last executing test programs: 1m13.29613723s ago: executing program 0 (id=195): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000040)={'system_u:object_r:adjtime_t:s0', 0x20, 'system_u:object_r:xen_device_t:s0', 0x20, 0x200, 0x20, '/sbin/dhclient\x00'}, 0x65) socket$packet(0x11, 0x3, 0x300) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r2, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)}}], 0x2, 0x4000011) close_range(r0, 0xffffffffffffffff, 0x400000000000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') timerfd_create(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 1m13.150234812s ago: executing program 0 (id=197): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x44000}, 0x4000) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/84, 0x54}], 0x1}, 0xa2) 1m12.290494185s ago: executing program 0 (id=214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8000, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 32) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x12022, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x0, @local}}) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0x648b}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = socket(0x11, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (rerun: 32) 1m12.254903356s ago: executing program 0 (id=215): r0 = socket(0x8, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1100, 0x8d) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x808d000, 0x10000}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001790000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc0200000000000000000000000000010000000032000000000000007f0000010000000000000000000000000335000003000000000000000000000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000100000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000010800000000000000000000040000fc000000000000000000000000000001000000003300000000000000ff02000000000000000000000000000100000000010200000100"/500], 0x23c}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008e0}, 0xc0) 1m11.296106781s ago: executing program 0 (id=225): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) chroot(&(0x7f0000000480)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000040)='./file0\x00', 0x28002, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SET_GS(0x1e, r2, 0xfffffffffffffffc, 0x1001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f0000000340), 0x1124004, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 1m11.200419102s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1010, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 56.094886915s ago: executing program 32 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1010, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x8, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 1.33395117s ago: executing program 1 (id=759): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = inotify_init1(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x7, 0x0) poll(0x0, 0x0, 0x3) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0xf07) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000080, 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x4000000e) r3 = syz_clone3(&(0x7f0000000380)={0x200080080, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240), {0x17}, &(0x7f0000000280)=""/153, 0x99, &(0x7f0000002440)=""/216, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r4 = syz_open_procfs(r3, &(0x7f0000002540)='net/ip_mr_vif\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000706000/0x2000)=nil, 0x2000, 0x8c7313367f817d6) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000001000)='\x00\x00\xff\x0f\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00n\xd5_\xeb\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9\xf8\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x17\x98\x93\x0e\x03\xd6\xf6\xa3\xe5\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,\xa8TM\xa5\xc8\xc6\xf1\xba\xe0\x95~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99\x00.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81Il\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff\x00)\xec\xbe\xf4h1\x1a\xf2\xc9>\x06\x91r4Z\x94\xa3uV\xb9\x1e(\x87.