_ring_consume+0x430/0x430 [ 47.046500][ T751] ? _parse_integer+0x2e/0x40 [ 47.046524][ T751] ? kstrtoull+0x13b/0x1e0 [ 47.046546][ T751] ? __kasan_check_write+0x18/0x20 [ 47.046567][ T751] ? ref_tracker_alloc+0x32b/0x5b0 [ 47.046592][ T751] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 47.046617][ T751] ? selinux_file_permission+0x318/0xb60 [ 47.046641][ T751] ? __kasan_check_write+0x18/0x20 [ 47.046661][ T751] ? proc_fail_nth_write+0x184/0x220 [ 47.046692][ T751] tun_chr_write_iter+0x1fa/0x310 [ 47.046714][ T751] vfs_write+0x75f/0xfd0 [ 47.046737][ T751] ? __cfi_vfs_write+0x10/0x10 [ 47.046761][ T751] ksys_write+0x145/0x260 [ 47.046790][ T751] ? __cfi_ksys_write+0x10/0x10 [ 47.046812][ T751] ? __kasan_check_read+0x15/0x20 [ 47.046833][ T751] __x64_sys_write+0x7f/0x90 [ 47.046854][ T751] x64_sys_call+0x271c/0x2ee0 [ 47.046874][ T751] do_syscall_64+0x57/0xf0 [ 47.046892][ T751] ? clear_bhb_loop+0x50/0xa0 [ 47.046918][ T751] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.046942][ T751] RIP: 0033:0x7feac659e159 [ 47.046960][ T751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.046978][ T751] RSP: 002b:00007feac73e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.047001][ T751] RAX: ffffffffffffffda RBX: 00007feac6825fa0 RCX: 00007feac659e159 [ 47.047017][ T751] RDX: 0000000000000032 RSI: 0000200000000140 RDI: 0000000000000003 [ 47.047031][ T751] RBP: 00007feac73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.047044][ T751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.047058][ T751] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 47.047075][ T751] [ 47.322889][ T88] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.497383][ T88] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.599554][ T88] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 47.626937][ T88] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.688145][ T88] usb 4-1: Product: syz [ 47.693275][ T88] usb 4-1: Manufacturer: syz [ 47.698071][ T88] usb 4-1: SerialNumber: syz [ 47.724876][ T765] FAULT_INJECTION: forcing a failure. [ 47.724876][ T765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.728231][ T88] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 47.747040][ T88] cdc_wdm 4-1:1.0: Unknown control protocol [ 47.760434][ T765] CPU: 0 UID: 0 PID: 765 Comm: syz.0.133 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 47.760467][ T765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.760478][ T765] Call Trace: [ 47.760484][ T765] [ 47.760492][ T765] __dump_stack+0x21/0x30 [ 47.760523][ T765] dump_stack_lvl+0x140/0x1c0 [ 47.760547][ T765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.760573][ T765] ? avc_perm_nonode+0x118/0x1d0 [ 47.760598][ T765] ? avc_has_perm_noaudit+0x360/0x360 [ 47.760622][ T765] dump_stack+0x19/0x20 [ 47.760647][ T765] should_fail_ex+0x3c2/0x510 [ 47.760673][ T765] should_fail+0xf/0x20 [ 47.760695][ T765] should_fail_usercopy+0x1e/0x30 [ 47.760719][ T765] _copy_from_iter+0x1a6/0x1520 [ 47.760750][ T765] ? __cfi__copy_from_iter+0x10/0x10 [ 47.760778][ T765] tun_get_user+0x231/0x3720 [ 47.760798][ T765] ? arch_stack_walk+0x10a/0x170 [ 47.760818][ T765] ? ptr_ring_consume+0x430/0x430 [ 47.760838][ T765] ? _parse_integer+0x2e/0x40 [ 47.760859][ T765] ? kstrtoull+0x13b/0x1e0 [ 47.760882][ T765] ? __kasan_check_write+0x18/0x20 [ 47.760903][ T765] ? ref_tracker_alloc+0x32b/0x5b0 [ 47.760928][ T765] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 47.760951][ T765] ? selinux_file_permission+0x318/0xb60 [ 47.760973][ T765] ? __kasan_check_write+0x18/0x20 [ 47.760991][ T765] ? proc_fail_nth_write+0x184/0x220 [ 47.761019][ T765] tun_chr_write_iter+0x1fa/0x310 [ 47.761041][ T765] vfs_write+0x75f/0xfd0 [ 47.761063][ T765] ? __cfi_vfs_write+0x10/0x10 [ 47.761088][ T765] ksys_write+0x145/0x260 [ 47.761108][ T765] ? __cfi_ksys_write+0x10/0x10 [ 47.761127][ T765] ? __kasan_check_read+0x15/0x20 [ 47.761146][ T765] __x64_sys_write+0x7f/0x90 [ 47.761165][ T765] x64_sys_call+0x271c/0x2ee0 [ 47.761183][ T765] do_syscall_64+0x57/0xf0 [ 47.761200][ T765] ? clear_bhb_loop+0x50/0xa0 [ 47.761224][ T765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.761256][ T765] RIP: 0033:0x7feac659e159 [ 47.761274][ T765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.761291][ T765] RSP: 002b:00007feac73e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.761314][ T765] RAX: ffffffffffffffda RBX: 00007feac6825fa0 RCX: 00007feac659e159 [ 47.761328][ T765] RDX: 0000000000000032 RSI: 0000200000000140 RDI: 0000000000000003 [ 47.761341][ T765] RBP: 00007feac73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.761353][ T765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.761365][ T765] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 47.761381][ T765] [ 48.230958][ T88] usb 4-1: USB disconnect, device number 10 [ 48.612415][ T312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.750145][ T789] SELinux: policydb magic number 0x300 does not match expected magic number 0xf97cff8c [ 48.782405][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 48.830928][ T789] SELinux: failed to load policy [ 48.868967][ T312] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 48.896626][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.927897][ T312] usb 3-1: Product: syz [ 48.932297][ T312] usb 3-1: Manufacturer: syz [ 48.952689][ T312] usb 3-1: SerialNumber: syz [ 48.977937][ T799] FAULT_INJECTION: forcing a failure. [ 48.977937][ T799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.001443][ T799] CPU: 1 UID: 0 PID: 799 Comm: syz.3.142 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 49.001480][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.001493][ T799] Call Trace: [ 49.001499][ T799] [ 49.001511][ T799] __dump_stack+0x21/0x30 [ 49.001545][ T799] dump_stack_lvl+0x140/0x1c0 [ 49.001572][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.001599][ T799] ? vsnprintf+0x7b4/0x1ad0 [ 49.001627][ T799] ? check_stack_object+0x10f/0x150 [ 49.001650][ T799] dump_stack+0x19/0x20 [ 49.001676][ T799] should_fail_ex+0x3c2/0x510 [ 49.001701][ T799] should_fail+0xf/0x20 [ 49.001723][ T799] should_fail_usercopy+0x1e/0x30 [ 49.001748][ T799] _copy_from_user+0x20/0xa0 [ 49.001776][ T799] kstrtouint_from_user+0xde/0x170 [ 49.001800][ T799] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 49.001822][ T799] ? selinux_file_permission+0x318/0xb60 [ 49.001845][ T799] ? __cfi_selinux_file_permission+0x10/0x10 [ 49.001867][ T799] proc_fail_nth_write+0x8f/0x220 [ 49.001895][ T799] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.001924][ T799] ? bpf_lsm_file_permission+0xd/0x20 [ 49.001950][ T799] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 49.001978][ T799] vfs_write+0x3c1/0xfd0 [ 49.001999][ T799] ? __cfi_vfs_write+0x10/0x10 [ 49.002020][ T799] ? __kasan_check_write+0x18/0x20 [ 49.002040][ T799] ? mutex_lock+0x97/0x1d0 [ 49.002062][ T799] ? __cfi_mutex_lock+0x10/0x10 [ 49.002087][ T799] ksys_write+0x145/0x260 [ 49.002107][ T799] ? xfd_validate_state+0x68/0x140 [ 49.002134][ T799] ? __cfi_ksys_write+0x10/0x10 [ 49.002156][ T799] ? __kasan_check_read+0x15/0x20 [ 49.002176][ T799] __x64_sys_write+0x7f/0x90 [ 49.002197][ T799] x64_sys_call+0x271c/0x2ee0 [ 49.002215][ T799] do_syscall_64+0x57/0xf0 [ 49.002233][ T799] ? clear_bhb_loop+0x50/0xa0 [ 49.002258][ T799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.002280][ T799] RIP: 0033:0x7f7c34b5e98e [ 49.002298][ T799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.002315][ T799] RSP: 002b:00007f7c335e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.002336][ T799] RAX: ffffffffffffffda RBX: 00007f7c335e36c0 RCX: 00007f7c34b5e98e [ 49.002351][ T799] RDX: 0000000000000001 RSI: 00007f7c335e30a0 RDI: 0000000000000006 [ 49.002363][ T799] RBP: 00007f7c335e3090 R08: 0000000000000000 R09: 0000000000000000 [ 49.002375][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.002393][ T799] R13: 00007f7c34e26038 R14: 00007f7c34e25fa0 R15: 00007fff637bc0a8 [ 49.002409][ T799] [ 49.563699][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 49.573913][ T312] usb 3-1: USB disconnect, device number 5 [ 50.342417][ T312] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 50.505293][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.541089][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 