last executing test programs: 14.651349209s ago: executing program 4 (id=688): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@dioread_nolock}, {@norecovery}, {@data_writeback}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@orlov}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@noacl}, {@data_err_ignore}], [{@pcr={'pcr', 0x3d, 0x6}}, {@euid_gt}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x3) read$FUSE(r0, 0x0, 0x0) 14.635366998s ago: executing program 4 (id=689): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x141, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 13.467504447s ago: executing program 3 (id=695): syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @random='A \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x6b, [@private=0xa010100]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 13.467047258s ago: executing program 2 (id=696): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x220, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5c}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe83}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ID={0x94, 0x3, "2a5bb3e489438301feddb1547cc648a178a8f8029c2a61f371c4e330437c9beff1b9d73108679bfe7aa15cfdaa7e5b6056bc450c032c0eba76627ed077b5dc9365089b1762aebd11a637b1e8c9b221e17f7831ee16a0642a48f9133dde5ea2b16ab56f859a352bd029958499fa82728a42d75a8e926e4adbef40d770d18634208991f2d0c60039c3b2b363dd6ea6d426"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "00c8e74f8a39a7e65a391ff97ea4621630862adf148be977df57cf96480a351e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "901bf3261b9919132255ddcd1619d236ae249414"}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4c801}, 0x4040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) sendmsg$key(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001040)={0x2, 0x13, 0x8, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x10) r6 = dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, 0x0, 0x10) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) r9 = timerfd_create(0x0, 0x0) read(r9, 0x0, 0x0) 13.436542638s ago: executing program 4 (id=697): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000480)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='asymmetric\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0)=@chain={'key_or_keyring:', r1}) 13.415348849s ago: executing program 3 (id=698): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 13.074844007s ago: executing program 4 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xd, 0x4, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b80)={r1, &(0x7f0000000bc0)}, 0x20) 13.006019149s ago: executing program 3 (id=702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2a0280, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200affd14000600002fb96d", 0xe}], 0x1, 0x0, 0x0, 0x1000000}, 0x4000) 12.951186251s ago: executing program 4 (id=705): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000040)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000200)=0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f0000000500)="b800000500000000", &(0x7f0000000540)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x68, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 12.366068515s ago: executing program 2 (id=709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mlockall(0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') read$eventfd(r0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xd7, &(0x7f0000000340)=""/215, 0x41100, 0x8}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000a80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) write(r1, &(0x7f0000000000)='3', 0x4e) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1, 0x25c) 12.260194027s ago: executing program 2 (id=710): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 10.910835411s ago: executing program 1 (id=717): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x679, &(0x7f0000020540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) 10.870242152s ago: executing program 1 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 1.345987087s ago: executing program 2 (id=719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 1.345625827s ago: executing program 3 (id=720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) copy_file_range(r0, 0x0, r1, &(0x7f0000000240)=0xe000, 0x7000, 0x2000000) 1.314403048s ago: executing program 3 (id=721): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005880)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x203c000, 0x0, 0x40, 0x0, &(0x7f0000000140)) 1.314064508s ago: executing program 0 (id=722): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000480)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000540)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000005c0)=@chain={'key_or_keyring:', r1}) 1.267195469s ago: executing program 0 (id=723): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000012c0), 0x80, 0x0) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000001340)=""/1, 0x1}], 0x1, 0xcc9, 0x4) 1.267094119s ago: executing program 0 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.266989419s ago: executing program 2 (id=725): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000006940)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000006980)='./nfsd\x00', &(0x7f00000069c0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000006ac0)='3', 0x1) 1.265606039s ago: executing program 1 (id=726): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0x0, @empty, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 1.23490647s ago: executing program 0 (id=727): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') read$FUSE(r0, 0x0, 0x0) 1.135015682s ago: executing program 0 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(0x0, 0x8000000, 0x200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000000)={"3f0daad046ba1ca8071a9937e591c88806fb0b32b6e65352fae82091b242", 0x1ff, 0x7, 0x1, [0x9, 0x5, 0x1, 0x3, 0x1ff, 0x8, 0x400, 0x5, 0x5f, 0x2, 0x7fff, 0x748, 0x101, 0xfffff72e, 0xffffffff, 0x0, 0x6, 0x5]}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") open(0x0, 0x145142, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 1.134115582s ago: executing program 2 (id=729): syz_clone3(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 443.446169ms ago: executing program 4 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_dev$sndmidi(0x0, 0x9, 0x6000) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) copy_file_range(r3, &(0x7f0000000500), r2, 0x0, 0xa003e458, 0x700000000000000) ftruncate(r2, 0xc) 417.03856ms ago: executing program 3 (id=731): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) 353.596151ms ago: executing program 1 (id=732): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x200, r1, 0x4}, 0x38) 275.525913ms ago: executing program 1 (id=733): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000480)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000540)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000005c0)=@chain={'key_or_keyring:', r1}) 11.66221ms ago: executing program 1 (id=734): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x5, 0x459, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 0 (id=735): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xb, @empty}, 0x1c) kernel console output (not intermixed with test programs): 5788e8 code=0x7ffc0000 [ 125.402813][ T5050] syz.3.216 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 125.405274][ T5050] CPU: 0 PID: 5050 Comm: syz.3.216 Not tainted syzkaller #0 [ 125.406791][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 125.408966][ T5050] Call trace: [ 125.409580][ T5050] dump_backtrace+0x1c4/0x1f0 [ 125.410515][ T5050] show_stack+0x2c/0x3c [ 125.411314][ T5050] __dump_stack+0x30/0x40 [ 125.412172][ T5050] dump_stack_lvl+0xf4/0x15c [ 125.413090][ T5050] dump_stack+0x1c/0x5c [ 125.413944][ T5050] dump_header+0xc0/0x724 [ 125.414777][ T5050] out_of_memory+0xc78/0xf70 [ 125.415650][ T5050] mem_cgroup_out_of_memory+0x228/0x2d0 [ 125.416719][ T5050] try_charge_memcg+0xa4c/0x1390 [ 125.417665][ T5050] obj_cgroup_charge+0x178/0x2e4 [ 125.418581][ T5050] pcpu_alloc+0x1bc/0x16e0 [ 125.419459][ T5050] __alloc_percpu_gfp+0x38/0x4c [ 125.420431][ T5050] mem_cgroup_css_alloc+0x2dc/0x1250 [ 125.421499][ T5050] cgroup_apply_control_enable+0x35c/0x9e0 [ 125.422682][ T5050] cgroup_mkdir+0x964/0xcf8 [ 125.423571][ T5050] kernfs_iop_mkdir+0x118/0x164 [ 125.424466][ T5050] vfs_mkdir+0x314/0x4d8 [ 125.425273][ T5050] do_mkdirat+0x1b8/0x3ec [ 125.426103][ T5050] __arm64_sys_mkdirat+0x90/0xa8 [ 125.427071][ T5050] invoke_syscall+0x98/0x290 [ 125.427991][ T5050] el0_svc_common+0x13c/0x258 [ 125.428930][ T5050] do_el0_svc+0x5c/0x134 [ 125.429696][ T5050] el0_svc+0x58/0x12c [ 125.430465][ T5050] el0t_64_sync_handler+0x84/0xf0 [ 125.431384][ T5050] el0t_64_sync+0x18c/0x190 [ 125.432493][ T5050] memory: usage 0kB, limit 0kB, failcnt 57 [ 125.433628][ T5050] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.435085][ T5050] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 125.436318][ T5050] Memory cgroup stats for /syz3/test: [ 125.436413][ T5050] anon 0 [ 125.436413][ T5050] file 0 [ 125.436413][ T5050] kernel 0 [ 125.436413][ T5050] kernel_stack 0 [ 125.436413][ T5050] pagetables 0 [ 125.436413][ T5050] sec_pagetables 0 [ 125.436413][ T5050] percpu 0 [ 125.436413][ T5050] sock 0 [ 125.436413][ T5050] vmalloc 0 [ 125.436413][ T5050] shmem 0 [ 125.436413][ T5050] zswap 0 [ 125.436413][ T5050] zswapped 0 [ 125.436413][ T5050] file_mapped 0 [ 125.436413][ T5050] file_dirty 0 [ 125.436413][ T5050] file_writeback 0 [ 125.436413][ T5050] swapcached 0 [ 125.436413][ T5050] anon_thp 0 [ 125.436413][ T5050] file_thp 0 [ 125.436413][ T5050] shmem_thp 0 [ 125.436413][ T5050] inactive_anon 0 [ 125.436413][ T5050] active_anon 0 [ 125.436413][ T5050] inactive_file 0 [ 125.436413][ T5050] active_file 0 [ 125.436413][ T5050] unevictable 0 [ 125.436413][ T5050] slab_reclaimable 0 [ 125.436413][ T5050] slab_unreclaimable 0 [ 125.436413][ T5050] slab 0 [ 125.436413][ T5050] workingset_refault_anon 0 [ 125.454350][ T5050] Out of memory and no killable processes... [ 125.513241][ T326] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 125.515080][ T326] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 125.782267][ T5052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.784173][ T5052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.913564][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.914926][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.004719][ T5056] binder: 5055:5056 ioctl c0306201 200000c0 returned -14 [ 126.006653][ T5056] binder: 5055:5056 ioctl c0306201 20000340 returned -14 [ 126.008095][ T5056] binder: 5055:5056 got transaction to invalid handle, 1 [ 126.009497][ T5056] binder: 5056:5055 cannot find target node [ 126.010605][ T5056] binder: 5055:5056 transaction call to 0:0 failed 58/29201/-22, size 120-24 line 3062 [ 126.012825][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.328632][ T5083] netlink: 276 bytes leftover after parsing attributes in process `syz.1.227'. [ 136.343075][ T5083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.348951][ T5083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.357836][ T5089] binder: 5088:5089 ioctl c0306201 200000c0 returned -14 [ 136.365027][ T5089] binder: 5088:5089 ioctl c0306201 20000340 returned -14 [ 136.366462][ T5089] binder: 5088:5089 got transaction to invalid handle, 1 [ 136.367951][ T5089] binder: 5089:5088 cannot find target node [ 136.369076][ T5089] binder: 5088:5089 transaction call to 0:0 failed 61/29201/-22, size 120-24 line 3062 [ 136.378101][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.411458][ T5095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.416832][ T5095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.106467][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.108289][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.335471][ T5144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.337967][ T5144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.917637][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.919602][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.234725][ T5196] netlink: 276 bytes leftover after parsing attributes in process `syz.1.255'. [ 148.239123][ T5196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.241710][ T5196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.397554][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 148.397620][ T27] audit: type=1326 audit(148.390:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.402853][ T27] audit: type=1326 audit(148.390:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.408462][ T5222] syz.4.263 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 148.410504][ T5222] CPU: 0 PID: 5222 Comm: syz.4.263 Not tainted syzkaller #0 [ 148.411824][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 148.412432][ T27] audit: type=1326 audit(148.390:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.413614][ T5222] Call trace: [ 148.413622][ T5222] dump_backtrace+0x1c4/0x1f0 [ 148.413641][ T5222] show_stack+0x2c/0x3c [ 148.413647][ T5222] __dump_stack+0x30/0x40 [ 148.413658][ T5222] dump_stack_lvl+0xf4/0x15c [ 148.413666][ T5222] dump_stack+0x1c/0x5c [ 148.413673][ T5222] dump_header+0xc0/0x724 [ 148.413680][ T5222] out_of_memory+0xc78/0xf70 [ 148.413689][ T5222] mem_cgroup_out_of_memory+0x228/0x2d0 [ 148.413699][ T5222] try_charge_memcg+0xa4c/0x1390 [ 148.413704][ T5222] obj_cgroup_charge+0x178/0x2e4 [ 148.421266][ T27] audit: type=1326 audit(148.390:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.421896][ T5222] pcpu_alloc+0x1bc/0x16e0 [ 148.423442][ T27] audit: type=1326 audit(148.390:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.423695][ T5222] __alloc_percpu_gfp+0x38/0x4c [ 148.424737][ T27] audit: type=1326 audit(148.390:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.425668][ T5222] mem_cgroup_css_alloc+0x2dc/0x1250 [ 148.426745][ T27] audit: type=1326 audit(148.390:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.427522][ T5222] cgroup_apply_control_enable+0x35c/0x9e0 [ 148.432377][ T27] audit: type=1326 audit(148.390:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.433104][ T5222] cgroup_mkdir+0x964/0xcf8 [ 148.438193][ T27] audit: type=1326 audit(148.390:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.438613][ T5222] kernfs_iop_mkdir+0x118/0x164 [ 148.443510][ T27] audit: type=1326 audit(148.390:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5221 comm="syz.4.263" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa8b788e8 code=0x7ffc0000 [ 148.444245][ T5222] vfs_mkdir+0x314/0x4d8 [ 148.466188][ T5222] do_mkdirat+0x1b8/0x3ec [ 148.467130][ T5222] __arm64_sys_mkdirat+0x90/0xa8 [ 148.468264][ T5222] invoke_syscall+0x98/0x290 [ 148.469307][ T5222] el0_svc_common+0x200/0x258 [ 148.470264][ T5222] do_el0_svc+0x5c/0x134 [ 148.471134][ T5222] el0_svc+0x58/0x12c [ 148.471960][ T5222] el0t_64_sync_handler+0x84/0xf0 [ 148.472978][ T5222] el0t_64_sync+0x18c/0x190 [ 148.475046][ T5222] memory: usage 0kB, limit 0kB, failcnt 38 [ 148.476413][ T5222] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 148.478067][ T5222] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 148.485880][ T5222] Memory cgroup stats for /syz4/test: [ 148.485997][ T5222] anon 0 [ 148.485997][ T5222] file 0 [ 148.485997][ T5222] kernel 0 [ 148.485997][ T5222] kernel_stack 0 [ 148.485997][ T5222] pagetables 0 [ 148.485997][ T5222] sec_pagetables 0 [ 148.485997][ T5222] percpu 0 [ 148.485997][ T5222] sock 0 [ 148.485997][ T5222] vmalloc 0 [ 148.485997][ T5222] shmem 0 [ 148.485997][ T5222] zswap 0 [ 148.485997][ T5222] zswapped 0 [ 148.485997][ T5222] file_mapped 0 [ 148.485997][ T5222] file_dirty 0 [ 148.485997][ T5222] file_writeback 0 [ 148.485997][ T5222] swapcached 0 [ 148.485997][ T5222] anon_thp 0 [ 148.485997][ T5222] file_thp 0 [ 148.485997][ T5222] shmem_thp 0 [ 148.485997][ T5222] inactive_anon 0 [ 148.485997][ T5222] active_anon 0 [ 148.485997][ T5222] inactive_file 0 [ 148.485997][ T5222] active_file 0 [ 148.485997][ T5222] unevictable 0 [ 148.485997][ T5222] slab_reclaimable 0 [ 148.485997][ T5222] slab_unreclaimable 0 [ 148.485997][ T5222] slab 0 [ 148.485997][ T5222] workingset_refault_anon 0 [ 148.508435][ T5222] Out of memory and no killable processes... [ 148.623303][ T4380] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.804616][ T4380] usb 1-1: config 255 has an invalid interface number: 63 but max is 1 [ 148.806330][ T4380] usb 1-1: config 255 has an invalid interface number: 90 but max is 1 [ 148.807924][ T4380] usb 1-1: config 255 has no interface number 0 [ 148.809248][ T4380] usb 1-1: config 255 has no interface number 1 [ 148.810424][ T4380] usb 1-1: config 255 interface 63 has no altsetting 0 [ 148.811883][ T4380] usb 1-1: config 255 interface 90 has no altsetting 0 [ 148.815123][ T4380] usb 1-1: New USB device found, idVendor=0403, idProduct=e009, bcdDevice=57.1d [ 148.816671][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.818001][ T4380] usb 1-1: Product: syz [ 148.818710][ T4380] usb 1-1: Manufacturer: syz [ 148.819515][ T4380] usb 1-1: SerialNumber: syz [ 153.593208][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 153.593244][ T4333] Bluetooth: hci0: command 0x0406 tx timeout [ 153.594381][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 153.595646][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 153.596696][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 153.836341][ T4380] ftdi_sio 1-1:255.63: FTDI USB Serial Device converter detected [ 153.838080][ T4380] ftdi_sio ttyUSB0: unknown device type: 0x571d [ 153.840981][ T4380] ftdi_sio 1-1:255.90: FTDI USB Serial Device converter detected [ 153.842675][ T4380] ftdi_sio ttyUSB1: unknown device type: 0x571d [ 159.176066][ T4377] usb 1-1: USB disconnect, device number 6 [ 159.177918][ T4377] ftdi_sio 1-1:255.63: device disconnected [ 159.188587][ T4377] ftdi_sio 1-1:255.90: device disconnected [ 159.350798][ T5283] netlink: 276 bytes leftover after parsing attributes in process `syz.3.277'. [ 159.363920][ T5283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.365632][ T5283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.394911][ T5291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.397332][ T5291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.406168][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 159.406177][ T27] audit: type=1326 audit(159.400:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.412043][ T27] audit: type=1326 audit(159.400:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.423300][ T27] audit: type=1326 audit(159.400:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.432251][ T5293] syz.1.281 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 159.434652][ T5293] CPU: 1 PID: 5293 Comm: syz.1.281 Not tainted syzkaller #0 [ 159.436050][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 159.437954][ T5293] Call trace: [ 159.438590][ T5293] dump_backtrace+0x1c4/0x1f0 [ 159.439498][ T5293] show_stack+0x2c/0x3c [ 159.440325][ T5293] __dump_stack+0x30/0x40 [ 159.441246][ T5293] dump_stack_lvl+0xf4/0x15c [ 159.442187][ T5293] dump_stack+0x1c/0x5c [ 159.443063][ T5293] dump_header+0xc0/0x724 [ 159.444000][ T5293] out_of_memory+0xc78/0xf70 [ 159.444875][ T5293] mem_cgroup_out_of_memory+0x228/0x2d0 [ 159.445857][ T5293] try_charge_memcg+0xa4c/0x1390 [ 159.446857][ T5293] obj_cgroup_charge+0x178/0x2e4 [ 159.447863][ T5293] pcpu_alloc+0x1bc/0x16e0 [ 159.448700][ T5293] __alloc_percpu_gfp+0x38/0x4c [ 159.449545][ T5293] mem_cgroup_css_alloc+0x2dc/0x1250 [ 159.450539][ T5293] cgroup_apply_control_enable+0x35c/0x9e0 [ 159.451728][ T5293] cgroup_mkdir+0x964/0xcf8 [ 159.452610][ T5293] kernfs_iop_mkdir+0x118/0x164 [ 159.453527][ T5293] vfs_mkdir+0x314/0x4d8 [ 159.454363][ T5293] do_mkdirat+0x1b8/0x3ec [ 159.455265][ T5293] __arm64_sys_mkdirat+0x90/0xa8 [ 159.456276][ T5293] invoke_syscall+0x98/0x290 [ 159.457267][ T5293] el0_svc_common+0x200/0x258 [ 159.458287][ T5293] do_el0_svc+0x5c/0x134 [ 159.459163][ T5293] el0_svc+0x58/0x12c [ 159.459983][ T5293] el0t_64_sync_handler+0x84/0xf0 [ 159.461019][ T5293] el0t_64_sync+0x18c/0x190 [ 159.463915][ T27] audit: type=1326 audit(159.400:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.468203][ T27] audit: type=1326 audit(159.400:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.472362][ T27] audit: type=1326 audit(159.400:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.477733][ T27] audit: type=1326 audit(159.400:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.482384][ T27] audit: type=1326 audit(159.400:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.486720][ T5293] memory: usage 0kB, limit 0kB, failcnt 19 [ 159.488099][ T27] audit: type=1326 audit(159.400:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.488222][ T5293] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 159.498319][ T27] audit: type=1326 audit(159.400:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5292 comm="syz.1.281" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa17788e8 code=0x7ffc0000 [ 159.509351][ T5293] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 159.510729][ T5293] Memory cgroup stats for /syz1/test: [ 159.510810][ T5293] anon 0 [ 159.510810][ T5293] file 0 [ 159.510810][ T5293] kernel 0 [ 159.510810][ T5293] kernel_stack 0 [ 159.510810][ T5293] pagetables 0 [ 159.510810][ T5293] sec_pagetables 0 [ 159.510810][ T5293] percpu 0 [ 159.510810][ T5293] sock 0 [ 159.510810][ T5293] vmalloc 0 [ 159.510810][ T5293] shmem 0 [ 159.510810][ T5293] zswap 0 [ 159.510810][ T5293] zswapped 0 [ 159.510810][ T5293] file_mapped 0 [ 159.510810][ T5293] file_dirty 0 [ 159.510810][ T5293] file_writeback 0 [ 159.510810][ T5293] swapcached 0 [ 159.510810][ T5293] anon_thp 0 [ 159.510810][ T5293] file_thp 0 [ 159.510810][ T5293] shmem_thp 0 [ 159.510810][ T5293] inactive_anon 0 [ 159.510810][ T5293] active_anon 0 [ 159.510810][ T5293] inactive_file 0 [ 159.510810][ T5293] active_file 0 [ 159.510810][ T5293] unevictable 0 [ 159.510810][ T5293] slab_reclaimable 0 [ 159.510810][ T5293] slab_unreclaimable 0 [ 159.510810][ T5293] slab 0 [ 159.510810][ T5293] workingset_refault_anon 0 [ 159.532000][ T5293] Out of memory and no killable processes... [ 170.443093][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.449549][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.472609][ T5357] netlink: 276 bytes leftover after parsing attributes in process `syz.0.296'. [ 170.530724][ T5369] device macsec1 entered promiscuous mode [ 170.641237][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 170.641249][ T27] audit: type=1326 audit(170.630:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.651542][ T27] audit: type=1326 audit(170.630:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.653573][ T5382] syz.3.300 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 170.657169][ T27] audit: type=1326 audit(170.640:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.658066][ T5382] CPU: 1 PID: 5382 Comm: syz.3.300 Not tainted syzkaller #0 [ 170.662612][ T27] audit: type=1326 audit(170.640:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.663899][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 170.663909][ T5382] Call trace: [ 170.663915][ T5382] dump_backtrace+0x1c4/0x1f0 [ 170.663932][ T5382] show_stack+0x2c/0x3c [ 170.663943][ T5382] __dump_stack+0x30/0x40 [ 170.669502][ T27] audit: type=1326 audit(170.640:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.670726][ T5382] dump_stack_lvl+0xf4/0x15c [ 170.671376][ T27] audit: type=1326 audit(170.640:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.672242][ T5382] dump_stack+0x1c/0x5c [ 170.672263][ T5382] dump_header+0xc0/0x724 [ 170.674059][ T27] audit: type=1326 audit(170.640:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.678179][ T5382] out_of_memory+0xc78/0xf70 [ 170.679097][ T27] audit: type=1326 audit(170.640:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.683172][ T5382] mem_cgroup_out_of_memory+0x228/0x2d0 [ 170.683192][ T5382] try_charge_memcg+0xa4c/0x1390 [ 170.683199][ T5382] obj_cgroup_charge+0x178/0x2e4 [ 170.684600][ T27] audit: type=1326 audit(170.640:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.684925][ T5382] pcpu_alloc+0x1bc/0x16e0 [ 170.688954][ T27] audit: type=1326 audit(170.640:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.3.300" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 170.689792][ T5382] __alloc_percpu_gfp+0x38/0x4c [ 170.707013][ T5382] mem_cgroup_css_alloc+0x2dc/0x1250 [ 170.708080][ T5382] cgroup_apply_control_enable+0x35c/0x9e0 [ 170.709306][ T5382] cgroup_mkdir+0x964/0xcf8 [ 170.710226][ T5382] kernfs_iop_mkdir+0x118/0x164 [ 170.711173][ T5382] vfs_mkdir+0x314/0x4d8 [ 170.711957][ T5382] do_mkdirat+0x1b8/0x3ec [ 170.712798][ T5382] __arm64_sys_mkdirat+0x90/0xa8 [ 170.713760][ T5382] invoke_syscall+0x98/0x290 [ 170.714662][ T5382] el0_svc_common+0x200/0x258 [ 170.715549][ T5382] do_el0_svc+0x5c/0x134 [ 170.716369][ T5382] el0_svc+0x58/0x12c [ 170.717148][ T5382] el0t_64_sync_handler+0x84/0xf0 [ 170.718155][ T5382] el0t_64_sync+0x18c/0x190 [ 170.720911][ T5382] memory: usage 0kB, limit 0kB, failcnt 76 [ 170.722043][ T5382] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.723888][ T5382] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.725420][ T5382] Memory cgroup stats for /syz3/test: [ 170.725517][ T5382] anon 0 [ 170.725517][ T5382] file 0 [ 170.725517][ T5382] kernel 0 [ 170.725517][ T5382] kernel_stack 0 [ 170.725517][ T5382] pagetables 0 [ 170.725517][ T5382] sec_pagetables 0 [ 170.725517][ T5382] percpu 0 [ 170.725517][ T5382] sock 0 [ 170.725517][ T5382] vmalloc 0 [ 170.725517][ T5382] shmem 0 [ 170.725517][ T5382] zswap 0 [ 170.725517][ T5382] zswapped 0 [ 170.725517][ T5382] file_mapped 0 [ 170.725517][ T5382] file_dirty 0 [ 170.725517][ T5382] file_writeback 0 [ 170.725517][ T5382] swapcached 0 [ 170.725517][ T5382] anon_thp 0 [ 170.725517][ T5382] file_thp 0 [ 170.725517][ T5382] shmem_thp 0 [ 170.725517][ T5382] inactive_anon 0 [ 170.725517][ T5382] active_anon 0 [ 170.725517][ T5382] inactive_file 0 [ 170.725517][ T5382] active_file 0 [ 170.725517][ T5382] unevictable 0 [ 170.725517][ T5382] slab_reclaimable 0 [ 170.725517][ T5382] slab_unreclaimable 0 [ 170.725517][ T5382] slab 0 [ 170.725517][ T5382] workingset_refault_anon 0 [ 170.743529][ T5382] Out of memory and no killable processes... [ 170.783222][ T4377] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.964456][ T4377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.966414][ T4377] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.971401][ T4377] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 170.973660][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.975387][ T4377] usb 1-1: Product: syz [ 170.976180][ T4377] usb 1-1: Manufacturer: syz [ 170.977234][ T4377] usb 1-1: SerialNumber: syz [ 170.980939][ T4377] kalmia: probe of 1-1:1.0 failed with error -22 [ 171.182715][ T4377] usb 1-1: USB disconnect, device number 7 [ 181.847029][ T5416] device macsec1 entered promiscuous mode [ 181.922623][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 181.922633][ T27] audit: type=1326 audit(181.910:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 181.934762][ T27] audit: type=1326 audit(181.920:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 181.949954][ T27] audit: type=1326 audit(181.920:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 181.956760][ T5440] syz.3.314 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 181.958976][ T5440] CPU: 0 PID: 5440 Comm: syz.3.314 Not tainted syzkaller #0 [ 181.960565][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.962617][ T5440] Call trace: [ 181.963240][ T5440] dump_backtrace+0x1c4/0x1f0 [ 181.964214][ T5440] show_stack+0x2c/0x3c [ 181.965058][ T5440] __dump_stack+0x30/0x40 [ 181.965925][ T5440] dump_stack_lvl+0xf4/0x15c [ 181.966841][ T5440] dump_stack+0x1c/0x5c [ 181.967601][ T5440] dump_header+0xc0/0x724 [ 181.968466][ T5440] out_of_memory+0xc78/0xf70 [ 181.969394][ T5440] mem_cgroup_out_of_memory+0x228/0x2d0 [ 181.970578][ T5440] try_charge_memcg+0xa4c/0x1390 [ 181.971622][ T5440] obj_cgroup_charge+0x178/0x2e4 [ 181.972650][ T5440] pcpu_alloc+0x1bc/0x16e0 [ 181.973522][ T5440] __alloc_percpu_gfp+0x38/0x4c [ 181.974420][ T5440] mem_cgroup_css_alloc+0x2dc/0x1250 [ 181.975449][ T5440] cgroup_apply_control_enable+0x35c/0x9e0 [ 181.976550][ T5440] cgroup_mkdir+0x964/0xcf8 [ 181.977453][ T5440] kernfs_iop_mkdir+0x118/0x164 [ 181.978337][ T5440] vfs_mkdir+0x314/0x4d8 [ 181.979208][ T5440] do_mkdirat+0x1b8/0x3ec [ 181.980084][ T5440] __arm64_sys_mkdirat+0x90/0xa8 [ 181.981048][ T5440] invoke_syscall+0x98/0x290 [ 181.982006][ T5440] el0_svc_common+0x200/0x258 [ 181.983032][ T5440] do_el0_svc+0x5c/0x134 [ 181.983816][ T5440] el0_svc+0x58/0x12c [ 181.984666][ T5440] el0t_64_sync_handler+0x84/0xf0 [ 181.985663][ T5440] el0t_64_sync+0x18c/0x190 [ 182.003367][ T27] audit: type=1326 audit(181.920:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.009454][ T27] audit: type=1326 audit(181.920:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.015319][ T27] audit: type=1326 audit(181.920:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.033194][ T27] audit: type=1326 audit(181.920:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.040521][ T27] audit: type=1326 