\xacDu\x99\xd4\xc4\x8e\xdb\x1a\xa7\b\xc3\x10T\xda\xff\xfd\xc2\xb2\x99\xb4\x05\xd1\x8c\b\xbf\x9ap\xb3(\xfa\xff\f\xd0\xd4\xb3\xa6\x01\xdbc\xa1\xc0\xab\xb9\xf3\x0fw\xf9\x8e\xd6\x8dR\xd7\x92\xe7\x04\xa4\x89\xc1\x9b\t=\xf9yI7P8\xf5\x16#\xc2\xe2l\xcc\x99\xa3\x17aj\xa9\xb4\xb6\xf4\x8d\x80\x99\x98\xd6W^\xa0\xddy;!8\xdc\x85W\xfe@\xbf|j\x01\x9c?u.G\xce\x00> \xad\xe3\xd2\xd0IL`\x87\xcb\xd2\xef^N\xf0\x98\xaf\x98\xe6t') setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe535, 0x4) 1.31355695s ago: executing program 1 (id=760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x1) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) accept4(r2, 0x0, 0x0, 0x0) (async) accept4(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x2, [{0x5, 0x2}, {0x1, 0x2}]}]}}}], 0x20}}], 0x1, 0x4) (async) sendmmsg$inet(r4, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x2, [{0x5, 0x2}, {0x1, 0x2}]}]}}}], 0x20}}], 0x1, 0x4) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) userfaultfd(0x80801) 1.200007962s ago: executing program 1 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8045) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000080)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair(0xa, 0x80000, 0xffffffff, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup3(r2, r4, 0x80000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000044000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f787900001400028008000340000000150800004000000001140000001100010000000000000000000000000a"], 0xb8}}, 0x4008800) ptrace$setregs(0xd, r7, 0x100, &(0x7f0000000240)="7b6ddd951ce4eef691063a401d46950323b282b366840621dd0feb4a3a49913e913767c07fa1627a39fab8cfc1cfd7c48cf6187a56d6c1425120a9e886025d2e3c94e22aeeb81136b97e9c326addb7a9a01ea1ae659247b4bfc52a85ddf68ad50151d631405a6f8d10ad7222acd04dff6cdb537ad1046f822def639e66d0f52815f5c7cb5f3bde9adff0804f0835919e4fadbf4400849be49e48a5be144a1aef0b") r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKROSET(r8, 0x125d, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffff9, 0x0, 0x2, 0x0, "00629a7d82000000000000000000f7ffffff00"}) ioctl$TIOCGPTPEER(r9, 0x5441, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f0000000000)=0x7fffffff) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)=0x3c) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8844) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, 0x0, 0x44) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.197746722s ago: executing program 1 (id=762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0xd, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, 0x0, 0x48000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) listxattr(&(0x7f00000001c0)='.\x00', &(0x7f0000000ac0)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="0000d14b", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000100002800c000180080001000300000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='Jcpu'], 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) fchmod(r9, 0x80) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 609.234931ms ago: executing program 4 (id=765): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x50, r0, 0x2000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x8, 0x8, 0x0, 0x6438}, 'syz0\x00', 0x41}) 608.810741ms ago: executing program 4 (id=766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902"], 0x0) (async) r2 = dup2(r1, r1) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000001}]}, 0x20}}, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:usbtty_device_t:s0\x00', 0x25) (async) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair(0xf, 0x800, 0xfffffe01, &(0x7f0000000140)) (async) dup(r0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'ip6gretap0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 608.188441ms ago: executing program 3 (id=767): creat(0x0, 0x0) syslog(0x6b768c7b, 0x0, 0xfffffffffffffee8) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x181c80, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x3d) inotify_add_watch(r1, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14000822) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000480)={0x0, 0x1, 0x1f, 0x3, 0x116, &(0x7f0000000080)="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"}) lseek(r2, 0x10001, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000000)) 536.532922ms ago: executing program 3 (id=768): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x107) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffc0e2ff0010000008003952323030302e75"], 0x15) (async, rerun: 32) r3 = dup(r2) (rerun: 32) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) unshare(0x6000900) (async, rerun: 64) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYBLOB="294f1c44619bce5c0f6dd84b6ea8fe99677a6b1b079c9ade2c216fb48d2cda625a06603ae18205e3cd85cbc15eb6253607d2fe77c4b1df1170a8bd82a0c56b14a3af4fc022af84fc33e32ed683fdd933fbe7499a9b2dc837e00f39bd19cd8b299ab1ec042ec3647935c7e14c3675d850e389"]) (async) stat(&(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (rerun: 64) bind$can_raw(r4, &(0x7f0000000040), 