last executing test programs: 18.423072399s ago: executing program 0 (id=683): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 18.39623923s ago: executing program 0 (id=685): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000001340)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000300)={{r4, 0x8, 0x4, 0x6, 0x6, 0x1, 0x2, 0x7, 0xfffffffa, 0x4, 0xfffffff8, 0x10, 0x6, 0x2, 0x2}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) close(r7) syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 18.320067231s ago: executing program 0 (id=686): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x1f}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x4, 0x3, 0x1, 0x3}}, 0x2e) request_key(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) syz_clone(0x80041000, &(0x7f0000000400)="0c3ce50b6e762ae7d9c69069a92d256ff71da54880000000000000fa919026d53c884969d183bc421705a14cebe5", 0xfffffffffffffc64, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000480)="22fc8a1ff0e5d1f5a41af2bd98d5abbdc03bba86a30ee64b86d00794ab64669ab832fb4ade6312d2cdd2bd6bcc8f751e39c030290929d049b82aaa61ff75cc24591120c3d4528b1e834131bb309b7b67f8e16694dfb9f5682aa1e00a66c4be858ee1bbce39fd6e6684e00f35defac9e85ae28e6f942d8c36233cc079e9962dd01d7a6c6b1913d4bc76dd19252988c2624294674c7bd094316db3ae4f02316c66048d06e948a1b1a52d621b092e2aa461c46a7cdf4958e05789d044f2678f0391f38f9ff706248e2b9e7d00f600f6854f0454d2cf48cf9cf1fcae1d13d9e3bb2db013956c06ea8faa7607ac50c2c1931bf59ed115dd") timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x4, @thr={&(0x7f00000001c0)="bda086ebf2d7476e84a87cbbbcbaaa2c45a3e83b63375c4f14fb163695c43fc8e85ba31a998b2f76a53eb53ae2c8045cd8876df71ae3170729c479850b27fa4eb124f2344c26f0aa518947cf4ee4a124aab4aa4f0cc998390b7683a2da57aacbe08d4ab38f6b29d0", &(0x7f0000000580)="b308b7f4e1c80f94b0a36898e1e0094a6a90e74b64c3b6069b285f2bbbd98c9827efc4f838f60c6a6b6f18f5e2a67ae82923c295d56a8049838efdaf6dd6c66627f3026b246326d0da4bae9d525431eb5d1cec5ee7f3f2c69bbfc0163944fe5931a8de69018cfb74b3dce6b99e9c57d6a08f2bfeb02d41ec1e7e8b6dce0ba5ef19b9033f5a990853ebcdbc8691e44d1fba5caa0287db9f12f2259a8ea0a46450f3ba887ba9de6368b3ca3d9193cc23e30853eac6e71251115f654b11b58614c6f3dcf457e86a30e93704050da3369fd04560b8048da64158f0b45cfa1da975b05ed6211d7a0ba5dddf3057b836574f69409f21e708740fdcc62b6caec66239fb8dc152722927f1b412f218be80ed21c38b41c5c036b5415c84868a592747e36ced94bd34a357bcda9f8aec2460d74397c2b1e0ac"}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$inet6(r0, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x60e41, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0xfdef}, {0x0, 0xff95}], 0x2) 18.318358491s ago: executing program 0 (id=687): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x6, 0x4) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 18.317972151s ago: executing program 0 (id=688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x1014e001, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x1}, {}, {0x0, 0x0, 0x4b}, {0x0, 0x35}, {0x18, 0x6}, {0x3, 0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x3}, {0x73, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x0, 0x7c, '\x00', 0xff}, {0x0, 0x2}, {0x9, 0x8}, {0x7f, 0x4}, {0x7, 0xff, 0x0, '\x00', 0x39}, {0x0, 0x20, 0x80, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xd5}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x80}, {0x6, 0xff, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x2, 0xfd}]}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(0x0, 0x90) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4008af00, &(0x7f0000000000)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 17.432221845s ago: executing program 0 (id=705): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x1f8, 0x108, 0x108, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$PPPIOCSPASS(r1, 0x127e, 0x0) 3.707406044s ago: executing program 2 (id=945): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)='erofs\x00', 0x200804, 0x0) 3.699388164s ago: executing program 2 (id=946): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x30, r0, 0x45809000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r5) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001180)={0x0, 0x0, "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", "461ac1b6593eb86e660cb17889751fce5be6bcac124e871ecde60c09080d19cc0d92a181d49f50acb3e2e900e1ae0265f7d22f175d2794490855cc4203599cd61936319d1bcc06cc8046c374855c500ae361435ff4f46c5882e7481925e07feb43b8a9ebb03c5420cf1fd746fc48c34f8706d44fcaa735cb5e803669fe6921be449718acaf9dfdc334619bac16973122db3d28c0b905b2da8e9573bb2ceedb0463b22961a63caf650ec684c25133a9466f05b5cfbfbf28ab402891a5121ec05708bd4c6a4858d3e4e19bdd4f17986f8e3f53d05181e7d7067a460de3f10ef62d03da8247ff951d3f4d568c3d2f5500222bc0bf2ea4ed93684503ccaf839c8a6ddd2163a05d17a8507314c7a0f90108aa17948b7577ed2c09b249e261f62d4ed7078ec53bd62561f707be7061b4365c331e0f34e943c93a65958e0d89e11754f8423c9edf3bf976c35742a89a92ccd24eb337dff12fd561d4aad7d1dce6c477832ccc465c829ae7d6d23967bd0d5962f17d99060177d5ca1c74ddcdafdc71f478a1bc58391b4020e5d77dda1cdccd402f77d2c05e7ad65c81fdd15233692ad3db3378930e52616eec55e390ccec4a39e625ec879c0b893754fa288ce77c75d56d133354a03272883145223319993a293c2fde483253ca50174c19391326e0ba6907c52b24ac828884a47156f02ab8aa2ca1cce1a6ecf0e088ffd13a33f67ba91057057ee43ad47d90cbbd65784321df071d000404b56e4764e1433153e4d290d0b164a53deed464817a6e350ecaf3a8334f0865b4bbf02ac4b228be7367793f2fdbee5ddd935c666c9d611ea102eaab4ca7904aea2f1dec6064f7b005e4e5d3186974ee382fe844c8e05c505b520592d269e97959aa09b9b5bddf4370cb27256f831f1adaa0c7827efe5dddae5edfd6eb4ad1d4b660af8a293aa3bfde7579a45966a96fdb2b80a2ddc7c146d88fba35b63d76d88803beb9f1d39efdb6ac6c357d9fcfd837d960a90774d26e89303fc55d73e8831e47683ee6b27c8c3282baf86ed3478bf7cf508e8478e8c64fab580395a63085e52a5e5c1719172d82df05bd0edfcb2d88e39c55ee4f84938c679fc219160dd53ea36280bdb85c6278970378e8c4696b4c5d895228ffbe9349eb5461d02381b52625c6dadfc78752261dc120ac0ed1506449d82f781b3f65edc9679b6aef9a1c01ca27c4ac706a11a13e8d57886e0b31a701d76d5f752c97aa07ed8feaacf5e965265cf1f611c3bd4788a1dd9a612f24507e0c00c0732d40f7a6275b437fb8095ea4da2d170c0ce7bec5b3d71928e9b10fafd672e26be33d52aa47c85791459a9fb18c544db4999e2c9d063d628384d35a23ea948c2b3b5c0a0f0f5eb317a5d04f0da37d1de441824afa24b86719cc219e5f684d15648c986800c3ea6f4094a605ce2cd28c56cb1b2f7a7e34370e3a3ed746994bb2fbaae319cc18ece2fb666839121af15017dc6b10023d0dd54d6aae08b02c94c6e0ec75fbb2c140a7c60c9bbe17ada09f4239d2ba2aa5bd68954fa662a9ad4a7e501d787cdfc8eec178f0773c552a602f4956735c697378f2706e7f57d648b78f69d5e254c31d9474897310e716493c4ea3a77f7c7c98be404f5232d7398bdd6c6546d1883a30d52ca3c6e3df40a9d1b3e932a1a870e6573632dd969cbb0b47ca792bade9a970007faa72d3e12c9b37d7d91ce822387e6031cc807eca87f55435a904f4f03130d9a74bfcdd7e64dca0526b6eac2732347fe1d33280701790227c7bc2efe029d10f0338ed82814ee99288b9246a0ee2a41c5119b070d1857109994d9ca4abeaaf3472aee6c24296ff8b1f51f860908602958bb1d39e4199bb22652385659b50c79a81bdd188f570ee1346426c1ef8b6aa2f13ef51046b0fa632198808897d132e3b63991b34d1c006c564967da057829dd6cd8da6785ad8ab19afb3dde2dafc2b8c8eff46ac22b9570570eccc4e7a583b0559def4c06d7069713c0d36f06ad0de68e1c20579579d146aa4f4b86def495adde3fdf32b2db76f21ecf34e1f6a100c5046d14fde60c47fb7b7358acceb7601f96e8adb1ad4b99afbac0371c6f010c7680d26b6e5a52679ec65f8674b7c920fca3ad66f4d5c8a659d137fac66534f8d78ff9adc90244b45a72e886280b59301ea37eceafd3258c0cbfd6bf7771556aafcae97b44f225ddabebe33ecc841b22811b8f68141e62c2b8cb75bad0370a0e4b6ac308223ace517d907a6a5cf60bf082eb34ddf70e75ebe0477d2dbd41fbba11a70a89557d397e13288e5a43803fc4765499ed7f37b6b0bb8c00e79976d706f7fd234f5df8b75cafc308b1eeee5170901daf9ad4e5c4f4e1de55d62c7003b98e3cc6679b3d71a1109b475e0f11b108d46fe3169672205e892bbc26c344cb7371b55d3752f8057189f6b4366ab89dd89fec1b550a6b5a87c0f218d18de8f090b7682e19bc3301ef5e89e5382ed4388ce08b85f598d1f3003e552accaef85ad673b6d00ba4f8d065b1986462155d739a6c4abdc30794b2f92102059364c2a25938094aabfcb2ace9097a519541aaf93b6dcc92e157ed718b10f68c328ddfa718bcf5cb5d4ffa5c2cd7df72607d435a51fc689deb1f23a3c079355c99685f931cf0c67a0d061bed1f046bd9c3de9b6c3d8f233201866dc44a17b8024895022b331b91330611a897af62b09b86f0a1e6f05fa31a5d2367947972f1fb5f1ba3eacb18bbeab81a3bf4b62945f517c5b7eaa6bacd21d6be4c27d4d2b91bcfe5d04494cf1e019663a2828cb4c283862c4b7e98e05a8fb4ccf082c71c852492640a7b56a18fe076173600caeecfceddb9237cb0e645477a20833998f32f6d544edbd21f1b0cabdd9b12b339aa8da0a19ba39df8a4b39602ce707fd28480cd5668b65e38aec95fabb913dcbe74a45aa2622c32b1f020b70c49484c4c93d9a16e0452b76fcc4027f14baa550041608cf0fa46f093cc6a6cc0231890a60e0fda48d5a23c21d1e60656fd53d7fe4361bb84a4b19fa1b07f8519e02b97e9ceeb1b513534061c0878ae8703ac4b6035faf6deccb024ac5e9b094714747b507ae86b6bbdfaa0226b22bb3c87f1c90209fd6c585527947da64d89d1b69027e50da673b269b171fc5db5468743e7ca4b0d51035f4025a4cae958fb80ce1a534e18b5aa2d0cf34266960399edbd744d228a25471370b57b1b64411ab56bec2ae29944a5eb5dbced0aedacbcd2a792345a244a8d6c65ffd4a68f0e23425fbb714c6556a473f667171fbe01fae90ac3f1f9d938b7280ef69efe24ba1e5a0703ab9db09d75d89b62bcea2a2e4a633f5b27aad67911d0323cdfa7fb4245c0d33eba93657c3d2bf9452d645a9c6601b9037e424e6271ef96493c986c9fa90dfbb05d090059052047471ad7bb0b1b81cc8d04a16410806cfc3e6f73d89b59f67475275c66b23d74ae73d8e1a219e8494170a1433fed48d8bf184cac9b091dca603bb242376686d4a7e8348544205a9feda3af3c40d76a525dd5ff012f8fc6dce51821d2031fa9a8517b58b06c2c6f0d2965c9c5feb44caadee3f3a219b060bd5551edc024858452b76b7093c74f0934f160a244289e5c6ba3486397d81f836b2edf770703400a734cba9493b480a496e4d248260ef8ecd0bf6500076a4dc6b7e98d9b0e7f0ddb1b328a4d407e0530359007de8a6d7f6b3f0c1823a33f61986af678e42ada33cd60ac144bfab4a72fd0d386785511062dd8cf974dd227e0af247228e5f2d30bb8daa5e481eb61cc3b6211c87ec1ad5b0b774c8a091af8720754ca18d9988b058e84bfa3ae2bb4009c95a0c97578cce3b327bb9f07954c0eea1b51e216af530a362e8aeb4a2e8291601b2e383a05a3f2eb2b864799f4f4c93a4abb858d7e176c38af8653e1f779ce16ca79208857dcf9ee66688627a74b6573737194c634be5a200a957f165ed4c4fce8bf1e53f7bd80ddd98a5be926e15120cfc52945afeaac50c61d1544c15d1e96d742e91a846816af5a98e1758dfcb00162a1482050dbb925f9d3f1cba60af43b743c36b01533c6114bc0bda5a19198caac11bafa77cf036ac8fbe913115fec44400d2ac3186557a0335070cadaf8d7e97f9c44c2edbbc57a143fe6a70bd412d9a9f87422bf3b8a23c7c144e2a69580263265cd562f5f233396da0964333942e546aff1b3a0119cd5c0b19f5b997df9c16fd46b5cdaf4fa1fbc7ce9035231b210931ec0346501c4f9cc77c783b6be3baf5bdb7b413a5ea9233272a11f54f0104af6c7c036e19e97d934dde5c7ca92c3c48b3fa08cef1a0a6e9cda4167c9c133beb4e412d7f621f732df12e21ba157f29f5d2461509b6e445585c1bee12d473be10e637455968754feae9c0c16645113fb8bff74cb2da401cef0c5f191d1aa5bbd2ad87b1e1f052853f4edc7a3e5566bb180c629f6e4aab828d8b731417cf09acdcc0cc3ff13162b7f0e016f80eb20e357731f7431d6587fcaecedf5147f5b9d6ede51d46ad1d6a89639894fee11599adab3379382a1bd169566421e8550bbd5b5b64a4447c3aeca624fbf0daca3a4c1addbbf942c9de3eefd81d50d9a00309dda94e64cb07de112c2ef43cacb2b42d0e682cbf4c30760ba9f9fb0f9a2e572f99dc1144a4cfe955a106fbc7bbc17c70765151fa158b1f71d2c88e87c018bcb2f697544b52959d2dd322a2be1d6b3d8ab4f00970ab22af05825cdca5d10ae42b80dcd955e77049e596febcd6ba3d5e67176ac93f0e27cf2bff475028e03803267de74bc77dc981792682786fda8dd472dcf2ebf9eafcc793522f973f42678ba5354609f2a21b4757881a334906822de116a92e55263e9bf66f19c234620de09c7ba9a5c3a0899fcf7da63de6373013f5d0010167235468afc926a2b54e5f915851f06e9f7a8b667de625613f7c026f97671d76134cc16d719835e38c21f0c9fe901ab0682bc81e584125df29fd882d82a1d66d9b92a7c336b2702d5fac69f3e1c7adef6eeb40e81948260e493a04865993c038e7a799c11c8f0fa7920bee55abc4e1516d3417a4edcddde1834157f858c9f4dd0a1901e43e289af033f441865e94e6dd0cb6fc3efea149d854e03dee9f203e938d688c5bdb19be29cecb0a3e631784e6ccae27114cbe4c25ada48a65406e30e154966f6a2762f4268feb77a10f5d2b3419784d1c3bc0445eb8fa58e6b59a078d1ffb58ff8cafe535215cdaf6ecf2fce073ae8eb3eae159d9839ba71e1f553ba1f2757ac9bbbf8a06570452d5cec87e88b34914a6eeef17031df3a4c64c705e530e0dc436e80b719975564b0c1b7328e9b6057d242462794bdb9bd4fefe76c212f38690501b0710053071f242046f86f4b449b0114c994a042b40c203a08dfb2627980611516fac47f69f45c1e2b4"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{r6, 0x2, 0x9418, 0x6, 0x1, 0xffffffff, 0x7, 0x8, 0x5, 0x7, 0xc, 0x2, 0xfffffffffffffff2, 0x9, 0xffff}}) r7 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r9, 0x52534000) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) readahead(r10, 0x8, 0x1) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x0, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX, @BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4040000) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNGETVNETLE(r3, 0x400454cb, &(0x7f0000000980)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.648192945s ago: executing program 2 (id=949): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x283, 0x0, 0x80003}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18000000560001000000000000008000070000000000000032a9a178615f925aaab1f1f2eb7d7d6e784ae444cc765efbe5a5345f680a38e2e00405bba2ade90d94db4177717237b073fda6fb31e2bd6b3ba8c1683843846bc9c5d118dc85ea1c6f467249d005a674d81459a5b17dd9968b77addb7728b7d451ec9001ca0067dd94d0fda71897c997bfa079b06b5671d1cd66eb5732b1c9891f4b9d89730490bd87286dbb9e1872eead5affc2b8f27c054d12"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept(r5, &(0x7f0000000180)=@in, &(0x7f0000000100)=0x80) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r4, 0x4d75d000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x47ff, 0x8, 0x5}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010400000000000000000a000000040000000c000a"], 0x24}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000440)={0x2020}, 0x2020) socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x22000, 0x2) 3.592166466s ago: executing program 2 (id=950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x81}, 0x4c800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r4, 0x0) 3.061785974s ago: executing program 1 (id=962): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_setup(0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') io_setup(0x200, &(0x7f0000000000)=0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002280)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24}, {@in6=@mcast1, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x8, 0x40000000, 0x8}, {0x0, 0x2}, {0x1, 0x10003, 0xfffffffc}, 0x0, 0x3503, 0xa, 0x0, 0x10}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x0) io_destroy(r1) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 2.854920377s ago: executing program 1 (id=966): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000740)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000040)=@unspec, 0xc) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a"], 0x30}}, 0x0) (async) close(r4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', @broadcast}) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, 0x0) (async) connect$802154_dgram(r6, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, 0x0, 0x24004851) (async) socket$nl_generic(0x10, 0x3, 0x10) dup3(r6, 0xffffffffffffffff, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async) ioctl$UI_SET_PROPBIT(r7, 0x5501, 0x0) (async) ioctl$UI_SET_RELBIT(r7, 0x8000552c, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f00000007c0)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) 2.854247757s ago: executing program 1 (id=967): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x800}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x3}], 0xfffffffffffffe95, 0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) 2.853715787s ago: executing program 1 (id=968): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x4) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r4) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000", @ANYRES16=r8, @ANYBLOB="00042cbd7000fddbdf2501000000050006000500000014000100200100000000000000000000000000010500060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x63, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x1}], 0xfffffffffffffe95, 0x0, 0x0}) (rerun: 32) 2.852894017s ago: executing program 1 (id=969): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000008180)=0x2, 0x4) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) r2 = epoll_create1(0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x30002000}) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x390a}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 2.799725248s ago: executing program 1 (id=970): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='veth0_macvtap\x00') clock_gettime(0x3, &(0x7f0000000040)) getuid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x6, 0x4b7, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0xe8, 0x8, 0x5b, 0xff, 0x1608, 0x244, 0xf42e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a5, 0x2, 0x4, 0x8, 0x88, 0x1, [{{0x9, 0x4, 0x3b, 0x53, 0xc, 0x66, 0x91, 0x94, 0x1, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "94300f17a6ee"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xed51, 0x9, 0x3, 0x10}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x88}, @mdlm_detail={0x78, 0x24, 0x13, 0x8b, "286557b1e57be3b0ca4a4b556e24d1d1971eaacb81171e9c059e743c353e882096c1c847201d7b3e643eaa5c95539af497c7b615ac4ec24665b555383443c58aa828a2a1f116346102b35273bf7180f846b66ec6ff3b35e52a96f214365c845d37871788340cdf5b7e6bc5714a4613587c506c96"}, @dmm={0x7, 0x24, 0x14, 0xb46, 0x8}]}, @hid_hid={0x9, 0x21, 0x9, 0x4f, 0x1, {0x22, 0x427}}], [{{0x9, 0x5, 0x3, 0x10, 0x200, 0x3, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x11, 0xafa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x0, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xae}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xe, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x27, 0x10}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x7, 0x7b, [@generic={0x98, 0xc, "7e66137532da4b0f809045f17aad519efc9bec1fe880e512731161c56de0690f8a3fc3eae377c013b66e8f10958290910fa652452d63fbe1636add0c92915f15abed665b2189b2ecbd07d42d6a7aa7595199ead38f2bf6aa319396203bab27f435850437110f4a26e266e0cd0a5701cf6846b5162a458a9827d256f5c0e7c5eae7e81360ea3ab7379a8291253e51653111ddb1c3e93d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x12, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x10, 0x9, 0x2, [@generic={0x42, 0x23, "3325e0ab72b11161f193da98f74513a06029d7d218950f2db850842285523d0d920f27975a5307435f2ef558db06f2378599f7254f0ffaf42c98a1ffb6f3d335"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x35f, 0x6, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x9}, @generic={0x65, 0x21, "c74e329193ce1f14f63d27645b6d7b348ed37ec432e6af5cf7019fe5cf01443bff5745141f57dd7d4e48da7ce5e29490f627e07640a5ff18cc9f8d95809f3ed5ef0e807616ef75ed2a0b5b94e758ea5b7cf725e1981a3315163c254f5b17f7246cb4e5"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x7, 0xc2, 0x9, [@generic={0x3b, 0x9, "ccc899a22d259026bf9dbfce327dd4e0a0feeb138f07096717d9a601894cfcd89ed601624ea39655cd8680486e091d31837a47d0388feffa20"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x1, 0x6, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x3, 0x0, 0x24, [@generic={0x3, 0x22, '+'}, @generic={0x2b, 0x6, "eec6448e6c5f9bff1139c3135eb321d8c099c247dc24ff478c63b574e6f2d694ac1d3c6010292493ec"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x7, 0x8, 0x83}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x5, 0x10, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x9, 0x6, 0xc, [@generic={0xac, 0xd, "853b5d3eedff72ade41d720a19ffd43e0342eaa9da4a702d91b6319667012e508292f8b819f3ed5c1fe90462062554c228f2fc7b097f4f485bc0b640e486046014f85fa4075ba6461d91d2abea7930796aebcd82123557017d42faa022d5d0251e880399cf5dbd7092b1d37363ebde53bdd7b817581e159c1aef4fba2151599bcc02c4614f576461c6006ae0efbc2d31d647c8f5329c9aa419dcb4a428a6f4007dd1bbc3d46965d8c166"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x30, 0x7, 0xe, 0x61, 0x6a, 0x5c, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x7, 0xfa}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x18, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x9, 0xf3b7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0xfd, 0xa}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x2e, 0x1, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x81, 0x10, 0xf8, [@generic={0x39, 0x9, "b43507a70dbc2e33f70e68ea41c791808a479348414f0ecd744da989da185bde26dd0490cbbb2c99c37e0d191ecfcf68cd9b2be5256fef"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x0, 