audit(181.920:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.049541][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.051993][ T27] audit: type=1326 audit(181.920:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.057519][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.061047][ T27] audit: type=1326 audit(181.920:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5439 comm="syz.3.314" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 182.067551][ T5440] memory: usage 0kB, limit 0kB, failcnt 95 [ 182.068840][ T5440] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 182.071352][ T5440] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 182.072861][ T5440] Memory cgroup stats for /syz3/test: [ 182.072949][ T5440] anon 0 [ 182.072949][ T5440] file 0 [ 182.072949][ T5440] kernel 0 [ 182.072949][ T5440] kernel_stack 0 [ 182.072949][ T5440] pagetables 0 [ 182.072949][ T5440] sec_pagetables 0 [ 182.072949][ T5440] percpu 0 [ 182.072949][ T5440] sock 0 [ 182.072949][ T5440] vmalloc 0 [ 182.072949][ T5440] shmem 0 [ 182.072949][ T5440] zswap 0 [ 182.072949][ T5440] zswapped 0 [ 182.072949][ T5440] file_mapped 0 [ 182.072949][ T5440] file_dirty 0 [ 182.072949][ T5440] file_writeback 0 [ 182.072949][ T5440] swapcached 0 [ 182.072949][ T5440] anon_thp 0 [ 182.072949][ T5440] file_thp 0 [ 182.072949][ T5440] shmem_thp 0 [ 182.072949][ T5440] inactive_anon 0 [ 182.072949][ T5440] active_anon 0 [ 182.072949][ T5440] inactive_file 0 [ 182.072949][ T5440] active_file 0 [ 182.072949][ T5440] unevictable 0 [ 182.072949][ T5440] slab_reclaimable 0 [ 182.072949][ T5440] slab_unreclaimable 0 [ 182.072949][ T5440] slab 0 [ 182.072949][ T5440] workingset_refault_anon 0 [ 182.095957][ T5440] Out of memory and no killable processes... [ 182.142795][ T5463] netlink: 276 bytes leftover after parsing attributes in process `syz.3.321'. [ 182.323270][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.325578][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.506293][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.508168][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.363524][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.364767][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.904529][ T5488] device macsec1 entered promiscuous mode [ 193.067725][ T5507] device syzkaller0 entered promiscuous mode [ 193.106766][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 193.106777][ T27] audit: type=1326 audit(193.100:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.113413][ T27] audit: type=1326 audit(193.100:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.118629][ T27] audit: type=1326 audit(193.100:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.124581][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.127763][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.137482][ T5516] syz.2.335 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 193.138991][ T27] audit: type=1326 audit(193.100:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.139311][ T5516] CPU: 0 PID: 5516 Comm: syz.2.335 Not tainted syzkaller #0 [ 193.144595][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 193.146567][ T5516] Call trace: [ 193.147219][ T5516] dump_backtrace+0x1c4/0x1f0 [ 193.147921][ T27] audit: type=1326 audit(193.100:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.148146][ T5516] show_stack+0x2c/0x3c [ 193.152017][ T27] audit: type=1326 audit(193.100:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.152800][ T5516] __dump_stack+0x30/0x40 [ 193.158085][ T5516] dump_stack_lvl+0xf4/0x15c [ 193.159002][ T5516] dump_stack+0x1c/0x5c [ 193.159763][ T5516] dump_header+0xc0/0x724 [ 193.160663][ T5516] out_of_memory+0xc78/0xf70 [ 193.161592][ T5516] mem_cgroup_out_of_memory+0x228/0x2d0 [ 193.162706][ T5516] try_charge_memcg+0xa4c/0x1390 [ 193.163269][ T27] audit: type=1326 audit(193.100:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.163692][ T5516] obj_cgroup_charge+0x178/0x2e4 [ 193.168296][ T27] audit: type=1326 audit(193.100:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.168972][ T5516] pcpu_alloc+0x1bc/0x16e0 [ 193.173956][ T27] audit: type=1326 audit(193.100:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.174687][ T5516] __alloc_percpu_gfp+0x38/0x4c [ 193.178888][ T27] audit: type=1326 audit(193.100:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5515 comm="syz.2.335" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 193.179634][ T5516] mem_cgroup_css_alloc+0x2dc/0x1250 [ 193.184437][ T5516] cgroup_apply_control_enable+0x35c/0x9e0 [ 193.185635][ T5516] cgroup_mkdir+0x964/0xcf8 [ 193.186527][ T5516] kernfs_iop_mkdir+0x118/0x164 [ 193.187521][ T5516] vfs_mkdir+0x314/0x4d8 [ 193.188411][ T5516] do_mkdirat+0x1b8/0x3ec [ 193.189315][ T5516] __arm64_sys_mkdirat+0x90/0xa8 [ 193.190320][ T5516] invoke_syscall+0x98/0x290 [ 193.191209][ T5516] el0_svc_common+0x200/0x258 [ 193.192125][ T5516] do_el0_svc+0x5c/0x134 [ 193.192938][ T5516] el0_svc+0x58/0x12c [ 193.193726][ T5516] el0t_64_sync_handler+0x84/0xf0 [ 193.194737][ T5516] el0t_64_sync+0x18c/0x190 [ 193.211517][ T5516] memory: usage 0kB, limit 0kB, failcnt 19 [ 193.212674][ T5516] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 193.220100][ T5516] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 193.223101][ T5516] Memory cgroup stats for /syz2/test: [ 193.223487][ T5516] anon 0 [ 193.223487][ T5516] file 0 [ 193.223487][ T5516] kernel 0 [ 193.223487][ T5516] kernel_stack 0 [ 193.223487][ T5516] pagetables 0 [ 193.223487][ T5516] sec_pagetables 0 [ 193.223487][ T5516] percpu 0 [ 193.223487][ T5516] sock 0 [ 193.223487][ T5516] vmalloc 0 [ 193.223487][ T5516] shmem 0 [ 193.223487][ T5516] zswap 0 [ 193.223487][ T5516] zswapped 0 [ 193.223487][ T5516] file_mapped 0 [ 193.223487][ T5516] file_dirty 0 [ 193.223487][ T5516] file_writeback 0 [ 193.223487][ T5516] swapcached 0 [ 193.223487][ T5516] anon_thp 0 [ 193.223487][ T5516] file_thp 0 [ 193.223487][ T5516] shmem_thp 0 [ 193.223487][ T5516] inactive_anon 0 [ 193.223487][ T5516] active_anon 0 [ 193.223487][ T5516] inactive_file 0 [ 193.223487][ T5516] active_file 0 [ 193.223487][ T5516] unevictable 0 [ 193.223487][ T5516] slab_reclaimable 0 [ 193.223487][ T5516] slab_unreclaimable 0 [ 193.223487][ T5516] slab 0 [ 193.223487][ T5516] workingset_refault_anon 0 [ 193.257646][ T5516] Out of memory and no killable processes... [ 193.289517][ T5533] device macsec1 entered promiscuous mode [ 193.761301][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.762935][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.813254][ T4380] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.996888][ T4380] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.999017][ T4380] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.002866][ T4380] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 194.005168][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.006898][ T4380] usb 1-1: Product: syz [ 194.007716][ T4380] usb 1-1: Manufacturer: syz [ 194.008743][ T4380] usb 1-1: SerialNumber: syz [ 194.012175][ T4380] kalmia: probe of 1-1:1.0 failed with error -22 [ 204.076266][ T5539] netlink: 276 bytes leftover after parsing attributes in process `syz.3.339'. [ 204.184550][ T4380] usb 1-1: USB disconnect, device number 8 [ 204.302907][ T5573] device syzkaller0 entered promiscuous mode [ 204.366581][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 204.366591][ T27] audit: type=1326 audit(204.360:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.372654][ T27] audit: type=1326 audit(204.360:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.380273][ T27] audit: type=1326 audit(204.370:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.384998][ T27] audit: type=1326 audit(204.370:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.389905][ T27] audit: type=1326 audit(204.370:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.394989][ T27] audit: type=1326 audit(204.380:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.399594][ T27] audit: type=1326 audit(204.380:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.409696][ T27] audit: type=1326 audit(204.380:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.423424][ T27] audit: type=1326 audit(204.380:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.430687][ T5588] syz.2.351 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 204.432856][ T5588] CPU: 1 PID: 5588 Comm: syz.2.351 Not tainted syzkaller #0 [ 204.434304][ T27] audit: type=1326 audit(204.380:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5586 comm="syz.2.351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x7ffc0000 [ 204.434332][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 204.440359][ T5588] Call trace: [ 204.440962][ T5588] dump_backtrace+0x1c4/0x1f0 [ 204.441883][ T5588] show_stack+0x2c/0x3c [ 204.442695][ T5588] __dump_stack+0x30/0x40 [ 204.443548][ T5588] dump_stack_lvl+0xf4/0x15c [ 204.444469][ T5588] dump_stack+0x1c/0x5c [ 204.445215][ T5588] dump_header+0xc0/0x724 [ 204.445994][ T5588] out_of_memory+0xc78/0xf70 [ 204.446907][ T5588] mem_cgroup_out_of_memory+0x228/0x2d0 [ 204.447927][ T5588] try_charge_memcg+0xa4c/0x1390 [ 204.448874][ T5588] obj_cgroup_charge+0x178/0x2e4 [ 204.449852][ T5588] pcpu_alloc+0x1bc/0x16e0 [ 204.450599][ T5588] __alloc_percpu_gfp+0x38/0x4c [ 204.451441][ T5588] mem_cgroup_css_alloc+0x2dc/0x1250 [ 204.452480][ T5588] cgroup_apply_control_enable+0x35c/0x9e0 [ 204.453600][ T5588] cgroup_mkdir+0x964/0xcf8 [ 204.454509][ T5588] kernfs_iop_mkdir+0x118/0x164 [ 204.455461][ T5588] vfs_mkdir+0x314/0x4d8 [ 204.456318][ T5588] do_mkdirat+0x1b8/0x3ec [ 204.457190][ T5588] __arm64_sys_mkdirat+0x90/0xa8 [ 204.458214][ T5588] invoke_syscall+0x98/0x290 [ 204.459127][ T5588] el0_svc_common+0x200/0x258 [ 204.460041][ T5588] do_el0_svc+0x5c/0x134 [ 204.460856][ T5588] el0_svc+0x58/0x12c [ 204.461667][ T5588] el0t_64_sync_handler+0x84/0xf0 [ 204.462572][ T5588] el0t_64_sync+0x18c/0x190 [ 204.473120][ T5588] memory: usage 0kB, limit 0kB, failcnt 38 [ 204.474335][ T5588] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 204.475846][ T5588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 204.500029][ T5588] Memory cgroup stats for /syz2/test: [ 204.500131][ T5588] anon 0 [ 204.500131][ T5588] file 0 [ 204.500131][ T5588] kernel 0 [ 204.500131][ T5588] kernel_stack 0 [ 204.500131][ T5588] pagetables 0 [ 204.500131][ T5588] sec_pagetables 0 [ 204.500131][ T5588] percpu 0 [ 204.500131][ T5588] sock 0 [ 204.500131][ T5588] vmalloc 0 [ 204.500131][ T5588] shmem 0 [ 204.500131][ T5588] zswap 0 [ 204.500131][ T5588] zswapped 0 [ 204.500131][ T5588] file_mapped 0 [ 204.500131][ T5588] file_dirty 0 [ 204.500131][ T5588] file_writeback 0 [ 204.500131][ T5588] swapcached 0 [ 204.500131][ T5588] anon_thp 0 [ 204.500131][ T5588] file_thp 0 [ 204.500131][ T5588] shmem_thp 0 [ 204.500131][ T5588] inactive_anon 0 [ 204.500131][ T5588] active_anon 0 [ 204.500131][ T5588] inactive_file 0 [ 204.500131][ T5588] active_file 0 [ 204.500131][ T5588] unevictable 0 [ 204.500131][ T5588] slab_reclaimable 0 [ 204.500131][ T5588] slab_unreclaimable 0 [ 204.500131][ T5588] slab 0 [ 204.500131][ T5588] workingset_refault_anon 0 [ 204.522800][ T5588] Out of memory and no killable processes... [ 204.567483][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.568255][ T5605] netlink: 276 bytes leftover after parsing attributes in process `syz.3.354'. [ 204.576313][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.699533][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.702221][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.710014][ T5624] binder: 5623:5624 ioctl c0306201 20000340 returned -14 [ 204.711309][ T5624] binder: 5623:5624 got transaction to invalid handle, 1 [ 204.712656][ T5624] binder: 5624:5623 cannot find target node [ 204.715713][ T5624] binder: 5623:5624 transaction call to 0:0 failed 65/29201/-22, size 120-24 line 3062 [ 204.718105][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.845888][ T4380] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 205.027231][ T4380] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 205.028898][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.030452][ T4380] usb 1-1: Product: syz [ 205.031139][ T4380] usb 1-1: Manufacturer: syz [ 205.031838][ T4380] usb 1-1: SerialNumber: syz [ 205.036953][ T4380] usb 1-1: config 0 descriptor?? [ 205.043751][ T4380] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 205.261744][ T5664] netlink: 84 bytes leftover after parsing attributes in process `syz.3.376'. [ 205.346054][ T5674] syz.4.379 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 205.348140][ T5674] CPU: 1 PID: 5674 Comm: syz.4.379 Not tainted syzkaller #0 [ 205.349551][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 205.351430][ T5674] Call trace: [ 205.352089][ T5674] dump_backtrace+0x1c4/0x1f0 [ 205.353029][ T5674] show_stack+0x2c/0x3c [ 205.353903][ T5674] __dump_stack+0x30/0x40 [ 205.354797][ T5674] dump_stack_lvl+0xf4/0x15c [ 205.355643][ T5674] dump_stack+0x1c/0x5c [ 205.356509][ T5674] dump_header+0xc0/0x724 [ 205.357335][ T5674] out_of_memory+0xc78/0xf70 [ 205.358190][ T5674] mem_cgroup_out_of_memory+0x228/0x2d0 [ 205.359229][ T5674] try_charge_memcg+0xa4c/0x1390 [ 205.360064][ T5674] obj_cgroup_charge+0x178/0x2e4 [ 205.361013][ T5674] pcpu_alloc+0x1bc/0x16e0 [ 205.361839][ T5674] __alloc_percpu_gfp+0x38/0x4c [ 205.362727][ T5674] mem_cgroup_css_alloc+0x2dc/0x1250 [ 205.363767][ T5674] cgroup_apply_control_enable+0x35c/0x9e0 [ 205.364879][ T5674] cgroup_mkdir+0x964/0xcf8 [ 205.365749][ T5674] kernfs_iop_mkdir+0x118/0x164 [ 205.366611][ T5674] vfs_mkdir+0x314/0x4d8 [ 205.367435][ T5674] do_mkdirat+0x1b8/0x3ec [ 205.368368][ T5674] __arm64_sys_mkdirat+0x90/0xa8 [ 205.369435][ T5674] invoke_syscall+0x98/0x290 [ 205.370345][ T5674] el0_svc_common+0x200/0x258 [ 205.371359][ T5674] do_el0_svc+0x5c/0x134 [ 205.372238][ T5674] el0_svc+0x58/0x12c [ 205.373099][ T5674] el0t_64_sync_handler+0x84/0xf0 [ 205.374012][ T5674] el0t_64_sync+0x18c/0x190 [ 205.378305][ T5674] memory: usage 0kB, limit 0kB, failcnt 57 [ 205.380131][ T5674] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.381496][ T5674] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.382852][ T5674] Memory cgroup stats for /syz4/test: [ 205.382943][ T5674] anon 0 [ 205.382943][ T5674] file 0 [ 205.382943][ T5674] kernel 0 [ 205.382943][ T5674] kernel_stack 0 [ 205.382943][ T5674] pagetables 0 [ 205.382943][ T5674] sec_pagetables 0 [ 205.382943][ T5674] percpu 0 [ 205.382943][ T5674] sock 0 [ 205.382943][ T5674] vmalloc 0 [ 205.382943][ T5674] shmem 0 [ 205.382943][ T5674] zswap 0 [ 205.382943][ T5674] zswapped 0 [ 205.382943][ T5674] file_mapped 0 [ 205.382943][ T5674] file_dirty 0 [ 