0x10) (async) bind$can_raw(r4, &(0x7f0000000380)={0x1d, r8}, 0x10) (async, rerun: 32) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 32) read$FUSE(r9, &(0x7f00000029c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f00000000c0)={0x18, 0x0, r10, {0x2}}, 0x18) 535.692432ms ago: executing program 3 (id=769): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2) read(r0, 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000000000008000f4"], 0x20}}, 0x0) (async) r2 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r2, 0x20}, {r2, 0x42a0}], 0x2, &(0x7f0000000280), 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000006c0)={r3, 0x3, 0x1, [0x0, 0x3, 0x7, 0x3, 0x3], [0x3, 0xf, 0x3, 0x8000, 0x3, 0x5, 0x8, 0x8, 0x3, 0xd2, 0xdc27, 0x7ff, 0x1, 0xe4, 0x5, 0xffffffffffffffff, 0x1, 0x7f, 0x9, 0x5, 0x9, 0x0, 0x3, 0xe000000000, 0x3, 0x6, 0x4, 0x0, 0x8, 0xffff, 0x7, 0x6, 0x3, 0x6, 0x200, 0x2, 0x3, 0xfffffffffffffff8, 0x31, 0xffffffff7fffffff, 0x3, 0xffffffffffffffff, 0x100, 0x5, 0x8001, 0x8, 0x1, 0xfffffffffffffff8, 0xffff, 0xfffffffeffffffff, 0x1ff, 0x932, 0x2b4, 0x1, 0x100, 0x0, 0x8, 0x4, 0xa, 0x1, 0x21, 0xfffffffeffffffff, 0x0, 0x9, 0x1, 0x5, 0x8, 0x0, 0x8001, 0x7, 0x2f, 0x1, 0x80000001, 0x8, 0x7, 0x1, 0xf, 0xfffffffffffffff1, 0x7, 0x3, 0x7, 0x3, 0x1, 0xfffffffffffffffc, 0x7, 0x7, 0x8001, 0x5, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x5, 0x2, 0x8, 0x800, 0x80000001, 0x1, 0xfff, 0x400, 0x1, 0x0, 0x5f0eaa2e, 0x6, 0x5, 0xff, 0x7, 0x2, 0x4, 0xb063, 0x1106f55f, 0xae, 0xeef8b65, 0x9, 0x80, 0x80000001, 0x7, 0x57f6, 0x3a, 0x1, 0x6]}) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) r5 = accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000240)=0x6e) close_range(r4, r5, 0x0) 528.955832ms ago: executing program 4 (id=770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x400901, 0x110) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000300), 0x300048, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0500000000000000673d2e2f62696e64657266732f62696e64657231f4585e5976616368652c75221bde16a32269643d31adee0eed783e", @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d6f2c646f6e745f686173682c7375626a5f726f6c653d5d2c2e5f2b2d875c2c736d61636b6673726f6f743d2f6465762f6e756c6c002c7063723d30303030303030303030303030303030303031362c00"]) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000140)=""/18, &(0x7f0000000180)=0x12) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)=@arm64={0x9, 0x6, 0x3, '\x00', 0x1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) ptrace(0x8, r7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4041, 0x0) open_tree(r9, &(0x7f00000001c0)='./file0\x00', 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000240)={0x1f, 0x2, 0x2}, 0x6) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd, @fd, @fda={0x66646185, 0xa, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 490.889642ms ago: executing program 3 (id=771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000001800000000000000090000000000000002000000000000001800000000000000f49400000000002001000000000000005b000000000000002e0fc758412666410f3882ba0a000000650f00dc66b846000f00d80fe09605000000f2410f38f039672e650fc7b9000000008f8808efaa009000000eb9c10a00000f3266ba4200b000eec301000000000000005f000000000000000f01c566baf80cb8d8023a87ef66bafc0c66b8ebff66ef66ba6100ecb8010000000f01d966ba400066b800a066ef460f01736e66baf80cb830534a87ef66bafc0cedc4c3ad5dd00041f4420f229fc300000000000000001800000000000000000000a000000000010000000000000084000000000000000f017900440f20c0350c000000440f22c0470f01c266baf80cb87f599380ef66bafc0cec66baf80cb89a607286ef66bafc0c66b8608c66ef67440f01c365260f01cbc744240000300000c744240200000000c7442406000000000f011424460f01cab998010000b800000100ba000000000f30c302000000000000001800000000000000040000000900000000000000000000001800000000000000060000000000000001000000000000008b0000000000000048b800700000000000000f23c80f21f835000020000f23f866ba4300b807f50000ef26460f79fd3e64640f942fb90c030000b80b000000ba000000000f3048b88409508b6281a9300f23c00f21f835020000000f23f80f20c035000000200f22c066baa00066edc401d012a3490900002e263626660f3ace1f09c300000000000000001800000000000000000800000000000001000000000000005200000000000000775cc48189e335030000000fc7b424c2000000b8010000000f01d90f3267460f01cf67362626450fa066baf80cb8bbcb458def66bafc0cec660f73df00440f01c3c301000000000000004a0000000000000066b83b010f00d0b9ff0200000f3266ba4100b0b5ee0f186148460f01cbf365f466ba4300b8de2e0000efc4c1b9d81967f3410f1efdf30faec6c300000000000000001800000000000000ffffffff0000000001000000000000009700000000000000c7442400ef063f28c74424028a9f0000c7442406000000000f011c24c4e1d2c254530a0cc7442400f8000000c7442402325d0000c7442406000000000f011c24b9800000