0x40, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0xfa, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x3, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x7f, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x55}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x5, 0x7, 0x7f}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0xd, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xff, 0x9, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xe2}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x7, 0xaa, 0xd9, 0xff, 0xaf}, 0x11, &(0x7f00000005c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0xf3ac, 0xf, 0x3}]}, 0x1, [{0x18, &(0x7f0000000600)=@string={0x18, 0x3, "5018f18b0216015537022489f1ebae5ec7a79ca7bfb1"}}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2, 0x4, 0x5, 0x6, 0x16, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_sa2={0x2, 0x13, 0xfa, 0x0, 0x0, 0x70bd2a, 0x3503}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @multicast2}}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb0, 0x9, {0x6, 0x32, 0x6, 0x0, 0x0, 0xe, 0x0, @in=@remote, @in=@multicast1}}]}, 0xb0}}, 0x20008000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x110, r3, 0xf2042000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000017c0)={&(0x7f00000007c0)=""/4096, 0x1000, 0x60, 0x2}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x2, 0x4d, 0x1, {0x22, 0x210}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x250, 0x2, 0xe, 0x5, 0x20, 0xcf}, 0x5, &(0x7f0000001880)={0x5, 0xf, 0x5}, 0x8, [{0x6c, &(0x7f00000018c0)=@string={0x6c, 0x3, "490b66e71b126fa2bfec8bd0b7bf482e012faeeee1ca4e68c4eddd2a8992629bdc294372f0e52a5ecdc0b8854b9d6af0e30b51075b0b420901de7338fbf8a9549cdafa9163981001c903f007b68a89bcf6eea060a0db433e1b7053df7486715e196235a4af7fcc00e49b"}}, {0xa6, &(0x7f0000001940)=@string={0xa6, 0x3, "462f27ca32570a4de6602f14b13871dd190345ff7bdc2457ed50dd5ee7dba343f9a1c38ef19fce37b9afeefbb1f88af3a110c1b97ce52f1e460d609b84079b63d84a97b2465edfc75cbc222f257ffb02de698b2142cd560c4a39a8fdd6c2901d43768444f26ad9bee40ce249c49f8bf8af6a5cea438c5a9f9e3e0286c8c9114ad523faf78e48b8bfda81fb7fd0c6e318cb641763daaa70005b769ce248a7d19771b7d887"}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x602}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x13, &(0x7f0000001b00)=@string={0x13, 0x3, "4b26d19b404182284065d10c9174a74c35"}}, {0x6b, &(0x7f0000001b40)=@string={0x6b, 0x3, "515782a5450de684d2374774e42f359515751277f63bb5bbbb551a44dd7e795751e0fcd1dc95bc276ad8e605f22628d4abc156ae8ebe36cd26a5a50ed388df1b1deadc2195b01f8b8bbf28e394b8d270950b8107f83f269f60a07bd53c4d85592b15b77d806a7b3abc"}}]}) r4 = syz_open_procfs(0x0, &(0x7f0000001c40)='children\x00') write$UHID_INPUT(r4, &(0x7f0000001c80)={0x8, {"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", 0x1000}}, 0x1006) connect$inet(r4, &(0x7f0000002cc0)={0x2, 0x4e20, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmmsg(r5, &(0x7f0000003280)=[{{&(0x7f0000002d80)=@rc, 0x80, &(0x7f0000003180)=[{&(0x7f0000002e00)=""/184, 0xb8}, {&(0x7f0000002ec0)=""/115, 0x73}, {&(0x7f0000002f40)=""/147, 0x93}, {&(0x7f0000003000)=""/91, 0x5b}, {&(0x7f0000003080)=""/222, 0xde}], 0x5, &(0x7f0000003200)=""/110, 0x6e}, 0x2a5}], 0x1, 0x12020, &(0x7f00000032c0)={0x0, 0x3938700}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003340), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000003400)={&(0x7f0000003300), 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x24, r6, 0xc30, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x53773ce2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x40041) r7 = syz_open_dev$usbfs(&(0x7f0000003440), 0xfffffffffffffffd, 0x200002) rt_sigprocmask(0x2, &(0x7f0000003480)={[0x80000000]}, &(0x7f00000034c0), 0x8) recvmmsg(r3, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003500)=""/232, 0xe8}, {&(0x7f0000003600)=""/42, 0x2a}], 0x2, &(0x7f0000003680)=""/12, 0xc}, 0x3}, {{0x0, 0x0, &(0x7f00000036c0), 0x0, &(0x7f0000003700)=""/53, 0x35}, 0xffffff01}, {{&(0x7f0000003740)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003980)=[{&(0x7f00000037c0)=""/83, 0x53}, {&(0x7f0000003840)=""/92, 0x5c}, {&(0x7f00000038c0)=""/163, 0xa3}], 0x3, &(0x7f00000039c0)=""/132, 0x84}, 0x5}, {{&(0x7f0000003a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000003b00)=""/152, 0x98}, {&(0x7f0000003bc0)}, {&(0x7f0000003c00)=""/143, 0x8f}, {&(0x7f0000003cc0)=""/154, 0x9a}, {&(0x7f0000003d80)=""/254, 0xfe}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/149, 0x95}, {&(0x7f0000004f40)=""/243, 0xf3}, {&(0x7f0000005040)=""/58, 0x3a}], 0x9, &(0x7f0000005140)=""/113, 0x71}, 0x7}, {{&(0x7f00000051c0)=@nfc_llcp, 0x80, &(0x7f0000006780)=[{&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/9, 0x9}, {&(0x7f0000006280)=""/129, 0x81}, {&(0x7f0000006340)=""/132, 0x84}, {&(0x7f0000006400)=""/43, 0x2b}, {&(0x7f0000006440)=""/138, 0x8a}, {&(0x7f0000006500)=""/127, 0x7f}, {&(0x7f0000006580)=""/144, 0x90}, {&(0x7f0000006640)=""/201, 0xc9}, {&(0x7f0000006740)=""/2, 0x2}], 0xa, &(0x7f0000006840)=""/82, 0x52}, 0x1800}, {{&(0x7f00000068c0)=@rc, 0x80, &(0x7f0000007c40)=[{&(0x7f0000006940)=""/29, 0x1d}, {&(0x7f0000006980)=""/206, 0xce}, {&(0x7f0000006a80)=""/190, 0xbe}, {&(0x7f0000006b40)=""/10, 0xa}, {&(0x7f0000006b80)=""/133, 0x85}, {&(0x7f0000006c40)=""/4096, 0x1000}], 0x6, &(0x7f0000007cc0)=""/72, 0x48}, 0x7}], 0x6, 0x163, &(0x7f0000007ec0)={0x77359400}) r9 = socket$pptp(0x18, 0x1, 0x2) sendmmsg$sock(r8, &(0x7f0000009c40)=[{{&(0x7f0000007f00)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0xffffffff, @mcast1, 0x4}}}, 0x80, &(0x7f0000008280)=[{&(0x7f0000007f80)="4012e6bf60fa3e017196156ffb80c8f41b5b06234ba784c35112b4c6c46a62a199ef2963c1c615be780480ea353645e6bd55a807f1170b64837c6a18d24c877094b91443d3f6ae8ab2866ab975021e96ed800cc9c04c1ba4ed23c6472da23c4d186c2f728b4fd29446faac9111af1c43add8cebf02650caa50d98fa1ed7133001a0a2a7968d4aa0a9c5254e0e991704dd21f20196a1df7b60c150ecdc9293d6ff18c007e7b73cfb9754f001e929934cded54", 0xb2}, {&(0x7f0000008040)="418f3ce2f0cbea5fc2208deb9c97e0225fecb38501c618b6e29aa27b65e2c399d70a107b346db2468b3159a79006ce83f565ba2ae14297c568530676309f659faf7375092411c75c0b7ba08f49b85a6a95293c50fd1e0fba54b6a76405de7afa57d2dab0d47c283995e86e8dc35e292de71332956af11270fdb0512ead43fa3ee9aba094a971ccd031e5bebce72124f86a4735d2296455b1fdf833f7a142cf1ea8e8dc727fabf0ee4eb94aff9932bede11a7d080f271478080726fa9984dd3be9a4f567747e74df530196f3e5bfa7c179b374f42296b1fe99c0c121219d54476682b3ff620465b2a23effb", 0xeb}, {&(0x7f0000008140)="5fdc9aff58e916c0551a2d62b44196a909b3bcf4cc32fa8f8c4a7fe4be6f07d4f4567cb47305df", 0x27}, {&(0x7f0000008180)="288173b1c9b970e322bc36bda0f7d81e997020bc9949da9112d2c872583f8d79cbf50403d1f54f175d3f9b71c387ec3b60f5d5a77eb1b04a69214aa8da46f659c66d7cb5db38188f4c002b736147733fc6b9786518f8441bdefab5651041a04338d7e1c63230b4ba6b034a99f240e69f0796d4f0a57f5f6f9ab638b9195dd1e86633a936fe7da7a86e35aba31a3b5141b6b03845de61a3c95caa597287eea671b643d5a606bc7d6563d4f8e235b936b1e3220b5ed3fc0f9ad359c85bf7311c843a17d7c5e662ec9322ffbaccac423d6b710da0cb275ca83a24f2ddc660dabb5d49b9dc7c0d0de8acf8", 0xe9}], 0x4}}, {{&(0x7f00000082c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xef7}}}, 0x80, &(0x7f00000084c0)=[{&(0x7f0000008340)="ea72e11a86702ee229fabe9cf1daa5043a74c5a5b97a5458184cbc5b777b00862d3979fd56da6935dd47db911c25ee76e9d3c2882b74927e71cd01b3aa20252d2cdc89064ff30d0c04900b1e0fe20fbf5ccae1badd6407c2f3ee58e83dd1aa86a8c12af6a5f75e143d24595cfa9c375a2eefb0273c5924d099042fea6479956a63d4472a33623450b9a2ce3bf84573ed72ccc4024d69f9d4bee70b5a56db58d2e33001f33b64a405420ef67b512301655d7151c80a", 0xb5}, {&(0x7f0000008400)="75aecbebfa53c8bfdfedf8dd6f69c524136e44c7cfa9dcc883ae2c80d256d501ed91bade7191b2682eb8b46a064b2f3bb45220b98b70cd247acf6cac04598ae785673d8f4ef7e2b2f59fd53f36186a7c7c3a0d032db7b34ab07afe2b9a6a2e9deafdee1418a54daae3b741aece3aed0621d2bda07d34b2bd2724129896c6fa26ce27226da3eeee60ce29603b5420799550661c1811eabb97f1b4c8c56744c8b58bb5415587312db89aa2c13a804ae0bc9e2c06e8353efc1ee7", 0xb9}], 0x2, &(0x7f0000008500)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xcb33}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000099c0)=[{&(0x7f00000085c0)="c98c86fced1f8242aaeb9deae3a3b1c0d7fb7d73ed4b18c27f4dec3abf312c314fcf4babf49824aac0917424f8107ede9b297137c0b4cab1bbe92d9be8507d4e01714b7e1470f620db13ecfa6211fb5bdd7e4e9384548bcaf6bd3506f4934fe9888de45e62538dcd95b0948bed856f67897ef27a293b1b3b925dfcc5dbb0d449773eaa9a3f642180cbf7d66ae264f5022dab8e3acfa9057c267c083a0381db1bf66ccdcde1f33116f18f070999a1d7deff28a0", 0xb3}, {&(0x7f0000008680)="cf4f359527f2af4951332f2d35672c5f487bb5d5a3f9085b877e6435c42a5861ed8c4326934d0b08c8849a296b3b702df8bb68f392acb8057c630a7b96f00be6aa0ada3fd73bb501571120e56fdaf8e88a7c107043061e2b24cb8474122fbe1715283a0900db0f3dffac5c0e56ab639d73541ca31e863eef1b91aae43aae7f3cc3570cf5e22ec6c64c77230f16e40485b7181ab4bdeb82f3abd42959442faf1664318480192e08588c4c7edee3ac05d61d95e18a77aab5c07f4a3c504cc34c5b31fc365bd5a7fa324d3f106546752856bced", 0xd2}, {&(0x7f0000008780)="ea57958e46da29a7d853f4cf28ccfa328bbd021d8073fbcf080a3c5509d5b1648ea140112913d81ec36cb733672f5c0c8344a7a40496b272501f08fe69b9643311f09e5d6ad97dd7191f6e0d17b6a2dcc5cbc6fb05b316f3ec4e6af98353", 0x5e}, {&(0x7f0000008800)="742e756b7389893965d1694cdce189e313d51e8e4dc51387a5d4ac114ea3f563f0f757de424d9d097dba230bc7f02de23324135a098192fa1ff481d286a9cd2d1177b23aa1aeabc11bf291d368578e224ff7d971f96f1397523a23f522431bd866c8", 0x62}, {&(0x7f0000008880)="a13d1eb4a33120992de4902711a77460af56314f31590e1d226bfcd2ba186448fb52d0f71d98", 0x26}, {&(0x7f00000088c0)="c437dce2f1ce1988fb415c7005f28eab7fcdb87810e868829d072af20777d7be03463ad4e38fb826a8bc484914ab3cb8f4959cb85efbfec28f545d95064cc70bb85822f02999b6f7368116fa84c918c3e8fa09b40e2e82882d9c8b3b4391c6b62a0ec2c4e7d5a88318177e41eed80f8d0dbe2ac1c829b04150c29553e620005b784fe44f496bd841576b2d96e75adce3eb2284ebb41db6ed6b1c5a7423e2a77595a4ac422a870b78b5c969c636d8e06be9363ebaa3778fceabea5c0c80c5f91af7d935d9fc4c630dea1cef13aefa", 0xce}, {&(0x7f00000089c0)="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", 0x1000}], 0x7, &(0x7f0000009a40)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}}, {{&(0x7f0000009ac0)=@l2={0x1f, 0x5, @any, 0x6, 0x2}, 0x80, &(0x7f0000009c00)=[{&(0x7f0000009b40)="d27734cdbe5f48977c6a44e0419a2ed2d5d49ef3a1554c5331babfa6c662fbe40699ba7636ee4b3ed37620d2ac580f6d7871001f7dd6676778a3", 0x3a}, {&(0x7f0000009b80)="18954b09cabe791e20c2549d679b0fd4ba607a572d39422578dda3906b5531070ff9c0c282ef9a904d6bb84c912f4a76eaf71a3b92ac042e9f6172d2398f9d584e614ff5a768c06f213a", 0x4a}], 0x2}}], 0x4, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000009d40)) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000009e00)={{{0x1, 0x1}}, 0x4a, 0xfffffff8, &(0x7f0000009d80)="b2a878fa347c872a3cd8420359aa473a3325ec48e100800410ad115a11195850ee2240e7d508c24f3bc00f1038dd81dd9fc7d65ffde152269b734734a32da9eea23079287d1f1dd0c34b"}) socket$can_bcm(0x1d, 0x2, 0x2) fcntl$notify(r5, 0x402, 0x30) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000009e40)=""/40) 2.394413254s ago: executing program 32 (id=705): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c8, 0x1f8, 0x108, 0x108, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$PPPIOCSPASS(r1, 0x127e, 0x0) 609.047451ms ago: executing program 2 (id=981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000900)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f00000003c0)={0x20, 0x17, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0x8, 0x43, {0x43, 0xf, "466c5c12d198003685472da88504b08871cbd1b69b534ec4822708136d1d633c1af80322e7b87c232fe56adf825fff860efd45b6deadcc727559ce41dffbd6f530"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x15, 0x23, "f9b383c570c9ac1dadc784664b00d300eabc0211efe8c12e198b96d500dfe2ed9174f9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}}) close_range(r0, 0xffffffffffffffff, 0x0) 475.842864ms ago: executing program 3 (id=984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 466.569644ms ago: executing program 3 (id=985): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x75f, 0x10b302) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42400, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x6}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x8, 0x0, 0x2d}, @fda={0x66646185, 0x3, 0x0, 0x33}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x1}) (async) mount$9p_unix(&(0x7f0000000380)='\x00', &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400), 0x200002, &(0x7f0000000440)={'trans=unix,', {[{@loose}, {@access_any}, {@noxattr}]}}) (async, rerun: 64) sendfile(r1, r1, 0x0, 0x24002deb) (rerun: 64) ioctl$LOOP_CLR_FD(r1, 0x4c01) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 434.201484ms ago: executing program 3 (id=986): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000900), 0x8000000012, 0x608446) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000a00)={0x900, 0x0, 0x98, &(0x7f00000004c0)={0x80000000000000, 0x1000000, 0x1000008}}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42f300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) (async) close(r6) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r5) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000740)=[@text32={0x20, &(0x7f0000000940)="360f060f01c4b835bca0940f23c80f21f8350800b0000f23f866df3d12000000f30fbc8500a0000066baa00066b8420066ef0f6a44a908660f7cde0f2043260f06", 0x41}], 0x1, 0x42, &(0x7f00000009c0), 0x0) (async) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="080026bd7000fbdbdf25100000000800050006000000d570935a67fdbdabe76e294b9d7053e837f947f1da9714046e7bfaa70e7830de7aefa39a3be01f5673e39a631c3ab5b9286e87b583143b48d68f35192a9c1f1c4d"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40845) syz_usb_connect(0x5, 0x2d, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000a40)={0x0, 0x0, 0x56, 0x0}) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000000)="0f88a8", 0x3}], 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000480)) (async, rerun: 64) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/121, 0x79, 0x1, &(0x7f0000000600)=""/128, 0x80}, &(0x7f0000000680)=0x40) (async) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0", 0x1}], 0x1, 0x0, 0x0, 0x20000851}, 0x20000005) (async) r10 = openat(r5, &(0x7f0000004280)='./file0\x00', 0x100, 0x1) getdents64(r10, 0x0, 0x0) (async) read$msr(r10, &(0x7f0000000100)=""/37, 0x25) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000000c0)) (rerun: 64) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f00000003c0)=""/71, 0x18}, 0x9}], 0x1, 0x40010000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 378.999405ms ago: executing program 3 (id=988): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, &(0x7f0000000080), 0x8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x44800, &(0x7f0000000040)=ANY=[@ANYBLOB]) 378.375265ms ago: executing program 3 (id=989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8001000010000100feffffff0000000000000000000000000000ffffac1414aa0a0101010000000000000000000000000001071c000000000a00004d32000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000000c0)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="055b7d"], 0x14}}, 0x40000) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="055b7d"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1d3200000000000000000f00000014000f00fe8000000000000000f70000000000bb080001"], 0x30}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 365.129085ms ago: executing program 3 (id=991): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x5, {0x5, 0x24, "7f80b5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_settime(0xfffffffa, &(0x7f0000000140)) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0xfccf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x73}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 298.352856ms ago: executing program 4 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280), 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip6_tables_names\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x40, 0x4) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="ef62ace74bd76578", 0x8, 0x840, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {}, {0x0, 0x0, 0x0, 0x1c000000}, {0x2}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x96}}, 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r8, 0x0) read$FUSE(r8, &(0x7f0000002680)={0x2020}, 0x2020) 272.277227ms ago: executing program 4 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_cache\x00') ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000004c0)=[@exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x101, 0x2}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @register_looper], 0x32, 0x0, &(0x7f0000000540)="7246c4e2e37c193da67d68e758a582efdf92de0a888349b5de292df84328a1af0d279c49b0d51cb06a8d053a8b50a44a6eda"}) ioctl$FIONCLEX(r0, 0x5450) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000640)={@empty, 0x0}, &(0x7f0000000680)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000008c0)={&(0x7f00000007c0)=""/239, 0x2031000, 0x0, 0x6}, 0x20) r6 = creat(&(0x7f0000000900)='./file0\x00', 0x95) r7 = socket$inet(0x2, 0x3, 0xdc) getsockname$packet(r3, &(0x7f0000000940), &(0x7f0000000980)=0x14) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000a40)={&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000a00)=""/50, 0x32}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0}, &(0x7f0000000b00)=0xc) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001bc0)=0x0) r10 = getuid() getgroups(0x5, &(0x7f0000001c00)=[0x0, 0xee00, 0x0, 0x0, 0xffffffffffffffff]) r12 = fspick(r6, &(0x7f0000001c40)='./file0\x00', 0x0) sendmsg$netlink(r2, &(0x7f0000001d00)={&(0x7f0000000a80)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc, &(0x7f0000001b80)=[{&(0x7f0000000b40)={0x101c, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x38, 0x0, 0x0, @uid=r8}, @nested={0x1004, 0xdd, 0x0, 0x1, [@generic="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"]}]}, 0x101c}], 0x1, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r12, r6, r0, r0, r7]}}], 0x50, 0x20000000}, 0x11) sendmsg$inet(r0, &(0x7f0000002e40)={&(0x7f0000001d40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000001d80)="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", 0x1000}], 0x1, &(0x7f0000002dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffb442}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x60}, 0x4000000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002e80), 0x8000, 0x0) fsopen(&(0x7f0000002ec0)='qnx4\x00', 0x1) socket$netlink(0x10, 0x3, 0x6) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002f00), 0x445c1, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000002f40)=0x2) close_range(0xffffffffffffffff, r13, 0x2) 250.347547ms ago: executing program 4 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0xffdd) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs2\x00', 0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYRES8=r1]) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="0440e098ea2ded990b13b515d32c8851d5560ac8a56a80b5013a239c8c96da5c733e3c9e8078473f0af551cf8c9df2d126b0d1d8bf73d98c192156aa93b7de402af94f4a82367e62205e4516ffdcb124124b94bdfd1204bf642f1cc9c703a8c8978ab9252b40e7a7bc542421f70a4898916bf4107e0ccfb83fd2aa6248f021893d24f9646a4ae702607db337a3197dd30cd45d1b19d6d7a7d9e304c07cf4a2a3720335f76e1e9d7d705654d5d95c", 0xae, r2) (async, rerun: 64) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) (rerun: 64) timer_create(0x5, &(0x7f0000000280)={0x0, 0x2f, 0x2, @tid=r3}, &(0x7f00000002c0)) 164.241038ms ago: executing program 4 (id=997): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(r0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) ftruncate(r2, 0x800000c17a) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x225000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 158.556928ms ago: executing program 4 (id=998): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r5, &(0x7f0000004480)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r6) cachestat(r4, &(0x7f0000000040)={0x100, 0xffffffff}, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=@migrate={0x238, 0x21, 0x100, 0x70bd29, 0x25dfdbfb, {{@in=@local, @in6=@loopback, 0x4e22, 0x6, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x2e, r3, r7}, 0x6e6bb0}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @algo_auth_trunc={0x4e, 