50.553448][ T843] BUG: scheduling while atomic: syz.0.155/843/0x00000002 [ 50.560546][ T843] Modules linked in: [ 50.560786][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.564502][ T843] CPU: 0 UID: 0 PID: 843 Comm: syz.0.155 Not tainted syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 50.564530][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.564541][ T843] Call Trace: [ 50.564547][ T843] [ 50.564554][ T843] __dump_stack+0x21/0x30 [ 50.564584][ T843] dump_stack_lvl+0x140/0x1c0 [ 50.564608][ T843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.564634][ T843] dump_stack+0x19/0x20 [ 50.564656][ T843] __schedule_bug+0x12b/0x200 [ 50.564675][ T843] ? find_proxy_task+0x2460/0x2460 [ 50.564695][ T843] ? __kasan_check_read+0x15/0x20 [ 50.564714][ T843] ? psi_group_change+0xab6/0x10a0 [ 50.564738][ T843] __schedule+0xb85/0x20b0 [ 50.564759][ T843] ? psi_task_change+0x24d/0x4f0 [ 50.564782][ T843] ? __sched_text_start+0x10/0x10 [ 50.564800][ T843] ? enqueue_task+0x1049/0x1100 [ 50.564819][ T843] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.564836][ T843] ? __kasan_check_write+0x18/0x20 [ 50.564854][ T843] ? _raw_spin_lock_irq+0x93/0x120 [ 50.564871][ T843] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 50.564888][ T843] schedule+0xc5/0x240 [ 50.564905][ T843] schedule_preempt_disabled+0x14/0x30 [ 50.564924][ T843] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 50.564947][ T843] ? probe_sched_wakeup+0x62/0x90 [ 50.564971][ T843] ? ttwu_do_activate+0x5a8/0x620 [ 50.564992][ T843] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 50.565015][ T843] ? try_to_wake_up+0x111a/0x1fd0 [ 50.565035][ T843] ? __kasan_check_write+0x18/0x20 [ 50.565053][ T843] ? wake_q_add_safe+0x29/0x100 [ 50.565070][ T843] ? __cfi_try_to_wake_up+0x10/0x10 [ 50.565089][ T843] ? rwsem_mark_wake+0x507/0x770 [ 50.565115][ T843] ? rwsem_read_trylock+0x275/0x5a0 [ 50.565140][ T843] ? wake_up_q+0x10a/0x1c0 [ 50.565156][ T843] ? downgrade_write+0x470/0x470 [ 50.565181][ T843] down_write+0x163/0x2b0 [ 50.565202][ T843] ? __cfi_down_write+0x10/0x10 [ 50.565223][ T843] ? down_read+0x7f/0xe0 [ 50.565252][ T843] ? __cfi_down_read+0x10/0x10 [ 50.565273][ T843] ? __kasan_check_write+0x18/0x20 [ 50.565292][ T843] kernfs_remove+0x87/0xc0 [ 50.565314][ T843] sysfs_remove_group+0x22d/0x250 [ 50.565336][ T843] dpm_sysfs_remove+0x99/0xd0 [ 50.565359][ T843] device_del+0x241/0xcf0 [ 50.565376][ T843] ? __cfi_class_find_device+0x10/0x10 [ 50.565396][ T843] ? __cfi_device_del+0x10/0x10 [ 50.565413][ T843] ? __kasan_check_write+0x18/0x20 [ 50.565430][ T843] ? kobject_put+0x1cc/0x2a0 [ 50.565447][ T843] device_destroy+0xb0/0x100 [ 50.565465][ T843] ? __cfi_device_destroy+0x10/0x10 [ 50.565482][ T843] ? __kasan_check_write+0x18/0x20 [ 50.565500][ T843] android_device_destroy+0x118/0x180 [ 50.565526][ T843] gadgets_drop+0x1d/0x30 [ 50.565544][ T843] ? __cfi_gadgets_drop+0x10/0x10 [ 50.565562][ T843] configfs_rmdir+0x8b7/0x9b0 [ 50.565587][ T843] vfs_rmdir+0x3db/0x560 [ 50.565611][ T843] do_rmdir+0x29a/0x590 [ 50.565634][ T843] ? __cfi_do_rmdir+0x10/0x10 [ 50.565658][ T843] ? __kasan_check_write+0x18/0x20 [ 50.565676][ T843] __x64_sys_rmdir+0x4b/0x60 [ 50.565700][ T843] x64_sys_call+0xaf7/0x2ee0 [ 50.565717][ T843] do_syscall_64+0x57/0xf0 [ 50.565733][ T843] ? clear_bhb_loop+0x50/0xa0 [ 50.565755][ T843] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.565775][ T843] RIP: 0033:0x7feac659e159 [ 50.565792][ T843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.565807][ T843] RSP: 002b:00007feac73e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 50.565827][ T843] RAX: ffffffffffffffda RBX: 00007feac6825fa0 RCX: 00007feac659e159 [ 50.565841][ T843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 50.565853][ T843] RBP: 00007feac663503b R08: 0000000000000000 R09: 0000000000000000 [ 50.565865][ T843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.565877][ T843] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 50.565892][ T843] [ 50.602676][ T843] BUG: scheduling while atomic: syz.0.155/843/0x00000000 [ 50.669208][ T312] usb 2-1: Product: syz [ 50.724410][ T843] Modules linked in: [ 50.795678][ T312] usb 2-1: Manufacturer: syz [ 51.002438][ T843] [ 51.004841][ T843] CPU: 1 UID: 0 PID: 843 Comm: syz.0.155 Tainted: G W syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 51.004880][ T843] Tainted: [W]=WARN [ 51.004887][ T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.004900][ T843] Call Trace: [ 51.004907][ T843] [ 51.004915][ T843] __dump_stack+0x21/0x30 [ 51.004949][ T843] dump_stack_lvl+0x140/0x1c0 [ 51.004976][ T843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.005003][ T843] dump_stack+0x19/0x20 [ 51.005028][ T843] __schedule_bug+0x12b/0x200 [ 51.005049][ T843] ? find_proxy_task+0x2460/0x2460 [ 51.005072][ T843] __schedule+0xb85/0x20b0 [ 51.005094][ T843] ? kmem_cache_free+0x1bd/0x4f0 [ 51.005117][ T843] ? putname+0x113/0x150 [ 51.005139][ T843] ? __sched_text_start+0x10/0x10 [ 51.005161][ T843] ? do_sys_openat2+0x170/0x1d0 [ 51.005188][ T843] ? fput+0x1a4/0x230 [ 51.005214][ T843] ? do_sys_open+0x100/0x100 [ 51.005240][ T843] ? ksys_write+0x1f3/0x260 [ 51.005261][ T843] ? __cfi_ksys_write+0x10/0x10 [ 51.005284][ T843] schedule+0xc5/0x240 [ 51.005304][ T843] syscall_exit_to_user_mode+0x74/0xb0 [ 51.005330][ T843] do_syscall_64+0x63/0xf0 [ 51.005348][ T843] ? clear_bhb_loop+0x50/0xa0 [ 51.005372][ T843] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.005395][ T843] RIP: 0033:0x7feac655e98e [ 51.005412][ T843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.005429][ T843] RSP: 002b:00007feac73e6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.005453][ T843] RAX: fffffffffffffffe RBX: 00007feac73e76c0 RCX: 00007feac655e98e [ 51.005468][ T843] RDX: 0000000000000000 RSI: 00007feac73e6f90 RDI: ffffffffffffff9c [ 51.005482][ T843] RBP: 00007feac73e7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.005495][ T843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.005508][ T843] R13: 00007feac6826038 R14: 00007feac6825fa0 R15: 00007fff97a0b3e8 [ 51.005525][ T843] [ 51.005536][ T843] psi: inconsistent task state! task=837:syz.0.153 cpu=0 psi_flags=14 clear=0 set=10 [ 51.005564][ T837] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 51.227222][ T837] Oops: general protection fault, maybe for address 0x45: 0000 [#1] PREEMPT SMP KASAN PTI [ 51.237111][ T837] CPU: 0 UID: 0 PID: 837 Comm: syz.0.153 Tainted: G W syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 51.250050][ T837] Tainted: [W]=WARN [ 51.253850][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.263986][ T837] RIP: 0010:vprintk+0x7d/0xa0 [ 51.268671][ T837] Code: f0 00 74 07 e8 a4 2a 1e 00 eb 0e e8 2d ee ff ff 84 c0 74 1c e8 94 2a 1e 00 4c 89 f7 48 89 de e8 d9 d6 ff ff 5b 41 5e 41 5f 5d cc cc cc cc cc e8 78 2a 1e 00 4c 89 f7 48 89 de e8 0d 6c ff ff [ 51.288355][ T837] RSP: 0018:ffffc9000e82e2f8 EFLAGS: 00010046 [ 51.294418][ T837] RAX: 0000000000000045 RBX: dffffc0000000000 RCX: ffff888115861300 [ 51.302386][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 51.310521][ T837] RBP: ffffc9000e82e3f0 R08: ffffc9000e82e0e7 R09: 1ffff92001d05c1c [ 51.318569][ T837] R10: dffffc0000000000 R11: fffff52001d05c1d R12: 1ffff92001d05c68 [ 51.326550][ T837] R13: ffffc9000e82e340 R14: ffffc9000e82e360 R15: ffffc9000e82e310 [ 51.334607][ T837] FS: 00007feac73e76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 51.343545][ T837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.350145][ T837] CR2: ffff8881158620b0 CR3: 000000011599e000 CR4: 00000000003526b0 [ 51.358110][ T837] Call Trace: [ 51.361395][ T837] [ 51.364343][ T837] ? __kasan_check_write+0x18/0x20 [ 51.369456][ T837] ? pv_hash+0x10d/0x230 [ 51.373706][ T837] ? native_halt+0x14/0x30 [ 51.378196][ T837] ? kvm_wait+0x163/0x230 [ 51.382692][ T837] ? __cfi_kvm_wait+0x10/0x10 [ 51.387363][ T837] __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 51.393426][ T837] ================================================================== [ 51.401472][ T837] BUG: KASAN: stack-out-of-bounds in update_stack_state+0x3f8/0x4d0 [ 51.409473][ T837] Read of size 8 at addr ffffc9000e82e528 by task syz.0.153/837 [ 51.417095][ T837] [ 