c00f3235000800000f30c4c1116ac066440f009a8000c0fe66baf80cb820484183ef66bafc0ced66baf80cb811581e87ef66bafc0cbf07eef2440f2c6a006747ded9c300000000000000001800000000000000010400000000000002000000000000001800000000000000070000009901000000000000000000001800000000000000020000000000000001000000000000006d00000000000000460f0766b872000f00d867420fc75ce4000f01b700980000b9cd020000b80f000000ba000000000f300f06b9371001c0b80d000000ba000000000f30660fc2f5bd66baf80cb83edaff84ef66bafc0c66b8040066efb9fd0800000f32c3020000000000000018000000000000000200000009000000020000000000000018000000000000000e000000fb00000002000000000000001800000000000000060000000900000001000000000000006600000000000000420f2372b9800000c00f3235000400000f30450f320f3248b800880000000000000f23d00f21f835300000050f23f8b805000000b9686f00000f01c166baa100b830570000ef66b84f008ed8d8e8c4e3f9621c9b00c301000000000000006d0000000000000048b8d37a0000000000000f23c00f21f835020008000f23f8410f011c3e66baf80cb8b078e888ef66bafc0ced48b89e700000000000000f23d80f21f835c00000f00f23f8360f303e64670f01c80f01d10f23e00fe567ad660fc77303c3000000000000000018000000000000000700000000000000020000000000000018000000000000003ccd00000200000001000000000000006700000000000000670f4d3d0c000000450f01c9f0101bb8010000000f01d9b9800000c00f3235004000000f30650fc7a83710086248b800200000000000000f23d80f21f835800000c00f23f8b8010000000f01c1470f23e1f3430fc737c301000000000000004f000000000000009966b818010f00d0eef00fb12a0fc731440f20c03503000000440f22c0b9800000c00f3235004000000f300f20d835200000000f22d80f01d9c4029d38ecc3020000000000000018000000000000007d0f0000ffffffff"], 0x672}) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000003600)=[{{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000001040)=[{&(0x7f0000000bc0)=""/86, 0x56}, {&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/180, 0xb4}, {&(0x7f0000000dc0)=""/76, 0x4c}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000e40)=""/213, 0xd5}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/238, 0xee}], 0x8, &(0x7f00000010c0)=""/27, 0x1b}, 0x9}, {{&(0x7f0000002180)=@can, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002200)=""/164, 0xa4}, {&(0x7f0000001100)=""/43, 0x2b}], 0x2, &(0x7f0000002300)=""/153, 0x99}, 0x401}, {{&(0x7f00000023c0)=@ax25={{0x3, @netrom}, [@rose, @default, @null, @remote, @netrom, @rose, @default, @netrom]}, 0x80, &(0x7f0000002440), 0x0, &(0x7f0000002480)=""/11, 0xb}, 0xfffffff9}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1, &(0x7f0000003580)=""/75, 0x4b}, 0xa962}], 0x4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0x6, 0x0, [{0x371, 0x0, 0x7e}, {0x84e, 0x0, 0xe1c9}, {0x350, 0x0, 0x9445}, {0xbfa, 0x0, 0xa0}, {0x2d3, 0x0, 0x3}, {0x4b5646d6, 0x0, 0x7}]}) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0xc000, 0x79) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, &(0x7f0000000140)="66baf80cef66bafc0cb080ee660f3a20731199b8030000000f23d80f21f835c00000a00f23f866baf80cb82fd2928cef66bafc0cec8fc9c801b30d00000066b85f008ed00f300fc7af00706baf7e6f", 0x4f}], 0x1, 0x42, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(r5, 0x10001, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000003740)={0x4, {{0xa, 0x4e22, 0x101, @loopback, 0xb}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x8, @local, 0x6}}, {{0xa, 0x4e24, 0x6, @mcast2, 0x9}}]}, 0x190) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffff5f, 0x0}) (async, rerun: 64) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000028c0)={'ip6_vti0\x00', &(0x7f0000002840)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0xfb, 0x10001, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8700, 0x8, 0xff, 0x2}}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x90, {0x10, 0x3, 0x4}, 0x90, 0xee00, r8, 0x7fff, 0x0, 0x4, 0xee, 0xfffffffffffff48b, 0x800, 0x7, 0x4, 0x2, 0x9f14, 0x0, 0xd30, 0x3, 0x7, 0xd94}}, 0xa0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xff}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x10) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) (async) syz_usb_control_io(r10, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000080)={0x40, 0x18, 0xcb, "4b9be3a346913ebaace0939702a7da8caf3ff457ed8b0e50c126e666a72f3c8b117a74af3df3740dee39986b3d43ce604e6a1d84fe9d21baf1b7866cb1f42421e51e98f65facf399e47cab37971a778fe5571a652272852b25b7d04c6d79f4f220a90f5db2c51f91d7433ef457a733caa410191dece5d98717f632c414972e5b87e47955a8ad17c22cd5323dd1afde96d75fcf3090486224ae7069441744a8579c635d2f5001602b2a7bc55a97c596f813792ae2ae18919f810a920a1c5a96d432edbbb1fd62cd0b4180b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_usb_control_io$uac1(r10, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r6, 