0x14, {{'rmd256\x00'}, 0x10, 0x200, 'xx'}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd26, 0x70bd25, 0x70bd29, 0x70bd2b, 0x6, [0x4, 0xf15, 0xf, 0x5, 0x401, 0x8000, 0x9b1, 0x5]}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd26, 0x70bd2c, 0x70bd26, 0x70bd2c, 0x3, [0xf, 0x3, 0x6]}}, @srcaddr={0x14, 0xd, @in=@local}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd25, 0x70bd2a, 0x70bd29, 0x70bd29, 0x3, [0x7, 0x2, 0x3, 0xed1, 0x5, 0x0, 0x8]}}, @algo_auth={0xdd, 0x1, {{'poly1305-simd\x00'}, 0x4a8, "ce7aa5efe78bf4867eb3e512a5bf5fec0ad4040d94d9e8d6e4e2ea5f4bc8faafeedd698f0f1b8b04668ee71db4c112a81f97ae8ea4916dc887f1b7e254877f70480fa2d1263af7d31d598b0d4969ba8c9a7cb2070dc4b4b5f7e8272d8abde0dc7ce43715ffe1e58fabdc39d8db995dee744396ae814cc332f93aa30306f162c7d21c95a36ee55bdac104e558a2958b35e564f26a26"}}]}, 0x238}, 0x1, 0x0, 0x0, 0x50}, 0x20010000) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0xa44, &(0x7f00000001c0)='/dev/rnullb0\x00') (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0xa44, &(0x7f00000001c0)='/dev/rnullb0\x00') socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000200)={r8, 0x7, 0x1, 0x5}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000200)={r8, 0x7, 0x1, 0x5}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, r12, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x24a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x300, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8989e4c5b5e37f0e8bc2268265f5ac64"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="66875d4eda98faa3c68a1ec27be4eea1106c7c0e11bd823eecce8310547a5ae3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4f8183711c837c08325847779728ff93"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8a34da122f643388431b561480f2827d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4afd2d896d1d65e44ff0f72cbb1fa6b0564391dab53996b1c4aaebe245533b26"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c0feca4c752ec7f8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5e0164bae0d6a09f6aaa88f7124f6ce038610b7eaaa6b0d5"}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3e875aaa95866dc3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="95b81f761a7c2854bac0d1a01d06a1be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d91fc2814a4faadc89407f67f3248ba"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd115aa4c143f134"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c95f5f75303853f0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2713c67819fa75d19fb047ae50d00d0a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b72eafe8f645863be2ddeb785ce33e38450251d437e494d1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a349a46685f52cdebfd1b1e1c26212f82ab5bf1a94561f1481dcc7be0236ca4c"}]}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c89bb1b3405a174597a15bea5bff8a40daa88f3831b04cab072fa0ea70ed483c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9f5046f98e127689505b0524fe245c43"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="88bc1c9000a9d9abe1b7f8f527fe2ad2562947a1ffac5889a082337321c8d19b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e190acda33679ed4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b7fc120b07508d48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3b211a9e1be5442274999c88d3321ba1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0e01224ec1d2fe5d9e9945b35f2d982935c5b6281f63369f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="df77d7c4c2b361588dc8d4c0546e06f2a0e90b51ae1e28f0"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8b6c2867a7f3becf285af53a06b8c16b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ba84ee205748380f2ce7ebdf81e145db"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af5bc70409283af9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3dc611e320a1d6551228c942015fc1c6"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "079b5833ae6b41c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3966dfffae6ab6e3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="65f95d144070e56e40499e457fe85090c9ab86f5132be651"}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000000) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) sendto$packet(r8, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x3, r9, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) sendto$packet(r8, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x3, r9, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) socket$inet_icmp(0x2, 0x2, 0x1) (async) r15 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r15, 0x0, 0x60, 0x0, &(0x7f0000000080)) 143.650818ms ago: executing program 4 (id=999): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x8100}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x24, 0x0, &(0x7f00000000c0)) 0s ago: executing program 2 (id=1000): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0xfffe, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0xfffffe2c}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}, {&(0x7f00000005c0)="df79df14150de03df774ffaf961370864715c44aa56d95893df01484733b90acc57e1593f8068f6d38606fc4f2ce6573b4b86fc292e91466d31ce1e27f8bec1364406ab9290af104233b4360650d08c6a1517b22da0069ddf40b0328fda66044274a767b24fe519ed323e8a3f4602f5f0c07b9cb0c7dfe29fefbd1fb16c4ac6b3a993f524b471c877c5665fd585cf23d9faa05e26bed4a9ae4f58a11c317f54833f9ae1ac5155db7e539bbb2817042161c347fc2cd017e1502f61977ff03ad8a6648857277fc9d301b5cc7d6263d372bf57a691d4692c903bef67c1c72f88c745d2ab6f8bb4799"}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f0000000280)="7cf7f78c1cd526961b8b36d66a3442cbedc1a1", 0xffffffffffffff95}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000000)="4ba1f9ca1088", 0x6}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="8fc5fae78fb67ed8652707fa74d47832", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x41c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x6, &(0x7f0000002200)=0xa) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x24e4, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) kernel console output (not intermixed with test programs): els available for device /dev/sr0 [ 56.118129][ T1387] memory+swap: usage 431728kB, limit 9007199254740988kB, failcnt 0 [ 56.350100][ T1591] tipc: Started in network mode [ 56.352044][ T1387] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 56.355690][ T1591] tipc: Node identity f62aaa376b34, cluster identity 4711 [ 56.359882][ T1387] Memory cgroup stats for /syz0 [ 56.366167][ T1591] tipc: Enabled bearer , priority 0 [ 56.372157][ T1387] : [ 56.399992][ T1591] tipc: Resetting bearer [ 56.438661][ T1387] cache 314114048 [ 56.499934][ T1594] binder: Bad value for 'stats' [ 56.507385][ T1387] rss 237568 [ 56.555315][ T1387] rss_huge 0 [ 56.558780][ T1591] tipc: Resetting bearer [ 56.565981][ T1387] shmem 314114048 [ 56.571416][ T1387] mapped_file 0 [ 56.575289][ T1387] dirty 0 [ 56.579955][ T1387] writeback 0 [ 56.584677][ T1387] workingset_refault_anon 12 [ 56.590695][ T1387] workingset_refault_file 66 [ 56.594656][ T1591] tipc: Disabling bearer [ 56.595970][ T1387] swap 127840256 [ 56.606024][ T1387] swapcached 147456 [ 56.610929][ T1387] pgpgin 145696 [ 56.615082][ T1387] pgpgout 69425 [ 56.618875][ T1387] pgfault 32259 [ 56.622451][ T1387] pgmajfault 11 [ 56.627178][ T1387] inactive_anon 66572288 [ 56.631768][ T1387] active_anon 247926784 [ 56.636114][ T1387] inactive_file 0 [ 56.639859][ T1387] active_file 0 [ 56.643430][ T1387] unevictable 0 [ 56.647035][ T1387] hierarchical_memory_limit 314572800 [ 56.652652][ T1387] hierarchical_memsw_limit 9223372036854771712 [ 56.659405][ T1387] total_cache 314114048 [ 56.663797][ T1387] total_rss 237568 [ 56.668285][ T1387] total_rss_huge 0 [ 56.672310][ T1387] total_shmem 314114048 [ 56.676832][ T1387] total_mapped_file 0 [ 56.684511][ T1387] total_dirty 0 [ 56.688182][ T1387] total_writeback 0 [ 56.692094][ T1387] total_workingset_refault_anon 12 [ 56.699322][ T1387] total_workingset_refault_file 66 [ 56.706519][ T1387] total_swap 127840256 [ 56.710897][ T1387] total_swapcached 147456 [ 56.715540][ T1387] total_pgpgin 145696 [ 56.719688][ T1387] total_pgpgout 69425 [ 56.724010][ T1387] total_pgfault 32259 [ 56.728361][ T1387] total_pgmajfault 11 [ 56.732841][ T1387] total_inactive_anon 66572288 [ 56.738291][ T1387] total_active_anon 247926784 [ 56.745341][ T1387] total_inactive_file 0 [ 56.750262][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 56.750279][ T36] audit: type=1400 audit(1751858731.784:296): avc: denied { connect } for pid=1598 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.750310][ T1387] total_active_file 0 [ 56.779405][ T36] audit: type=1400 audit(1751858731.814:297): avc: denied { setopt } for pid=1600 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.803190][ T1387] total_unevictable 0 [ 56.807278][ T1387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1359,uid=0 [ 56.825331][ T1387] Memory cgroup out of memory: Killed process 1359 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:49664kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 57.100937][ T1613] rust_binder: Error while translating object. [ 57.100979][ T1613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 57.114797][ T1613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:199 [ 57.181375][ T1365] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 57.363592][ T1365] CPU: 0 UID: 0 PID: 1365 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 57.363648][ T1365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.363664][ T1365] Call Trace: [ 57.363680][ T1365] [ 57.363689][ T1365] __dump_stack+0x21/0x30 [ 57.363722][ T1365] dump_stack_lvl+0x10c/0x190 [ 57.363749][ T1365] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.363774][ T1365] ? ___ratelimit+0x3f7/0x5a0 [ 57.363805][ T1365] dump_stack+0x19/0x20 [ 57.363831][ T1365] dump_header+0xd7/0x490 [ 57.363864][ T1365] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 57.363889][ T1365] oom_kill_process+0x4c0/0x7e0 [ 57.363914][ T1365] ? sched_clock_cpu+0x75/0x400 [ 57.363938][ T1365] out_of_memory+0x7ee/0xbd0 [ 57.363956][ T1365] ? __cfi_out_of_memory+0x10/0x10 [ 57.363975][ T1365] ? mutex_lock_killable+0x92/0x1c0 [ 57.364003][ T1365] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.364037][ T1365] mem_cgroup_out_of_memory+0x279/0x350 [ 57.364068][ T1365] ? drain_obj_stock+0xed0/0xed0 [ 57.364098][ T1365] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 57.364128][ T1365] try_charge_memcg+0x8f7/0xde0 [ 57.364155][ T1365] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.364179][ T1365] ? __alloc_pages_noprof+0x30d/0x6c0 [ 57.364204][ T1365] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.364230][ T1365] __mem_cgroup_charge+0xf6/0x410 [ 57.364257][ T1365] ? _raw_spin_lock+0x8c/0x120 [ 57.364278][ T1365] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.364307][ T1365] shmem_alloc_and_add_folio+0x86d/0x1050 [ 57.364344][ T1365] ? put_swap_device+0x130/0x130 [ 57.364379][ T1365] ? shmem_huge_global_enabled+0x2da/0x360 [ 57.364412][ T1365] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 57.364444][ T1365] ? __kasan_check_write+0x18/0x20 [ 57.364468][ T1365] ? _raw_spin_lock+0x8c/0x120 [ 57.364488][ T1365] shmem_get_folio_gfp+0x5f0/0x1380 [ 57.364523][ T1365] ? shmem_get_folio+0xc0/0xc0 [ 57.364552][ T1365] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 57.364579][ T1365] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 57.364612][ T1365] ? inode_to_bdi+0x6d/0x100 [ 57.364638][ T1365] shmem_write_begin+0xf4/0x270 [ 57.364673][ T1365] generic_perform_write+0x330/0x960 [ 57.364702][ T1365] ? __cfi_generic_perform_write+0x10/0x10 [ 57.364728][ T1365] ? down_write+0xe9/0x2a0 [ 57.364757][ T1365] ? mnt_get_write_access_file+0x1af/0x3b0 [ 57.364781][ T1365] ? mnt_put_write_access_file+0xc2/0x100 [ 57.364804][ T1365] ? file_update_time+0x1ef/0x220 [ 57.364829][ T1365] shmem_file_write_iter+0x105/0x130 [ 57.364853][ T1365] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.364877][ T1365] __kernel_write_iter+0x395/0x830 [ 57.364906][ T1365] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.364930][ T1365] ? __cfi___kernel_write_iter+0x10/0x10 [ 57.364958][ T1365] ? get_dump_page+0x160/0x220 [ 57.364981][ T1365] ? __asan_memset+0x39/0x50 [ 57.365006][ T1365] ? iov_iter_bvec+0xc0/0x180 [ 57.365039][ T1365] dump_user_range+0xb06/0xdf0 [ 57.365070][ T1365] ? __cfi_dump_emit+0x10/0x10 [ 57.365097][ T1365] ? __cfi_dump_user_range+0x10/0x10 [ 57.365126][ T1365] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 57.365156][ T1365] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.365187][ T1365] elf_core_dump+0x2cd9/0x3810 [ 57.365223][ T1365] ? __cfi_elf_core_dump+0x10/0x10 [ 57.365266][ T1365] ? dump_interrupted+0xf0/0xf0 [ 57.365293][ T1365] ? filp_open+0x182/0x1d0 [ 57.365315][ T1365] ? 0xffffffffff600000 [ 57.365334][ T1365] do_coredump+0x1bfa/0x2bd0 [ 57.365365][ T1365] ? __cfi_do_coredump+0x10/0x10 [ 57.365391][ T1365] ? asm_exc_page_fault+0x2b/0x30 [ 57.365426][ T1365] ? __kasan_slab_free+0x6a/0x80 [ 57.365458][ T1365] ? kmem_cache_free+0x1c1/0x4c0 [ 57.365487][ T1365] get_signal+0x11fd/0x14f0 [ 57.365516][ T1365] arch_do_signal_or_restart+0x96/0x720 [ 57.365547][ T1365] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.365581][ T1365] irqentry_exit_to_user_mode+0x4e/0xb0 [ 57.365618][ T1365] irqentry_exit+0x16/0x60 [ 57.365646][ T1365] exc_page_fault+0x66/0xc0 [ 57.365674][ T1365] asm_exc_page_fault+0x2b/0x30 [ 57.365698][ T1365] RIP: 0033:0x7fa41c38e931 [ 57.365716][ T1365] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 57.365737][ T1365] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 57.365757][ T1365] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 57.365774][ T1365] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 57.365790][ T1365] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 57.365806][ T1365] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 57.365821][ T1365] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 57.365840][ T1365] [ 57.885214][ T1620] overlay: filesystem on ./bus is read-only [ 57.891248][ T36] audit: type=1400 audit(1751858732.924:298): avc: denied { mounton } for pid=1619 comm="syz.1.440" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 57.897810][ T1365] memory: usage 294916kB, limit 307200kB, failcnt 28865 [ 57.921440][ T1365] memory+swap: usage 420956kB, limit 9007199254740988kB, failcnt 0 [ 57.929985][ T1365] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.937367][ T1365] Memory cgroup stats for /syz0: [ 57.937563][ T1365] cache 304132096 [ 57.946564][ T1365] rss 86016 [ 57.949789][ T1365] rss_huge 0 [ 57.953149][ T1365] shmem 304009216 [ 57.957115][ T1365] mapped_file 0 [ 57.960616][ T1365] dirty 0 [ 57.963588][ T1365] writeback 0 [ 57.966930][ T1365] workingset_refault_anon 12 [ 57.971701][ T1365] workingset_refault_file 199 [ 57.976461][ T1365] swap 127848448 [ 57.980038][ T1365] swapcached 147456 [ 57.983918][ T1365] pgpgin 150654 [ 57.987447][ T1365] pgpgout 76857 [ 57.991183][ T1365] pgfault 32567 [ 57.994733][ T1365] pgmajfault 17 [ 57.998577][ T1365] inactive_anon 81027072 [ 58.002845][ T1365] active_anon 222879744 [ 58.007186][ T1365] inactive_file 0 [ 58.010950][ T1365] active_file 122880 [ 58.015075][ T1365] unevictable 0 [ 58.018702][ T1365] hierarchical_memory_limit 314572800 [ 58.024190][ T1365] hierarchical_memsw_limit 9223372036854771712 [ 58.030444][ T1365] total_cache 304132096 [ 58.034710][ T1365] total_rss 86016 [ 58.038367][ T1365] total_rss_huge 0 [ 58.042182][ T1365] total_shmem 304009216 [ 58.046482][ T1365] total_mapped_file 0 [ 58.050504][ T1365] total_dirty 0 [ 58.054293][ T1365] total_writeback 0 [ 58.058516][ T1365] total_workingset_refault_anon 12 [ 58.064077][ T1365] total_workingset_refault_file 199 [ 58.069693][ T1365] total_swap 127848448 [ 58.074045][ T1365] total_swapcached 147456 [ 58.078464][ T1365] total_pgpgin 150654 [ 58.082530][ T1365] total_pgpgout 76857 [ 58.086676][ T1365] total_pgfault 32567 [ 58.090766][ T1365] total_pgmajfault 17 [ 58.094876][ T1365] total_inactive_anon 81027072 [ 58.099842][ T1365] total_active_anon 222879744 [ 58.104994][ T1365] total_inactive_file 0 [ 58.109267][ T1365] total_active_file 122880 [ 58.113877][ T1365] total_unevictable 0 [ 58.118583][ T1365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1353,uid=0 [ 58.133812][ T1365] Memory cgroup out of memory: Killed process 1353 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 58.291678][ T309] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 58.466987][ T309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.477744][ T309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.496915][ T309] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.513698][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.527293][ T309] usb 2-1: Product: syz [ 58.531800][ T309] usb 2-1: Manufacturer: syz [ 58.545813][ T309] usb 2-1: SerialNumber: syz [ 58.547641][ T1636] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.551082][ T36] audit: type=1400 audit(1751858733.584:299): avc: denied { setopt } for pid=1635 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.674598][ T31] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 58.796440][ T36] audit: type=1400 audit(1751858733.834:300): avc: denied { create } for pid=1619 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 58.863399][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34216, setting to 64 [ 58.884559][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 58.905059][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.929773][ T31] usb 4-1: config 0 descriptor?? [ 58.942359][ T1633] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 59.100972][ T36] audit: type=1326 audit(1751858734.134:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.2.447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1767b8e929 code=0x0 [ 59.246511][ T1390] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 59.272075][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 59.282424][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.292599][ T1390] CPU: 0 UID: 0 PID: 1390 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 59.292649][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.292684][ T1390] Call Trace: [ 59.292693][ T1390] [ 59.292704][ T1390] __dump_stack+0x21/0x30 [ 59.292741][ T1390] dump_stack_lvl+0x10c/0x190 [ 59.292770][ T1390] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.292799][ T1390] ? ___ratelimit+0x3f7/0x5a0 [ 59.292827][ T1390] dump_stack+0x19/0x20 [ 59.292853][ T1390] dump_header+0xd7/0x490 [ 59.292884][ T1390] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 59.292907][ T1390] oom_kill_process+0x4c0/0x7e0 [ 59.292928][ T1390] ? sched_clock_cpu+0x75/0x400 [ 59.292956][ T1390] out_of_memory+0x7ee/0xbd0 [ 59.292979][ T1390] ? __cfi_out_of_memory+0x10/0x10 [ 59.293001][ T1390] ? mutex_lock_killable+0x92/0x1c0 [ 59.293032][ T1390] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.293068][ T1390] mem_cgroup_out_of_memory+0x279/0x350 [ 59.293100][ T1390] ? drain_obj_stock+0xed0/0xed0 [ 59.293135][ T1390] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 59.293170][ T1390] try_charge_memcg+0x8f7/0xde0 [ 59.293196][ T1390] ? __cfi_try_charge_memcg+0x10/0x10 [ 59.293239][ T1390] ? __alloc_pages_noprof+0x30d/0x6c0 [ 59.293267][ T1390] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.293294][ T1390] __mem_cgroup_charge+0xf6/0x410 [ 59.293324][ T1390] ? _raw_spin_lock+0x8c/0x120 [ 59.293346][ T1390] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 59.293380][ T1390] shmem_alloc_and_add_folio+0x86d/0x1050 [ 59.293421][ T1390] ? put_swap_device+0x130/0x130 [ 59.293459][ T1390] ? shmem_huge_global_enabled+0x2da/0x360 [ 59.293497][ T1390] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 59.293531][ T1390] ? __kasan_check_write+0x18/0x20 [ 59.293562][ T1390] ? _raw_spin_lock+0x8c/0x120 [ 59.293585][ T1390] shmem_get_folio_gfp+0x5f0/0x1380 [ 59.293623][ T1390] ? shmem_get_folio+0xc0/0xc0 [ 59.293657][ T1390] ? follow_page_pte+0xa5c/0xb90 [ 59.293683][ T1390] ? inode_to_bdi+0x6d/0x100 [ 59.293709][ T1390] shmem_write_begin+0xf4/0x270 [ 59.293747][ T1390] generic_perform_write+0x330/0x960 [ 59.293782][ T1390] ? __cfi_generic_perform_write+0x10/0x10 [ 59.293810][ T1390] ? down_write+0xe9/0x2a0 [ 59.293842][ T1390] ? file_update_time+0xa3/0x220 [ 59.293869][ T1390] shmem_file_write_iter+0x105/0x130 [ 59.293896][ T1390] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.293923][ T1390] __kernel_write_iter+0x395/0x830 [ 59.293954][ T1390] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.293982][ T1390] ? __cfi___kernel_write_iter+0x10/0x10 [ 59.294014][ T1390] ? get_dump_page+0x160/0x220 [ 59.294038][ T1390] ? __asan_memset+0x39/0x50 [ 59.294066][ T1390] ? iov_iter_bvec+0xc0/0x180 [ 59.294103][ T1390] dump_user_range+0xb06/0xdf0 [ 59.294137][ T1390] ? __cfi_dump_emit+0x10/0x10 [ 59.294167][ T1390] ? __cfi_dump_user_range+0x10/0x10 [ 59.294198][ T1390] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 59.294490][ T1390] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 59.294532][ T1390] elf_core_dump+0x2cd9/0x3810 [ 59.294576][ T1390] ? __cfi_elf_core_dump+0x10/0x10 [ 59.294625][ T1390] ? dump_interrupted+0xf0/0xf0 [ 59.294654][ T1390] ? filp_open+0x182/0x1d0 [ 59.294679][ T1390] ? 