51.419412][ T837] CPU: 0 UID: 0 PID: 837 Comm: syz.0.153 Tainted: G W syzkaller #0 67445127a0e550c06f7dc74ca5ff4a71fcbc5924 [ 51.419432][ T837] Tainted: [W]=WARN [ 51.419436][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.419444][ T837] Call Trace: [ 51.419448][ T837] [ 51.419453][ T837] __dump_stack+0x21/0x30 [ 51.419471][ T837] dump_stack_lvl+0x140/0x1c0 [ 51.419487][ T837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.419504][ T837] print_address_description+0x71/0x210 [ 51.419522][ T837] print_report+0x4a/0x70 [ 51.419537][ T837] kasan_report+0x162/0x1a0 [ 51.419553][ T837] ? update_stack_state+0x3f8/0x4d0 [ 51.419568][ T837] ? update_stack_state+0x3f8/0x4d0 [ 51.419583][ T837] __asan_report_load8_noabort+0x18/0x20 [ 51.419595][ T837] update_stack_state+0x3f8/0x4d0 [ 51.419611][ T837] unwind_next_frame+0x39e/0x6b0 [ 51.419625][ T837] ? __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 51.419638][ T837] __show_trace_log_lvl+0x282/0x420 [ 51.419653][ T837] ? __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 51.419667][ T837] __die_body+0xa9/0xb0 [ 51.419679][ T837] die_addr+0x4e/0x90 [ 51.419691][ T837] exc_general_protection+0x13e/0x1e0 [ 51.419705][ T837] asm_exc_general_protection+0x2b/0x30 [ 51.419719][ T837] RIP: 0010:vprintk+0x7d/0xa0 [ 51.419732][ T837] Code: f0 00 74 07 e8 a4 2a 1e 00 eb 0e e8 2d ee ff ff 84 c0 74 1c e8 94 2a 1e 00 4c 89 f7 48 89 de e8 d9 d6 ff ff 5b 41 5e 41 5f 5d cc cc cc cc cc e8 78 2a 1e 00 4c 89 f7 48 89 de e8 0d 6c ff ff [ 51.419743][ T837] RSP: 0018:ffffc9000e82e2f8 EFLAGS: 00010046 [ 51.419754][ T837] RAX: 0000000000000045 RBX: dffffc0000000000 RCX: ffff888115861300 [ 51.419763][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 51.419771][ T837] RBP: ffffc9000e82e3f0 R08: ffffc9000e82e0e7 R09: 1ffff92001d05c1c [ 51.419779][ T837] R10: dffffc0000000000 R11: fffff52001d05c1d R12: 1ffff92001d05c68 [ 51.419788][ T837] R13: ffffc9000e82e340 R14: ffffc9000e82e360 R15: ffffc9000e82e310 [ 51.419799][ T837] ? __kasan_check_write+0x18/0x20 [ 51.419811][ T837] ? pv_hash+0x10d/0x230 [ 51.419822][ T837] ? native_halt+0x14/0x30 [ 51.419833][ T837] ? kvm_wait+0x163/0x230 [ 51.419849][ T837] ? __cfi_kvm_wait+0x10/0x10 [ 51.419866][ T837] __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 51.419880][ T837] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 51.419894][ T837] ? __cfi_cmp_ex_search+0x10/0x10 [ 51.419911][ T837] ? search_extable+0x90/0xd0 [ 51.419928][ T837] ? do_oops_enter_exit+0x8f/0x130 [ 51.419946][ T837] oops_begin+0xc9/0xe0 [ 51.419958][ T837] page_fault_oops+0x22d/0x9d0 [ 51.419969][ T837] ? search_exception_tables+0x58/0x60 [ 51.419985][ T837] ? kernelmode_fixup_or_oops+0x100/0x100 [ 51.419997][ T837] ? __cfi_fixup_exception+0x10/0x10 [ 51.420008][ T837] ? bad_area_nosemaphore+0x2d/0x50 [ 51.420019][ T837] ? is_prefetch+0x423/0x690 [ 51.420030][ T837] ? do_kern_addr_fault+0x6b/0xa0 [ 51.420048][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 51.420061][ T837] kernelmode_fixup_or_oops+0xbb/0x100 [ 51.420073][ T837] __bad_area_nosemaphore+0xb3/0x680 [ 51.420085][ T837] bad_area_nosemaphore+0x2d/0x50 [ 51.420096][ T837] do_kern_addr_fault+0x6b/0xa0 [ 51.420113][ T837] exc_page_fault+0x78/0xc0 [ 51.420128][ T837] asm_exc_page_fault+0x2b/0x30 [ 51.420140][ T837] RIP: 0010:0xffffea0004e5b840 [ 51.420151][ T837] Code: ad de 28 67 90 17 81 88 ff ff 05 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 02 00 00 00 00 2a 27 02 81 88 ff ff <00> 00 00 00 00 00 00 40 00 01 00 00 00 00 ad de 22 01 00 00 00 00 [ 51.420161][ T837] RSP: 0018:ffffc9000e82e8c0 EFLAGS: 00010046 [ 51.420170][ T837] RAX: ffff8881167f2600 RBX: dffffc0000000000 RCX: ffff888115861300 [ 51.420179][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.420187][ T837] RBP: 0000000000140cca R08: ffff888115861307 R09: 1ffff11022b0c260 [ 51.420195][ T837] R10: dffffc0000000000 R11: ffffed1022b0c261 R12: 0000000000000000 [ 51.420204][ T837] R13: dffffc0000000000 R14: ffffffff85a72ac0 R15: ffffffff8716eedc [ 51.420212][ T837] ? __cfi__raw_spin_trylock+0x10/0x10 [ 51.420232][ T837] ? prep_new_page+0x2d/0x180 [ 51.420247][ T837] ? get_page_from_freelist+0x4aea/0x4ba0 [ 51.420265][ T837] ? cgroup_rstat_updated+0x144/0x800 [ 51.420279][ T837] ? ractl_max_pages+0x162/0x2b0 [ 51.420294][ T837] ? xas_create+0xe23/0xf80 [ 51.420306][ T837] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 51.420320][ T837] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 51.420337][ T837] ? static_key_count+0x45/0x70 [ 51.420352][ T837] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 51.420365][ T837] ? lruvec_init+0x201/0x280 [ 51.420385][ T837] ? __alloc_pages_noprof+0x35a/0x7e0 [ 51.420403][ T837] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.420420][ T837] ? folio_add_lru+0x116/0x400 [ 51.420435][ T837] ? __cfi_folio_add_lru+0x10/0x10 [ 51.420450][ T837] ? __folio_alloc_noprof+0x14/0x80 [ 51.420467][ T837] ? shmem_alloc_and_add_folio+0x45f/0x10b0 [ 51.420483][ T837] ? shmem_replace_folio+0x9b0/0x9b0 [ 51.420498][ T837] ? shmem_huge_global_enabled+0x2da/0x360 [ 51.420512][ T837] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 51.420526][ T837] ? __kasan_check_write+0x18/0x20 [ 51.420538][ T837] ? _raw_spin_lock+0x92/0x120 [ 51.420548][ T837] ? shmem_get_folio_gfp+0x5cd/0x12e0 [ 51.420563][ T837] ? shmem_get_folio+0xc0/0xc0 [ 51.420576][ T837] ? follow_page_pte+0x8fb/0xba0 [ 51.420593][ T837] ? inode_to_bdi+0x6d/0x100 [ 51.420610][ T837] ? shmem_write_begin+0xf4/0x260 [ 51.420628][ T837] ? generic_perform_write+0x32c/0x970 [ 51.420646][ T837] ? __cfi_generic_perform_write+0x10/0x10 [ 51.420662][ T837] ? generic_write_checks_count+0x426/0x540 [ 51.420679][ T837] ? file_update_time+0xa3/0x210 [ 51.420695][ T837] ? shmem_file_write_iter+0x105/0x130 [ 51.420712][ T837] ? __kernel_write_iter+0x462/0x900 [ 51.420725][ T837] ? __cfi___kernel_write_iter+0x10/0x10 [ 51.420737][ T837] ? get_dump_page+0x165/0x220 [ 51.420753][ T837] ? __asan_memset+0x39/0x50 [ 51.420765][ T837] ? iov_iter_bvec+0xc0/0x180 [ 51.420782][ T837] ? dump_user_range+0xb8b/0xe60 [ 51.420797][ T837] ? __cfi_dump_user_range+0x10/0x10 [ 51.420810][ T837] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 51.420828][ T837] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 51.420846][ T837] ? elf_core_dump+0x23cf/0x3840 [ 51.420862][ T837] ? elf_core_dump+0x2d61/0x3840 [ 51.420878][ T837] ? __cfi_elf_core_dump+0x10/0x10 [ 51.420892][ T837] ? mas_next_slot+0xf01/0xfd0 [ 51.420910][ T837] ? dump_interrupted+0xf0/0xf0 [ 51.420922][ T837] ? filp_open+0x199/0x1f0 [ 51.420938][ T837] ? 0xffffffffff600000 [ 51.420947][ T837] ? do_coredump+0x20d2/0x3050 [ 51.420961][ T837] ? __cfi_do_coredump+0x10/0x10 [ 51.420973][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 51.420990][ T837] ? __kasan_slab_free+0x6a/0x80 [ 51.421004][ T837] ? get_signal+0xa2a/0x1490 [ 51.421020][ T837] ? get_signal+0x11bf/0x1490 [ 51.421036][ T837] ? arch_do_signal_or_restart+0xbc/0x700 [ 51.421048][ T837] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 51.421061][ T837] ? fpregs_restore_userregs+0x11c/0x260 [ 51.421076][ T837] ? irqentry_exit_to_user_mode+0x4d/0xb0 [ 51.421092][ T837] ? irqentry_exit+0x16/0x60 [ 51.421106][ T837] ? exc_page_fault+0x65/0xc0 [ 51.421121][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 51.421135][ T837] [ 51.421139][ T837] [ 52.135199][ T837] The buggy address belongs to stack of task syz.0.153/837 [ 52.142389][ T837] and is located at offset 200 in frame: [ 52.148188][ T837] __pv_queued_spin_lock_slowpath+0x0/0xe90 [ 52.154175][ T837] [ 52.156490][ T837] This frame has 4 objects: [ 52.160978][ T837] [32, 33) 'old.i261' [ 52.160988][ T837] [48, 50) 'old.i.i' [ 52.165486][ T837] [64, 65) 'old.i' [ 52.169454][ T837] [80, 84) 'val.addr' [ 52.173270][ T837] [ 52.179625][ T837] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000e828000 allocated at copy_process+0x57c/0x3350 [ 52.192747][ T837] The buggy address belongs to the physical page: [ 52.199161][ T837] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c9cd [ 52.208032][ T837] flags: 0x4000000000000000(zone=1) [ 52.213243][ T837] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 52.221863][ T837] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 52.230529][ T837] page dumped because: kasan: bad access detected [ 52.236933][ T837] page_owner tracks the page as allocated [ 52.242813][ T837] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 836, tgid 835 (syz.0.153), ts 50262036497, free_ts 49782616784 [ 52.260793][ T837] post_alloc_hook+0x37d/0x3b0 [ 52.265655][ T837] prep_new_page+0x2d/0x180 [ 52.270272][ T837] get_page_from_freelist+0x4aea/0x4ba0 [ 52.275882][ T837] __alloc_pages_noprof+0x35a/0x7e0 [ 52.281271][ T837] __vmalloc_node_range_noprof+0x8e5/0x1300 [ 52.287264][ T837] dup_task_struct+0x5d6/0xd80 [ 52.292026][ T837] copy_process+0x57c/0x3350 [ 52.296630][ T837] kernel_clone+0x233/0x810 [ 52.301130][ T837] __x64_sys_clone+0x1b7/0x230 [ 52.305887][ T837] x64_sys_call+0x2b3c/0x2ee0 [ 52.310639][ T837] do_syscall_64+0x57/0xf0 [ 52.315062][ T837] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.320968][ T837] page last free pid 33 tgid 33 stack trace: [ 52.326948][ T837] free_unref_page+0xbb8/0xf70 [ 52.331712][ T837] __free_pages+0x6b/0x3b0 [ 52.336394][ T837] tlb_remove_table_rcu+0x2b2/0x3d0 [ 52.341609][ T837] rcu_do_batch+0x56d/0xcb0 [ 52.346123][ T837] rcu_nocb_cb_kthread+0x533/0xb60 [ 52.351229][ T837] kthread+0x2c4/0x360 [ 52.355289][ T837] ret_from_fork+0x64/0xa0 [ 52.359697][ T837] ret_from_fork_asm+0x1a/0x30 [ 52.364453][ T837] [ 52.366766][ T837] Memory state around the buggy address: [ 52.372466][ T837] ffffc9000e82e400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 52.380718][ T837] ffffc9000e82e480: f8 f2 f8 f2 f8 f2 04 f3 00 00 00 00 00 00 00 00 [ 52.388778][ T837] >ffffc9000e82e500: 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 52.396824][ T837] ^ [ 52.402186][ T837] ffffc9000e82e580: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f8 f2 f8 f2 [ 52.410271][ T837] ffffc9000e82e600: f8 f2 f8 f8 f2 f2 f8 f8 f2 f2 f8 f2 00 00 00 00 [ 52.418592][ T837] ================================================================== [ 52.426740][ T837] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 52.433417][ T837] ? __cfi_cmp_ex_search+0x10/0x10 [ 52.438622][ T837] ? search_extable+0x90/0xd0 [ 52.443414][ T837] ? do_oops_enter_exit+0x8f/0x130 [ 52.448554][ T837] oops_begin+0xc9/0xe0 [ 52.452710][ T837] page_fault_oops+0x22d/0x9d0 [ 52.457465][ T837] ? search_exception_tables+0x58/0x60 [ 52.462932][ T837] ? kernelmode_fixup_or_oops+0x100/0x100 [ 52.468656][ T837] ? __cfi_fixup_exception+0x10/0x10 [ 52.474019][ T837] ? bad_area_nosemaphore+0x2d/0x50 [ 52.479379][ T837] ? is_prefetch+0x423/0x690 [ 52.483964][ T837] ? do_kern_addr_fault+0x6b/0xa0 [ 52.489025][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 52.494217][ T837] kernelmode_fixup_or_oops+0xbb/0x100 [ 52.499666][ T837] __bad_area_nosemaphore+0xb3/0x680 [ 52.505116][ T837] bad_area_nosemaphore+0x2d/0x50 [ 52.510146][ T837] do_kern_addr_fault+0x6b/0xa0 [ 52.514992][ T837] exc_page_fault+0x78/0xc0 [ 52.519504][ T837] asm_exc_page_fault+0x2b/0x30 [ 52.524351][ T837] RIP: 0010:0xffffea0004e5b840 [ 52.529104][ T837] Code: ad de 28 67 90 17 81 88 ff ff 05 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff 02 00 00 00 00 2a 27 02 81 88 ff ff <00> 00 00 00 00 00 00 40 00 01 00 00 00 00 ad de 22 01 00 00 00 00 [ 52.550444][ T837] RSP: 0018:ffffc9000e82e8c0 EFLAGS: 00010046 [ 52.556592][ T837] RAX: ffff8881167f2600 RBX: dffffc0000000000 RCX: ffff888115861300 [ 52.564641][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.572725][ T837] RBP: 0000000000140cca R08: ffff888115861307 R09: 1ffff11022b0c260 [ 52.580801][ T837] R10: dffffc0000000000 R11: ffffed1022b0c261 R12: 0000000000000000 [ 52.588851][ T837] R13: dffffc0000000000 R14: ffffffff85a72ac0 R15: ffffffff8716eedc [ 52.596846][ T837] ? __cfi__raw_spin_trylock+0x10/0x10 [ 52.602349][ T837] ? prep_new_page+0x2d/0x180 [ 52.607045][ T837] ? get_page_from_freelist+0x4aea/0x4ba0 [ 52.612779][ T837] ? cgroup_rstat_updated+0x144/0x800 [ 52.618257][ T837] ? ractl_max_pages+0x162/0x2b0 [ 52.623218][ T837] ? xas_create+0xe23/0xf80 [ 52.627721][ T837] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 52.633624][ T837] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 