205.382943][ T5674] file_writeback 0 [ 205.382943][ T5674] swapcached 0 [ 205.382943][ T5674] anon_thp 0 [ 205.382943][ T5674] file_thp 0 [ 205.382943][ T5674] shmem_thp 0 [ 205.382943][ T5674] inactive_anon 0 [ 205.382943][ T5674] active_anon 0 [ 205.382943][ T5674] inactive_file 0 [ 205.382943][ T5674] active_file 0 [ 205.382943][ T5674] unevictable 0 [ 205.382943][ T5674] slab_reclaimable 0 [ 205.382943][ T5674] slab_unreclaimable 0 [ 205.382943][ T5674] slab 0 [ 205.382943][ T5674] workingset_refault_anon 0 [ 205.402178][ T5674] Out of memory and no killable processes... [ 205.449600][ T4380] (null): failure reading functionality [ 205.451560][ T4380] i2c i2c-1: failure reading functionality [ 205.466136][ T4380] i2c i2c-1: failure reading functionality [ 205.471009][ T4380] i2c i2c-1: failure reading functionality [ 205.472270][ T4380] i2c i2c-1: No suitable probing method supported for address 0x18 [ 205.486350][ T4380] i2c i2c-1: failure reading functionality [ 205.487797][ T4380] i2c i2c-1: failure reading functionality [ 205.489004][ T4380] i2c i2c-1: No suitable probing method supported for address 0x19 [ 205.490850][ T4380] i2c i2c-1: failure reading functionality [ 205.492284][ T4380] i2c i2c-1: failure reading functionality [ 205.493930][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1A [ 205.496445][ T4380] i2c i2c-1: failure reading functionality [ 205.500267][ T4380] i2c i2c-1: failure reading functionality [ 205.501465][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1B [ 205.503255][ T4380] i2c i2c-1: failure reading functionality [ 205.506550][ T4380] i2c i2c-1: failure reading functionality [ 205.507788][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1C [ 205.511599][ T4380] i2c i2c-1: failure reading functionality [ 205.514325][ T4380] i2c i2c-1: failure reading functionality [ 205.515545][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1D [ 205.520478][ T4380] i2c i2c-1: failure reading functionality [ 205.522105][ T4380] i2c i2c-1: failure reading functionality [ 205.523757][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1E [ 205.526356][ T4380] i2c i2c-1: failure reading functionality [ 205.536399][ T4380] i2c i2c-1: failure reading functionality [ 205.537563][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1F [ 205.539252][ T4380] i2c i2c-1: failure reading functionality [ 205.540437][ T4380] i2c i2c-1: failure reading functionality [ 205.541644][ T4380] i2c i2c-1: No suitable probing method supported for address 0x48 [ 205.549179][ T4380] i2c i2c-1: failure reading functionality [ 205.550502][ T4380] i2c i2c-1: failure reading functionality [ 205.551734][ T4380] i2c i2c-1: No suitable probing method supported for address 0x49 [ 205.556816][ T4380] i2c i2c-1: failure reading functionality [ 205.559302][ T4380] i2c i2c-1: failure reading functionality [ 205.560565][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4A [ 205.563877][ T4380] i2c i2c-1: failure reading functionality [ 205.569845][ T4380] i2c i2c-1: failure reading functionality [ 205.571005][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4B [ 205.584184][ T4380] i2c i2c-1: failure reading functionality [ 205.585465][ T4380] i2c i2c-1: failure reading functionality [ 205.586422][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4C [ 205.588978][ T4380] i2c i2c-1: failure reading functionality [ 205.590392][ T4380] i2c i2c-1: failure reading functionality [ 205.591371][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4D [ 205.598824][ T4380] i2c i2c-1: failure reading functionality [ 205.603396][ T4380] i2c i2c-1: failure reading functionality [ 205.604494][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4E [ 205.607023][ T4380] i2c i2c-1: failure reading functionality [ 205.609367][ T4380] i2c i2c-1: failure reading functionality [ 205.610638][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4F [ 205.612234][ T4380] i2c i2c-1: failure reading functionality [ 205.618515][ T4380] i2c i2c-1: failure reading functionality [ 205.619744][ T4380] i2c i2c-1: No suitable probing method supported for address 0x18 [ 205.621624][ T4380] i2c i2c-1: failure reading functionality [ 205.624067][ T4380] i2c i2c-1: failure reading functionality [ 205.625309][ T4380] i2c i2c-1: No suitable probing method supported for address 0x19 [ 205.631700][ T4380] i2c i2c-1: failure reading functionality [ 205.633076][ T4380] i2c i2c-1: failure reading functionality [ 205.633639][ T5702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.637210][ T5699] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 205.639229][ T4380] i2c i2c-1: No suitable probing method supported for address 0x1A [ 205.639489][ T5702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.648314][ T4380] i2c i2c-1: failure reading functionality [ 205.657916][ T4380] i2c i2c-1: failure reading functionality [ 205.659007][ T4380] i2c i2c-1: No suitable probing method supported for address 0x29 [ 205.663068][ T4380] i2c i2c-1: failure reading functionality [ 205.669438][ T4380] i2c i2c-1: failure reading functionality [ 205.670564][ T4380] i2c i2c-1: No suitable probing method supported for address 0x2A [ 205.672521][ T4380] i2c i2c-1: failure reading functionality [ 205.677571][ T4380] i2c i2c-1: failure reading functionality [ 205.678624][ T4380] i2c i2c-1: No suitable probing method supported for address 0x2B [ 205.681451][ T4380] i2c i2c-1: failure reading functionality [ 205.687761][ T4380] i2c i2c-1: failure reading functionality [ 205.687978][ T5699] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 205.688845][ T4380] i2c i2c-1: No suitable probing method supported for address 0x48 [ 205.701240][ T4380] i2c i2c-1: failure reading functionality [ 205.702540][ T4380] i2c i2c-1: failure reading functionality [ 205.703756][ T4380] i2c i2c-1: No suitable probing method supported for address 0x49 [ 205.705371][ T4380] i2c i2c-1: failure reading functionality [ 205.706564][ T4380] i2c i2c-1: failure reading functionality [ 205.707733][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4A [ 205.709633][ T4380] i2c i2c-1: failure reading functionality [ 205.711081][ T4380] i2c i2c-1: failure reading functionality [ 205.712330][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4B [ 205.714289][ T4380] i2c i2c-1: failure reading functionality [ 205.715472][ T4380] i2c i2c-1: failure reading functionality [ 205.716477][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4C [ 205.718039][ T4380] i2c i2c-1: failure reading functionality [ 205.719246][ T4380] i2c i2c-1: failure reading functionality [ 205.720379][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4D [ 205.721957][ T4380] i2c i2c-1: failure reading functionality [ 205.724086][ T4380] i2c i2c-1: failure reading functionality [ 205.725536][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4E [ 205.727303][ T4380] i2c i2c-1: failure reading functionality [ 205.728586][ T4380] i2c i2c-1: failure reading functionality [ 205.729676][ T4380] i2c i2c-1: No suitable probing method supported for address 0x4F [ 205.731026][ T4380] i2c i2c-1: connected i2c-tiny-usb device [ 205.738673][ T4380] usb 1-1: USB disconnect, device number 9 [ 205.818735][ T5720] syz.4.392 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 205.820752][ T5720] CPU: 0 PID: 5720 Comm: syz.4.392 Not tainted syzkaller #0 [ 205.822050][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 205.823849][ T5720] Call trace: [ 205.824497][ T5720] dump_backtrace+0x1c4/0x1f0 [ 205.825422][ T5720] show_stack+0x2c/0x3c [ 205.826237][ T5720] __dump_stack+0x30/0x40 [ 205.827104][ T5720] dump_stack_lvl+0xf4/0x15c [ 205.827927][ T5720] dump_stack+0x1c/0x5c [ 205.828735][ T5720] dump_header+0xc0/0x724 [ 205.829567][ T5720] out_of_memory+0xc78/0xf70 [ 205.830483][ T5720] mem_cgroup_out_of_memory+0x228/0x2d0 [ 205.831596][ T5720] try_charge_memcg+0xa4c/0x1390 [ 205.832534][ T5720] obj_cgroup_charge+0x178/0x2e4 [ 205.833497][ T5720] pcpu_alloc+0x1bc/0x16e0 [ 205.834453][ T5720] __alloc_percpu_gfp+0x38/0x4c [ 205.835534][ T5720] mem_cgroup_css_alloc+0x2dc/0x1250 [ 205.836714][ T5720] cgroup_apply_control_enable+0x35c/0x9e0 [ 205.837969][ T5720] cgroup_mkdir+0x964/0xcf8 [ 205.839014][ T5720] kernfs_iop_mkdir+0x118/0x164 [ 205.840086][ T5720] vfs_mkdir+0x314/0x4d8 [ 205.841023][ T5720] do_mkdirat+0x1b8/0x3ec [ 205.841851][ T5720] __arm64_sys_mkdirat+0x90/0xa8 [ 205.842864][ T5720] invoke_syscall+0x98/0x290 [ 205.843818][ T5720] el0_svc_common+0x200/0x258 [ 205.844787][ T5720] do_el0_svc+0x5c/0x134 [ 205.845604][ T5720] el0_svc+0x58/0x12c [ 205.846401][ T5720] el0t_64_sync_handler+0x84/0xf0 [ 205.847383][ T5720] el0t_64_sync+0x18c/0x190 [ 205.850584][ T5720] memory: usage 0kB, limit 0kB, failcnt 76 [ 205.851658][ T5720] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.852981][ T5720] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 205.857294][ T5720] Memory cgroup stats for /syz4/test: [ 205.857391][ T5720] anon 0 [ 205.857391][ T5720] file 0 [ 205.857391][ T5720] kernel 0 [ 205.857391][ T5720] kernel_stack 0 [ 205.857391][ T5720] pagetables 0 [ 205.857391][ T5720] sec_pagetables 0 [ 205.857391][ T5720] percpu 0 [ 205.857391][ T5720] sock 0 [ 205.857391][ T5720] vmalloc 0 [ 205.857391][ T5720] shmem 0 [ 205.857391][ T5720] zswap 0 [ 205.857391][ T5720] zswapped 0 [ 205.857391][ T5720] file_mapped 0 [ 205.857391][ T5720] file_dirty 0 [ 205.857391][ T5720] file_writeback 0 [ 205.857391][ T5720] swapcached 0 [ 205.857391][ T5720] anon_thp 0 [ 205.857391][ T5720] file_thp 0 [ 205.857391][ T5720] shmem_thp 0 [ 205.857391][ T5720] inactive_anon 0 [ 205.857391][ T5720] active_anon 0 [ 205.857391][ T5720] inactive_file 0 [ 205.857391][ T5720] active_file 0 [ 205.857391][ T5720] unevictable 0 [ 205.857391][ T5720] slab_reclaimable 0 [ 205.857391][ T5720] slab_unreclaimable 0 [ 205.857391][ T5720] slab 0 [ 205.857391][ T5720] workingset_refault_anon 0 [ 205.878816][ T5720] Out of memory and no killable processes... [ 206.204906][ T5767] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 206.210972][ T5767] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 206.281087][ T5774] syz.0.407 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 206.283305][ T5774] CPU: 1 PID: 5774 Comm: syz.0.407 Not tainted syzkaller #0 [ 206.284823][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 206.287003][ T5774] Call trace: [ 206.287663][ T5774] dump_backtrace+0x1c4/0x1f0 [ 206.288499][ T5774] show_stack+0x2c/0x3c [ 206.289287][ T5774] __dump_stack+0x30/0x40 [ 206.290151][ T5774] dump_stack_lvl+0xf4/0x15c [ 206.291030][ T5774] dump_stack+0x1c/0x5c [ 206.291836][ T5774] dump_header+0xc0/0x724 [ 206.292750][ T5774] out_of_memory+0xc78/0xf70 [ 206.293654][ T5774] mem_cgroup_out_of_memory+0x228/0x2d0 [ 206.294773][ T5774] try_charge_memcg+0xa4c/0x1390 [ 206.295765][ T5774] obj_cgroup_charge+0x178/0x2e4 [ 206.296743][ T5774] pcpu_alloc+0x1bc/0x16e0 [ 206.297603][ T5774] __alloc_percpu_gfp+0x38/0x4c [ 206.298569][ T5774] mem_cgroup_css_alloc+0x2dc/0x1250 [ 206.299619][ T5774] cgroup_apply_control_enable+0x35c/0x9e0 [ 206.300640][ T5774] cgroup_mkdir+0x964/0xcf8 [ 206.301434][ T5774] kernfs_iop_mkdir+0x118/0x164 [ 206.302396][ T5774] vfs_mkdir+0x314/0x4d8 [ 206.303248][ T5774] do_mkdirat+0x1b8/0x3ec [ 206.304090][ T5774] __arm64_sys_mkdirat+0x90/0xa8 [ 206.305014][ T5774] invoke_syscall+0x98/0x290 [ 206.305848][ T5774] el0_svc_common+0x13c/0x258 [ 206.306698][ T5774] do_el0_svc+0x5c/0x134 [ 206.307526][ T5774] el0_svc+0x58/0x12c [ 206.308357][ T5774] el0t_64_sync_handler+0x84/0xf0 [ 206.309365][ T5774] el0t_64_sync+0x18c/0x190 [ 206.311366][ T5774] memory: usage 0kB, limit 0kB, failcnt 19 [ 206.312883][ T5774] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 206.317192][ T5774] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 206.318525][ T5774] Memory cgroup stats for /syz0/test: [ 206.318634][ T5774] anon 0 [ 206.318634][ T5774] file 0 [ 206.318634][ T5774] kernel 0 [ 206.318634][ T5774] kernel_stack 0 [ 206.318634][ T5774] pagetables 0 [ 206.318634][ T5774] sec_pagetables 0 [ 206.318634][ T5774] percpu 0 [ 206.318634][ T5774] sock 0 [ 206.318634][ T5774] vmalloc 0 [ 206.318634][ T5774] shmem 0 [ 206.318634][ T5774] zswap 0 [ 206.318634][ T5774] zswapped 0 [ 206.318634][ T5774] file_mapped 0 [ 206.318634][ T5774] file_dirty 0 [ 206.318634][ T5774] file_writeback 0 [ 206.318634][ T5774] swapcached 0 [ 206.318634][ T5774] anon_thp 0 [ 206.318634][ T5774] file_thp 0 [ 206.318634][ T5774] shmem_thp 0 [ 206.318634][ T5774] inactive_anon 0 [ 206.318634][ T5774] active_anon 0 [ 206.318634][ T5774] inactive_file 0 [ 206.318634][ T5774] active_file 0 [ 206.318634][ T5774] unevictable 0 [ 206.318634][ T5774] slab_reclaimable 0 [ 206.318634][ T5774] slab_unreclaimable 0 [ 206.318634][ T5774] slab 0 [ 206.318634][ T5774] workingset_refault_anon 0 [ 206.340792][ T5774] Out of memory and no killable processes... [ 206.407241][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.410051][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.573302][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.574932][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.582838][ T5806] tipc: Started in network mode [ 206.584351][ T5806] tipc: Node identity 8ee81ca2415e, cluster identity 4711 [ 206.586284][ T5806] tipc: Enabled bearer , priority 0 [ 206.595048][ T5806] device syzkaller0 entered promiscuous mode [ 206.609003][ T5806] tipc: Resetting bearer [ 206.613924][ T5805] tipc: Resetting bearer [ 206.654507][ T5805] tipc: Disabling bearer [ 206.738284][ T5824] netlink: 84 bytes leftover after parsing attributes in process `syz.3.422'. [ 206.794591][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.796357][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.822473][ T5838] binder: 5837:5838 Acquire 1 refcount change on invalid ref 0 ret -22 [ 206.824746][ T5838] binder: 5837:5838 ioctl c0306201 200000c0 returned -14 [ 206.831532][ T5838] binder: 5837:5838 ioctl c0306201 20000340 returned -14 [ 206.833092][ T5838] binder: 5837:5838 got transaction to invalid handle, 1 [ 206.834671][ T5838] binder: 5838:5837 cannot find target node [ 206.835769][ T5838] binder: 5837:5838 transaction call to 0:0 failed 68/29201/-22, size 120-24 line 3062 [ 206.838085][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.895755][ T5842] device macsec1 entered promiscuous mode [ 207.026458][ T5853] syz.1.432 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 207.028483][ T5853] CPU: 0 PID: 5853 Comm: syz.1.432 Not tainted syzkaller #0 [ 207.029876][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 207.031855][ T5853] Call trace: [ 207.032489][ T5853] dump_backtrace+0x1c4/0x1f0 [ 207.033413][ T5853] show_stack+0x2c/0x3c [ 207.034185][ T5853] __dump_stack+0x30/0x40 [ 