0xffffffffff600000 [ 59.294700][ T1390] do_coredump+0x1bfa/0x2bd0 [ 59.294735][ T1390] ? __cfi_do_coredump+0x10/0x10 [ 59.294764][ T1390] ? asm_exc_page_fault+0x2b/0x30 [ 59.294801][ T1390] ? __kasan_slab_free+0x6a/0x80 [ 59.294838][ T1390] ? kmem_cache_free+0x1c1/0x4c0 [ 59.294870][ T1390] get_signal+0x11fd/0x14f0 [ 59.294903][ T1390] arch_do_signal_or_restart+0x96/0x720 [ 59.294937][ T1390] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 59.294975][ T1390] irqentry_exit_to_user_mode+0x4e/0xb0 [ 59.295012][ T1390] irqentry_exit+0x16/0x60 [ 59.295043][ T1390] exc_page_fault+0x66/0xc0 [ 59.295076][ T1390] asm_exc_page_fault+0x2b/0x30 [ 59.295101][ T1390] RIP: 0033:0x7fa41c38e931 [ 59.295125][ T1390] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 59.295222][ T1390] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 59.295251][ T1390] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 59.295271][ T1390] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 59.295290][ T1390] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 59.295313][ T1390] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 59.295330][ T1390] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 59.295352][ T1390] [ 59.301995][ T1390] memory: usage 307200kB, limit 307200kB, failcnt 36678 [ 59.320383][ T31] usb 4-1: USB disconnect, device number 18 [ 59.329055][ T1390] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 59.834595][ T1390] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.842344][ T1390] Memory cgroup stats for /syz0: [ 59.842541][ T1390] cache 290889728 [ 59.853055][ T1390] rss 86016 [ 59.857544][ T1390] rss_huge 0 [ 59.862526][ T1390] shmem 290889728 [ 59.866576][ T1390] mapped_file 0 [ 59.870242][ T1390] dirty 0 [ 59.875009][ T1390] writeback 0 [ 59.878737][ T1390] workingset_refault_anon 12 [ 59.883553][ T1390] workingset_refault_file 200 [ 59.889255][ T1390] swap 117714944 [ 59.893194][ T1390] swapcached 147456 [ 59.898684][ T1390] pgpgin 153177 [ 59.902509][ T1390] pgpgout 82613 [ 59.906452][ T1390] pgfault 32739 [ 59.909941][ T1390] pgmajfault 17 [ 59.913971][ T1390] inactive_anon 270200832 [ 59.919517][ T1390] active_anon 20922368 [ 59.924327][ T1390] inactive_file 0 [ 59.928500][ T1390] active_file 0 [ 59.939833][ T1390] unevictable 0 [ 59.943925][ T1390] hierarchical_memory_limit 314572800 [ 59.956739][ T1390] hierarchical_memsw_limit 9223372036854771712 [ 59.963836][ T1390] total_cache 290889728 [ 59.968448][ T1390] total_rss 86016 [ 59.972746][ T1390] total_rss_huge 0 [ 59.984504][ T1390] total_shmem 290889728 [ 59.990995][ T1390] total_mapped_file 0 [ 60.001817][ T1390] total_dirty 0 [ 60.006899][ T1390] total_writeback 0 [ 60.011498][ T1390] total_workingset_refault_anon 12 [ 60.018571][ T1390] total_workingset_refault_file 200 [ 60.024747][ T1390] total_swap 117714944 [ 60.029181][ T1390] total_swapcached 147456 [ 60.034005][ T1390] total_pgpgin 153177 [ 60.038537][ T1390] total_pgpgout 82613 [ 60.046025][ T1390] total_pgfault 32739 [ 60.050222][ T1390] total_pgmajfault 17 [ 60.054882][ T1390] total_inactive_anon 270200832 [ 60.060578][ T1390] total_active_anon 20922368 [ 60.065703][ T1390] total_inactive_file 0 [ 60.070479][ T1390] total_active_file 0 [ 60.079763][ T1390] total_unevictable 0 [ 60.085858][ T1390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1407,uid=0 [ 60.103256][ T1390] Memory cgroup out of memory: Killed process 1407 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:50944kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 60.163896][ T1663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 60.295374][ T1389] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 60.422935][ T1389] CPU: 1 UID: 0 PID: 1389 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 60.422986][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.423002][ T1389] Call Trace: [ 60.423010][ T1389] [ 60.423020][ T1389] __dump_stack+0x21/0x30 [ 60.423056][ T1389] dump_stack_lvl+0x10c/0x190 [ 60.423084][ T1389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.423110][ T1389] ? ___ratelimit+0x3f7/0x5a0 [ 60.423135][ T1389] dump_stack+0x19/0x20 [ 60.423160][ T1389] dump_header+0xd7/0x490 [ 60.423204][ T1389] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 60.423230][ T1389] oom_kill_process+0x4c0/0x7e0 [ 60.423250][ T1389] ? sched_clock_cpu+0x75/0x400 [ 60.423277][ T1389] out_of_memory+0x7ee/0xbd0 [ 60.423297][ T1389] ? __cfi_out_of_memory+0x10/0x10 [ 60.423317][ T1389] ? mutex_lock_killable+0x104/0x1c0 [ 60.423346][ T1389] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.423377][ T1389] mem_cgroup_out_of_memory+0x279/0x350 [ 60.423407][ T1389] ? drain_obj_stock+0xed0/0xed0 [ 60.423438][ T1389] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 60.423468][ T1389] try_charge_memcg+0x8f7/0xde0 [ 60.423493][ T1389] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.423517][ T1389] ? __alloc_pages_noprof+0x30d/0x6c0 [ 60.423542][ T1389] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.423565][ T1389] ? __folio_batch_add_and_move+0x2ab/0x370 [ 60.423587][ T1389] __mem_cgroup_charge+0xf6/0x410 [ 60.423614][ T1389] ? __kasan_check_write+0x18/0x20 [ 60.423640][ T1389] ? _raw_spin_lock+0x8c/0x120 [ 60.423660][ T1389] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.423689][ T1389] shmem_alloc_and_add_folio+0x86d/0x1050 [ 60.423727][ T1389] ? put_swap_device+0x130/0x130 [ 60.423762][ T1389] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.423795][ T1389] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 60.423827][ T1389] ? __kasan_check_write+0x18/0x20 [ 60.423852][ T1389] ? _raw_spin_lock+0x8c/0x120 [ 60.423873][ T1389] shmem_get_folio_gfp+0x5f0/0x1380 [ 60.423908][ T1389] ? shmem_get_folio+0xc0/0xc0 [ 60.423937][ T1389] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 60.423964][ T1389] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 60.423990][ T1389] ? inode_to_bdi+0x6d/0x100 [ 60.424024][ T1389] shmem_write_begin+0xf4/0x270 [ 60.424059][ T1389] generic_perform_write+0x330/0x960 [ 60.424089][ T1389] ? __cfi_generic_perform_write+0x10/0x10 [ 60.424115][ T1389] ? down_write+0xe9/0x2a0 [ 60.424144][ T1389] ? mnt_get_write_access_file+0x1af/0x3b0 [ 60.424168][ T1389] ? mnt_put_write_access_file+0xc2/0x100 [ 60.424201][ T1389] ? file_update_time+0x1ef/0x220 [ 60.424225][ T1389] shmem_file_write_iter+0x105/0x130 [ 60.424472][ T1389] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 60.424498][ T1389] __kernel_write_iter+0x395/0x830 [ 60.424524][ T1389] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 60.424545][ T1389] ? __cfi___kernel_write_iter+0x10/0x10 [ 60.424570][ T1389] ? get_dump_page+0x160/0x220 [ 60.424834][ T1389] ? __asan_memset+0x39/0x50 [ 60.424859][ T1389] ? iov_iter_bvec+0xc0/0x180 [ 60.424889][ T1389] dump_user_range+0xb06/0xdf0 [ 60.424920][ T1389] ? __cfi_dump_emit+0x10/0x10 [ 60.424946][ T1389] ? __cfi_dump_user_range+0x10/0x10 [ 60.424975][ T1389] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 60.425005][ T1389] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.425035][ T1389] elf_core_dump+0x2cd9/0x3810 [ 60.425123][ T1389] ? __cfi_elf_core_dump+0x10/0x10 [ 60.425164][ T1389] ? dump_interrupted+0xf0/0xf0 [ 60.425190][ T1389] ? filp_open+0x182/0x1d0 [ 60.425213][ T1389] ? 0xffffffffff600000 [ 60.425242][ T1389] do_coredump+0x1bfa/0x2bd0 [ 60.425273][ T1389] ? __cfi_do_coredump+0x10/0x10 [ 60.425298][ T1389] ? asm_exc_page_fault+0x2b/0x30 [ 60.425327][ T1389] ? __kasan_slab_free+0x6a/0x80 [ 60.425361][ T1389] ? kmem_cache_free+0x1c1/0x4c0 [ 60.425391][ T1389] get_signal+0x11fd/0x14f0 [ 60.425419][ T1389] arch_do_signal_or_restart+0x96/0x720 [ 60.425450][ T1389] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.425484][ T1389] irqentry_exit_to_user_mode+0x4e/0xb0 [ 60.425516][ T1389] irqentry_exit+0x16/0x60 [ 60.425544][ T1389] exc_page_fault+0x66/0xc0 [ 60.425572][ T1389] asm_exc_page_fault+0x2b/0x30 [ 60.425596][ T1389] RIP: 0033:0x7fa41c38e931 [ 60.425615][ T1389] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.425635][ T1389] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 60.425656][ T1389] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 60.425673][ T1389] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 60.425689][ T1389] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 60.425704][ T1389] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 60.425719][ T1389] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 60.425737][ T1389] [ 60.954010][ T1389] memory: usage 306964kB, limit 307200kB, failcnt 37239 [ 60.971198][ T309] usb 2-1: 0:2 : does not exist [ 60.975886][ T1389] memory+swap: usage 424284kB, limit 9007199254740988kB, failcnt 0 [ 60.981525][ T309] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 60.985662][ T1389] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.999193][ T1389] Memory cgroup stats for /syz0: [ 60.999353][ T1389] cache 314068992 [ 61.014779][ T1389] rss 90112 [ 61.018072][ T1389] rss_huge 0 [ 61.028579][ T309] usb 2-1: USB disconnect, device number 20 [ 61.065865][ T1389] shmem 313675776 [ 61.069915][ T1389] mapped_file 262144 [ 61.073968][ T1389] dirty 0 [ 61.077346][ T1389] writeback 32768 [ 61.081152][ T1389] workingset_refault_anon 20 [ 61.085935][ T1389] workingset_refault_file 296 [ 61.090768][ T1389] swap 120074240 [ 61.112456][ T1389] swapcached 356352 [ 61.122575][ T1389] pgpgin 167055 [ 61.126378][ T1389] pgpgout 90781 [ 61.140064][ T1389] pgfault 39348 [ 61.151292][ T1389] pgmajfault 22 [ 61.198940][ T1389] inactive_anon 237666304 [ 61.203772][ T1389] active_anon 74932224 [ 61.208001][ T1389] inactive_file 0 [ 61.211887][ T1389] active_file 393216 [ 61.216245][ T1389] unevictable 0 [ 61.220432][ T1389] hierarchical_memory_limit 314572800 [ 61.226644][ T1389] hierarchical_memsw_limit 9223372036854771712 [ 61.233042][ T1389] total_cache 314068992 [ 61.238523][ T1389] total_rss 90112 [ 61.242846][ T1389] total_rss_huge 0 [ 61.246838][ T1389] total_shmem 313675776 [ 61.253128][ T1389] total_mapped_file 262144 [ 61.258180][ T1389] total_dirty 0 [ 61.264776][ T1389] total_writeback 32768 [ 61.268974][ T1389] total_workingset_refault_anon 20 [ 61.274672][ T1389] total_workingset_refault_file 296 [ 61.280418][ T1389] total_swap 120074240 [ 61.284666][ T1389] total_swapcached 356352 [ 61.289201][ T1389] total_pgpgin 167055 [ 61.293359][ T1389] total_pgpgout 90781 [ 61.297527][ T1389] total_pgfault 39348 [ 61.301689][ T1389] total_pgmajfault 22 [ 61.305889][ T1389] total_inactive_anon 237666304 [ 61.310942][ T1389] total_active_anon 74932224 [ 61.315784][ T1389] total_inactive_file 0 [ 61.320797][ T1389] total_active_file 393216 [ 61.325667][ T1389] total_unevictable 0 [ 61.329717][ T1389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1370,uid=0 [ 61.344862][ T1389] Memory cgroup out of memory: Killed process 1370 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 61.576537][ T1371] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 61.616954][ T1371] CPU: 1 UID: 0 PID: 1371 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 61.616996][ T1371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.617010][ T1371] Call Trace: [ 61.617018][ T1371] [ 61.617027][ T1371] __dump_stack+0x21/0x30 [ 61.617060][ T1371] dump_stack_lvl+0x10c/0x190 [ 61.617087][ T1371] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.617112][ T1371] ? ___ratelimit+0x3f7/0x5a0 [ 61.617139][ T1371] dump_stack+0x19/0x20 [ 61.617164][ T1371] dump_header+0xd7/0x490 [ 61.617196][ T1371] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 61.617230][ T1371] oom_kill_process+0x4c0/0x7e0 [ 61.617251][ T1371] ? sched_clock_cpu+0x75/0x400 [ 61.617279][ T1371] out_of_memory+0x7ee/0xbd0 [ 61.617299][ T1371] ? __cfi_out_of_memory+0x10/0x10 [ 61.617318][ T1371] ? mutex_lock_killable+0x104/0x1c0 [ 61.617346][ T1371] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.617376][ T1371] mem_cgroup_out_of_memory+0x279/0x350 [ 61.617406][ T1371] ? drain_obj_stock+0xed0/0xed0 [ 61.617437][ T1371] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 61.617466][ T1371] try_charge_memcg+0x8f7/0xde0 [ 61.617491][ T1371] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.617515][ T1371] ? __alloc_pages_noprof+0x30d/0x6c0 [ 61.617540][ T1371] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.617563][ T1371] ? __folio_batch_add_and_move+0x2ab/0x370 [ 61.617586][ T1371] __mem_cgroup_charge+0xf6/0x410 [ 61.617612][ T1371] ? __kasan_check_write+0x18/0x20 [ 61.617638][ T1371] ? _raw_spin_lock+0x8c/0x120 [ 61.617658][ T1371] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.617686][ T1371] shmem_alloc_and_add_folio+0x86d/0x1050 [ 61.617723][ T1371] ? put_swap_device+0x130/0x130 [ 61.617756][ T1371] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.617789][ T1371] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.617820][ T1371] ? __kasan_check_write+0x18/0x20 [ 61.617846][ T1371] ? _raw_spin_lock+0x8c/0x120 [ 61.617865][ T1371] shmem_get_folio_gfp+0x5f0/0x1380 [ 61.617899][ T1371] ? shmem_get_folio+0xc0/0xc0 [ 61.617929][ T1371] ? follow_page_pte+0xa5c/0xb90 [ 61.617970][ T1371] ? inode_to_bdi+0x6d/0x100 [ 61.617993][ T1371] shmem_write_begin+0xf4/0x270 [ 61.618027][ T1371] generic_perform_write+0x330/0x960 [ 61.618057][ T1371] ? __cfi_generic_perform_write+0x10/0x10 [ 61.618083][ T1371] ? down_write+0xe9/0x2a0 [ 61.618113][ T1371] ? file_update_time+0xa3/0x220 [ 61.618138][ T1371] shmem_file_write_iter+0x105/0x130 [ 61.618163][ T1371] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.618187][ T1371] __kernel_write_iter+0x395/0x830 [ 61.618214][ T1371] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.618248][ T1371] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.618277][ T1371] ? get_dump_page+0x160/0x220 [ 61.618299][ T1371] ? __asan_memset+0x39/0x50 [ 61.618325][ T1371] ? iov_iter_bvec+0xc0/0x180 [ 61.618357][ T1371] dump_user_range+0xb06/0xdf0 [ 61.618385][ T1371] ? __cfi_dump_emit+0x10/0x10 [ 61.618410][ T1371] ? __cfi_dump_user_range+0x10/0x10 [ 61.618438][ T1371] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 61.618467][ T1371] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.618496][ T1371] elf_core_dump+0x2cd9/0x3810 [ 61.618533][ T1371] ? __cfi_elf_core_dump+0x10/0x10 [ 61.618573][ T1371] ? dump_interrupted+0xf0/0xf0 [ 61.618597][ T1371] ? filp_open+0x182/0x1d0 [ 61.618619][ T1371] ? 0xffffffffff600000 [ 61.618637][ T1371] do_coredump+0x1bfa/0x2bd0 [ 61.618666][ T1371] ? __cfi_do_coredump+0x10/0x10 [ 61.618691][ T1371] ? asm_exc_page_fault+0x2b/0x30 [ 61.618725][ T1371] ? __kasan_slab_free+0x6a/0x80 [ 61.618755][ T1371] ? kmem_cache_free+0x1c1/0x4c0 [ 61.618786][ T1371] get_signal+0x11fd/0x14f0 [ 61.618813][ T1371] arch_do_signal_or_restart+0x96/0x720 [ 61.618843][ T1371] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.618877][ T1371] irqentry_exit_to_user_mode+0x4e/0xb0 [ 61.618909][ T1371] irqentry_exit+0x16/0x60 [ 61.618936][ T1371] exc_page_fault+0x66/0xc0 [ 61.618965][ T1371] asm_exc_page_fault+0x2b/0x30 [ 61.618988][ T1371] RIP: 0033:0x7fa41c38e931 [ 61.619008][ T1371] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.619029][ T1371] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 61.619048][ T1371] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 61.619064][ T1371] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 61.619079][ T1371] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 61.619095][ T1371] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 61.619109][ T1371] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 61.619128][ T1371] [ 61.619138][ T1371] memory: usage 307200kB, limit 307200kB, failcnt 41002 [ 61.649051][ T1714] tipc: Enabling of bearer rejected, failed to enable media [ 61.750865][ T1371] memory+swap: usage 423948kB, limit 9007199254740988kB, failcnt 0 [ 61.780152][ T36] audit: type=1400 audit(1751858736.804:302): avc: denied { shutdown } for pid=1716 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.809539][ T1722] netlink: 584 bytes leftover after parsing attributes in process `syz.2.475'. [ 61.830672][ T1717] fuseblk: Bad value for 'fd' [ 61.833407][ T1371] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.842733][ T36] audit: type=1400 audit(1751858736.864:303): avc: denied { connect } for pid=1716 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.882380][ T1371] Memory cgroup stats for /syz0: [ 61.882525][ T1371] cache 306659328 [ 62.187033][ T1371] rss 110592 [ 62.190278][ T1371] rss_huge 0 [ 62.193588][ T1371] shmem 306659328 [ 62.200326][ T1371] mapped_file 0 [ 62.204674][ T1371] dirty 0 [ 62.216754][ T1371] writeback 118784 [ 62.241655][ T1371] workingset_refault_anon 24 [ 62.253473][ T36] audit: type=1400 audit(1751858737.284:304): avc: denied { read } for pid=1634 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.284531][ T1371] workingset_refault_file 296 [ 62.293802][ T1371] swap 127799296 [ 62.306157][ T36] audit: type=1400 audit(1751858737.344:305): avc: denied { setopt } for pid=1634 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 62.334398][ T1371] swapcached 196608 [ 62.346387][ T1371] pgpgin 170354 [ 62.355558][ T1371] pgpgout 95928 [ 62.363460][ T1371] pgfault 45251 [ 62.371397][ T1371] pgmajfault 27 [ 62.378131][ T1371] inactive_anon 224813056 [ 62.388031][ T1371] active_anon 82128896 [ 62.419534][ T1371] inactive_file 0 [ 62.435937][ T1371] active_file 0 [ 62.451732][ T1371] unevictable 0 [ 62.463040][ T1371] hierarchical_memory_limit 314572800 [ 62.487172][ T1371] hierarchical_memsw_limit 9223372036854771712 [ 62.508705][ T1371] total_cache 306659328 [ 62.524823][ T1371] total_rss 110592 [ 62.537301][ T1371] total_rss_huge 0 [ 62.549906][ T1371] total_shmem 306659328 [ 62.564052][ T1371] total_mapped_file 0 [ 62.570368][ T1371] total_dirty 0 [ 62.573955][ T1371] total_writeback 118784 [ 62.578704][ T1371] total_workingset_refault_anon 24 [ 62.583848][ T1371] total_workingset_refault_file 296 [ 62.589618][ T1371] total_swap 127799296 [ 62.593741][ T1371] total_swapcached 196608 [ 62.598418][ T1371] total_pgpgin 170354 [ 62.602542][ T1371] total_pgpgout 95928 [ 62.606991][ T1371] total_pgfault 45251 [ 62.611097][ T1371] total_pgmajfault 27 [ 62.615465][ T1371] total_inactive_anon 224813056 [ 62.620349][ T1371] total_active_anon 82128896 [ 62.625413][ T1371] total_inactive_file 0 [ 62.629818][ T1371] total_active_file 0 [ 62.633824][ T1371] total_unevictable 0 [ 62.638757][ T1371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1377,uid=0 [ 62.666605][ T1371] Memory cgroup out of memory: Killed process 1377 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 62.686374][ T1760] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 62.777510][ T1387] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 62.828733][ T1387] CPU: 1 UID: 0 PID: 1387 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 62.828774][ T1387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.828789][ T1387] Call Trace: [ 62.828797][ T1387] [ 62.828806][ T1387] __dump_stack+0x21/0x30 [ 62.828838][ T1387] dump_stack_lvl+0x10c/0x190 [ 62.828864][ T1387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.828891][ T1387] ? ___ratelimit+0x3f7/0x5a0 [ 62.828917][ T1387] dump_stack+0x19/0x20 [ 62.828942][ T1387] dump_header+0xd7/0x490 [ 62.828975][ T1387] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 62.829008][ T1387] oom_kill_process+0x4c0/0x7e0 [ 62.829029][ T1387] ? sched_clock_cpu+0x75/0x400 [ 62.829056][ T1387] out_of_memory+0x7ee/0xbd0 [ 62.829076][ T1387] ? __cfi_out_of_memory+0x10/0x10 [ 62.829096][ T1387] ? mutex_lock_killable+0x104/0x1c0 [ 62.829124][ T1387] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.829154][ T1387] mem_cgroup_out_of_memory+0x279/0x350 [ 62.829185][ T1387] ? drain_obj_stock+0xed0/0xed0 [ 62.829216][ T1387] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 62.829245][ T1387] try_charge_memcg+0x8f7/0xde0 [ 62.829271][ T1387] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.829295][ T1387] ? __alloc_pages_noprof+0x30d/0x6c0 [ 62.829320][ T1387] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.829344][ T1387] ? __folio_batch_add_and_move+0x2ab/0x370 [ 62.829367][ T1387] __mem_cgroup_charge+0xf6/0x410 [ 62.829394][ T1387] ? __kasan_check_write+0x18/0x20 [ 62.829421][ T1387] ? _raw_spin_lock+0x8c/0x120 [ 62.829441][ T1387] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.829470][ T1387] shmem_alloc_and_add_folio+0x86d/0x1050 [ 62.829507][ T1387] ? put_swap_device+0x130/0x130 [ 62.829541][ T1387] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.829575][ T1387] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.829607][ T1387] ? __kasan_check_write+0x18/0x20 [ 62.829633][ T1387] ? _raw_spin_lock+0x8c/0x120 [ 62.829654][ T1387] shmem_get_folio_gfp+0x5f0/0x1380 [ 62.829689][ T1387] ? shmem_get_folio+0xc0/0xc0 [ 62.829719][ T1387] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 62.829746][ T1387] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 62.829773][ T1387] ? inode_to_bdi+0x6d/0x100 [ 62.829799][ T1387] shmem_write_begin+0xf4/0x270 [ 62.829833][ T1387] generic_perform_write+0x330/0x960 [ 62.829862][ T1387] ? __cfi_generic_perform_write+0x10/0x10 [ 62.829888][ T1387] ? down_write+0xe9/0x2a0 [ 62.829917][ T1387] ? mnt_get_write_access_file+0x1af/0x3b0 [ 62.829939][ T1387] ? mnt_put_write_access_file+0xc2/0x100 [ 62.829962][ T1387] ? file_update_time+0x1ef/0x220 [ 62.829986][ T1387] shmem_file_write_iter+0x105/0x130 [ 62.830016][ T1387] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 62.830041][ T1387] __kernel_write_iter+0x395/0x830 [ 62.830070][ T1387] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 62.830095][ T1387] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.830122][ T1387] ? get_dump_page+0x160/0x220 [ 62.830162][ T1387] ? __asan_memset+0x39/0x50 [ 62.830189][ T1387] ? iov_iter_bvec+0xc0/0x180 [ 62.830221][ T1387] dump_user_range+0xb06/0xdf0 [ 62.830251][ T1387] ? __cfi_dump_emit+0x10/0x10 [ 62.830278][ T1387] ? __cfi_dump_user_range+0x10/0x10 [ 62.830307][ T1387] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 62.830336][ T1387] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.830365][ T1387] elf_core_dump+0x2cd9/0x3810 [ 62.830402][ T1387] ? __cfi_elf_core_dump+0x10/0x10 [ 62.830442][ T1387] ? dump_interrupted+0xf0/0xf0 [ 62.830468][ T1387] ? filp_open+0x182/0x1d0 [ 62.830491][ T1387] ? 0xffffffffff600000 [ 62.830510][ T1387] do_coredump+0x1bfa/0x2bd0 [ 62.830541][ T1387] ? __cfi_do_coredump+0x10/0x10 [ 62.830566][ T1387] ? asm_exc_page_fault+0x2b/0x30 [ 62.830601][ T1387] ? __kasan_slab_free+0x6a/0x80 [ 62.830634][ T1387] ? kmem_cache_free+0x1c1/0x4c0 [ 62.830663][ T1387] get_signal+0x11fd/0x14f0 [ 62.830690][ T1387] arch_do_signal_or_restart+0x96/0x720 [ 62.830720][ T1387] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.830754][ T1387] irqentry_exit_to_user_mode+0x4e/0xb0 [ 62.830785][ T1387] irqentry_exit+0x16/0x60 [ 62.830814][ T1387] exc_page_fault+0x66/0xc0 [ 62.830842][ T1387] asm_exc_page_fault+0x2b/0x30 [ 62.830865][ T1387] RIP: 0033:0x7fa41c38e931 [ 62.830885][ T1387] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.830905][ T1387] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 62.830926][ T1387] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 62.830943][ T1387] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 62.830958][ T1387] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 62.830975][ T1387] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 62.830997][ T1387] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 62.831016][ T1387] [ 62.831025][ T1387] memory: usage 306864kB, limit 307200kB, failcnt 41778 [ 62.979767][ T36] audit: type=1400 audit(1751858738.014:306): avc: denied { write } for pid=1764 comm="syz.3.485" path="socket:[8980]" dev="sockfs" ino=8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.152206][ T1387] memory+swap: usage 426504kB, limit 9007199254740988kB, failcnt 0 [ 63.399336][ T1387] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.410047][ T1387] Memory cgroup stats for /syz0: [ 63.410215][ T1387] cache 314298368 [ 63.419248][ T1387] rss 77824 [ 63.422474][ T1387] rss_huge 0 [ 63.425740][ T1387] shmem 314281984 [ 63.429389][ T1387] mapped_file 0 [ 63.432874][ T1387] dirty 0 [ 63.435995][ T1387] writeback 0 [ 63.439303][ T1387] workingset_refault_anon 26 [ 63.444140][ T1387] workingset_refault_file 512 [ 63.448962][ T1387] swap 127905792 [ 63.452536][ T1387] swapcached 90112 [ 63.456350][ T1387] pgpgin 185654 [ 63.459827][ T1387] pgpgout 109365 [ 63.463411][ T1387] pgfault 51743 [ 63.467841][ T1387] pgmajfault 35 [ 63.471364][ T1387] inactive_anon 232787968 [ 63.485036][ T1387] active_anon 80855040 [ 63.489282][ T1387] inactive_file 0 [ 63.492941][ T1387] active_file 16384 [ 63.528970][ T1387] unevictable 0 [ 63.532593][ T1387] hierarchical_memory_limit 314572800 [ 63.574510][ T1387] hierarchical_memsw_limit 9223372036854771712 [ 63.616406][ T1387] total_cache 314298368 [ 63.620718][ T1387] total_rss 77824 [ 63.684487][ T1387] total_rss_huge 0 [ 63.688359][ T1387] total_shmem 314281984 [ 63.697079][ T1387] total_mapped_file 0 [ 63.706412][ T1387] total_dirty 0 [ 63.710107][ T1387] total_writeback 0 [ 63.715002][ T1387] total_workingset_refault_anon 26 [ 63.720371][ T1387] total_workingset_refault_file 512 [ 63.725957][ T1387] total_swap 127905792 [ 63.730055][ T1387] total_swapcached 90112 [ 63.735359][ T1387] total_pgpgin 185654 [ 63.739686][ T1387] total_pgpgout 109365 [ 63.744128][ T1387] total_pgfault 51743 [ 63.748902][ T1387] total_pgmajfault 35 [ 63.754069][ T1387] total_inactive_anon 232787968 [ 63.759794][ T1387] total_active_anon 80855040 [ 63.764804][ T1387] total_inactive_file 0 [ 63.770991][ T1387] total_active_file 16384 [ 63.779274][ T1387] total_unevictable 0 [ 63.783763][ T1387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1389,uid=0 [ 63.799888][ T1387] Memory cgroup out of memory: Killed process 1389 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 63.924520][ T389] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.965767][ T1348] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 64.034512][ T1348] CPU: 1 UID: 0 PID: 1348 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 64.034552][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.034567][ T1348] Call Trace: [ 64.034574][ T1348] [ 64.034584][ T1348] __dump_stack+0x21/0x30 [ 64.034616][ T1348] dump_stack_lvl+0x10c/0x190 [ 64.034642][ T1348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.034668][ T1348] ? ___ratelimit+0x3f7/0x5a0 [ 64.034694][ T1348] dump_stack+0x19/0x20 [ 64.034719][ T1348] dump_header+0xd7/0x490 [ 64.034752][ T1348] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 64.034777][ T1348] oom_kill_process+0x4c0/0x7e0 [ 64.034797][ T1348] ? sched_clock_cpu+0x75/0x400 [ 64.034824][ T1348] out_of_memory+0x7ee/0xbd0 [ 64.034845][ T1348] ? __cfi_out_of_memory+0x10/0x10 [ 64.034864][ T1348] ? mutex_lock_killable+0x92/0x1c0 [ 64.034893][ T1348] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.034932][ T1348] mem_cgroup_out_of_memory+0x279/0x350 [ 64.034963][ T1348] ? drain_obj_stock+0xed0/0xed0 [ 64.035041][ T1348] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 64.035072][ T1348] try_charge_memcg+0x8f7/0xde0 [ 64.035097][ T1348] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.035122][ T1348] ? __alloc_pages_noprof+0x30d/0x6c0 [ 64.035149][ T1348] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.035173][ T1348] ? __folio_batch_add_and_move+0x2ab/0x370 [ 64.035195][ T1348] __mem_cgroup_charge+0xf6/0x410 [ 64.035238][ T1348] ? __kasan_check_write+0x18/0x20 [ 64.035265][ T1348] ? _raw_spin_lock+0x8c/0x120 [ 64.035285][ T1348] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.035314][ T1348] shmem_alloc_and_add_folio+0x86d/0x1050 [ 64.035351][ T1348] ? put_swap_device+0x130/0x130 [ 64.035384][ T1348] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.035417][ T1348] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.035449][ T1348] ? __kasan_check_write+0x18/0x20 [ 64.035475][ T1348] ? _raw_spin_lock+0x8c/0x120 [ 64.035495][ T1348] shmem_get_folio_gfp+0x5f0/0x1380 [ 64.035530][ T1348] ? shmem_get_folio+0xc0/0xc0 [ 64.035559][ T1348] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 64.035585][ T1348] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 64.035610][ T1348] ? inode_to_bdi+0x6d/0x100 [ 64.035634][ T1348] shmem_write_begin+0xf4/0x270 [ 64.035669][ T1348] generic_perform_write+0x330/0x960 [ 64.035698][ T1348] ? __cfi_generic_perform_write+0x10/0x10 [ 64.035723][ T1348] ? down_write+0xe9/0x2a0 [ 64.035752][ T1348] ? mnt_get_write_access_file+0x1af/0x3b0 [ 64.035775][ T1348] ? mnt_put_write_access_file+0xc2/0x100 [ 64.035798][ T1348] ? file_update_time+0x1ef/0x220 [ 64.035822][ T1348] shmem_file_write_iter+0x105/0x130 [ 64.035846][ T1348] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 64.035869][ T1348] __kernel_write_iter+0x395/0x830 [ 64.035897][ T1348] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 64.035928][ T1348] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.035956][ T1348] ? get_dump_page+0x160/0x220 [ 64.035978][ T1348] ? __asan_memset+0x39/0x50 [ 64.036003][ T1348] ? iov_iter_bvec+0xc0/0x180 [ 64.036036][ T1348] dump_user_range+0xb06/0xdf0 [ 64.036066][ T1348] ? __cfi_dump_emit+0x10/0x10 [ 64.036093][ T1348] ? __cfi_dump_user_range+0x10/0x10 [ 64.036121][ T1348] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 64.036151][ T1348] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.036182][ T1348] elf_core_dump+0x2cd9/0x3810 [ 64.036218][ T1348] ? __cfi_elf_core_dump+0x10/0x10 [ 64.036256][ T1348] ? dump_interrupted+0xf0/0xf0 [ 64.036281][ T1348] ? filp_open+0x182/0x1d0 [ 64.036300][ T1348] ? 0xffffffffff600000 [ 64.036316][ T1348] do_coredump+0x1bfa/0x2bd0 [ 64.036344][ T1348] ? __cfi_do_coredump+0x10/0x10 [ 64.036367][ T1348] ? asm_exc_page_fault+0x2b/0x30 [ 64.036400][ T1348] ? __kasan_slab_free+0x6a/0x80 [ 64.036429][ T1348] ? kmem_cache_free+0x1c1/0x4c0 [ 64.036458][ T1348] get_signal+0x11fd/0x14f0 [ 64.036484][ T1348] arch_do_signal_or_restart+0x96/0x720 [ 64.036514][ T1348] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.036548][ T1348] irqentry_exit_to_user_mode+0x4e/0xb0 [ 64.036579][ T1348] irqentry_exit+0x16/0x60 [ 64.036608][ T1348] exc_page_fault+0x66/0xc0 [ 64.036636][ T1348] asm_exc_page_fault+0x2b/0x30 [ 64.036659][ T1348] RIP: 0033:0x7fa41c38e931 [ 64.036678][ T1348] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 64.036699][ T1348] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 64.036718][ T1348] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 64.036733][ T1348] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 64.036748][ T1348] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 64.036764][ T1348] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 64.036780][ T1348] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 64.036799][ T1348] [ 64.042381][ T1348] memory: usage 286528kB, limit 307200kB, failcnt 44114 [ 64.576121][ T1805] overlayfs: missing 'lowerdir' [ 64.578459][ T1348] memory+swap: usage 421932kB, limit 9007199254740988kB, failcnt 0 [ 64.592963][ T1348] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 64.602239][ T389] usb 2-1: Using ep0 maxpacket: 16 [ 64.608489][ T1348] Memory cgroup stats for /syz0: [ 64.608705][ T1348] cache 306671616 [ 64.620511][ T389] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 64.631430][ T389] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.643201][ T389] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.656003][ T389] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.665671][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.674416][ T389] usb 2-1: Product: syz [ 64.679375][ T389] usb 2-1: Manufacturer: syz [ 64.684563][ T1348] rss 81920 [ 64.684580][ T1348] rss_huge 0 [ 64.687940][ T389] usb 2-1: SerialNumber: syz [ 64.698025][ T1811] overlayfs: failed to clone upperpath [ 64.704496][ T1811] overlayfs: failed to clone upperpath [ 64.706327][ T1348] shmem 306667520 [ 64.740354][ T36] audit: type=1400 audit(1751858739.774:307): avc: denied { create } for pid=1812 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 64.755432][ T1348] mapped_file 0 [ 64.770397][ T1348] dirty 0 [ 64.773960][ T1348] writeback 0 [ 64.778264][ T1348] workingset_refault_anon 29 [ 64.783357][ T1348] workingset_refault_file 748 [ 64.791648][ T1348] swap 127942656 [ 64.796572][ T1348] swapcached 53248 [ 64.800725][ T1348] pgpgin 196891 [ 64.805507][ T1348] pgpgout 122504 [ 64.809377][ T1348] pgfault 57908 [ 64.813351][ T1348] pgmajfault 46 [ 64.817641][ T1348] inactive_anon 145653760 [ 64.822145][ T1348] active_anon 161116160 [ 64.827709][ T1348] inactive_file 0 [ 64.832433][ T1348] active_file 4096 [ 64.836798][ T1348] unevictable 0 [ 64.841070][ T1348] hierarchical_memory_limit 314572800 [ 64.846914][ T1348] hierarchical_memsw_limit 9223372036854771712 [ 64.854438][ T1348] total_cache 306671616 [ 64.858977][ T1348] total_rss 81920 [ 64.862851][ T1348] total_rss_huge 0 [ 64.867410][ T1348] total_shmem 306667520 [ 64.872083][ T1348] total_mapped_file 0 [ 64.877055][ T1348] total_dirty 0 [ 64.882384][ T1348] total_writeback 0 [ 64.894541][ T1348] total_workingset_refault_anon 29 [ 64.901104][ T1348] total_workingset_refault_file 748 [ 64.907191][ T1826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1826 comm=syz.2.506 [ 64.908573][ T1348] total_swap 127942656 [ 64.927430][ T1348] total_swapcached 53248 [ 64.932541][ T1348] total_pgpgin 196891 [ 64.937339][ T1348] total_pgpgout 122504 [ 64.942555][ T1348] total_pgfault 57908 [ 64.947076][ T1348] total_pgmajfault 46 [ 64.951985][ T1348] total_inactive_anon 145653760 [ 64.957290][ T1348] total_active_anon 161116160 [ 64.962429][ T1348] total_inactive_file 0 [ 64.967066][ T1348] total_active_file 4096 [ 64.971667][ T1348] total_unevictable 0 [ 64.976206][ T1348] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1380,uid=0 [ 64.991989][ T1348] Memory cgroup out of memory: Killed process 1380 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53524kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 65.080665][ T1387] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 65.122333][ T1387] CPU: 0 UID: 0 PID: 1387 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 65.122371][ T1387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.122385][ T1387] Call Trace: [ 65.122391][ T1387] [ 65.122401][ T1387] __dump_stack+0x21/0x30 [ 65.122436][ T1387] dump_stack_lvl+0x10c/0x190 [ 65.122461][ T1387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.122485][ T1387] ? ___ratelimit+0x3f7/0x5a0 [ 65.122509][ T1387] dump_stack+0x19/0x20 [ 65.122534][ T1387] dump_header+0xd7/0x490 [ 65.122568][ T1387] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 65.122592][ T1387] oom_kill_process+0x4c0/0x7e0 [ 65.122612][ T1387] ? sched_clock_cpu+0x75/0x400 [ 65.122639][ T1387] out_of_memory+0x7ee/0xbd0 [ 65.122660][ T1387] ? __cfi_out_of_memory+0x10/0x10 [ 65.122679][ T1387] ? mutex_lock_killable+0x104/0x1c0 [ 65.122707][ T1387] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.122738][ T1387] mem_cgroup_out_of_memory+0x279/0x350 [ 65.122768][ T1387] ? drain_obj_stock+0xed0/0xed0 [ 65.122808][ T1387] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 65.122838][ T1387] try_charge_memcg+0x8f7/0xde0 [ 65.122865][ T1387] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.122889][ T1387] ? __alloc_pages_noprof+0x30d/0x6c0 [ 65.122913][ T1387] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.122938][ T1387] __mem_cgroup_charge+0xf6/0x410 [ 65.122966][ T1387] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.122996][ T1387] shmem_alloc_and_add_folio+0x86d/0x1050 [ 65.123034][ T1387] ? put_swap_device+0x130/0x130 [ 65.123067][ T1387] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.123099][ T1387] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.123130][ T1387] ? _raw_spin_lock+0x8c/0x120 [ 65.123150][ T1387] shmem_get_folio_gfp+0x5f0/0x1380 [ 65.123182][ T1387] ? shmem_get_folio+0xc0/0xc0 [ 65.123209][ T1387] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 65.123233][ T1387] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 65.123257][ T1387] ? inode_to_bdi+0x6d/0x100 [ 65.123282][ T1387] shmem_write_begin+0xf4/0x270 [ 65.123315][ T1387] generic_perform_write+0x330/0x960 [ 65.123343][ T1387] ? __cfi_generic_perform_write+0x10/0x10 [ 65.123373][ T1387] ? down_write+0xe9/0x2a0 [ 65.123402][ T1387] ? mnt_get_write_access_file+0x1af/0x3b0 [ 65.123424][ T1387] ? mnt_put_write_access_file+0xc2/0x100 [ 65.123445][ T1387] ? file_update_time+0x1ef/0x220 [ 65.123468][ T1387] shmem_file_write_iter+0x105/0x130 [ 65.123491][ T1387] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 65.123514][ T1387] __kernel_write_iter+0x395/0x830 [ 65.123541][ T1387] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 65.123554][ T389] usb 2-1: 0:2 : does not exist [ 65.123565][ T1387] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.123592][ T1387] ? get_dump_page+0x160/0x220 [ 65.123610][ T1387] ? __asan_memset+0x39/0x50 [ 65.123635][ T1387] ? iov_iter_bvec+0xc0/0x180 [ 65.123669][ T1387] dump_user_range+0xb06/0xdf0 [ 65.123704][ T1387] ? __cfi_dump_emit+0x10/0x10 [ 65.123736][ T1387] ? __cfi_dump_user_range+0x10/0x10 [ 65.123765][ T1387] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 65.123810][ T1387] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.123843][ T1387] elf_core_dump+0x2cd9/0x3810 [ 65.123884][ T1387] ? __cfi_elf_core_dump+0x10/0x10 [ 65.123930][ T1387] ? dump_interrupted+0xf0/0xf0 [ 65.123959][ T1387] ? filp_open+0x182/0x1d0 [ 65.123984][ T1387] ? 