0x99b33000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000003900)=""/4096) 376.110624ms ago: executing program 4 (id=772): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet(0x2, 0x80000, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x101}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) socket$inet(0x2, 0x80000, 0x8) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x200, 0x4) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x101}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) 375.621044ms ago: executing program 4 (id=773): mkdir(0x0, 0x9) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'wfdno'}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 374.841944ms ago: executing program 1 (id=774): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1004, @none, 0x3}, 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'dummy0\x00', {0x4}, 0x5509}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 341.307015ms ago: executing program 4 (id=775): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x67, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e43"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 323.933915ms ago: executing program 3 (id=776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001240)=@newae={0x40, 0x1e, 0xb09, 0x70bd2d, 0x25dfdbfc, {{@in=@remote, 0x4d3, 0x2, 0x32}, @in=@broadcast, 0x6, 0x3508}}, 0x40}, 0x1, 0x0, 0x0, 0x4000015}, 0x28000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r6 = eventfd(0x6) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r6, 0x0, 0x0, 0x2a}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r8, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) ioctl$sock_SIOCGIFBR(r7, 0x8940, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r1, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 259.074856ms ago: executing program 1 (id=778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e1d, @empty}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = syz_open_dev$usbmon(&(0x7f0000002140), 0x8, 0x40040) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000002180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000100)=0x1, 0x4) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000001c0)={0x7, 0x5}, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) getgid() 258.144266ms ago: executing program 3 (id=779): r0 = socket$netlink(0x10, 0x3, 0x7) r1 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x800) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='geneve0\x00') r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000000c0)='dummy0\x00') ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='veth1_to_team\x00') flock(r3, 0x2) r4 = syz_usb_connect$cdc_ncm(0x5, 0xad, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xaeec29fb9b266eb7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x1, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "97ebc4b564a1"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x26, 0x3, 0xc}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @obex={0x5, 0x24, 0x15, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x98}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0xfffb}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xae, 0xa4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x9, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x1, 0x9, 0x2, 0xf7, 0x81}, 0x12, &(0x7f00000002c0)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x5, 0x3, 0x1}]}, 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1404}}, {0xc2, &(0x7f0000000380)=@string={0xc2, 0x3, "7b701bcb95c1047c5457c8aacbc3733eac52221c15e38303a10ae3f425bbd1c916fc9d8931cfe57cefab8d45ae35f20039fc33062c67587260f7be8ef932c46b0c738236e4d110ade76b5138c2520c2d7da08efd159388c9e0bc68d453ed14453d2791415a68ef9e4284b5f2165bbb19d368611e6c1103f2c0fa900fc75f7539551ba53ea228ddc15d2ff294d1da7d69414152de7ef736e4d9d67d7d1306629b2c66dbdc084418f04afae6a24ac90e866df0af47892c0ec46a03306192f98a8c"}}, {0xcf, &(0x7f0000000480)=@string={0xcf, 0x3, "4560b3e4930274e17cf026432d6d14560c80929d95db01f9eb78a50391da869604e8cde448eaf92ec34e04956f4272f73837ba143067eae7f45e738cc0777c5bbd38687b44ca638a1e8fa4e1fce90c0daf9e09b106a42543dd51ba0d4b434fc04877d97941ab4960b87345f66f5673ff4292cb5a83aadd4d108d1c2c1dcb121845ff0aa1701b8eaa53ae976597df94b0ffaeaa01e212dadf1d5bfca7082c82a6b428b9ea51e789a7d02e6a930fc6f3d2be2e3a5102fb9e86ae1c9f094dfb025ee3b20cb37b34fd8db468418d4e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io(r4, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x0, 0x8, 0xb6, {0xb6, 