207.035038][ T5853] dump_stack_lvl+0xf4/0x15c [ 207.035972][ T5853] dump_stack+0x1c/0x5c [ 207.036809][ T5853] dump_header+0xc0/0x724 [ 207.037660][ T5853] out_of_memory+0xc78/0xf70 [ 207.038566][ T5853] mem_cgroup_out_of_memory+0x228/0x2d0 [ 207.039681][ T5853] try_charge_memcg+0xa4c/0x1390 [ 207.040669][ T5853] obj_cgroup_charge+0x178/0x2e4 [ 207.041558][ T5853] pcpu_alloc+0x1bc/0x16e0 [ 207.042368][ T5853] __alloc_percpu_gfp+0x38/0x4c [ 207.043253][ T5853] mem_cgroup_css_alloc+0x2dc/0x1250 [ 207.044260][ T5853] cgroup_apply_control_enable+0x35c/0x9e0 [ 207.045347][ T5853] cgroup_mkdir+0x964/0xcf8 [ 207.046215][ T5853] kernfs_iop_mkdir+0x118/0x164 [ 207.047136][ T5853] vfs_mkdir+0x314/0x4d8 [ 207.047901][ T5853] do_mkdirat+0x1b8/0x3ec [ 207.048663][ T5853] __arm64_sys_mkdirat+0x90/0xa8 [ 207.049564][ T5853] invoke_syscall+0x98/0x290 [ 207.050411][ T5853] el0_svc_common+0x13c/0x258 [ 207.051309][ T5853] do_el0_svc+0x5c/0x134 [ 207.052141][ T5853] el0_svc+0x58/0x12c [ 207.052887][ T5853] el0t_64_sync_handler+0x84/0xf0 [ 207.053782][ T5853] el0t_64_sync+0x18c/0x190 [ 207.056320][ T5853] memory: usage 0kB, limit 0kB, failcnt 38 [ 207.057217][ T5853] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.058606][ T5853] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 207.059929][ T5853] Memory cgroup stats for /syz1/test: [ 207.060049][ T5853] anon 0 [ 207.060049][ T5853] file 0 [ 207.060049][ T5853] kernel 0 [ 207.060049][ T5853] kernel_stack 0 [ 207.060049][ T5853] pagetables 0 [ 207.060049][ T5853] sec_pagetables 0 [ 207.060049][ T5853] percpu 0 [ 207.060049][ T5853] sock 0 [ 207.060049][ T5853] vmalloc 0 [ 207.060049][ T5853] shmem 0 [ 207.060049][ T5853] zswap 0 [ 207.060049][ T5853] zswapped 0 [ 207.060049][ T5853] file_mapped 0 [ 207.060049][ T5853] file_dirty 0 [ 207.060049][ T5853] file_writeback 0 [ 207.060049][ T5853] swapcached 0 [ 207.060049][ T5853] anon_thp 0 [ 207.060049][ T5853] file_thp 0 [ 207.060049][ T5853] shmem_thp 0 [ 207.060049][ T5853] inactive_anon 0 [ 207.060049][ T5853] active_anon 0 [ 207.060049][ T5853] inactive_file 0 [ 207.060049][ T5853] active_file 0 [ 207.060049][ T5853] unevictable 0 [ 207.060049][ T5853] slab_reclaimable 0 [ 207.060049][ T5853] slab_unreclaimable 0 [ 207.060049][ T5853] slab 0 [ 207.060049][ T5853] workingset_refault_anon 0 [ 207.081495][ T5853] Out of memory and no killable processes... [ 207.160444][ T5861] tipc: Started in network mode [ 207.170281][ T5861] tipc: Node identity 66349e67c2c1, cluster identity 4711 [ 207.172004][ T5861] tipc: Enabled bearer , priority 0 [ 207.173882][ T5861] device syzkaller0 entered promiscuous mode [ 207.179945][ T5861] tipc: Resetting bearer [ 207.182608][ T5860] tipc: Resetting bearer [ 207.263726][ T5860] tipc: Disabling bearer [ 207.328151][ T5874] binder: 5872:5874 Acquire 1 refcount change on invalid ref 0 ret -22 [ 207.330366][ T5874] binder: 5872:5874 ioctl c0306201 200000c0 returned -14 [ 207.334533][ T5874] binder: 5872:5874 ioctl c0306201 20000340 returned -14 [ 207.342106][ T5874] binder: 5872:5874 got transaction to invalid handle, 1 [ 207.349253][ T5874] binder: 5874:5872 cannot find target node [ 207.350295][ T5874] binder: 5872:5874 transaction call to 0:0 failed 71/29201/-22, size 120-24 line 3062 [ 207.361816][ T4379] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.372477][ T5878] device macsec1 entered promiscuous mode [ 207.479292][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.481775][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.630818][ T5904] tipc: Started in network mode [ 207.631863][ T5904] tipc: Node identity 728751bd4847, cluster identity 4711 [ 207.633906][ T5904] tipc: Enabled bearer , priority 0 [ 207.635386][ T5904] device syzkaller0 entered promiscuous mode [ 207.640967][ T5904] tipc: Resetting bearer [ 207.643896][ T5903] tipc: Resetting bearer [ 207.672575][ T5913] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 207.704055][ T5903] tipc: Disabling bearer [ 207.713333][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.759556][ T5921] binder: 5920:5921 Acquire 1 refcount change on invalid ref 0 ret -22 [ 207.761054][ T5921] binder: 5920:5921 ioctl c0306201 200000c0 returned -14 [ 207.766455][ T5921] binder: 5920:5921 ioctl c0306201 20000340 returned -14 [ 207.767959][ T5921] binder: 5920:5921 got transaction to invalid handle, 1 [ 207.769324][ T5921] binder: 5921:5920 cannot find target node [ 207.779966][ T5923] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 207.782329][ T5923] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 207.923296][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 207.928129][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.930308][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.932333][ T24] usb 1-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.934959][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 207.947626][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 207.949277][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.950810][ T24] usb 1-1: Product: syz [ 207.951560][ T24] usb 1-1: Manufacturer: syz [ 207.952470][ T24] usb 1-1: SerialNumber: syz [ 207.953358][ T5930] netlink: 84 bytes leftover after parsing attributes in process `syz.1.460'. [ 208.016622][ T5936] device macsec1 entered promiscuous mode [ 208.231909][ T24] usb 1-1: USB disconnect, device number 10 [ 208.442318][ T5963] syz.4.472 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 208.444499][ T5963] CPU: 0 PID: 5963 Comm: syz.4.472 Not tainted syzkaller #0 [ 208.445774][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 208.447399][ T5963] Call trace: [ 208.448043][ T5963] dump_backtrace+0x1c4/0x1f0 [ 208.449017][ T5963] show_stack+0x2c/0x3c [ 208.449877][ T5963] __dump_stack+0x30/0x40 [ 208.450682][ T5963] dump_stack_lvl+0xf4/0x15c [ 208.451566][ T5963] dump_stack+0x1c/0x5c [ 208.452385][ T5963] dump_header+0xc0/0x724 [ 208.453253][ T5963] out_of_memory+0xc78/0xf70 [ 208.454207][ T5963] mem_cgroup_out_of_memory+0x228/0x2d0 [ 208.455309][ T5963] try_charge_memcg+0xa4c/0x1390 [ 208.456343][ T5963] obj_cgroup_charge+0x178/0x2e4 [ 208.457368][ T5963] pcpu_alloc+0x1bc/0x16e0 [ 208.458223][ T5963] __alloc_percpu_gfp+0x38/0x4c [ 208.459195][ T5963] mem_cgroup_css_alloc+0x2dc/0x1250 [ 208.460249][ T5963] cgroup_apply_control_enable+0x35c/0x9e0 [ 208.461192][ T5963] cgroup_mkdir+0x964/0xcf8 [ 208.462011][ T5963] kernfs_iop_mkdir+0x118/0x164 [ 208.462895][ T5963] vfs_mkdir+0x314/0x4d8 [ 208.463776][ T5963] do_mkdirat+0x1b8/0x3ec [ 208.464606][ T5963] __arm64_sys_mkdirat+0x90/0xa8 [ 208.465712][ T5963] invoke_syscall+0x98/0x290 [ 208.466767][ T5963] el0_svc_common+0x200/0x258 [ 208.467780][ T5963] do_el0_svc+0x5c/0x134 [ 208.468762][ T5963] el0_svc+0x58/0x12c [ 208.469681][ T5963] el0t_64_sync_handler+0x84/0xf0 [ 208.470807][ T5963] el0t_64_sync+0x18c/0x190 [ 208.479507][ T5963] memory: usage 0kB, limit 0kB, failcnt 95 [ 208.480573][ T5963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 208.481888][ T5963] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 208.483026][ T5963] Memory cgroup stats for /syz4/test: [ 208.483126][ T5963] anon 0 [ 208.483126][ T5963] file 0 [ 208.483126][ T5963] kernel 0 [ 208.483126][ T5963] kernel_stack 0 [ 208.483126][ T5963] pagetables 0 [ 208.483126][ T5963] sec_pagetables 0 [ 208.483126][ T5963] percpu 0 [ 208.483126][ T5963] sock 0 [ 208.483126][ T5963] vmalloc 0 [ 208.483126][ T5963] shmem 0 [ 208.483126][ T5963] zswap 0 [ 208.483126][ T5963] zswapped 0 [ 208.483126][ T5963] file_mapped 0 [ 208.483126][ T5963] file_dirty 0 [ 208.483126][ T5963] file_writeback 0 [ 208.483126][ T5963] swapcached 0 [ 208.483126][ T5963] anon_thp 0 [ 208.483126][ T5963] file_thp 0 [ 208.483126][ T5963] shmem_thp 0 [ 208.483126][ T5963] inactive_anon 0 [ 208.483126][ T5963] active_anon 0 [ 208.483126][ T5963] inactive_file 0 [ 208.483126][ T5963] active_file 0 [ 208.483126][ T5963] unevictable 0 [ 208.483126][ T5963] slab_reclaimable 0 [ 208.483126][ T5963] slab_unreclaimable 0 [ 208.483126][ T5963] slab 0 [ 208.483126][ T5963] workingset_refault_anon 0 [ 208.497039][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.506967][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.514175][ T5963] Out of memory and no killable processes... [ 208.540279][ T5972] device macsec1 entered promiscuous mode [ 208.779434][ T5988] device syzkaller0 entered promiscuous mode [ 208.822821][ T5994] netlink: 84 bytes leftover after parsing attributes in process `syz.1.484'. [ 219.776081][ T5994] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 219.783897][ T6002] device macsec1 entered promiscuous mode [ 219.950618][ T6022] tipc: Enabled bearer , priority 0 [ 219.953113][ T6022] device syzkaller0 entered promiscuous mode [ 219.959651][ T6022] tipc: Resetting bearer [ 219.962051][ T6021] tipc: Resetting bearer [ 220.011005][ T6032] binder: 6031:6032 ioctl c0306201 200000c0 returned -14 [ 220.016653][ T6032] binder: 6031:6032 tried to acquire reference to desc 0, got 1 instead [ 220.018359][ T6032] binder: 6031:6032 ioctl c0306201 20000340 returned -14 [ 220.020239][ T4380] binder_debug: 2 callbacks suppressed [ 220.020247][ T4380] binder: release 6031:6032 transaction 79 out, still active [ 220.022551][ T4380] binder: undelivered TRANSACTION_COMPLETE [ 220.027862][ T6021] tipc: Disabling bearer [ 220.035891][ T6030] netlink: 84 bytes leftover after parsing attributes in process `syz.1.494'. [ 220.041739][ T4380] binder: send failed reply for transaction 79, target dead [ 220.056064][ T27] kauditd_printk_skb: 305 callbacks suppressed [ 220.056074][ T27] audit: type=1326 audit(220.050:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.075617][ T27] audit: type=1326 audit(220.070:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.079912][ T27] audit: type=1326 audit(220.070:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.093378][ T6042] device syzkaller0 entered promiscuous mode [ 220.097804][ T27] audit: type=1326 audit(220.090:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.101901][ T6038] syz.3.498 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 220.108119][ T6038] CPU: 0 PID: 6038 Comm: syz.3.498 Not tainted syzkaller #0 [ 220.109556][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 220.111580][ T6038] Call trace: [ 220.112186][ T6038] dump_backtrace+0x1c4/0x1f0 [ 220.113094][ T6038] show_stack+0x2c/0x3c [ 220.113890][ T6038] __dump_stack+0x30/0x40 [ 220.114683][ T6038] dump_stack_lvl+0xf4/0x15c [ 220.115710][ T6038] dump_stack+0x1c/0x5c [ 220.116591][ T6038] dump_header+0xc0/0x724 [ 220.117461][ T6038] out_of_memory+0xc78/0xf70 [ 220.117985][ T27] audit: type=1326 audit(220.090:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.118506][ T6038] mem_cgroup_out_of_memory+0x228/0x2d0 [ 220.123006][ T27] audit: type=1326 audit(220.090:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.124156][ T6038] try_charge_memcg+0xa4c/0x1390 [ 220.124176][ T6038] obj_cgroup_charge+0x178/0x2e4 [ 220.124188][ T6038] pcpu_alloc+0x1bc/0x16e0 [ 220.130605][ T27] audit: type=1326 audit(220.090:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.131251][ T6038] __alloc_percpu_gfp+0x38/0x4c [ 220.131971][ T27] audit: type=1326 audit(220.090:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.137122][ T6038] mem_cgroup_css_alloc+0x2dc/0x1250 [ 220.137142][ T6038] cgroup_apply_control_enable+0x35c/0x9e0 [ 220.137945][ T27] audit: type=1326 audit(220.090:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.142967][ T6038] cgroup_mkdir+0x964/0xcf8 [ 220.142987][ T6038] kernfs_iop_mkdir+0x118/0x164 [ 220.144233][ T27] audit: type=1326 audit(220.090:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.3.498" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 220.145242][ T6038] vfs_mkdir+0x314/0x4d8 [ 220.157033][ T6038] do_mkdirat+0x1b8/0x3ec [ 220.157958][ T6038] __arm64_sys_mkdirat+0x90/0xa8 [ 220.159127][ T6038] invoke_syscall+0x98/0x290 [ 220.160164][ T6038] el0_svc_common+0x200/0x258 [ 220.161087][ T6038] do_el0_svc+0x5c/0x134 [ 220.161913][ T6038] el0_svc+0x58/0x12c [ 220.162624][ T6038] el0t_64_sync_handler+0x84/0xf0 [ 220.163672][ T6038] el0t_64_sync+0x18c/0x190 [ 220.171523][ T6038] memory: usage 0kB, limit 0kB, failcnt 114 [ 220.172800][ T6038] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.174751][ T6038] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.176419][ T6038] Memory cgroup stats for /syz3/test: [ 220.176525][ T6038] anon 0 [ 220.176525][ T6038] file 0 [ 220.176525][ T6038] kernel 0 [ 220.176525][ T6038] kernel_stack 0 [ 220.176525][ T6038] pagetables 0 [ 220.176525][ T6038] sec_pagetables 0 [ 220.176525][ T6038] percpu 0 [ 220.176525][ T6038] sock 0 [ 220.176525][ T6038] vmalloc 0 [ 220.176525][ T6038] shmem 0 [ 220.176525][ T6038] zswap 0 [ 220.176525][ T6038] zswapped 0 [ 220.176525][ T6038] file_mapped 0 [ 220.176525][ T6038] file_dirty 0 [ 220.176525][ T6038] file_writeback 0 [ 220.176525][ T6038] swapcached 0 [ 220.176525][ T6038] anon_thp 0 [ 220.176525][ T6038] file_thp 0 [ 220.176525][ T6038] shmem_thp 0 [ 220.176525][ T6038] inactive_anon 0 [ 220.176525][ T6038] active_anon 0 [ 220.176525][ T6038] inactive_file 0 [ 220.176525][ T6038] active_file 0 [ 220.176525][ T6038] unevictable 0 [ 220.176525][ T6038] slab_reclaimable 0 [ 220.176525][ T6038] slab_unreclaimable 0 [ 220.176525][ T6038] slab 0 [ 220.176525][ T6038] workingset_refault_anon 0 [ 220.192970][ T6048] loop2: detected capacity change from 0 to 256 [ 220.201462][ T6048] ======================================================= [ 220.201462][ T6048] WARNING: The mand mount option has been deprecated and [ 220.201462][ T6048] and is ignored by this kernel. Remove the mand [ 220.201462][ T6048] option from the mount to silence this warning. [ 220.201462][ T6048] ======================================================= [ 220.221204][ T6038] Out of memory and no killable processes... [ 220.237390][ T6048] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 220.323484][ T3902] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 220.525900][ T3902] usb 1-1: Using ep0 maxpacket: 32 [ 220.528526][ T3902] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.531024][ T3902] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.533627][ T3902] usb 1-1: config 1 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.536152][ T3902] usb 1-1: config 1 interface 0 has no altsetting 0 [ 220.538967][ T3902] usb 1-1: New USB device found, idVendor=03f0, idProduct=0104, bcdDevice= 0.40 [ 220.540701][ T3902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.542228][ T3902] usb 1-1: Product: syz [ 220.542984][ T3902] usb 1-1: Manufacturer: syz [ 220.544103][ T3902] usb 1-1: SerialNumber: syz [ 231.029000][ T6070] netlink: 84 bytes leftover after parsing