0xffffffffff600000 [ 65.124006][ T1387] do_coredump+0x1bfa/0x2bd0 [ 65.124038][ T1387] ? __cfi_do_coredump+0x10/0x10 [ 65.124069][ T1387] ? asm_exc_page_fault+0x2b/0x30 [ 65.124106][ T1387] ? __kasan_slab_free+0x6a/0x80 [ 65.124142][ T1387] ? kmem_cache_free+0x1c1/0x4c0 [ 65.124174][ T1387] get_signal+0x11fd/0x14f0 [ 65.124206][ T1387] arch_do_signal_or_restart+0x96/0x720 [ 65.124242][ T1387] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.124280][ T1387] irqentry_exit_to_user_mode+0x4e/0xb0 [ 65.124315][ T1387] irqentry_exit+0x16/0x60 [ 65.124347][ T1387] exc_page_fault+0x66/0xc0 [ 65.124377][ T1387] asm_exc_page_fault+0x2b/0x30 [ 65.124404][ T1387] RIP: 0033:0x7fa41c38e931 [ 65.124425][ T1387] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.124448][ T1387] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 65.124471][ T1387] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 65.124490][ T1387] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 65.124508][ T1387] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 65.124527][ T1387] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 65.124544][ T1387] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 65.124565][ T1387] [ 65.137719][ T1387] memory: usage 305200kB, limit 307200kB, failcnt 44828 [ 65.442427][ T1839] bpf: Bad value for 'uid' [ 65.446412][ T1387] memory+swap: usage 431800kB, limit 9007199254740988kB, failcnt 0 [ 65.575675][ T36] audit: type=1400 audit(1751858740.554:308): avc: denied { ioctl } for pid=1840 comm="syz.2.512" path="socket:[10213]" dev="sockfs" ino=10213 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.578612][ T1387] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.690233][ T1387] Memory cgroup stats for /syz0: [ 65.690409][ T1387] cache 296910848 [ 65.699264][ T1387] rss 176128 [ 65.702511][ T1387] rss_huge 0 [ 65.705816][ T1387] shmem 296910848 [ 65.709813][ T1387] mapped_file 0 [ 65.713364][ T1387] dirty 0 [ 65.718308][ T1387] writeback 0 [ 65.722086][ T1387] workingset_refault_anon 36 [ 65.726919][ T1387] workingset_refault_file 844 [ 65.732363][ T1387] swap 125562880 [ 65.736189][ T1387] swapcached 376832 [ 65.740233][ T1387] pgpgin 202976 [ 65.745097][ T1387] pgpgout 130870 [ 65.748877][ T1387] pgfault 61011 [ 65.752472][ T1387] pgmajfault 55 [ 65.756007][ T1387] inactive_anon 178569216 [ 65.761485][ T1387] active_anon 118763520 [ 65.768572][ T1387] inactive_file 0 [ 65.773298][ T1387] active_file 0 [ 65.777799][ T1387] unevictable 0 [ 65.783179][ T1387] hierarchical_memory_limit 314572800 [ 65.788872][ T1387] hierarchical_memsw_limit 9223372036854771712 [ 65.798051][ T1387] total_cache 296910848 [ 65.803209][ T1387] total_rss 176128 [ 65.807287][ T1387] total_rss_huge 0 [ 65.811949][ T1387] total_shmem 296910848 [ 65.816945][ T1387] total_mapped_file 0 [ 65.821011][ T1387] total_dirty 0 [ 65.824547][ T1387] total_writeback 0 [ 65.828465][ T1387] total_workingset_refault_anon 36 [ 65.833857][ T1387] total_workingset_refault_file 844 [ 65.840589][ T1387] total_swap 125562880 [ 65.845090][ T1387] total_swapcached 376832 [ 65.849648][ T1387] total_pgpgin 202976 [ 65.853764][ T1387] total_pgpgout 130870 [ 65.858408][ T1387] total_pgfault 61011 [ 65.862857][ T1387] total_pgmajfault 55 [ 65.868270][ T1387] total_inactive_anon 178569216 [ 65.874500][ T1387] total_active_anon 118763520 [ 65.881238][ T1387] total_inactive_file 0 [ 65.885770][ T1387] total_active_file 0 [ 65.890061][ T1387] total_unevictable 0 [ 65.897123][ T1387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1365,uid=0 [ 65.915181][ T1387] Memory cgroup out of memory: Killed process 1365 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53424kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 66.155059][ T1774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.165526][ T1774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.197959][ T389] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 66.225203][ T389] usb 2-1: USB disconnect, device number 22 [ 66.239727][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.370343][ T1861] incfs: Options parsing error. -22 [ 66.377187][ T1861] incfs: mount failed -22 [ 66.464869][ T1865] netlink: 'syz.1.519': attribute type 2 has an invalid length. [ 66.504855][ T1865] netlink: 'syz.1.519': attribute type 25 has an invalid length. [ 66.505438][ T1867] overlayfs: failed to clone upperpath [ 66.888933][ T36] audit: type=1400 audit(1751858741.924:309): avc: denied { connect } for pid=1885 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.067790][ T36] audit: type=1326 audit(1751858742.094:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1850 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1767b8e929 code=0x7fc00000 [ 67.103739][ T1897] binder: Bad value for 'max' [ 67.217641][ T1350] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 67.258718][ T1350] CPU: 1 UID: 0 PID: 1350 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 67.258767][ T1350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.258781][ T1350] Call Trace: [ 67.258788][ T1350] [ 67.258797][ T1350] __dump_stack+0x21/0x30 [ 67.258828][ T1350] dump_stack_lvl+0x10c/0x190 [ 67.258855][ T1350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.258879][ T1350] ? ___ratelimit+0x3f7/0x5a0 [ 67.258906][ T1350] dump_stack+0x19/0x20 [ 67.258932][ T1350] dump_header+0xd7/0x490 [ 67.258964][ T1350] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 67.258989][ T1350] oom_kill_process+0x4c0/0x7e0 [ 67.259010][ T1350] ? sched_clock_cpu+0x75/0x400 [ 67.259037][ T1350] out_of_memory+0x7ee/0xbd0 [ 67.259058][ T1350] ? __cfi_out_of_memory+0x10/0x10 [ 67.259077][ T1350] ? mutex_lock_killable+0x92/0x1c0 [ 67.259107][ T1350] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.259137][ T1350] mem_cgroup_out_of_memory+0x279/0x350 [ 67.259169][ T1350] ? drain_obj_stock+0xed0/0xed0 [ 67.259200][ T1350] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 67.259231][ T1350] try_charge_memcg+0x8f7/0xde0 [ 67.259255][ T1350] ? __cfi_try_charge_memcg+0x10/0x10 [ 67.259280][ T1350] ? __alloc_pages_noprof+0x30d/0x6c0 [ 67.259305][ T1350] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.259328][ T1350] ? __folio_batch_add_and_move+0x2ab/0x370 [ 67.259350][ T1350] __mem_cgroup_charge+0xf6/0x410 [ 67.259377][ T1350] ? __kasan_check_write+0x18/0x20 [ 67.259404][ T1350] ? _raw_spin_lock+0x8c/0x120 [ 67.259424][ T1350] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.259453][ T1350] shmem_alloc_and_add_folio+0x86d/0x1050 [ 67.259491][ T1350] ? put_swap_device+0x130/0x130 [ 67.259525][ T1350] ? shmem_huge_global_enabled+0x2da/0x360 [ 67.259559][ T1350] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 67.259591][ T1350] ? __kasan_check_write+0x18/0x20 [ 67.259617][ T1350] ? _raw_spin_lock+0x8c/0x120 [ 67.259648][ T1350] shmem_get_folio_gfp+0x5f0/0x1380 [ 67.259683][ T1350] ? shmem_get_folio+0xc0/0xc0 [ 67.259713][ T1350] ? follow_page_pte+0xa5c/0xb90 [ 67.259734][ T1350] ? inode_to_bdi+0x6d/0x100 [ 67.259756][ T1350] shmem_write_begin+0xf4/0x270 [ 67.259786][ T1350] generic_perform_write+0x330/0x960 [ 67.259812][ T1350] ? __cfi_generic_perform_write+0x10/0x10 [ 67.259834][ T1350] ? down_write+0xe9/0x2a0 [ 67.259859][ T1350] ? file_update_time+0xa3/0x220 [ 67.259879][ T1350] shmem_file_write_iter+0x105/0x130 [ 67.259901][ T1350] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 67.259922][ T1350] __kernel_write_iter+0x395/0x830 [ 67.259946][ T1350] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 67.259967][ T1350] ? __cfi___kernel_write_iter+0x10/0x10 [ 67.259992][ T1350] ? __asan_memset+0x39/0x50 [ 67.260014][ T1350] ? iov_iter_bvec+0xc0/0x180 [ 67.260043][ T1350] dump_user_range+0xb06/0xdf0 [ 67.260068][ T1350] ? __cfi_dump_emit+0x10/0x10 [ 67.260091][ T1350] ? __cfi_dump_user_range+0x10/0x10 [ 67.260116][ T1350] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 67.260141][ T1350] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 67.260166][ T1350] elf_core_dump+0x2cd9/0x3810 [ 67.260199][ T1350] ? __cfi_elf_core_dump+0x10/0x10 [ 67.260234][ T1350] ? dump_interrupted+0xf0/0xf0 [ 67.260257][ T1350] ? filp_open+0x182/0x1d0 [ 67.260276][ T1350] ? 0xffffffffff600000 [ 67.260292][ T1350] do_coredump+0x1bfa/0x2bd0 [ 67.260319][ T1350] ? __cfi_do_coredump+0x10/0x10 [ 67.260341][ T1350] ? asm_exc_page_fault+0x2b/0x30 [ 67.260370][ T1350] ? __kasan_slab_free+0x6a/0x80 [ 67.260397][ T1350] ? kmem_cache_free+0x1c1/0x4c0 [ 67.260423][ T1350] get_signal+0x11fd/0x14f0 [ 67.260447][ T1350] arch_do_signal_or_restart+0x96/0x720 [ 67.260474][ T1350] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 67.260503][ T1350] irqentry_exit_to_user_mode+0x4e/0xb0 [ 67.260530][ T1350] irqentry_exit+0x16/0x60 [ 67.260555][ T1350] exc_page_fault+0x66/0xc0 [ 67.260580][ T1350] asm_exc_page_fault+0x2b/0x30 [ 67.260601][ T1350] RIP: 0033:0x7fa41c38e931 [ 67.260616][ T1350] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 67.260640][ T1350] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 67.260658][ T1350] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 67.260673][ T1350] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 67.260686][ T1350] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 67.260700][ T1350] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 67.260713][ T1350] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 67.260729][ T1350] [ 67.260737][ T1350] memory: usage 307200kB, limit 307200kB, failcnt 47292 [ 67.532497][ T1909] 9pnet_fd: Insufficient options for proto=fd [ 67.539872][ T1350] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 67.626476][ T1913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 67.627099][ T1350] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.671477][ T1915] xfrm0: mtu less than device minimum [ 67.678144][ T1350] Memory cgroup stats for [ 67.706402][ T1917] netlink: 'syz.3.537': attribute type 46 has an invalid length. [ 67.717238][ T1350] /syz0 [ 67.723779][ T1917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.537'. [ 67.732140][ T1350] : [ 67.837133][ T1350] cache 314306560 [ 67.837249][ T1921] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 67.840094][ T1350] rss 262144 [ 67.856204][ T1350] rss_huge 0 [ 67.859553][ T1350] shmem 314302464 [ 67.863429][ T1350] mapped_file 0 [ 67.867822][ T1350] dirty 0 [ 67.871314][ T1350] writeback 0 [ 67.875360][ T1350] workingset_refault_anon 47 [ 67.880644][ T1350] workingset_refault_file 1259 [ 67.886257][ T1350] swap 127967232 [ 67.890324][ T1350] swapcached 28672 [ 67.894727][ T1350] pgpgin 220806 [ 67.894848][ T36] audit: type=1400 audit(1751858743.932:311): avc: denied { associate } for pid=1926 comm="syz.3.540" name="cgroup.freeze" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 67.898262][ T1350] pgpgout 144517 [ 67.898275][ T1350] pgfault 82560 [ 67.898283][ T1350] pgmajfault 76 [ 67.898290][ T1350] inactive_anon 58286080 [ 67.898299][ T1350] active_anon 256282624 [ 67.898307][ T1350] inactive_file 0 [ 67.898316][ T1350] active_file 4096 [ 67.953604][ T1350] unevictable 0 [ 67.957456][ T1350] hierarchical_memory_limit 314572800 [ 67.963385][ T1350] hierarchical_memsw_limit 9223372036854771712 [ 67.971799][ T1350] total_cache 314306560 [ 67.976662][ T1350] total_rss 262144 [ 67.981119][ T1350] total_rss_huge 0 [ 67.985333][ T1350] total_shmem 314302464 [ 67.989738][ T1350] total_mapped_file 0 [ 67.993784][ T1350] total_dirty 0 [ 67.997297][ T1350] total_writeback 0 [ 68.001211][ T1350] total_workingset_refault_anon 47 [ 68.006670][ T1350] total_workingset_refault_file 1259 [ 68.012775][ T1350] total_swap 127967232 [ 68.017156][ T1350] total_swapcached 28672 [ 68.022399][ T1350] total_pgpgin 220806 [ 68.026755][ T1350] total_pgpgout 144517 [ 68.030854][ T1350] total_pgfault 82560 [ 68.035064][ T1350] total_pgmajfault 76 [ 68.039238][ T1350] total_inactive_anon 58286080 [ 68.044706][ T1350] total_active_anon 256282624 [ 68.049894][ T1350] total_inactive_file 0 [ 68.054343][ T1350] total_active_file 4096 [ 68.058906][ T1350] total_unevictable 0 [ 68.063248][ T1350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1382,uid=0 [ 68.079009][ T1350] Memory cgroup out of memory: Killed process 1382 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53536kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 68.262345][ T1387] syz.0.348 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 68.286724][ T1387] CPU: 1 UID: 0 PID: 1387 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 68.286764][ T1387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.286779][ T1387] Call Trace: [ 68.286786][ T1387] [ 68.286795][ T1387] __dump_stack+0x21/0x30 [ 68.286828][ T1387] dump_stack_lvl+0x10c/0x190 [ 68.286855][ T1387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.286882][ T1387] ? ___ratelimit+0x3f7/0x5a0 [ 68.286907][ T1387] dump_stack+0x19/0x20 [ 68.286932][ T1387] dump_header+0xd7/0x490 [ 68.286964][ T1387] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 68.286990][ T1387] oom_kill_process+0x4c0/0x7e0 [ 68.287011][ T1387] ? sched_clock_cpu+0x75/0x400 [ 68.287038][ T1387] out_of_memory+0x7ee/0xbd0 [ 68.287059][ T1387] ? __cfi_out_of_memory+0x10/0x10 [ 68.287079][ T1387] ? mutex_lock_killable+0x92/0x1c0 [ 68.287108][ T1387] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.287139][ T1387] mem_cgroup_out_of_memory+0x279/0x350 [ 68.287171][ T1387] ? drain_obj_stock+0xed0/0xed0 [ 68.287201][ T1387] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 68.287231][ T1387] try_charge_memcg+0x8f7/0xde0 [ 68.287257][ T1387] ? __cfi_try_charge_memcg+0x10/0x10 [ 68.287286][ T1387] ? xas_load+0x3a2/0x3d0 [ 68.287312][ T1387] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 68.287343][ T1387] __read_swap_cache_async+0x34a/0x690 [ 68.287377][ T1387] swap_cluster_readahead+0x43a/0x530 [ 68.287409][ T1387] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 68.287446][ T1387] swapin_readahead+0xf2/0x820 [ 68.287487][ T1387] ? unwind_get_return_address+0x51/0x90 [ 68.287511][ T1387] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 68.287543][ T1387] ? __cfi_swapin_readahead+0x10/0x10 [ 68.287579][ T1387] ? __filemap_get_folio+0x77c/0x7c0 [ 68.287604][ T1387] ? get_swap_device+0x10f/0x290 [ 68.287635][ T1387] do_swap_page+0x43c/0x42f0 [ 68.287724][ T1387] ? free_contig_range+0x270/0x270 [ 68.287752][ T1387] ? __reset_page_owner+0x450/0x450 [ 68.287773][ T1387] ? post_alloc_hook+0x3b9/0x3f0 [ 68.287792][ T1387] ? __alloc_pages_noprof+0x30d/0x6c0 [ 68.287814][ T1387] ? dump_user_range+0xd1/0xdf0 [ 68.287845][ T1387] ? __cfi_do_swap_page+0x10/0x10 [ 68.287876][ T1387] ? __kasan_check_write+0x18/0x20 [ 68.287902][ T1387] ? __set_page_owner+0x3bf/0x5d0 [ 68.287923][ T1387] ? __cfi_default_wake_function+0x10/0x10 [ 68.287949][ T1387] ? __pte_offset_map+0x1b0/0x230 [ 68.287975][ T1387] ? pte_offset_map_rw_nolock+0xba/0x110 [ 68.288002][ T1387] handle_mm_fault+0x1205/0x1b90 [ 68.288032][ T1387] ? __kasan_check_write+0x18/0x20 [ 68.288061][ T1387] ? __cfi_handle_mm_fault+0x10/0x10 [ 68.288092][ T1387] ? follow_page_pte+0x4a3/0xb90 [ 68.288115][ T1387] ? gup_must_unshare+0x1e0/0x1e0 [ 68.288136][ T1387] ? vma_is_secretmem+0x11/0x50 [ 68.288161][ T1387] __get_user_pages+0x1169/0x22d0 [ 68.288182][ T1387] ? do_coredump+0x1bfa/0x2bd0 [ 68.288209][ T1387] ? __kasan_check_write+0x18/0x20 [ 68.288238][ T1387] ? populate_vma_page_range+0x230/0x230 [ 68.288258][ T1387] ? __alloc_pages_noprof+0x30d/0x6c0 [ 68.288281][ T1387] ? free_unref_page+0x51e/0xdd0 [ 68.288303][ T1387] get_dump_page+0x107/0x220 [ 68.288324][ T1387] ? __cfi_get_dump_page+0x10/0x10 [ 68.288345][ T1387] ? __free_pages+0x6b/0x3b0 [ 68.288368][ T1387] dump_user_range+0x181/0xdf0 [ 68.288397][ T1387] ? __cfi_dump_emit+0x10/0x10 [ 68.288424][ T1387] ? __cfi_dump_user_range+0x10/0x10 [ 68.288448][ T1387] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 68.288474][ T1387] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 68.288499][ T1387] elf_core_dump+0x2cd9/0x3810 [ 68.288532][ T1387] ? __cfi_elf_core_dump+0x10/0x10 [ 68.288568][ T1387] ? dump_interrupted+0xf0/0xf0 [ 68.288591][ T1387] ? filp_open+0x182/0x1d0 [ 68.288610][ T1387] ? 0xffffffffff600000 [ 68.288626][ T1387] do_coredump+0x1bfa/0x2bd0 [ 68.288660][ T1387] ? __cfi_do_coredump+0x10/0x10 [ 68.288682][ T1387] ? asm_exc_page_fault+0x2b/0x30 [ 68.288712][ T1387] ? __kasan_slab_free+0x6a/0x80 [ 68.288739][ T1387] ? kmem_cache_free+0x1c1/0x4c0 [ 68.288764][ T1387] get_signal+0x11fd/0x14f0 [ 68.288788][ T1387] arch_do_signal_or_restart+0x96/0x720 [ 68.288815][ T1387] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 68.288844][ T1387] irqentry_exit_to_user_mode+0x4e/0xb0 [ 68.288872][ T1387] irqentry_exit+0x16/0x60 [ 68.288897][ T1387] exc_page_fault+0x66/0xc0 [ 68.288922][ T1387] asm_exc_page_fault+0x2b/0x30 [ 68.288942][ T1387] RIP: 0033:0x7fa41c38e931 [ 68.288959][ T1387] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 68.288976][ T1387] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 68.288995][ T1387] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 68.289010][ T1387] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 68.289024][ T1387] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 68.289038][ T1387] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 68.289051][ T1387] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 68.289067][ T1387] [ 68.289149][ T1387] memory: usage 307200kB, limit 307200kB, failcnt 48320 [ 68.557980][ T36] audit: type=1400 audit(1751858744.562:312): avc: denied { accept } for pid=1941 comm="syz.2.544" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.643352][ T1387] memory+swap: usage 398300kB, limit 9007199254740988kB, failcnt 0 [ 68.707956][ T36] audit: type=1400 audit(1751858744.742:313): avc: denied { create } for pid=1945 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 68.881990][ T1957] syz.1.549: attempt to access beyond end of device [ 68.881990][ T1957] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.886433][ T1387] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 68.900339][ T1957] EXT4-fs (loop1): unable to read superblock [ 68.906000][ T36] audit: type=1400 audit(1751858744.742:314): avc: denied { read } for pid=1945 comm="syz.1.545" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.954954][ T1962] syz.1.549: attempt to access beyond end of device [ 68.954954][ T1962] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 68.965658][ T1964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 68.969885][ T1962] EXT4-fs (loop1): unable to read superblock [ 68.983699][ T36] audit: type=1400 audit(1751858744.742:315): avc: denied { open } for pid=1945 comm="syz.1.545" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.994596][ T1964] overlayfs: failed to set xattr on upper [ 69.015749][ T36] audit: type=1400 audit(1751858744.992:316): avc: denied { mounton } for pid=1963 comm="syz.3.552" path="/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.025861][ T1387] Memory cgroup stats for [ 69.044747][ T1964] overlayfs: ...falling back to redirect_dir=nofollow. [ 69.056463][ T1964] overlayfs: ...falling back to uuid=null. [ 69.076662][ T1387] /syz0: [ 69.076807][ T1387] cache 293527552 [ 69.083340][ T1387] rss 245760 [ 69.103782][ T1387] rss_huge 0 [ 69.114311][ T1387] shmem 291553280 [ 69.118317][ T1387] mapped_file 1835008 [ 69.123877][ T1387] dirty 0 [ 69.124735][ T1974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 69.127116][ T1974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:276 [ 69.127562][ T1387] writeback 0 [ 69.150728][ T1387] workingset_refault_anon 48 [ 69.156152][ T1387] workingset_refault_file 1260 [ 69.161324][ T1387] swap 127897600 [ 69.165133][ T1387] swapcached 98304 [ 69.179265][ T1387] pgpgin 225892 [ 69.182959][ T1387] pgpgout 154663 [ 69.187113][ T1387] pgfault 82592 [ 69.190651][ T1387] pgmajfault 77 [ 69.194132][ T1387] inactive_anon 290689024 [ 69.198854][ T1387] active_anon 1183744 [ 69.202937][ T1387] inactive_file 1708032 [ 69.226268][ T1387] active_file 266240 [ 69.230438][ T1387] unevictable 0 [ 69.234108][ T1387] hierarchical_memory_limit 314572800 [ 69.250163][ T1387] hierarchical_memsw_limit 9223372036854771712 [ 69.264808][ T1387] total_cache 293527552 [ 69.270481][ T1387] total_rss 245760 [ 69.274939][ T1387] total_rss_huge 0 [ 69.279037][ T1387] total_shmem 291553280 [ 69.283642][ T1387] total_mapped_file 1835008 [ 69.289011][ T1387] total_dirty 0 [ 69.292882][ T1387] total_writeback 0 [ 69.297045][ T1387] total_workingset_refault_anon 48 [ 69.303096][ T1387] total_workingset_refault_file 1260 [ 69.309060][ T1387] total_swap 127897600 [ 69.313263][ T1387] total_swapcached 98304 [ 69.318309][ T1387] total_pgpgin 225892 [ 69.322875][ T1387] total_pgpgout 154663 [ 69.327399][ T1387] total_pgfault 82592 [ 69.331682][ T1387] total_pgmajfault 77 [ 69.336071][ T1387] total_inactive_anon 290689024 [ 69.341103][ T1387] total_active_anon 1183744 [ 69.343833][ T1991] overlayfs: failed to clone upperpath [ 69.351226][ T1387] total_inactive_file 1708032 [ 69.356173][ T36] audit: type=1400 audit(1751858745.382:317): avc: denied { write } for pid=1993 comm="syz.1.562" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 69.364557][ T1387] total_active_file 266240 [ 69.392432][ T1998] overlayfs: failed to clone upperpath [ 69.398319][ T36] audit: type=1400 audit(1751858745.392:318): avc: denied { name_bind } for pid=1993 comm="syz.1.562" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 69.431380][ T1387] total_unevictable 0 [ 69.441322][ T1387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1401,uid=0 [ 69.470313][ T2003] netlink: 'syz.2.565': attribute type 25 has an invalid length. [ 69.479124][ T1387] Memory cgroup out of memory: Killed process 1401 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 69.509251][ T2009] binder: Bad value for 'stats' [ 69.577074][ T2014] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.640568][ T2014] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 69.835074][ T1369] syz.0.348 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 69.874509][ T1369] CPU: 1 UID: 0 PID: 1369 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 