0x12, "6450f85871adccbd1e9f3c62134aa801daab499622b946ecc404fd36d1dbf4cc70ecbe419d3315b1a2390a96fcd71c9f43c60c6fa2361a50d6c05e6c5b3f8267cedee79fe1d6399593396ac5e09839fb861334ea19e88b3244fe2074dea24cb4d49c8d43c2a84d55703c9019249dfee90ce3f673a12432f7e78fcc93be5c2cc28cb4dda7eacf9119d956b86b6879fda1bd205fd831da47d82d515cbdca457eef3594c2722e50ab92d18eeb13d6b2aa2a72042bff"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f0000000780)={0x0, 0xf, 0x79, {0x5, 0xf, 0x79, 0x4, [@generic={0x53, 0x10, 0x0, "2c5af535dbae62a1f8808fad4f25a2a4aa2afd8f414cbca01dd80581022fc63c246daa39c2f6bf78d44e01d1acec69ca21ff056c1c1a9273940d037bd5af8cf31f1b3883e9659d3506b71b7c2106cf54"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x3, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x9, 0x880f, 0x1, [0xff3ff0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xc, 0x8, 0x4}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x7, 0x0, "deeb28ad", "d878348f"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x8, 0x40, 0x94, 0xd412, 0x3}}}, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x0, 0x9, 0x41, "22a79868d703ac91b86dfe2dd4dadc52dad9cd3aa4189a472ed1dd958839e415a456de6b2d9582ac9b14cc0312df4c3a758f1a9d3a85218ad846de7102c12bb994"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "80da"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "a86f"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0xe}}) r5 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xc9e) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000e00)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @loopback}, 0x90, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000dc0)='ipvlan0\x00', 0x2, 0xffffffffffffffff, 0x9}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000e80)='ip6gretap0\x00') futex(&(0x7f0000000ec0)=0x2, 0x5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)=0x1, 0x2) r6 = syz_usb_connect$cdc_ecm(0x4, 0x9f, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x1, 0x1, 0xdd, 0xa0, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x39, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x2, 0x9}, [@mdlm_detail={0x2f, 0x24, 0x13, 0x7, "a3980c7bbbab214282475f7c57d5627c9dbd2def3aaf1c42744ba69c04cb4a3e6db17c5b534276984b2e3a"}, @mbim={0xc, 0x24, 0x1b, 0x8000, 0xe72, 0x7, 0x9, 0x5, 0xf9}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x78, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x0, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0xe4, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0xf, 0x1b}}}}}]}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x0, 0x9, 0xfe, 0x3, 0x20, 0xb}, 0xc, &(0x7f0000001080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0xa, 0x4}]}, 0x8, [{0xd4, &(0x7f00000010c0)=@string={0xd4, 0x3, "f1759b5374d50b0758126bba767bbb169716cc475854e5b89c1dd838c32a25b949eb9eb8100dec46b0e53786aba6f7ee02804a9190ce36c076136a303ea74354ac114c871d5c81c14bc33955fde91fa3f9c90e72743822ccb7ec5a176fb7190485cecf0aa3dc240cea3f2d91e3c7782b83f364577f0f0404baa4b1d6ac77e10ea8ef67d3b25cacbd4f4ff65a4bcd581166facd7b92f2a2c3a7b04a528b45351f519cd19441c03d134ad99637e451bfa60c860c049fbca9fe6163a76f495fbf4e8d1a72933f3ec7373d6a2d591a1712b0406a"}}, {0x3, &(0x7f00000011c0)=@string={0x3, 0x3, "f3"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x424}}, {0xa9, &(0x7f0000001280)=@string={0xa9, 0x3, "da52d85908f4321caf73664940edbbb9c088d2e01ed4d2a6a190deef547321672ad149e728d847febdc528cd6104f6e0fd2fcdd58d03f09aab1e3d8f5e82ba64e93d6ec698b860234f6678bacdeb9302ebd54abbf55fd6b3b9952d0ae4e4ec75ba5342ba98e87e402bd68e376a7e587ca6a6444cd1300e1fdc06872242687f4f20076b582a8ff323ea73c425c75016692033f96f67ddeabed2012847c567affd1b14cf4ff91262"}}, {0x1c, &(0x7f0000001340)=@string={0x1c, 0x3, "84413a960d0929d276caa8a03810619b87b5d202c93c4cfe6451"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x300a}}, {0x94, &(0x7f00000013c0)=@string={0x94, 0x3, "a85b05c5d5d15de89491ba79cade60b5ee8b0fd276786799112d949ebac281ffd550609d696b872200372eb292ec2d2bfb34710acd2b3e7fbcf9ab2b01e07f1a13ef2ba430f9b836631e13311126462d19d031271faf12a744399f58357a59d1c08b5d4e2ffefa55e6bd7165d76540f43ae9d65d8b3d357a6274a7b59d9b5a00c675bc203e921cc423c7a465dbafd1f64167"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x0, 0x23, 0xd3, {0xd3, 0xf, "5f703f920370c21ac804d2bdf32e87adff57b88ca78adaf39d9eee8ac0d334d9a4883062531d48a4bdafc47f60245666e3dfa6ed8891b5c004a89257f87d33db8be2ba295109975b7734d1c857f28ecb7496b01fa58958b35b649627473bec0904eabf681d8f8b3c1b9baf44ba848011b015feeecb5c09e6fcbd42b734fe8f148d1b293e45890ea347a92955b132fc1dedb962e16dce8f3f198cbaa8beeed635b27e76910a022fca7d9db2145bd32c3fef0990f01ab4deb93d98334bcdd57a3089835682f1a4f9ede64fedec10fe53948b"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x20, 0x13, 