attributes in process `syz.2.508'. [ 231.042042][ T3902] usb 1-1: USB disconnect, device number 11 [ 231.068051][ T6084] netlink: 71 bytes leftover after parsing attributes in process `syz.2.510'. [ 231.158540][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 231.158550][ T27] audit: type=1326 audit(231.150:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.168602][ T27] audit: type=1326 audit(231.160:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.173119][ T27] audit: type=1326 audit(231.160:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.207540][ T27] audit: type=1326 audit(231.160:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.212523][ T27] audit: type=1326 audit(231.160:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.225848][ T27] audit: type=1326 audit(231.160:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.230454][ T27] audit: type=1326 audit(231.160:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.237669][ T6106] syz.3.515 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 231.237873][ T27] audit: type=1326 audit(231.160:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.239616][ T6106] CPU: 0 PID: 6106 Comm: syz.3.515 Not tainted syzkaller #0 [ 231.243433][ T27] audit: type=1326 audit(231.160:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.244957][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 231.249116][ T27] audit: type=1326 audit(231.160:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 231.251300][ T6106] Call trace: [ 231.256053][ T6106] dump_backtrace+0x1c4/0x1f0 [ 231.257009][ T6106] show_stack+0x2c/0x3c [ 231.257862][ T6106] __dump_stack+0x30/0x40 [ 231.258754][ T6106] dump_stack_lvl+0xf4/0x15c [ 231.259713][ T6106] dump_stack+0x1c/0x5c [ 231.260575][ T6106] dump_header+0xc0/0x724 [ 231.261517][ T6106] out_of_memory+0xc78/0xf70 [ 231.262488][ T6106] mem_cgroup_out_of_memory+0x228/0x2d0 [ 231.263692][ T6106] try_charge_memcg+0xa4c/0x1390 [ 231.264779][ T6106] obj_cgroup_charge+0x178/0x2e4 [ 231.265925][ T6106] pcpu_alloc+0x1bc/0x16e0 [ 231.266769][ T6106] __alloc_percpu_gfp+0x38/0x4c [ 231.267739][ T6106] mem_cgroup_css_alloc+0x2dc/0x1250 [ 231.268904][ T6106] cgroup_apply_control_enable+0x35c/0x9e0 [ 231.270137][ T6106] cgroup_mkdir+0x964/0xcf8 [ 231.271126][ T6106] kernfs_iop_mkdir+0x118/0x164 [ 231.272125][ T6106] vfs_mkdir+0x314/0x4d8 [ 231.273020][ T6106] do_mkdirat+0x1b8/0x3ec [ 231.273836][ T6106] __arm64_sys_mkdirat+0x90/0xa8 [ 231.274830][ T6106] invoke_syscall+0x98/0x290 [ 231.275736][ T6106] el0_svc_common+0x13c/0x258 [ 231.276684][ T6106] do_el0_svc+0x5c/0x134 [ 231.277531][ T6106] el0_svc+0x58/0x12c [ 231.278336][ T6106] el0t_64_sync_handler+0x84/0xf0 [ 231.279357][ T6106] el0t_64_sync+0x18c/0x190 [ 231.318383][ T6106] memory: usage 0kB, limit 0kB, failcnt 133 [ 231.319710][ T6106] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 231.321284][ T6106] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 231.333350][ T6106] Memory cgroup stats for /syz3/test: [ 231.333441][ T6106] anon 0 [ 231.333441][ T6106] file 0 [ 231.333441][ T6106] kernel 0 [ 231.333441][ T6106] kernel_stack 0 [ 231.333441][ T6106] pagetables 0 [ 231.333441][ T6106] sec_pagetables 0 [ 231.333441][ T6106] percpu 0 [ 231.333441][ T6106] sock 0 [ 231.333441][ T6106] vmalloc 0 [ 231.333441][ T6106] shmem 0 [ 231.333441][ T6106] zswap 0 [ 231.333441][ T6106] zswapped 0 [ 231.333441][ T6106] file_mapped 0 [ 231.333441][ T6106] file_dirty 0 [ 231.333441][ T6106] file_writeback 0 [ 231.333441][ T6106] swapcached 0 [ 231.333441][ T6106] anon_thp 0 [ 231.333441][ T6106] file_thp 0 [ 231.333441][ T6106] shmem_thp 0 [ 231.333441][ T6106] inactive_anon 0 [ 231.333441][ T6106] active_anon 0 [ 231.333441][ T6106] inactive_file 0 [ 231.333441][ T6106] active_file 0 [ 231.333441][ T6106] unevictable 0 [ 231.333441][ T6106] slab_reclaimable 0 [ 231.333441][ T6106] slab_unreclaimable 0 [ 231.333441][ T6106] slab 0 [ 231.333441][ T6106] workingset_refault_anon 0 [ 231.366803][ T6106] Out of memory and no killable processes... [ 231.470971][ T6114] loop1: detected capacity change from 0 to 32768 [ 231.522760][ T6114] XFS (loop1): Mounting V5 Filesystem [ 231.544654][ T6114] XFS (loop1): Ending clean mount [ 231.607123][ T4330] XFS (loop1): Unmounting Filesystem [ 231.702072][ T6127] netlink: 'syz.3.523': attribute type 4 has an invalid length. [ 231.794306][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.796122][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.907212][ T6131] loop2: detected capacity change from 0 to 32768 [ 231.919573][ T6131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.524 (6131) [ 231.936985][ T6131] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.938906][ T6131] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 231.949420][ T6131] BTRFS info (device loop2): force clearing of disk cache [ 231.950957][ T6131] BTRFS info (device loop2): enabling auto defrag [ 231.954376][ T6131] BTRFS info (device loop2): max_inline at 0 [ 231.955616][ T6131] BTRFS info (device loop2): enabling disk space caching [ 231.956980][ T6131] BTRFS info (device loop2): disk space caching is enabled [ 232.000247][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.001921][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.025834][ T6131] BTRFS info (device loop2): enabling ssd optimizations [ 232.028458][ T6131] BTRFS info (device loop2): rebuilding free space tree [ 232.045732][ T6131] BTRFS info (device loop2): disabling free space tree [ 232.047347][ T6131] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.049453][ T6131] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 232.098091][ T9] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 232.600003][ T6170] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error! [ 232.601633][ T6170] udc dummy_udc.0: failed to start g1: -19 [ 232.605261][ T6170] UDC core: g1: couldn't find an available UDC or it's busy [ 232.610584][ T6170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.533'. [ 232.617525][ T6170] loop3: detected capacity change from 0 to 16 [ 232.632255][ T6170] erofs: (device loop3): mounted with root inode @ nid 36. [ 232.749248][ T6172] svc: failed to register nfsdv3 RPC service (errno 97). [ 232.814802][ T6172] svc: failed to register nfsaclv3 RPC service (errno 97). [ 233.215435][ T4342] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.426853][ T6193] loop0: detected capacity change from 0 to 32768 [ 233.436615][ T6193] XFS (loop0): Mounting V5 Filesystem [ 233.467874][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.469618][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.474197][ T6193] XFS (loop0): Ending clean mount [ 233.542059][ T4336] XFS (loop0): Unmounting Filesystem [ 233.658538][ T6219] svc: failed to register nfsdv3 RPC service (errno 97). [ 233.659960][ T6219] svc: failed to register nfsaclv3 RPC service (errno 97). [ 233.845604][ T6223] loop3: detected capacity change from 0 to 40427 [ 233.862526][ T6223] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 233.864620][ T6223] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 233.866195][ T6223] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 233.982767][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.985618][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.054606][ T6231] loop4: detected capacity change from 0 to 64 [ 234.116252][ T6234] loop2: detected capacity change from 0 to 4096 [ 234.178752][ T6234] Cannot load nls io8859-3 [ 234.597606][ T6246] syz.2.560 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 234.600114][ T6246] CPU: 1 PID: 6246 Comm: syz.2.560 Not tainted syzkaller #0 [ 234.601493][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 234.603432][ T6246] Call trace: [ 234.604108][ T6246] dump_backtrace+0x1c4/0x1f0 [ 234.605099][ T6246] show_stack+0x2c/0x3c [ 234.605972][ T6246] __dump_stack+0x30/0x40 [ 234.606888][ T6246] dump_stack_lvl+0xf4/0x15c [ 234.607803][ T6246] dump_stack+0x1c/0x5c [ 234.608651][ T6246] dump_header+0xc0/0x724 [ 234.609484][ T6246] out_of_memory+0xc78/0xf70 [ 234.610386][ T6246] mem_cgroup_out_of_memory+0x228/0x2d0 [ 234.611483][ T6246] try_charge_memcg+0xa4c/0x1390 [ 234.612475][ T6246] obj_cgroup_charge+0x178/0x2e4 [ 234.613462][ T6246] pcpu_alloc+0x1bc/0x16e0 [ 234.614335][ T6246] __alloc_percpu_gfp+0x38/0x4c [ 234.615296][ T6246] mem_cgroup_css_alloc+0x2dc/0x1250 [ 234.616361][ T6246] cgroup_apply_control_enable+0x35c/0x9e0 [ 234.617510][ T6246] cgroup_mkdir+0x964/0xcf8 [ 234.618455][ T6246] kernfs_iop_mkdir+0x118/0x164 [ 234.619409][ T6246] vfs_mkdir+0x314/0x4d8 [ 234.620251][ T6246] do_mkdirat+0x1b8/0x3ec [ 234.621045][ T6246] __arm64_sys_mkdirat+0x90/0xa8 [ 234.622005][ T6246] invoke_syscall+0x98/0x290 [ 234.622887][ T6246] el0_svc_common+0x200/0x258 [ 234.623772][ T6246] do_el0_svc+0x5c/0x134 [ 234.624514][ T6246] el0_svc+0x58/0x12c [ 234.625247][ T6246] el0t_64_sync_handler+0x84/0xf0 [ 234.626179][ T6246] el0t_64_sync+0x18c/0x190 [ 234.630297][ T6246] memory: usage 0kB, limit 0kB, failcnt 57 [ 234.631627][ T6246] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.633059][ T6246] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 234.634819][ T6246] Memory cgroup stats for /syz2/test: [ 234.634910][ T6246] anon 0 [ 234.634910][ T6246] file 0 [ 234.634910][ T6246] kernel 0 [ 234.634910][ T6246] kernel_stack 0 [ 234.634910][ T6246] pagetables 0 [ 234.634910][ T6246] sec_pagetables 0 [ 234.634910][ T6246] percpu 0 [ 234.634910][ T6246] sock 0 [ 234.634910][ T6246] vmalloc 0 [ 234.634910][ T6246] shmem 0 [ 234.634910][ T6246] zswap 0 [ 234.634910][ T6246] zswapped 0 [ 234.634910][ T6246] file_mapped 0 [ 234.634910][ T6246] file_dirty 0 [ 234.634910][ T6246] file_writeback 0 [ 234.634910][ T6246] swapcached 0 [ 234.634910][ T6246] anon_thp 0 [ 234.634910][ T6246] file_thp 0 [ 234.634910][ T6246] shmem_thp 0 [ 234.634910][ T6246] inactive_anon 0 [ 234.634910][ T6246] active_anon 0 [ 234.634910][ T6246] inactive_file 0 [ 234.634910][ T6246] active_file 0 [ 234.634910][ T6246] unevictable 0 [ 234.634910][ T6246] slab_reclaimable 0 [ 234.634910][ T6246] slab_unreclaimable 0 [ 234.634910][ T6246] slab 0 [ 234.634910][ T6246] workingset_refault_anon 0 [ 234.657206][ T6246] Out of memory and no killable processes... [ 235.051053][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.053639][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.160080][ T6267] loop4: detected capacity change from 0 to 4096 [ 235.181198][ T4379] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 235.185402][ T4379] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 235.201252][ T6267] ntfs3: loop4: Failed to load $Extend. [ 235.279053][ T6274] loop4: detected capacity change from 0 to 4096 [ 235.294439][ T6274] ntfs3: loop4: Failed to load $Extend. [ 235.338585][ T4340] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 235.340088][ T4340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 235.444498][ T4379] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 235.508125][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 235.619366][ T6289] loop2: detected capacity change from 0 to 4096 [ 235.633757][ T6296] syz.3.579 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 235.635758][ T6296] CPU: 1 PID: 6296 Comm: syz.3.579 Not tainted syzkaller #0 [ 235.637045][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 235.638789][ T6296] Call trace: [ 235.639444][ T6296] dump_backtrace+0x1c4/0x1f0 [ 235.640402][ T6296] show_stack+0x2c/0x3c [ 235.641193][ T6296] __dump_stack+0x30/0x40 [ 235.642067][ T6296] dump_stack_lvl+0xf4/0x15c [ 235.642902][ T6296] dump_stack+0x1c/0x5c [ 235.643705][ T6296] dump_header+0xc0/0x724 [ 235.644579][ T6296] out_of_memory+0xc78/0xf70 [ 235.645441][ T6296] mem_cgroup_out_of_memory+0x228/0x2d0 [ 235.646479][ T6296] try_charge_memcg+0xa4c/0x1390 [ 235.647421][ T6296] obj_cgroup_charge+0x178/0x2e4 [ 235.648313][ T6296] pcpu_alloc+0x1bc/0x16e0 [ 235.649065][ T6296] __alloc_percpu_gfp+0x38/0x4c [ 235.649974][ T6296] mem_cgroup_css_alloc+0x2dc/0x1250 [ 235.651088][ T6296] cgroup_apply_control_enable+0x35c/0x9e0 [ 235.652154][ T6296] cgroup_mkdir+0x964/0xcf8 [ 235.653040][ T6296] kernfs_iop_mkdir+0x118/0x164 [ 235.654027][ T6296] vfs_mkdir+0x314/0x4d8 [ 235.654914][ T6296] do_mkdirat+0x1b8/0x3ec [ 235.655825][ T6296] __arm64_sys_mkdirat+0x90/0xa8 [ 235.656807][ T6296] invoke_syscall+0x98/0x290 [ 235.657746][ T6296] el0_svc_common+0x200/0x258 [ 235.658679][ T6296] do_el0_svc+0x5c/0x134 [ 235.659542][ T6296] el0_svc+0x58/0x12c [ 235.660361][ T6296] el0t_64_sync_handler+0x84/0xf0 [ 235.661395][ T6296] el0t_64_sync+0x18c/0x190 [ 235.664904][ T6296] memory: usage 0kB, limit 0kB, failcnt 152 [ 235.665957][ T6296] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 235.667784][ T6296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 235.669427][ T6296] Memory cgroup stats for /syz3/test: [ 235.669524][ T6296] anon 0 [ 235.669524][ T6296] file 0 [ 235.669524][ T6296] kernel 0 [ 235.669524][ T6296] kernel_stack 0 [ 235.669524][ T6296] pagetables 0 [ 235.669524][ T6296] sec_pagetables 0 [ 235.669524][ T6296] percpu 0 [ 235.669524][ T6296] sock 0 [ 235.669524][ T6296] vmalloc 0 [ 235.669524][ T6296] shmem 0 [ 235.669524][ T6296] zswap 0 [ 235.669524][ T6296] zswapped 0 [ 235.669524][ T6296] file_mapped 0 [ 235.669524][ T6296] file_dirty 0 [ 235.669524][ T6296] file_writeback 0 [ 235.669524][ T6296] swapcached 0 [ 235.669524][ T6296] anon_thp 0 [ 235.669524][ T6296] file_thp 0 [ 235.669524][ T6296] shmem_thp 0 [ 235.669524][ T6296] inactive_anon 0 [ 235.669524][ T6296] active_anon 0 [ 235.669524][ T6296] inactive_file 0 [ 235.669524][ T6296] active_file 0 [ 235.669524][ T6296] unevictable 0 [ 235.669524][ T6296] slab_reclaimable 0 [ 235.669524][ T6296] slab_unreclaimable 0 [ 235.669524][ T6296] slab 0 [ 235.669524][ T6296] workingset_refault_anon 0 [ 235.693443][ T6289] ntfs: volume version 3.1. [ 235.740712][ T6296] Out of memory and no killable processes... [ 235.746858][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 235.869311][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.871730][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.204996][ T4379] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 236.233339][ T6269] ceph: No mds server is up or the cluster is laggy [ 236.328241][ T6328] device syzkaller0 entered promiscuous mode [ 236.423421][ T6329] SET target dimension over the limit! [ 236.518277][ T27] kauditd_printk_skb: 96 callbacks suppressed [ 236.518288][ T27] audit: type=1326 audit(236.510:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.524294][ T27] audit: type=1326 audit(236.510:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.526094][ T6333] syz.3.595 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 