69.874729][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.874781][ T1369] Call Trace: [ 69.874790][ T1369] [ 69.874800][ T1369] __dump_stack+0x21/0x30 [ 69.874832][ T1369] dump_stack_lvl+0x10c/0x190 [ 69.874859][ T1369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.874885][ T1369] ? ___ratelimit+0x3f7/0x5a0 [ 69.874911][ T1369] dump_stack+0x19/0x20 [ 69.874934][ T1369] dump_header+0xd7/0x490 [ 69.874967][ T1369] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 69.874992][ T1369] oom_kill_process+0x4c0/0x7e0 [ 69.875012][ T1369] ? sched_clock_cpu+0x75/0x400 [ 69.875039][ T1369] out_of_memory+0x7ee/0xbd0 [ 69.875059][ T1369] ? __cfi_out_of_memory+0x10/0x10 [ 69.875079][ T1369] ? mutex_lock_killable+0x92/0x1c0 [ 69.875107][ T1369] ? __cfi_mutex_lock_killable+0x10/0x10 [ 69.875137][ T1369] mem_cgroup_out_of_memory+0x279/0x350 [ 69.875167][ T1369] ? drain_obj_stock+0xed0/0xed0 [ 69.875198][ T1369] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 69.875228][ T1369] try_charge_memcg+0x8f7/0xde0 [ 69.875254][ T1369] ? __cfi_try_charge_memcg+0x10/0x10 [ 69.875279][ T1369] ? __alloc_pages_noprof+0x30d/0x6c0 [ 69.875304][ T1369] ? folio_add_new_anon_rmap+0x475/0x910 [ 69.875336][ T1369] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.875360][ T1369] __mem_cgroup_charge+0xf6/0x410 [ 69.875388][ T1369] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 69.875417][ T1369] shmem_alloc_and_add_folio+0x86d/0x1050 [ 69.875550][ T1369] ? put_swap_device+0x130/0x130 [ 69.875584][ T1369] ? shmem_huge_global_enabled+0x2da/0x360 [ 69.875617][ T1369] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 69.875649][ T1369] ? __kasan_check_write+0x18/0x20 [ 69.875675][ T1369] ? _raw_spin_lock+0x8c/0x120 [ 69.875696][ T1369] shmem_get_folio_gfp+0x5f0/0x1380 [ 69.875730][ T1369] ? shmem_get_folio+0xc0/0xc0 [ 69.875766][ T1369] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 69.875792][ T1369] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 69.875818][ T1369] ? inode_to_bdi+0x6d/0x100 [ 69.875844][ T1369] shmem_write_begin+0xf4/0x270 [ 69.875879][ T1369] generic_perform_write+0x330/0x960 [ 69.875908][ T1369] ? __cfi_generic_perform_write+0x10/0x10 [ 69.875933][ T1369] ? down_write+0xe9/0x2a0 [ 69.875962][ T1369] ? mnt_get_write_access_file+0x1af/0x3b0 [ 69.875985][ T1369] ? mnt_put_write_access_file+0xc2/0x100 [ 69.876008][ T1369] ? file_update_time+0x1ef/0x220 [ 69.876031][ T1369] shmem_file_write_iter+0x105/0x130 [ 69.876054][ T1369] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 69.876078][ T1369] __kernel_write_iter+0x395/0x830 [ 69.876107][ T1369] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 69.876133][ T1369] ? __cfi___kernel_write_iter+0x10/0x10 [ 69.876161][ T1369] ? get_dump_page+0x160/0x220 [ 69.876189][ T1369] ? __asan_memset+0x39/0x50 [ 69.876216][ T1369] ? iov_iter_bvec+0xc0/0x180 [ 69.876249][ T1369] dump_user_range+0xb06/0xdf0 [ 69.876279][ T1369] ? __cfi_dump_emit+0x10/0x10 [ 69.876311][ T1369] ? __cfi_dump_user_range+0x10/0x10 [ 69.876350][ T1369] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 69.876379][ T1369] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 69.876410][ T1369] elf_core_dump+0x2cd9/0x3810 [ 69.876448][ T1369] ? __cfi_elf_core_dump+0x10/0x10 [ 69.876490][ T1369] ? dump_interrupted+0xf0/0xf0 [ 69.876516][ T1369] ? filp_open+0x182/0x1d0 [ 69.876538][ T1369] ? 0xffffffffff600000 [ 69.876557][ T1369] do_coredump+0x1bfa/0x2bd0 [ 69.876587][ T1369] ? __cfi_do_coredump+0x10/0x10 [ 69.876612][ T1369] ? asm_exc_page_fault+0x2b/0x30 [ 69.876646][ T1369] ? __kasan_slab_free+0x6a/0x80 [ 69.876678][ T1369] ? kmem_cache_free+0x1c1/0x4c0 [ 69.876709][ T1369] get_signal+0x11fd/0x14f0 [ 69.876737][ T1369] arch_do_signal_or_restart+0x96/0x720 [ 69.876778][ T1369] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 69.876813][ T1369] irqentry_exit_to_user_mode+0x4e/0xb0 [ 69.876844][ T1369] irqentry_exit+0x16/0x60 [ 69.876873][ T1369] exc_page_fault+0x66/0xc0 [ 69.876901][ T1369] asm_exc_page_fault+0x2b/0x30 [ 69.876925][ T1369] RIP: 0033:0x7fa41c38e931 [ 69.876943][ T1369] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 69.876963][ T1369] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 69.876985][ T1369] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 69.877002][ T1369] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 69.877018][ T1369] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 69.877035][ T1369] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 69.877049][ T1369] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 69.877067][ T1369] [ 69.877173][ T1369] memory: usage 305408kB, limit 307200kB, failcnt 49663 [ 70.273864][ T2029] overlay: filesystem on ./bus not supported as upperdir [ 70.280206][ T1369] memory+swap: usage 398916kB, limit 9007199254740988kB, failcnt 0 [ 70.394390][ T1369] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 70.401626][ T1369] Memory cgroup stats for /syz0: [ 70.401762][ T1369] cache 287367168 [ 70.410724][ T1369] rss 294912 [ 70.414692][ T1369] rss_huge 0 [ 70.417919][ T1369] shmem 287367168 [ 70.421593][ T1369] mapped_file 0 [ 70.425223][ T1369] dirty 0 [ 70.428358][ T1369] writeback 0 [ 70.431759][ T1369] workingset_refault_anon 83 [ 70.436523][ T1369] workingset_refault_file 1396 [ 70.441403][ T1369] swap 120733696 [ 70.445030][ T1369] swapcached 200704 [ 70.449102][ T1369] pgpgin 232118 [ 70.452771][ T1369] pgpgout 162376 [ 70.456473][ T1369] pgfault 82919 [ 70.460012][ T1369] pgmajfault 112 [ 70.463789][ T1369] inactive_anon 69681152 [ 70.468296][ T1369] active_anon 218075136 [ 70.472633][ T1369] inactive_file 0 [ 70.476436][ T1369] active_file 0 [ 70.479922][ T1369] unevictable 0 [ 70.483517][ T1369] hierarchical_memory_limit 314572800 [ 70.489734][ T1369] hierarchical_memsw_limit 9223372036854771712 [ 70.496157][ T1369] total_cache 287367168 [ 70.500696][ T1369] total_rss 294912 [ 70.504777][ T1369] total_rss_huge 0 [ 70.508698][ T1369] total_shmem 287367168 [ 70.513053][ T1369] total_mapped_file 0 [ 70.517185][ T1369] total_dirty 0 [ 70.520803][ T1369] total_writeback 0 [ 70.524769][ T1369] total_workingset_refault_anon 83 [ 70.529994][ T1369] total_workingset_refault_file 1396 [ 70.535728][ T1369] total_swap 120733696 [ 70.539910][ T1369] total_swapcached 200704 [ 70.544649][ T1369] total_pgpgin 232118 [ 70.549055][ T1369] total_pgpgout 162376 [ 70.553761][ T1369] total_pgfault 82919 [ 70.557991][ T1369] total_pgmajfault 112 [ 70.562172][ T1369] total_inactive_anon 69681152 [ 70.568914][ T1369] total_active_anon 218075136 [ 70.574553][ T1369] total_inactive_file 0 [ 70.579287][ T1369] total_active_file 0 [ 70.583933][ T1369] total_unevictable 0 [ 70.588269][ T1369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1369,uid=0 [ 70.606159][ T1369] Memory cgroup out of memory: Killed process 1369 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:56128kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 70.805243][ T2050] rust_binder: Failed to vm_insert_page(35184388853760): vma_addr:35184388849664 i:1 err:EFAULT [ 70.805283][ T2050] rust_binder: Error in use_page_slow: EFAULT [ 70.824538][ T2050] rust_binder: use_range failure EFAULT [ 70.831876][ T2050] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 70.841033][ T2050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.854503][ T2050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303 [ 70.907564][ T2053] incfs: Options parsing error. -22 [ 70.929230][ T2053] incfs: mount failed -22 [ 70.991590][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 71.318418][ T2076] netlink: 'syz.2.590': attribute type 153 has an invalid length. [ 71.968451][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 71.968471][ T36] audit: type=1400 audit(1751858748.002:324): avc: denied { ioctl } for pid=2116 comm="syz.0.607" path="socket:[11838]" dev="sockfs" ino=11838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.057120][ T2118] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 72.079326][ T2118] CPU: 0 UID: 0 PID: 2118 Comm: syz-executor Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 72.079369][ T2118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.079392][ T2118] Call Trace: [ 72.079400][ T2118] [ 72.079417][ T2118] __dump_stack+0x21/0x30 [ 72.079453][ T2118] dump_stack_lvl+0x10c/0x190 [ 72.079480][ T2118] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.079507][ T2118] ? ___ratelimit+0x3f7/0x5a0 [ 72.079534][ T2118] dump_stack+0x19/0x20 [ 72.079559][ T2118] dump_header+0xd7/0x490 [ 72.079593][ T2118] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 72.079617][ T2118] oom_kill_process+0x4c0/0x7e0 [ 72.079638][ T2118] ? sched_clock_cpu+0x75/0x400 [ 72.079694][ T2118] out_of_memory+0x7ee/0xbd0 [ 72.079715][ T2118] ? __cfi_out_of_memory+0x10/0x10 [ 72.079735][ T2118] ? mutex_lock_killable+0x92/0x1c0 [ 72.079763][ T2118] ? __cfi_mutex_lock_killable+0x10/0x10 [ 72.079793][ T2118] mem_cgroup_out_of_memory+0x279/0x350 [ 72.079823][ T2118] ? drain_obj_stock+0xed0/0xed0 [ 72.079854][ T2118] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 72.079891][ T2118] try_charge_memcg+0x8f7/0xde0 [ 72.079917][ T2118] ? __cfi_try_charge_memcg+0x10/0x10 [ 72.079942][ T2118] ? __alloc_pages_noprof+0x30d/0x6c0 [ 72.079966][ T2118] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 72.079991][ T2118] __mem_cgroup_charge+0xf6/0x410 [ 72.080018][ T2118] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 72.080047][ T2118] folio_prealloc+0x67/0x240 [ 72.080081][ T2118] do_wp_page+0x1c54/0x3270 [ 72.080115][ T2118] ? folio_put+0x90/0x90 [ 72.080146][ T2118] ? __cfi__raw_spin_lock+0x10/0x10 [ 72.080166][ T2118] ? __pte_offset_map+0x1b0/0x230 [ 72.080193][ T2118] ? pte_offset_map_rw_nolock+0xba/0x110 [ 72.080220][ T2118] handle_mm_fault+0xff7/0x1b90 [ 72.080255][ T2118] ? __cfi_handle_mm_fault+0x10/0x10 [ 72.080287][ T2118] ? find_vma+0xcd/0x110 [ 72.080324][ T2118] ? lock_mm_and_find_vma+0xb8/0x3a0 [ 72.080362][ T2118] do_user_addr_fault+0x4ca/0x1200 [ 72.080394][ T2118] exc_page_fault+0x59/0xc0 [ 72.080422][ T2118] asm_exc_page_fault+0x2b/0x30 [ 72.080446][ T2118] RIP: 0010:__put_user_4+0x11/0x30 [ 72.080469][ T2118] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 53 93 02 00 90 90 90 90 90 90 90 90 90 90 [ 72.080488][ T2118] RSP: 0018:ffffc90000effef0 EFLAGS: 00050202 [ 72.080509][ T2118] RAX: 00000000000001a4 RBX: 0000000000000000 RCX: 000055558cc1a7d0 [ 72.080525][ T2118] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88813cc15f00 [ 72.080540][ T2118] RBP: ffffc90000efff18 R08: ffff88813cc15f07 R09: 1ffff11027982be0 [ 72.080557][ T2118] R10: dffffc0000000000 R11: ffffed1027982be1 R12: 1ffff11027982cc2 [ 72.080580][ T2118] R13: 0000000000000000 R14: ffff88813cc15f00 R15: dffffc0000000000 [ 72.080608][ T2118] ? schedule_tail+0x7c/0xb0 [ 72.080632][ T2118] ret_from_fork+0x28/0xa0 [ 72.080665][ T2118] ret_from_fork_asm+0x1a/0x30 [ 72.080694][ T2118] RIP: 0033:0x7fa41c385193 [ 72.080716][ T2118] Code: Unable to access opcode bytes at 0x7fa41c385169. [ 72.080728][ T2118] RSP: 002b:00007ffebd1486a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 72.080756][ T2118] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa41c385193 [ 72.080771][ T2118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 72.080785][ T2118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 72.080799][ T2118] R10: 000055558cc1a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 72.080813][ T2118] R13: 00000000000927c0 R14: 0000000000011932 R15: 00007ffebd148840 [ 72.080832][ T2118] [ 72.080841][ T2118] memory: usage 307200kB, limit 307200kB, failcnt 55200 [ 72.232528][ T2133] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 72.236177][ T2118] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 72.491120][ T2118] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 72.498281][ T2118] Memory cgroup stats for /syz0: [ 72.498432][ T2118] cache 314347520 [ 72.507631][ T2118] rss 208896 [ 72.511039][ T2118] rss_huge 0 [ 72.514301][ T2118] shmem 314335232 [ 72.518126][ T2118] mapped_file 0 [ 72.521714][ T2118] dirty 0 [ 72.524719][ T2118] writeback 0 [ 72.528373][ T2118] workingset_refault_anon 90 [ 72.533767][ T2118] workingset_refault_file 3231 [ 72.538746][ T2118] swap 127954944 [ 72.542526][ T2118] swapcached 40960 [ 72.546468][ T2118] pgpgin 273188 [ 72.550179][ T2118] pgpgout 196899 [ 72.553958][ T2118] pgfault 89764 [ 72.557645][ T2118] pgmajfault 154 [ 72.561409][ T2118] inactive_anon 162717696 [ 72.566260][ T2118] active_anon 151842816 [ 72.570907][ T2118] inactive_file 12288 [ 72.575341][ T2118] active_file 0 [ 72.579001][ T2118] unevictable 0 [ 72.582833][ T2118] hierarchical_memory_limit 314572800 [ 72.588298][ T2118] hierarchical_memsw_limit 9223372036854771712 [ 72.594644][ T2118] total_cache 314347520 [ 72.599065][ T2118] total_rss 208896 [ 72.603174][ T2118] total_rss_huge 0 [ 72.607139][ T2118] total_shmem 314335232 [ 72.611428][ T2118] total_mapped_file 0 [ 72.615785][ T2118] total_dirty 0 [ 72.619332][ T2118] total_writeback 0 [ 72.623245][ T2118] total_workingset_refault_anon 90 [ 72.628977][ T2118] total_workingset_refault_file 3231 [ 72.634390][ T2118] total_swap 127954944 [ 72.638997][ T2118] total_swapcached 40960 [ 72.643372][ T2118] total_pgpgin 273188 [ 72.647826][ T2118] total_pgpgout 196899 [ 72.652013][ T2118] total_pgfault 89764 [ 72.656714][ T2118] total_pgmajfault 154 [ 72.661003][ T2118] total_inactive_anon 162717696 [ 72.666185][ T2118] total_active_anon 151842816 [ 72.670896][ T2118] total_inactive_file 12288 [ 72.675853][ T2118] total_active_file 0 [ 72.680043][ T2118] total_unevictable 0 [ 72.684141][ T2118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1390,uid=0 [ 72.699449][ T2118] Memory cgroup out of memory: Killed process 1390 (syz.0.348) total-vm:90096kB, anon-rss:952kB, file-rss:53580kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 72.830143][ T36] audit: type=1326 audit(1751858748.862:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 72.884515][ T36] audit: type=1326 audit(1751858748.862:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 72.914548][ T36] audit: type=1326 audit(1751858748.862:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 72.959053][ T36] audit: type=1326 audit(1751858748.862:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.003430][ T36] audit: type=1326 audit(1751858748.862:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.037377][ T36] audit: type=1326 audit(1751858748.892:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.074513][ T36] audit: type=1326 audit(1751858748.892:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.114513][ T36] audit: type=1326 audit(1751858748.892:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.153461][ T36] audit: type=1326 audit(1751858748.892:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2151 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47b438e929 code=0x7ffc0000 [ 73.186086][ T1348] syz.0.348 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 73.251984][ T1348] CPU: 0 UID: 0 PID: 1348 Comm: syz.0.348 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 73.252026][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.252041][ T1348] Call Trace: [ 73.252049][ T1348] [ 73.252058][ T1348] __dump_stack+0x21/0x30 [ 73.252090][ T1348] dump_stack_lvl+0x10c/0x190 [ 73.252116][ T1348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.252142][ T1348] ? ___ratelimit+0x3f7/0x5a0 [ 73.252168][ T1348] dump_stack+0x19/0x20 [ 73.252193][ T1348] dump_header+0xd7/0x490 [ 73.252225][ T1348] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 73.252257][ T1348] oom_kill_process+0x4c0/0x7e0 [ 73.252277][ T1348] ? sched_clock_cpu+0x75/0x400 [ 73.252303][ T1348] out_of_memory+0x7ee/0xbd0 [ 73.252323][ T1348] ? __cfi_out_of_memory+0x10/0x10 [ 73.252343][ T1348] ? mutex_lock_killable+0x92/0x1c0 [ 73.252378][ T1348] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.252408][ T1348] mem_cgroup_out_of_memory+0x279/0x350 [ 73.252439][ T1348] ? drain_obj_stock+0xed0/0xed0 [ 73.252469][ T1348] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 73.252499][ T1348] try_charge_memcg+0x8f7/0xde0 [ 73.252524][ T1348] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 73.252554][ T1348] ? __cfi_try_charge_memcg+0x10/0x10 [ 73.252579][ T1348] ? __alloc_pages_noprof+0x30d/0x6c0 [ 73.252603][ T1348] __mem_cgroup_charge+0xf6/0x410 [ 73.252630][ T1348] ? filemap_get_entry+0x3fb/0x460 [ 73.252652][ T1348] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 73.252681][ T1348] filemap_add_folio+0x57/0x2d0 [ 73.252715][ T1348] __filemap_get_folio+0x4c2/0x7c0 [ 73.252746][ T1348] filemap_fault+0xb41/0x16b0 [ 73.252771][ T1348] ? __cfi_filemap_fault+0x10/0x10 [ 73.252794][ T1348] ? __cfi_filemap_map_pages+0x10/0x10 [ 73.252817][ T1348] ? __cfi_lru_add+0x10/0x10 [ 73.252838][ T1348] ? _raw_spin_lock+0x8c/0x120 [ 73.252858][ T1348] ? __cfi__raw_spin_lock+0x10/0x10 [ 73.252879][ T1348] do_pte_missing+0x376e/0x3e50 [ 73.252904][ T1348] ? pte_marker_clear+0x1b0/0x1b0 [ 73.252924][ T1348] ? __pte_offset_map+0x1b0/0x230 [ 73.252949][ T1348] ? pte_offset_map_rw_nolock+0xba/0x110 [ 73.252976][ T1348] handle_mm_fault+0x1166/0x1b90 [ 73.253007][ T1348] ? __kasan_check_write+0x18/0x20 [ 73.253036][ T1348] ? __cfi_handle_mm_fault+0x10/0x10 [ 73.253067][ T1348] ? follow_page_pte+0x2bd/0xb90 [ 73.253091][ T1348] ? gup_must_unshare+0x1e0/0x1e0 [ 73.253113][ T1348] ? vma_is_secretmem+0x11/0x50 [ 73.253138][ T1348] __get_user_pages+0x1169/0x22d0 [ 73.253160][ T1348] ? __kasan_check_write+0x18/0x20 [ 73.253190][ T1348] ? populate_vma_page_range+0x230/0x230 [ 73.253211][ T1348] ? __kernel_write_iter+0x65e/0x830 [ 73.253250][ T1348] get_dump_page+0x107/0x220 [ 73.253271][ T1348] ? __cfi_get_dump_page+0x10/0x10 [ 73.253291][ T1348] ? __asan_memset+0x39/0x50 [ 73.253398][ T1348] dump_user_range+0x181/0xdf0 [ 73.253433][ T1348] ? __cfi_dump_emit+0x10/0x10 [ 73.253460][ T1348] ? __cfi_dump_user_range+0x10/0x10 [ 73.253488][ T1348] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 73.253517][ T1348] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 73.253546][ T1348] elf_core_dump+0x2cd9/0x3810 [ 73.253585][ T1348] ? __cfi_elf_core_dump+0x10/0x10 [ 73.253627][ T1348] ? dump_interrupted+0xf0/0xf0 [ 73.253653][ T1348] ? filp_open+0x182/0x1d0 [ 73.253676][ T1348] ? 