52.639361][ T837] ? static_key_count+0x45/0x70 [ 52.644234][ T837] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 52.650038][ T837] ? lruvec_init+0x201/0x280 [ 52.654730][ T837] ? __alloc_pages_noprof+0x35a/0x7e0 [ 52.660293][ T837] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.666066][ T837] ? folio_add_lru+0x116/0x400 [ 52.670844][ T837] ? __cfi_folio_add_lru+0x10/0x10 [ 52.676129][ T837] ? __folio_alloc_noprof+0x14/0x80 [ 52.681516][ T837] ? shmem_alloc_and_add_folio+0x45f/0x10b0 [ 52.687416][ T837] ? shmem_replace_folio+0x9b0/0x9b0 [ 52.692824][ T837] ? shmem_huge_global_enabled+0x2da/0x360 [ 52.698645][ T837] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 52.704649][ T837] ? __kasan_check_write+0x18/0x20 [ 52.709761][ T837] ? _raw_spin_lock+0x92/0x120 [ 52.714642][ T837] ? shmem_get_folio_gfp+0x5cd/0x12e0 [ 52.720031][ T837] ? shmem_get_folio+0xc0/0xc0 [ 52.724977][ T837] ? follow_page_pte+0x8fb/0xba0 [ 52.729940][ T837] ? inode_to_bdi+0x6d/0x100 [ 52.734534][ T837] ? shmem_write_begin+0xf4/0x260 [ 52.739569][ T837] ? generic_perform_write+0x32c/0x970 [ 52.745123][ T837] ? __cfi_generic_perform_write+0x10/0x10 [ 52.750929][ T837] ? generic_write_checks_count+0x426/0x540 [ 52.756841][ T837] ? file_update_time+0xa3/0x210 [ 52.761789][ T837] ? shmem_file_write_iter+0x105/0x130 [ 52.767339][ T837] ? __kernel_write_iter+0x462/0x900 [ 52.772797][ T837] ? __cfi___kernel_write_iter+0x10/0x10 [ 52.778530][ T837] ? get_dump_page+0x165/0x220 [ 52.783838][ T837] ? __asan_memset+0x39/0x50 [ 52.788427][ T837] ? iov_iter_bvec+0xc0/0x180 [ 52.793112][ T837] ? dump_user_range+0xb8b/0xe60 [ 52.798043][ T837] ? __cfi_dump_user_range+0x10/0x10 [ 52.803322][ T837] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 52.809658][ T837] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 52.816252][ T837] ? elf_core_dump+0x23cf/0x3840 [ 52.821205][ T837] ? elf_core_dump+0x2d61/0x3840 [ 52.826144][ T837] ? __cfi_elf_core_dump+0x10/0x10 [ 52.831256][ T837] ? mas_next_slot+0xf01/0xfd0 [ 52.836019][ T837] ? dump_interrupted+0xf0/0xf0 [ 52.840867][ T837] ? filp_open+0x199/0x1f0 [ 52.845289][ T837] ? 0xffffffffff600000 [ 52.849587][ T837] ? do_coredump+0x20d2/0x3050 [ 52.854362][ T837] ? __cfi_do_coredump+0x10/0x10 [ 52.859300][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 52.864351][ T837] ? __kasan_slab_free+0x6a/0x80 [ 52.869287][ T837] ? get_signal+0xa2a/0x1490 [ 52.873870][ T837] ? get_signal+0x11bf/0x1490 [ 52.878564][ T837] ? arch_do_signal_or_restart+0xbc/0x700 [ 52.884402][ T837] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 52.890656][ T837] ? fpregs_restore_userregs+0x11c/0x260 [ 52.896286][ T837] ? irqentry_exit_to_user_mode+0x4d/0xb0 [ 52.902024][ T837] ? irqentry_exit+0x16/0x60 [ 52.906606][ T837] ? exc_page_fault+0x65/0xc0 [ 52.911286][ T837] ? asm_exc_page_fault+0x2b/0x30 [ 52.916303][ T837] [ 52.919319][ T837] Modules linked in: [ 52.923206][ T837] ---[ end trace 0000000000000000 ]--- [ 52.928657][ T837] RIP: 0010:vprintk+0x7d/0xa0 [ 52.933497][ T837] Code: f0 00 74 07 e8 a4 2a 1e 00 eb 0e e8 2d ee ff ff 84 c0 74 1c e8 94 2a 1e 00 4c 89 f7 48 89 de e8 d9 d6 ff ff 5b 41 5e 41 5f 5d cc cc cc cc cc e8 78 2a 1e 00 4c 89 f7 48 89 de e8 0d 6c ff ff [ 52.953276][ T837] RSP: 0018:ffffc9000e82e2f8 EFLAGS: 00010046 [ 52.959365][ T837] RAX: 0000000000000045 RBX: dffffc0000000000 RCX: ffff888115861300 [ 52.967413][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 52.975407][ T837] RBP: ffffc9000e82e3f0 R08: ffffc9000e82e0e7 R09: 1ffff92001d05c1c [ 52.983456][ T837] R10: dffffc0000000000 R11: fffff52001d05c1d R12: 1ffff92001d05c68 [ 52.991416][ T837] R13: ffffc9000e82e340 R14: ffffc9000e82e360 R15: ffffc9000e82e310 [ 52.999375][ T837] FS: 00007feac73e76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.008295][ T837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.014865][ T837] CR2: ffff8881158620b0 CR3: 000000011599e000 CR4: 00000000003526b0 [ 53.022830][ T837] Kernel panic - not syncing: Fatal exception [ 54.108773][ T837] Shutting down cpus with NMI [ 54.113788][ T837] Kernel Offset: disabled [ 54.118115][ T837] Rebooting in 86400 seconds..