236.531554][ T6333] CPU: 0 PID: 6333 Comm: syz.3.595 Not tainted syzkaller #0 [ 236.533007][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 236.535251][ T6333] Call trace: [ 236.536002][ T6333] dump_backtrace+0x1c4/0x1f0 [ 236.536525][ T27] audit: type=1326 audit(236.510:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.537002][ T6333] show_stack+0x2c/0x3c [ 236.542778][ T6333] __dump_stack+0x30/0x40 [ 236.543780][ T6333] dump_stack_lvl+0xf4/0x15c [ 236.544849][ T6333] dump_stack+0x1c/0x5c [ 236.545824][ T6333] dump_header+0xc0/0x724 [ 236.546828][ T6333] out_of_memory+0xc78/0xf70 [ 236.547797][ T6333] mem_cgroup_out_of_memory+0x228/0x2d0 [ 236.548923][ T6333] try_charge_memcg+0xa4c/0x1390 [ 236.549890][ T6333] obj_cgroup_charge+0x178/0x2e4 [ 236.550614][ T27] audit: type=1326 audit(236.510:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.550877][ T6333] pcpu_alloc+0x1bc/0x16e0 [ 236.556264][ T6333] __alloc_percpu_gfp+0x38/0x4c [ 236.557210][ T6333] mem_cgroup_css_alloc+0x2dc/0x1250 [ 236.558237][ T6333] cgroup_apply_control_enable+0x35c/0x9e0 [ 236.559360][ T6333] cgroup_mkdir+0x964/0xcf8 [ 236.560155][ T6333] kernfs_iop_mkdir+0x118/0x164 [ 236.561089][ T6333] vfs_mkdir+0x314/0x4d8 [ 236.561899][ T6333] do_mkdirat+0x1b8/0x3ec [ 236.562665][ T6333] __arm64_sys_mkdirat+0x90/0xa8 [ 236.562909][ T27] audit: type=1326 audit(236.510:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.563593][ T6333] invoke_syscall+0x98/0x290 [ 236.569342][ T6333] el0_svc_common+0x200/0x258 [ 236.570277][ T6333] do_el0_svc+0x5c/0x134 [ 236.571137][ T6333] el0_svc+0x58/0x12c [ 236.571936][ T6333] el0t_64_sync_handler+0x84/0xf0 [ 236.572944][ T6333] el0t_64_sync+0x18c/0x190 [ 236.576050][ T6333] memory: usage 0kB, limit 0kB, failcnt 171 [ 236.577375][ T6333] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 236.578826][ T6333] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 236.580023][ T6333] Memory cgroup stats for /syz3/test: [ 236.580070][ T27] audit: type=1326 audit(236.510:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.580109][ T6333] anon 0 [ 236.580109][ T6333] file 0 [ 236.580109][ T6333] kernel 0 [ 236.580109][ T6333] kernel_stack 0 [ 236.580109][ T6333] pagetables 0 [ 236.580109][ T6333] sec_pagetables 0 [ 236.580109][ T6333] percpu 0 [ 236.580109][ T6333] sock 0 [ 236.580109][ T6333] vmalloc 0 [ 236.580109][ T6333] shmem 0 [ 236.580109][ T6333] zswap 0 [ 236.580109][ T6333] zswapped 0 [ 236.580109][ T6333] file_mapped 0 [ 236.580109][ T6333] file_dirty 0 [ 236.580109][ T6333] file_writeback 0 [ 236.580109][ T6333] swapcached 0 [ 236.580109][ T6333] anon_thp 0 [ 236.580109][ T6333] file_thp 0 [ 236.580109][ T6333] shmem_thp 0 [ 236.580109][ T6333] inactive_anon 0 [ 236.580109][ T6333] active_anon 0 [ 236.580109][ T6333] inactive_file 0 [ 236.580109][ T6333] active_file 0 [ 236.580109][ T6333] unevictable 0 [ 236.580109][ T6333] slab_reclaimable 0 [ 236.580109][ T6333] slab_unreclaimable 0 [ 236.580109][ T6333] slab 0 [ 236.580109][ T6333] workingset_refault_anon 0 [ 236.581101][ T27] audit: type=1326 audit(236.510:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.599111][ T6333] Out of memory and no killable processes... [ 236.614202][ T27] audit: type=1326 audit(236.510:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.638755][ T27] audit: type=1326 audit(236.510:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.649174][ T27] audit: type=1326 audit(236.510:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.3.595" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb55788e8 code=0x7ffc0000 [ 236.752512][ T6346] binder: 6344:6346 ioctl 4018620d 0 returned -22 [ 236.758470][ T6346] binder: 6344:6346 Acquire 1 refcount change on invalid ref 0 ret -22 [ 236.766120][ T6346] binder: 6344:6346 ioctl c0306201 200000c0 returned -14 [ 236.770743][ T6346] binder: 6344:6346 ioctl c0306201 20000340 returned -14 [ 236.774643][ T6346] binder: 6344:6346 got transaction to invalid handle, 1 [ 236.776434][ T6346] binder: 6346:6344 cannot find target node [ 236.778251][ T6346] binder: 6344:6346 transaction call to 0:0 failed 82/29201/-22, size 120-24 line 3062 [ 236.780877][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.814413][ T6351] loop2: detected capacity change from 0 to 1024 [ 236.843612][ T6351] EXT4-fs: Ignoring removed nobh option [ 236.844738][ T6351] EXT4-fs: Ignoring removed bh option [ 236.846030][ T6351] EXT4-fs: Ignoring removed nobh option [ 236.871592][ T6357] device syzkaller0 entered promiscuous mode [ 236.872260][ T6351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.216408][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 237.371499][ T6373] syz.2.608 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 237.373923][ T6373] CPU: 1 PID: 6373 Comm: syz.2.608 Not tainted syzkaller #0 [ 237.375411][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 237.377484][ T6373] Call trace: [ 237.378167][ T6373] dump_backtrace+0x1c4/0x1f0 [ 237.379116][ T6373] show_stack+0x2c/0x3c [ 237.379970][ T6373] __dump_stack+0x30/0x40 [ 237.380774][ T6373] dump_stack_lvl+0xf4/0x15c [ 237.381724][ T6373] dump_stack+0x1c/0x5c [ 237.382493][ T6373] dump_header+0xc0/0x724 [ 237.383344][ T6373] out_of_memory+0xc78/0xf70 [ 237.384232][ T6373] mem_cgroup_out_of_memory+0x228/0x2d0 [ 237.385309][ T6373] try_charge_memcg+0xa4c/0x1390 [ 237.386246][ T6373] obj_cgroup_charge+0x178/0x2e4 [ 237.387208][ T6373] pcpu_alloc+0x1bc/0x16e0 [ 237.388073][ T6373] __alloc_percpu_gfp+0x38/0x4c [ 237.388914][ T6373] mem_cgroup_css_alloc+0x2dc/0x1250 [ 237.389854][ T6373] cgroup_apply_control_enable+0x35c/0x9e0 [ 237.390922][ T6373] cgroup_mkdir+0x964/0xcf8 [ 237.391783][ T6373] kernfs_iop_mkdir+0x118/0x164 [ 237.392739][ T6373] vfs_mkdir+0x314/0x4d8 [ 237.393609][ T6373] do_mkdirat+0x1b8/0x3ec [ 237.394440][ T6373] __arm64_sys_mkdirat+0x90/0xa8 [ 237.395418][ T6373] invoke_syscall+0x98/0x290 [ 237.396301][ T6373] el0_svc_common+0x13c/0x258 [ 237.397171][ T6373] do_el0_svc+0x5c/0x134 [ 237.397963][ T6373] el0_svc+0x58/0x12c [ 237.398745][ T6373] el0t_64_sync_handler+0x84/0xf0 [ 237.399811][ T6373] el0t_64_sync+0x18c/0x190 [ 237.406469][ T6373] memory: usage 0kB, limit 0kB, failcnt 76 [ 237.407815][ T6373] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.409245][ T6373] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.412822][ T6373] Memory cgroup stats for /syz2/test: [ 237.412936][ T6373] anon 0 [ 237.412936][ T6373] file 0 [ 237.412936][ T6373] kernel 0 [ 237.412936][ T6373] kernel_stack 0 [ 237.412936][ T6373] pagetables 0 [ 237.412936][ T6373] sec_pagetables 0 [ 237.412936][ T6373] percpu 0 [ 237.412936][ T6373] sock 0 [ 237.412936][ T6373] vmalloc 0 [ 237.412936][ T6373] shmem 0 [ 237.412936][ T6373] zswap 0 [ 237.412936][ T6373] zswapped 0 [ 237.412936][ T6373] file_mapped 0 [ 237.412936][ T6373] file_dirty 0 [ 237.412936][ T6373] file_writeback 0 [ 237.412936][ T6373] swapcached 0 [ 237.412936][ T6373] anon_thp 0 [ 237.412936][ T6373] file_thp 0 [ 237.412936][ T6373] shmem_thp 0 [ 237.412936][ T6373] inactive_anon 0 [ 237.412936][ T6373] active_anon 0 [ 237.412936][ T6373] inactive_file 0 [ 237.412936][ T6373] active_file 0 [ 237.412936][ T6373] unevictable 0 [ 237.412936][ T6373] slab_reclaimable 0 [ 237.412936][ T6373] slab_unreclaimable 0 [ 237.412936][ T6373] slab 0 [ 237.412936][ T6373] workingset_refault_anon 0 [ 237.433936][ T6373] Out of memory and no killable processes... [ 237.491677][ T6379] loop2: detected capacity change from 0 to 128 [ 237.493698][ T6379] ext4: Unknown parameter 'context' [ 237.499100][ T6381] binder: 6380:6381 ioctl 4018620d 0 returned -22 [ 237.500751][ T6381] binder: 6380:6381 Acquire 1 refcount change on invalid ref 0 ret -22 [ 237.502484][ T6381] binder: 6380:6381 ioctl c0306201 200000c0 returned -14 [ 237.506580][ T6381] binder: 6380:6381 ioctl c0306201 20000340 returned -14 [ 237.508268][ T6381] binder: 6380:6381 got transaction to invalid handle, 1 [ 237.509645][ T6381] binder: 6381:6380 cannot find target node [ 237.510957][ T6381] binder: 6380:6381 transaction call to 0:0 failed 85/29201/-22, size 120-24 line 3062 [ 237.513373][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.534929][ T6079] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.666249][ T6392] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 237.682262][ T6392] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 237.720026][ T6398] syz.4.623 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 237.722469][ T6398] CPU: 0 PID: 6398 Comm: syz.4.623 Not tainted syzkaller #0 [ 237.723939][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 237.726057][ T6398] Call trace: [ 237.726743][ T6398] dump_backtrace+0x1c4/0x1f0 [ 237.727734][ T6398] show_stack+0x2c/0x3c [ 237.728615][ T6398] __dump_stack+0x30/0x40 [ 237.729542][ T6398] dump_stack_lvl+0xf4/0x15c [ 237.730395][ T6398] dump_stack+0x1c/0x5c [ 237.731282][ T6398] dump_header+0xc0/0x724 [ 237.732196][ T6398] out_of_memory+0xc78/0xf70 [ 237.733185][ T6398] mem_cgroup_out_of_memory+0x228/0x2d0 [ 237.734323][ T6398] try_charge_memcg+0xa4c/0x1390 [ 237.735302][ T6398] obj_cgroup_charge+0x178/0x2e4 [ 237.736279][ T6398] pcpu_alloc+0x1bc/0x16e0 [ 237.737069][ T6398] __alloc_percpu_gfp+0x38/0x4c [ 237.737986][ T6398] mem_cgroup_css_alloc+0x2dc/0x1250 [ 237.738942][ T6398] cgroup_apply_control_enable+0x35c/0x9e0 [ 237.739997][ T6398] cgroup_mkdir+0x964/0xcf8 [ 237.740824][ T6398] kernfs_iop_mkdir+0x118/0x164 [ 237.741779][ T6398] vfs_mkdir+0x314/0x4d8 [ 237.742616][ T6398] do_mkdirat+0x1b8/0x3ec [ 237.743419][ T6398] __arm64_sys_mkdirat+0x90/0xa8 [ 237.744428][ T6398] invoke_syscall+0x98/0x290 [ 237.745368][ T6398] el0_svc_common+0x200/0x258 [ 237.746251][ T6398] do_el0_svc+0x5c/0x134 [ 237.747108][ T6398] el0_svc+0x58/0x12c [ 237.747842][ T6398] el0t_64_sync_handler+0x84/0xf0 [ 237.748781][ T6398] el0t_64_sync+0x18c/0x190 [ 237.752767][ T6398] memory: usage 0kB, limit 0kB, failcnt 114 [ 237.758754][ T6398] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.760194][ T6398] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 237.761582][ T6398] Memory cgroup stats for /syz4/test: [ 237.761681][ T6398] anon 0 [ 237.761681][ T6398] file 0 [ 237.761681][ T6398] kernel 0 [ 237.761681][ T6398] kernel_stack 0 [ 237.761681][ T6398] pagetables 0 [ 237.761681][ T6398] sec_pagetables 0 [ 237.761681][ T6398] percpu 0 [ 237.761681][ T6398] sock 0 [ 237.761681][ T6398] vmalloc 0 [ 237.761681][ T6398] shmem 0 [ 237.761681][ T6398] zswap 0 [ 237.761681][ T6398] zswapped 0 [ 237.761681][ T6398] file_mapped 0 [ 237.761681][ T6398] file_dirty 0 [ 237.761681][ T6398] file_writeback 0 [ 237.761681][ T6398] swapcached 0 [ 237.761681][ T6398] anon_thp 0 [ 237.761681][ T6398] file_thp 0 [ 237.761681][ T6398] shmem_thp 0 [ 237.761681][ T6398] inactive_anon 0 [ 237.761681][ T6398] active_anon 0 [ 237.761681][ T6398] inactive_file 0 [ 237.761681][ T6398] active_file 0 [ 237.761681][ T6398] unevictable 0 [ 237.761681][ T6398] slab_reclaimable 0 [ 237.761681][ T6398] slab_unreclaimable 0 [ 237.761681][ T6398] slab 0 [ 237.761681][ T6398] workingset_refault_anon 0 [ 237.782743][ T6398] Out of memory and no killable processes... [ 237.785976][ T6404] binder: 6403:6404 ioctl 4018620d 0 returned -22 [ 237.787588][ T6404] binder: 6403:6404 Acquire 1 refcount change on invalid ref 0 ret -22 [ 237.789437][ T6404] binder: 6403:6404 ioctl c0306201 200000c0 returned -14 [ 237.792264][ T6404] binder: 6403:6404 ioctl c0306201 20000340 returned -14 [ 237.797361][ T6404] binder: 6403:6404 got transaction to invalid handle, 1 [ 237.798915][ T6404] binder: 6404:6403 cannot find target node [ 237.800161][ T6404] binder: 6403:6404 transaction call to 0:0 failed 88/29201/-22, size 120-24 line 3062 [ 237.803213][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 237.871126][ T6416] loop4: detected capacity change from 0 to 8 [ 237.884096][ T6416] squashfs image failed sanity check [ 237.924372][ T6079] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.008342][ T6430] syz.4.638 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 238.010668][ T6430] CPU: 0 PID: 6430 Comm: syz.4.638 Not tainted syzkaller #0 [ 238.012104][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 238.014212][ T6430] Call trace: [ 238.014888][ T6430] dump_backtrace+0x1c4/0x1f0 [ 238.015972][ T6430] show_stack+0x2c/0x3c [ 238.016905][ T6430] __dump_stack+0x30/0x40 [ 238.017860][ T6430] dump_stack_lvl+0xf4/0x15c [ 238.018888][ T6430] dump_stack+0x1c/0x5c [ 238.019727][ T6430] dump_header+0xc0/0x724 [ 238.020538][ T6430] out_of_memory+0xc78/0xf70 [ 238.021373][ T6430] mem_cgroup_out_of_memory+0x228/0x2d0 [ 238.022436][ T6430] try_charge_memcg+0xa4c/0x1390 [ 238.023381][ T6430] obj_cgroup_charge+0x178/0x2e4 [ 238.024390][ T6430] pcpu_alloc+0x1bc/0x16e0 [ 238.025294][ T6430] __alloc_percpu_gfp+0x38/0x4c [ 238.026209][ T6430] mem_cgroup_css_alloc+0x2dc/0x1250 [ 238.027167][ T6430] cgroup_apply_control_enable+0x35c/0x9e0 [ 238.028334][ T6430] cgroup_mkdir+0x964/0xcf8 [ 238.029298][ T6430] kernfs_iop_mkdir+0x118/0x164 [ 238.030337][ T6430] vfs_mkdir+0x314/0x4d8 [ 238.031239][ T6430] do_mkdirat+0x1b8/0x3ec [ 238.032101][ T6430] __arm64_sys_mkdirat+0x90/0xa8 [ 238.033114][ T6430] invoke_syscall+0x98/0x290 [ 238.033927][ T6430] el0_svc_common+0x200/0x258 [ 238.034878][ T6430] do_el0_svc+0x5c/0x134 [ 238.035673][ T6430] el0_svc+0x58/0x12c [ 238.036502][ T6430] el0t_64_sync_handler+0x84/0xf0 [ 238.037471][ T6430] el0t_64_sync+0x18c/0x190 [ 238.042197][ T6430] memory: usage 0kB, limit 0kB, failcnt 133 [ 238.043773][ T6430] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.045254][ T6430] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.046636][ T6430] Memory cgroup stats for /syz4/test: [ 238.046729][ T6430] anon 0 [ 238.046729][ T6430] file 0 [ 238.046729][ T6430] kernel 0 [ 238.046729][ T6430] kernel_stack 0 [ 238.046729][ T6430] pagetables 0 [ 238.046729][ T6430] sec_pagetables 0 [ 238.046729][ T6430] percpu 0 [ 238.046729][ T6430] sock 0 [ 238.046729][ T6430] vmalloc 0 [ 238.046729][ T6430] shmem 0 [ 238.046729][ T6430] zswap 0 [ 238.046729][ T6430] zswapped 0 [ 238.046729][ T6430] file_mapped 0 [ 238.046729][ T6430] file_dirty 0 [ 238.046729][ T6430] file_writeback 0 [ 238.046729][ T6430] swapcached 0 [ 238.046729][ T6430] anon_thp 0 [ 238.046729][ T6430] file_thp 0 [ 238.046729][ T6430] shmem_thp 0 [ 238.046729][ T6430] inactive_anon 0 [ 238.046729][ T6430] active_anon 0 [ 238.046729][ T6430] inactive_file 0 [ 238.046729][ T6430] active_file 0 [ 238.046729][ T6430] unevictable 0 [ 238.046729][ T6430] slab_reclaimable 0 [ 238.046729][ T6430] slab_unreclaimable 0 [ 238.046729][ T6430] slab 0 [ 238.046729][ T6430] workingset_refault_anon 0 [ 238.067748][ T6430] Out of memory and no killable processes... [ 238.071807][ T6431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.083731][ T6426] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.090279][ T6426] loop3: detected capacity change from 0 to 512 [ 238.100900][ T6433] binder: BINDER_SET_CONTEXT_MGR already set [ 238.102414][ T6433] binder: 6432:6433 ioctl 4018620d 20000300 returned -16 [ 238.108381][ T6433] binder: 6432:6433 got transaction to invalid handle, 1 [ 238.109837][ T6433] binder: 6433:6432 cannot find target node [ 238.114433][ T6426] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 238.182477][ T6438] loop4: detected capacity change from 0 to 4096 [ 238.512143][ T6454] binder: 6452:6454 tried to acquire reference to desc 0, got 1 instead [ 238.514354][ T6454] binder: 6452:6454 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 238.517008][ T6454] binder: 6454 RLIMIT_NICE not set [ 238.518269][ T6454] binder: 6452:6454 ioctl c0306201 20003180 returned -14 [ 238.551464][ T6458] syz.2.650 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 238.552910][ T6460] binder: BINDER_SET_CONTEXT_MGR already set [ 238.555083][ T6458] CPU: 1 PID: 6458 Comm: syz.2.650 Not tainted syzkaller #0 [ 238.555408][ T6460] binder: 6459:6460 ioctl 4018620d 20000300 returned -16 [ 238.556679][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 238.556694][ T6458] Call trace: [ 238.556698][ T6458] dump_backtrace+0x1c4/0x1f0 [ 238.561421][ T6458] show_stack+0x2c/0x3c [ 238.562197][ T6458] __dump_stack+0x30/0x40 [ 238.562940][ T6458] dump_stack_lvl+0xf4/0x15c [ 238.563796][ T6458] dump_stack+0x1c/0x5c [ 238.564612][ T6458] dump_header+0xc0/0x724 [ 238.565521][ T6458] out_of_memory+0xc78/0xf70 [ 238.566489][ T6458] mem_cgroup_out_of_memory+0x228/0x2d0 [ 238.567684][ T6458] try_charge_memcg+0xa4c/0x1390 [ 238.568794][ T6458] obj_cgroup_charge+0x178/0x2e4 [ 238.569930][ T6458] pcpu_alloc+0x1bc/0x16e0 [ 238.570940][ T6458] __alloc_percpu_gfp+0x38/0x4c [ 238.571979][ T6458] mem_cgroup_css_alloc+0x2dc/0x1250 [ 238.573059][ T6458] cgroup_apply_control_enable+0x35c/0x9e0 [ 238.574132][ T6458] cgroup_mkdir+0x964/0xcf8 [ 238.574973][ T6458] kernfs_iop_mkdir+0x118/0x164 [ 238.575872][ T6458] vfs_mkdir+0x314/0x4d8 [ 238.576725][ T6458] do_mkdirat+0x1b8/0x3ec [ 238.577597][ T6458] __arm64_sys_mkdirat+0x90/0xa8 [ 238.578583][ T6458] invoke_syscall+0x98/0x290 [ 238.579470][ T6458] el0_svc_common+0x200/0x258 [ 238.580407][ T6458] do_el0_svc+0x5c/0x134 [ 238.581241][ T6458] el0_svc+0x58/0x12c [ 238.582022][ T6458] el0t_64_sync_handler+0x84/0xf0 [ 238.583054][ T6458] el0t_64_sync+0x18c/0x190 [ 238.585617][ T6458] memory: usage 0kB, limit 0kB, failcnt 95 [ 238.586869][ T6458] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.588386][ T6458] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 238.589875][ T6458] Memory cgroup stats for /syz2/test: [ 238.589977][ T6458] anon 0 [ 238.589977][ T6458] file 0 [ 238.589977][ T6458] kernel 0 [ 238.589977][ T6458] kernel_stack 0 [ 238.589977][ T6458] pagetables 0 [ 238.589977][ T6458] sec_pagetables 0 [ 238.589977][ T6458] percpu 0 [ 238.589977][ T6458] sock 0 [ 238.589977][ T6458] vmalloc 0 [ 238.589977][ T6458] shmem 0 [ 238.589977][ T6458] zswap 0 [ 238.589977][ T6458] zswapped 0 [ 238.589977][ T6458] file_mapped 0 [ 238.589977][ T6458] file_dirty 0 [ 238.589977][ T6458] file_writeback 0 [ 238.589977][ T6458] swapcached 0 [ 238.589977][ T6458] anon_thp 0 [ 238.589977][ T6458] file_thp 0 [ 238.589977][ T6458] shmem_thp 0 [ 238.589977][ T6458] inactive_anon 0 [ 238.589977][ T6458] active_anon 0 [ 238.589977][ T6458] inactive_file 0 [ 238.589977][ T6458] active_file 0 [ 238.589977][ T6458] unevictable 0 [ 238.589977][ T6458] slab_reclaimable 0 [ 238.589977][ T6458] slab_unreclaimable 0 [ 238.589977][ T6458] slab 0 [ 238.589977][ T6458] workingset_refault_anon 0 [ 238.611769][ T6458] Out of memory and no killable processes... [ 238.705360][ T6464] loop3: detected capacity change from 0 to 512 [ 238.934910][ T6464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.444645][ T4337] Bluetooth: hci5: command 0x1003 tx timeout [ 239.446403][ T4335] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.602080][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 239.721350][ T6492] binder: BINDER_SET_CONTEXT_MGR already set [ 239.723032][ T6492] binder: 6489:6492 ioctl 4018620d 20000300 returned -16 [ 239.798573][ T6501] loop1: detected capacity change from 0 to 256 [ 239.807396][ T6501] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.809452][ T6501] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 239.811974][ T6501] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x811a3bd0) [ 239.815678][ T6501] exFAT-fs (loop1): invalid boot region [ 239.816952][ T6501] exFAT-fs (loop1): failed to recognize exfat type [ 239.871395][ T6501] loop1: detected capacity change from 0 to 2048 [ 239.910537][ T6509] netlink: 14 bytes leftover after parsing attributes in process `syz.3.669'. [ 239.935107][ T6079] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.024734][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.027288][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.392327][ T6538] loop3: detected capacity change from 0 to 4096 [ 241.411411][ T6538] EXT4-fs: Ignoring removed orlov option [ 241.432057][ T6538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.481106][ T6540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.680'. [ 241.489761][ T6540] input input2: cannot allocate more than FF_MAX_EFFECTS effects [ 241.536098][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 241.619428][ T6560] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 241.642679][ T27] kauditd_printk_skb: 158 callbacks suppressed [ 241.642691][ T27] audit: type=1326 audit(241.610:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.2.684" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f1788e8 code=0x0 [ 241.703101][ T6565] loop4: detected capacity change from 0 to 1024 [ 241.706393][ T6565] EXT4-fs: Ignoring removed orlov option [ 241.707640][ T6565] ext4: Unknown parameter 'noacl' [ 242.763677][ T6577] loop0: detected capacity change from 0 to 32768 [ 242.766826][ T6577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.691 (6577) [ 242.772027][ T6577] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.774373][ T6577] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 242.776227][ T6577] BTRFS info (device loop0): setting nodatasum [ 242.777471][ T6577] BTRFS info (device loop0): force zlib compression, level 3 [ 242.778879][ T6577] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 242.780617][ T6577] BTRFS info (device loop0): use lzo compression, level 0 [ 242.781905][ T6577] BTRFS info (device loop0): turning on flush-on-commit [ 242.783263][ T6577] BTRFS info (device loop0): enabling auto defrag [ 242.784465][ T6577] BTRFS info (device loop0): max_inline at 4096 [ 242.785518][ T6577] BTRFS info (device loop0): using free space tree [ 242.812259][ T6577] BTRFS info (device loop0): enabling ssd optimizations [ 242.958522][ T4336] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.377288][ T6628] device syzkaller0 entered promiscuous mode [ 243.506474][ T6633] device macsec1 entered promiscuous mode [ 244.049325][ T6653] FAULT_INJECTION: forcing a failure. [ 244.049325][ T6653] name failslab, interval 1, probability 0, space 0, times 1 [ 244.054937][ T6653] CPU: 0 PID: 6653 Comm: syz.2.709 Not tainted syzkaller #0 [ 244.056479][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 244.058482][ T6653] Call trace: [ 244.059167][ T6653] dump_backtrace+0x1c4/0x1f0 [ 244.060183][ T6653] show_stack+0x2c/0x3c [ 244.061081][ T6653] __dump_stack+0x30/0x40 [ 244.062045][ T6653] dump_stack_lvl+0xf4/0x15c [ 244.063073][ T6653] dump_stack+0x1c/0x5c [ 244.063965][ T6653] should_fail_ex+0x3cc/0x524 [ 244.064898][ T6653] __should_failslab+0xc0/0x11c [ 244.065818][ T6653] should_failslab+0x10/0x28 [ 244.066659][ T6653] kmem_cache_alloc+0x88/0x310 [ 244.067563][ T6653] security_file_alloc+0x38/0x11c [ 244.068581][ T6653] __alloc_file+0xac/0x234 [ 244.069418][ T6653] alloc_empty_file_noaccount+0x28/0x94 [ 244.070460][ T6653] vfs_tmpfile_open+0x3c/0xac [ 244.071339][ T6653] ovl_copy_up_flags+0x1584/0x1fbc [ 244.072303][ T6653] ovl_maybe_copy_up+0x150/0x180 [ 244.073341][ T6653] ovl_open+0xe8/0x27c [ 244.074163][ T6653] do_dentry_open+0x738/0xf8c [ 244.075072][ T6653] vfs_open+0x7c/0x90 [ 244.075821][ T6653] path_openat+0x1fc0/0x27a0 [ 244.076721][ T6653] do_filp_open+0x198/0x38c [ 244.077680][ T6653] do_sys_openat2+0x134/0x3fc [ 244.078649][ T6653] __arm64_sys_openat+0x11c/0x150 [ 244.079761][ T6653] invoke_syscall+0x98/0x290 [ 244.080751][ T6653] el0_svc_common+0x13c/0x258 [ 244.081723][ T6653] do_el0_svc+0x5c/0x134 [ 244.082628][ T6653] el0_svc+0x58/0x12c [ 244.083368][ T6653] el0t_64_sync_handler+0x84/0xf0 [ 244.084289][ T6653] el0t_64_sync+0x18c/0x190 [ 244.523335][ T6664] loop1: detected capacity change from 0 to 32768 [ 244.540400][ T6664] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 245.333722][ T4330] ocfs2: Unmounting device (7,1) on (node local) [ 245.411841][ T6674] jffs2: notice: (6674) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 245.461312][ T6679] loop1: detected capacity change from 0 to 1024 [ 248.793561][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.794969][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.115807][ T6701] svc: failed to register nfsdv3 RPC service (errno 97). [ 255.116830][ T6707] loop1: detected capacity change from 0 to 128 [ 255.117094][ T6701] svc: failed to register nfsaclv3 RPC service (errno 97). [ 255.242912][ T6694] loop3: detected capacity change from 0 to 40427 [ 255.250144][ T6694] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 255.251719][ T6694] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 255.279326][ T6694] F2FS-fs (loop3): invalid crc value [ 255.535837][ T6717] futex_wake_op: syz.0.728 tries to shift op by 144; fix this program [ 255.542481][ T6717] loop0: detected capacity change from 0 to 256 [ 255.544469][ T6717] exfat: Unknown parameter '' [ 255.863503][ T6694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 255.873749][ T6694] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 255.890604][ T6694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 255.905946][ T6694] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c [ 255.910038][ T6723] loop4: detected capacity change from 0 to 4096 [ 255.911176][ T6694] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xd8/0x5b0 [ 255.929475][ T6725] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.353958][ T6720] device syzkaller0 entered promiscuous mode [ 256.356154][ T6724] tipc: Enabled bearer , priority 0 [ 256.389137][ T6714] tipc: Resetting bearer [ 256.390617][ T6714] Unable to handle kernel paging request at virtual address dfff800000000000 [ 256.391603][ T6738] loop1: detected capacity change from 0 to 512 [ 256.392139][ T6714] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 256.394833][ T6714] Mem abort info: [ 256.395517][ T6714] ESR = 0x0000000096000006 [ 256.396465][ T6714] EC = 0x25: DABT (current EL), IL = 32 bits [ 256.397706][ T6714] SET = 0, FnV = 0 [ 256.398530][ T6714] EA = 0, S1PTW = 0 [ 256.399324][ T6714] FSC = 0x06: level 2 translation fault [ 256.400469][ T6714] Data abort info: [ 256.401197][ T6714] ISV = 0, ISS = 0x00000006 [ 256.402046][ T6714] CM = 0, WnR = 0 [ 256.402743][ T6714] [dfff800000000000] address between user and kernel address ranges [ 256.404526][ T6714] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 256.405705][ T6714] Modules linked in: [ 256.406464][ T6714] CPU: 1 PID: 6714 Comm: syz.2.729 Not tainted syzkaller #0 [ 256.407788][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 256.409531][ T6714] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 256.410895][ T6714] pc : fq_codel_enqueue+0x844/0x1004 [ 256.411850][ T6714] lr : fq_codel_enqueue+0x7c0/0x1004 [ 256.412837][ T6714] sp : ffff8000222f6f20 [ 256.413748][ T6714] x29: ffff8000222f7040 x28: 0000000000000000 x27: 0000000000000000 [ 256.415514][ T6714] x26: ffff8000222f7120 x25: 0000000000000001 x24: ffff70000445edfc [ 256.417221][ T6714] x23: 0000000000000000 x22: 00000000000003ff x21: ffff0000d98c0000 [ 256.418896][ T6714] x20: dfff800000000000 x19: 0000000000000000 x18: 0000000000000000 [ 256.420550][ T6714] x17: 0000000000c200d0 x16: ffff8000082dd38c x15: 0000000000000002 [ 256.422139][ T6714] x14: 1ffff00002c84071 x13: dfff800000000000 x12: 0000000000080000 [ 256.423892][ T6714] x11: 000000000001985c x10: ffff8000298d9000 x9 : 1fffe0001b318000 [ 256.425429][ T6714] x8 : 0000000000000000 x7 : ffff8000083c9644 x6 : 0000000000000000 [ 256.426970][ T6714] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 256.428454][ T6714] x2 : ffff0000f9396b28 x1 : 0000000000000000 x0 : 0000000000000000 [ 256.429981][ T6714] Call trace: [ 256.430625][ T6714] fq_codel_enqueue+0x844/0x1004 [ 256.431508][ T6714] netem_dequeue+0xa00/0x1018 [ 256.432347][ T6714] __qdisc_run+0x1b4/0x1300 [ 256.433192][ T6714] __dev_queue_xmit+0xc38/0x3154 [ 256.434056][ T6714] tipc_l2_send_msg+0x2a0/0x364 [ 256.434940][ T6714] tipc_bearer_xmit_skb+0x240/0x380 [ 256.435879][ T6714] tipc_disc_reset+0x218/0x328 [ 256.436758][ T6714] tipc_reset_bearer+0x5c/0x88 [ 256.437612][ T6714] tipc_l2_device_event+0x498/0x76c [ 256.438569][ T6714] raw_notifier_call_chain+0xd8/0x168 [ 256.439042][ T6738] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 256.439608][ T6714] call_netdevice_notifiers_mtu+0x120/0x1b4 [ 256.439622][ T6714] dev_set_mtu_ext+0x3a4/0x528 [ 256.442696][ T6738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 256.443368][ T6714] dev_set_mtu+0x50/0xe8 [ 256.443384][ T6714] dev_ifsioc+0x398/0xc04 [ 256.443392][ T6714] dev_ioctl+0x4b0/0xc78 [ 256.443399][ T6714] sock_do_ioctl+0x198/0x258 [ 256.443406][ T6714] sock_ioctl+0x234/0x828 [ 256.443412][ T6714] __arm64_sys_ioctl+0x14c/0x1c8 [ 256.443420][ T6714] invoke_syscall+0x98/0x290 [ 256.443427][ T6714] el0_svc_common+0x13c/0x258 [ 256.452960][ T6714] do_el0_svc+0x5c/0x134 [ 256.453790][ T6714] el0_svc+0x58/0x12c [ 256.454598][ T6714] el0t_64_sync_handler+0x84/0xf0 [ 256.455518][ T6714] el0t_64_sync+0x18c/0x190 [ 256.456404][ T6714] Code: aa1503e0 961d62fe f94002b7 d343fee8 (38746908) [ 256.457749][ T6714] ---[ end trace 0000000000000000 ]--- [ 256.469567][ T6738] EXT4-fs (loop1): 1 truncate cleaned up [ 256.470702][ T6738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.067415][ T6714] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 261.068752][ T6714] SMP: stopping secondary CPUs [ 261.069675][ T6714] Kernel Offset: disabled [ 261.070561][ T6714] CPU features: 0x0a0000,000f0097,a65bfea7 [ 261.071712][ T6714] Memory Limit: none [ 265.290483][ T6714] Rebooting in 86400 seconds..