0xffffffffff600000 [ 73.253696][ T1348] do_coredump+0x1bfa/0x2bd0 [ 73.253727][ T1348] ? __cfi_do_coredump+0x10/0x10 [ 73.253752][ T1348] ? asm_exc_page_fault+0x2b/0x30 [ 73.253786][ T1348] ? __kasan_slab_free+0x6a/0x80 [ 73.253819][ T1348] ? kmem_cache_free+0x1c1/0x4c0 [ 73.253848][ T1348] get_signal+0x11fd/0x14f0 [ 73.253876][ T1348] arch_do_signal_or_restart+0x96/0x720 [ 73.253906][ T1348] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.253941][ T1348] irqentry_exit_to_user_mode+0x4e/0xb0 [ 73.253973][ T1348] irqentry_exit+0x16/0x60 [ 73.254002][ T1348] exc_page_fault+0x66/0xc0 [ 73.254032][ T1348] asm_exc_page_fault+0x2b/0x30 [ 73.254057][ T1348] RIP: 0033:0x7fa41c38e931 [ 73.254076][ T1348] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 73.254095][ T1348] RSP: 002b:0000200000000050 EFLAGS: 00010217 [ 73.254116][ T1348] RAX: 0000000000000000 RBX: 00007fa41c5b6080 RCX: 00007fa41c38e929 [ 73.254131][ T1348] RDX: 00002000000000c0 RSI: 0000200000000050 RDI: 0000000080000000 [ 73.254148][ T1348] RBP: 00007fa41c410b39 R08: 0000200000000140 R09: 0000200000000140 [ 73.254165][ T1348] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 73.254179][ T1348] R13: 0000000000000001 R14: 00007fa41c5b6080 R15: 00007ffebd148428 [ 73.254199][ T1348] [ 73.478476][ T2166] overlayfs: failed to resolve './file0': -2 [ 73.479351][ T1348] memory: usage 304476kB, limit 307200kB, failcnt 56570 [ 73.751385][ T1348] memory+swap: usage 430596kB, limit 9007199254740988kB, failcnt 0 [ 73.759801][ T1348] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 73.766771][ T1348] Memory cgroup stats for /syz0: [ 73.767004][ T1348] cache 312078336 [ 73.787339][ T1348] rss 331776 [ 73.791078][ T1348] rss_huge 0 [ 73.794377][ T1348] shmem 310439936 [ 73.824494][ T1348] mapped_file 5910528 [ 73.828539][ T1348] dirty 0 [ 73.831501][ T1348] writeback 32768 [ 73.900094][ T1348] workingset_refault_anon 90 [ 73.930556][ T1348] workingset_refault_file 4499 [ 73.954502][ T1348] swap 127922176 [ 73.958199][ T1348] swapcached 73728 [ 73.962032][ T1348] pgpgin 280389 [ 74.028994][ T1348] pgpgout 204588 [ 74.040958][ T1348] pgfault 91162 [ 74.082310][ T1348] pgmajfault 170 [ 74.122290][ T1348] inactive_anon 16285696 [ 74.167214][ T1348] active_anon 294121472 [ 74.191785][ T1348] inactive_file 0 [ 74.260824][ T1348] active_file 1638400 [ 74.288050][ T1348] unevictable 0 [ 74.310144][ T1348] hierarchical_memory_limit 314572800 [ 74.431758][ T1348] hierarchical_memsw_limit 9223372036854771712 [ 74.448825][ T1348] total_cache 312078336 [ 74.463031][ T1348] total_rss 331776 [ 74.468296][ T1348] total_rss_huge 0 [ 74.472868][ T1348] total_shmem 310439936 [ 74.478347][ T1348] total_mapped_file 5910528 [ 74.483686][ T1348] total_dirty 0 [ 74.488154][ T1348] total_writeback 32768 [ 74.493412][ T1348] total_workingset_refault_anon 90 [ 74.500443][ T1348] total_workingset_refault_file 4499 [ 74.506605][ T1348] total_swap 127922176 [ 74.511860][ T1348] total_swapcached 73728 [ 74.516748][ T1348] total_pgpgin 280389 [ 74.521559][ T1348] total_pgpgout 204588 [ 74.526418][ T1348] total_pgfault 91162 [ 74.787274][ T1348] total_pgmajfault 170 [ 74.799033][ T1348] total_inactive_anon 16285696 [ 74.817990][ T1348] total_active_anon 294121472 [ 74.863656][ T1348] total_inactive_file 0 [ 74.924543][ T1348] total_active_file 1638400 [ 74.929603][ T1348] total_unevictable 0 [ 74.940906][ T1348] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.348,pid=1400,uid=0 [ 74.974484][ T1348] Memory cgroup out of memory: OOM victim 1400 (syz.0.348) is already exiting. Skip killing the task [ 75.535303][ T2234] fuse: Unknown parameter 'Ùd' [ 75.540887][ T2234] overlayfs: failed to clone upperpath [ 76.314285][ T2272] incfs: Options parsing error. -22 [ 76.319771][ T2272] incfs: mount failed -22 [ 76.372875][ T2277] /dev/rnullb0: Can't lookup blockdev [ 76.862564][ T2287] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 76.874222][ T2287] tipc: Enabling of bearer rejected, failed to enable media [ 77.179912][ T2291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 77.536884][ T2298] netlink: 104 bytes leftover after parsing attributes in process `syz.3.673'. [ 77.714341][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 77.714361][ T36] audit: type=1326 audit(1751858753.742:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2323 comm="syz.2.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1767b8e929 code=0x0 [ 77.924719][ T36] audit: type=1400 audit(1751858753.962:346): avc: denied { shutdown } for pid=2328 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.516266][ T36] audit: type=1400 audit(1751858754.552:347): avc: denied { audit_read } for pid=2347 comm="syz.1.689" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.561563][ T36] audit: type=1400 audit(1751858754.592:348): avc: denied { search } for pid=2353 comm="syz.1.690" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.584249][ T36] audit: type=1400 audit(1751858754.592:349): avc: denied { write } for pid=2353 comm="syz.1.690" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.606913][ T36] audit: type=1400 audit(1751858754.592:350): avc: denied { add_name } for pid=2353 comm="syz.1.690" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 78.607159][ T36] audit: type=1400 audit(1751858754.592:351): avc: denied { create } for pid=2353 comm="syz.1.690" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 78.779393][ T2386] overlayfs: failed to clone upperpath [ 79.466803][ T36] audit: type=1400 audit(1751858755.502:352): avc: denied { create } for pid=2407 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.733611][ T2423] 9pnet_fd: Insufficient options for proto=fd [ 80.412159][ T36] audit: type=1400 audit(1751858756.442:353): avc: denied { mounton } for pid=2425 comm="syz.2.715" path="/" dev="ramfs" ino=12329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 80.537778][ T2431] overlayfs: conflicting options: userxattr,metacopy=on [ 80.545747][ T36] audit: type=1400 audit(1751858756.582:354): avc: denied { write } for pid=2430 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.781827][ T2461] overlayfs: failed to clone upperpath [ 80.788212][ T2461] overlayfs: failed to clone upperpath [ 80.802000][ T2454] can: request_module (can-proto-6) failed. [ 80.825327][ T2466] overlayfs: failed to clone upperpath [ 80.834400][ T2466] overlayfs: failed to clone upperpath [ 80.846757][ T2473] 9pnet: Could not find request transport: unix. [ 80.856834][ T2473] 9pnet_fd: Insufficient options for proto=fd [ 80.944058][ T2502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 81.066839][ T2530] vcan0: MTU too low for tipc bearer [ 81.072595][ T2530] tipc: Enabling of bearer rejected, failed to enable media [ 81.082381][ T2530] netlink: 'syz.3.750': attribute type 29 has an invalid length. [ 81.090415][ T2530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 81.837241][ T2576] netlink: 'syz.3.765': attribute type 12 has an invalid length. [ 81.952161][ T2586] overlay: filesystem on ./bus not supported as upperdir [ 82.221771][ T2589] netlink: 68 bytes leftover after parsing attributes in process `syz.2.770'. [ 82.247074][ T2591] overlayfs: failed to clone upperpath [ 82.806378][ T2612] overlayfs: failed to clone upperpath [ 82.812640][ T2612] overlayfs: failed to clone upperpath [ 82.834147][ T2619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2619 comm=syz.2.781 [ 83.385916][ T2635] overlayfs: failed to clone upperpath [ 83.392107][ T2635] overlayfs: failed to clone upperpath [ 83.497721][ T2642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.790'. [ 84.015663][ T2667] overlayfs: failed to clone upperpath [ 84.401477][ T2711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.814'. [ 84.426286][ T2713] overlayfs: failed to clone upperpath [ 85.007511][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 85.007530][ T36] audit: type=1326 audit(1751858761.042:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2744 comm="syz.2.826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1767b8e929 code=0x0 [ 86.487410][ T2759] fuseblk: Bad value for 'fd' [ 87.491409][ T36] audit: type=1400 audit(1751858763.522:362): avc: denied { bind } for pid=2778 comm="syz.1.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.511019][ T36] audit: type=1400 audit(1751858763.522:363): avc: denied { name_bind } for pid=2778 comm="syz.1.839" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 87.532611][ T36] audit: type=1400 audit(1751858763.522:364): avc: denied { node_bind } for pid=2778 comm="syz.1.839" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 87.605471][ T2802] overlayfs: failed to clone upperpath [ 87.612319][ T2802] overlayfs: failed to clone upperpath [ 87.693459][ T2830] tipc: Started in network mode [ 87.699134][ T2830] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 87.708607][ T2830] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 87.717310][ T2830] tipc: Enabled bearer , priority 10 [ 87.743681][ T36] audit: type=1400 audit(1751858763.772:365): avc: denied { lock } for pid=2844 comm="syz.2.860" path="socket:[12928]" dev="sockfs" ino=12928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.768272][ T36] audit: type=1400 audit(1751858763.792:366): avc: denied { bpf } for pid=2847 comm="syz.3.861" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.749795][ T36] audit: type=1400 audit(1751858764.782:367): avc: denied { map } for pid=2902 comm="syz.3.877" path="socket:[13608]" dev="sockfs" ino=13608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.834599][ T9] tipc: Node number set to 1 [ 88.864808][ T2913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 89.804650][ T2951] fuse: Unknown parameter '' [ 91.162637][ T36] audit: type=1400 audit(1751858767.192:368): avc: denied { mounton } for pid=2983 comm="syz.3.904" path="/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 91.229563][ T36] audit: type=1326 audit(1751858767.262:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.3.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47b438e929 code=0x0 [ 91.276550][ T3019] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 91.276549][ T36] audit: type=1400 audit(1751858767.312:370): avc: denied { relabelfrom } for pid=3018 comm="syz.1.909" name="UNIX-STREAM" dev="sockfs" ino=13045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 91.311667][ T36] audit: type=1400 audit(1751858767.342:371): avc: denied { relabelto } for pid=3018 comm="syz.1.909" name="UNIX-STREAM" dev="sockfs" ino=13045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:chfn_exec_t:s0" [ 91.591551][ T3036] netlink: 92 bytes leftover after parsing attributes in process `syz.1.914'. [ 91.631409][ T3041] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.970383][ T3079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 92.082818][ T3082] 9pnet_fd: Insufficient options for proto=fd [ 92.206038][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.214159][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.222528][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.231475][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.239633][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.247758][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.255852][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.263819][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.272082][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.280519][ T3105] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 92.306729][ T3108] /dev/rnullb0: Can't lookup blockdev [ 92.340879][ T3113] netlink: 80 bytes leftover after parsing attributes in process `syz.3.941'. [ 92.350104][ T3112] netlink: 80 bytes leftover after parsing attributes in process `syz.3.941'. [ 92.647803][ T3125] overlayfs: failed to clone upperpath [ 93.351102][ T36] audit: type=1400 audit(1751858769.382:372): avc: denied { create } for pid=3167 comm="syz.3.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 93.376984][ T36] audit: type=1400 audit(1751858769.412:373): avc: denied { mount } for pid=3171 comm="syz.3.963" name="/" dev="configfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 93.385555][ T3170] overlayfs: failed to clone upperpath [ 93.401259][ T36] audit: type=1400 audit(1751858769.432:374): avc: denied { search } for pid=3171 comm="syz.3.963" name="/" dev="configfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.428302][ T36] audit: type=1400 audit(1751858769.432:375): avc: denied { read } for pid=3171 comm="syz.3.963" name="/" dev="configfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.450701][ T36] audit: type=1400 audit(1751858769.432:376): avc: denied { open } for pid=3171 comm="syz.3.963" path="/" dev="configfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.555751][ T36] audit: type=1400 audit(1751858769.592:377): avc: denied { map } for pid=3194 comm="syz.1.970" path="socket:[13928]" dev="sockfs" ino=13928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.165030][ T46] bridge_slave_1: left allmulticast mode [ 94.170722][ T46] bridge_slave_1: left promiscuous mode [ 94.177117][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.185132][ T46] bridge_slave_0: left allmulticast mode [ 94.190986][ T46] bridge_slave_0: left promiscuous mode [ 94.196826][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.275325][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.283342][ T3201] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.291387][ T3201] bridge_slave_0: entered allmulticast mode [ 94.314960][ T3201] bridge_slave_0: entered promiscuous mode [ 94.322925][ T46] veth1_macvtap: left promiscuous mode [ 94.334224][ T46] veth0_vlan: left promiscuous mode [ 94.398782][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.420521][ T3201] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.432594][ T3201] bridge_slave_1: entered allmulticast mode [ 94.439438][ T3201] bridge_slave_1: entered promiscuous mode [ 94.517401][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.525086][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.532406][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.539525][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.567634][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.584839][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.600583][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.607798][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.618221][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.625449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.687744][ T3201] veth0_vlan: entered promiscuous mode [ 94.704299][ T3201] veth1_macvtap: entered promiscuous mode [ 94.751269][ T3212] overlayfs: failed to clone upperpath [ 95.603020][ T3219] loop2: detected capacity change from 0 to 7 [ 95.615829][ T3219] GUP no longer grows the stack in syz.4.975 (3219): 200000004000-200000008000 (200000002000) [ 95.627516][ T3219] CPU: 1 UID: 0 PID: 3219 Comm: syz.4.975 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 95.627563][ T3219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.627580][ T3219] Call Trace: [ 95.627588][ T3219] [ 95.627599][ T3219] __dump_stack+0x21/0x30 [ 95.627625][ T3219] dump_stack_lvl+0x10c/0x190 [ 95.627645][ T3219] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.627664][ T3219] ? find_vma+0xcd/0x110 [ 95.627684][ T3219] ? _raw_spin_trylock+0xaf/0x130 [ 95.627700][ T3219] ? vma_is_secretmem+0x11/0x50 [ 95.627718][ T3219] dump_stack+0x19/0x20 [ 95.627736][ T3219] __get_user_pages+0x1e34/0x22d0 [ 95.627755][ T3219] ? populate_vma_page_range+0x230/0x230 [ 95.627771][ T3219] get_user_pages_remote+0x392/0xbe0 [ 95.627787][ T3219] ? __cfi_mtree_load+0x10/0x10 [ 95.627808][ T3219] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 95.627830][ T3219] ? __cfi_get_user_pages_remote+0x10/0x10 [ 95.627847][ T3219] __access_remote_vm+0x1e2/0x640 [ 95.627879][ T3219] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 95.627898][ T3219] ? access_remote_vm+0x60/0x60 [ 95.627922][ T3219] ? __kasan_check_write+0x18/0x20 [ 95.627942][ T3219] ? _raw_spin_lock+0x8c/0x120 [ 95.627956][ T3219] ? __cfi__raw_spin_lock+0x10/0x10 [ 95.627971][ T3219] access_remote_vm+0x39/0x60 [ 95.627995][ T3219] proc_pid_cmdline_read+0x4bb/0xbf0 [ 95.628013][ T3219] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 95.628038][ T3219] ? bpf_lsm_file_permission+0xd/0x20 [ 95.628066][ T3219] vfs_readv+0x62b/0xa50 [ 95.628087][ T3219] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 95.628114][ T3219] ? do_readv+0x2d0/0x2d0 [ 95.628156][ T3219] __x64_sys_preadv+0x197/0x2a0 [ 95.628189][ T3219] ? __cfi___x64_sys_preadv+0x10/0x10 [ 95.628220][ T3219] ? switch_fpu_return+0x12/0x20 [ 95.628236][ T3219] x64_sys_call+0x1ee9/0x2ee0 [ 95.628258][ T3219] do_syscall_64+0x58/0xf0 [ 95.628273][ T3219] ? clear_bhb_loop+0x50/0xa0 [ 95.628292][ T3219] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.628311][ T3219] RIP: 0033:0x7f2af358e929 [ 95.628333][ T3219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.628348][ T3219] RSP: 002b:00007f2af4348038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 95.628365][ T3219] RAX: ffffffffffffffda RBX: 00007f2af37b5fa0 RCX: 00007f2af358e929 [ 95.628378][ T3219] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 95.628388][ T3219] RBP: 00007f2af3610b39 R08: 0000000000000200 R09: 0000000000000000 [ 95.628399][ T3219] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 95.628408][ T3219] R13: 0000000000000000 R14: 00007f2af37b5fa0 R15: 00007fff170fcab8 [ 95.628422][ T3219] [ 95.714704][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 95.798765][ T3235] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿßÿÍ7Pbsœôøi.̰a~ÕÑ~ߦ$? ÆFãÛÓÙâ(ÔÏüÔ®²}eŠV¥Âý2«YÌ‹¡) failed with errno=-22 [ 95.878786][ T3243] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿßÿÍ7Pbsœôøi.̰a~ÕÑ~ߦ$? ÆFãÛÓÙâ(ÔÏüÔ®²}eŠV¥Âý2«YÌ‹¡) failed with errno=-22 [ 96.016686][ T3264] netlink: 68 bytes leftover after parsing attributes in process `syz.4.990'. [ 96.026300][ T3264] FAT-fs (rnullb0): bogus number of reserved sectors [ 96.033491][ T3264] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 96.098677][ T3278] netlink: 220 bytes leftover after parsing attributes in process `syz.4.994'. [ 96.194012][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 96.194032][ T36] audit: type=1400 audit(1751858772.222:384): avc: denied { unmount } for pid=3284 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.481640][ T3292] TCP: out of memory -- consider tuning tcp_mem [ 96.488541][ T3292] ------------[ cut here ]------------ [ 96.494392][ T3292] WARNING: CPU: 0 PID: 3292 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 96.504191][ T3292] Modules linked in: [ 96.508168][ T3292] CPU: 0 UID: 0 PID: 3292 Comm: syz.2.1000 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 96.522050][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.533334][ T3292] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 96.539831][ T3292] Code: a3 e8 d3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 c7 e6 c8 fc 0f 0b e9 92 fe ff ff e8 bb e6 c8 fc 0f 0b e9 c4 fe ff ff e8 af e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 96.561887][ T3292] RSP: 0018:ffffc900101c79c8 EFLAGS: 00010293 [ 96.568625][ T3292] RAX: ffffffff84bcbc81 RBX: 0000000080003000 RCX: ffff88811a653900 [ 96.577204][ T3292] RDX: 0000000000000000 RSI: 0000000080003000 RDI: 0000000000000000 [ 96.586118][ T3292] RBP: ffffc900101c7a10 R08: ffff88811c6e8b7f R09: 1ffff110238dd16f [ 96.595557][ T3292] R10: dffffc0000000000 R11: ffffed10238dd170 R12: ffff88811c6e8a00 [ 96.605161][ T3292] R13: ffff88811c6e8a00 R14: ffff88811c6e8b64 R15: 1ffff110238dd142 [ 96.613725][ T3292] FS: 00005555715cc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 96.623465][ T3292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.631005][ T3292] CR2: 000000110c2ea862 CR3: 00000001043c2000 CR4: 00000000003526b0 [ 96.639792][ T3292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.649037][ T3292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.657325][ T3292] Call Trace: [ 96.660820][ T3292] [ 96.663917][ T3292] ? __cfi_inet_sock_destruct+0x10/0x10 [ 96.669656][ T3292] __sk_destruct+0x68/0x6a0 [ 96.674306][ T3292] ? __sk_free+0x304/0x410 [ 96.679103][ T3292] __sk_free+0x313/0x410 [ 96.683521][ T3292] sk_free+0x58/0xb0 [ 96.687603][ T3292] tcp_close+0xc4/0x120 [ 96.692378][ T3292] inet_release+0x1b4/0x2c0 [ 96.697340][ T3292] sock_close+0xda/0x280 [ 96.702084][ T3292] ? __cfi_sock_close+0x10/0x10 [ 96.707178][ T3292] __fput+0x1fe/0xa00 [ 96.711482][ T3292] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 96.717382][ T3292] ____fput+0x20/0x30 [ 96.721586][ T3292] task_work_run+0x1e3/0x250 [ 96.726628][ T3292] ? __cfi_task_work_run+0x10/0x10 [ 96.732232][ T3292] ? __kasan_check_write+0x18/0x20 [ 96.737970][ T3292] ? task_work_add+0x258/0x3f0 [ 96.743224][ T3292] get_signal+0x1307/0x14f0 [ 96.747951][ T3292] ? __kasan_check_write+0x18/0x20 [ 96.753279][ T3292] ? _raw_spin_lock+0x8c/0x120 [ 96.758569][ T3292] ? __cfi__raw_spin_lock+0x10/0x10 [ 96.764415][ T3292] ? fput+0x1ac/0x240 [ 96.768669][ T3292] arch_do_signal_or_restart+0x96/0x720 [ 96.774776][ T3292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 96.781535][ T3292] ? __kasan_check_read+0x15/0x20 [ 96.787802][ T3292] syscall_exit_to_user_mode+0x58/0xb0 [ 96.793772][ T3292] do_syscall_64+0x64/0xf0 [ 96.798493][ T3292] ? clear_bhb_loop+0x50/0xa0 [ 96.803301][ T3292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.809467][ T3292] RIP: 0033:0x7f1767b8e929 [ 96.813917][ T3292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.834395][ T3292] RSP: 002b:00007ffd9569b8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 96.842952][ T3292] RAX: 0000000000000000 RBX: 0000000000017846 RCX: 00007f1767b8e929 [ 96.851521][ T3292] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 96.859923][ T3292] RBP: 00007f1767db7ba0 R08: 0000000000000001 R09: 0000001c9569bbcf [ 96.868231][ T3292] R10: 00007f1767a00000 R11: 0000000000000246 R12: 00007f1767db5fac [ 96.876307][ T3292] R13: 00007f1767db5fa0 R14: ffffffffffffffff R15: 00007ffd9569b9f0 [ 96.884427][ T3292] [ 96.887606][ T3292] ---[ end trace 0000000000000000 ]---