0x1a, "ae928d17487e0728bddbce03c8d8a1c8957946864fe0d33a0aae"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x6}}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000001780)) r7 = pidfd_getfd(r1, r1, 0x0) read$FUSE(r7, &(0x7f00000017c0)={0x2020}, 0x2020) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000003800)={'veth1_macvtap\x00', {0x2, 0x4e24, @empty}}) r9 = fcntl$getown(r0, 0x9) ptrace(0x4208, r9) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000003840)) flock(r2, 0x6) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000038c0), 0x141200) ioctl$SNDRV_TIMER_IOCTL_STOP(r10, 0x54a1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000003b00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003940)={0x154, 0x0, 0x516, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2400c011}, 0x8840) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003b40)={@mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x6, 0x7, 0x100, 0xffff, 0x81040004}) 67.750559ms ago: executing program 2 (id=781): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000218ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x24004050) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) setresuid(0x0, 0xee01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000680)=0xfeab) fchown(r2, r4, 0xee01) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17B\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0X\x02\x00\x00\x00\x00\x00\x00\x00\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01\a\x00\x00\x00\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 8.22731ms ago: executing program 2 (id=782): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x10c3}, {&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f0000000000)=""/258, 0x102}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x66}], 0x7, 0x2100, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0) (async) r4 = fsmount(r2, 0x0, 0x86) fchdir(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1, 0x1, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 4.99666ms ago: executing program 2 (id=783): mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000080)='nsfs\x00', 0x200000, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', 0x0) 4.69684ms ago: executing program 2 (id=784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000140)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x275a, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x7, 0x0, 0x4, 0x86cc, 0x81, 0xf4, 0x4, 0x4, 0xc0, 0x14, 0x2, 0xa5, 0xa, 0x6, 0x5, 0xcc, [0xf6000000, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x2000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000000ff"], 0x48}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x10000000, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xaa, 0x0, &(0x7f0000000580)="3a3aba5c27897742d6bb72e916504f1891d78ae43b28d4d22664b358b931bd5a5cbbf33659fbdd1c2cdef37dd23ada1940cde6a60300000000000000378ed5a5f6e43bd0610777d605dbfe1088a86dd03fd4b8cbb53a1634e0aca214e747083efc4f419f8af58b8f42cc270fed8b9d11acf5936b7950c447a1ef5aec02a6f880d72391df71d27e856f07d7780e21488ac16fdd70042e607fafe5dc7bf3527300"/170}) 4.11865ms ago: executing program 2 (id=785): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0xbf86e000) 0s ago: executing program 2 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = timerfd_create(0x0, 0x800) timerfd_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) (async) read(r3, &(0x7f0000000000)=""/162, 0xa2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x40106726, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x9) fchdir(r8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227ff00001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) fcntl$addseals(r7, 0x409, 0x1a) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): /0x3810 [ 94.662275][ T1872] ? __cfi_elf_core_dump+0x10/0x10 [ 94.662316][ T1872] ? dump_interrupted+0xf0/0xf0 [ 94.662342][ T1872] ? filp_open+0x182/0x1d0 [ 94.662381][ T1872] ? 0xffffffffff600000 [ 94.662398][ T1872] do_coredump+0x1bf7/0x2bd0 [ 94.662429][ T1872] ? __cfi_do_coredump+0x10/0x10 [ 94.662456][ T1872] ? asm_exc_general_protection+0x2b/0x30 [ 94.662490][ T1872] ? __kasan_slab_free+0x6a/0x80 [ 94.662530][ T1872] ? kmem_cache_free+0x1c1/0x4c0 [ 94.662560][ T1872] get_signal+0x11fd/0x14f0 [ 94.662589][ T1872] arch_do_signal_or_restart+0x96/0x720 [ 94.662620][ T1872] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 94.662653][ T1872] ? fixup_iopl_exception+0xdd/0x2e0 [ 94.662686][ T1872] irqentry_exit_to_user_mode+0x4e/0xb0 [ 94.662718][ T1872] irqentry_exit+0x16/0x60 [ 94.662747][ T1872] exc_general_protection+0x15a/0x1f0 [ 94.662771][ T1872] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 94.662799][ T1872] asm_exc_general_protection+0x2b/0x30 [ 94.662824][ T1872] RIP: 0033:0x7f927778e931 [ 94.662856][ T1872] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 94.662877][ T1872] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 94.662899][ T1872] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 94.662928][ T1872] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 94.662944][ T1872] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 94.662961][ T1872] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 94.662977][ T1872] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 94.662996][ T1872] [ 94.666294][ T1872] memory: usage 304520kB, limit 307200kB, failcnt 47172 [ 95.147080][ T31] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 95.154066][ T1872] memory+swap: usage 431944kB, limit 9007199254740988kB, failcnt 0 [ 95.176968][ T1872] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.187865][ T1872] Memory cgroup stats for /syz3: [ 95.188035][ T1872] cache 314339328 [ 95.196657][ T36] audit: type=1400 audit(7004407749.415:378): avc: denied { setattr } for pid=2505 comm="syz.4.590" name="NETLINK" dev="sockfs" ino=18231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.220439][ T1872] rss 229376 [ 95.223667][ T1872] rss_huge 0 [ 95.228649][ T1872] shmem 314335232 [ 95.232331][ T1872] mapped_file 0 [ 95.235815][ T1872] dirty 0 [ 95.238842][ T1872] writeback 0 [ 95.239892][ T36] audit: type=1400 audit(7004407749.415:379): avc: denied { bind } for pid=2507 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.242140][ T1872] workingset_refault_anon 20 [ 95.242151][ T1872] workingset_refault_file 18267 [ 95.242161][ T1872] swap 127737856 [ 95.242169][ T1872] swapcached 20480 [ 95.278533][ T1872] pgpgin 288601 [ 95.282033][ T1872] pgpgout 212312 [ 95.285593][ T1872] pgfault 51630 [ 95.289143][ T1872] pgmajfault 443 [ 95.292717][ T1872] inactive_anon 200294400 [ 95.297132][ T1872] active_anon 114274304 [ 95.301438][ T1872] inactive_file 0 [ 95.305166][ T1872] active_file 4096 [ 95.309011][ T1872] unevictable 0 [ 95.312483][ T1872] hierarchical_memory_limit 314572800 [ 95.317958][ T1872] hierarchical_memsw_limit 9223372036854771712 [ 95.324223][ T1872] total_cache 314339328 [ 95.328533][ T1872] total_rss 229376 [ 95.332267][ T1872] total_rss_huge 0 [ 95.335997][ T1872] total_shmem 314335232 [ 95.340520][ T1872] total_mapped_file 0 [ 95.344571][ T1872] total_dirty 0 [ 95.348198][ T1872] total_writeback 0 [ 95.349241][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 95.352091][ T1872] total_workingset_refault_anon 20 [ 95.360843][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.365109][ T1872] total_workingset_refault_file 18267 [ 95.375075][ T31] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 95.379127][ T1872] total_swap 127737856 [ 95.389658][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.393393][ T1872] total_swapcached 20480 [ 95.404125][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.406700][ T1872] total_pgpgin 288601 [ 95.416030][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.420025][ T1872] total_pgpgout 212312 [ 95.427990][ T31] usb 4-1: Product: ї [ 95.431805][ T1872] total_pgfault 51630 [ 95.435825][ T31] usb 4-1: Manufacturer: Ј [ 95.439920][ T1872] total_pgmajfault 443 [ 95.445017][ T31] usb 4-1: SerialNumber: syz [ 95.448726][ T1872] total_inactive_anon 200294400 [ 95.457970][ T1872] total_active_anon 114274304 [ 95.462678][ T1872] total_inactive_file 0 [ 95.466905][ T1872] total_active_file 4096 [ 95.471162][ T1872] total_unevictable 0 [ 95.475157][ T1872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1840,uid=0 [ 95.490200][ T1872] Memory cgroup out of memory: Killed process 1840 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:31864kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 95.516909][ T345] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 95.536654][ T1838] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.586902][ T1838] CPU: 0 UID: 0 PID: 1838 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 95.586942][ T1838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.586957][ T1838] Call Trace: [ 95.586964][ T1838] [ 95.586972][ T1838] __dump_stack+0x21/0x30 [ 95.587003][ T1838] dump_stack_lvl+0x10c/0x190 [ 95.587028][ T1838] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.587055][ T1838] ? ___ratelimit+0x3f7/0x5a0 [ 95.587082][ T1838] dump_stack+0x19/0x20 [ 95.587109][ T1838] dump_header+0xd7/0x490 [ 95.587143][ T1838] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 95.587168][ T1838] oom_kill_process+0x4c0/0x7e0 [ 95.587190][ T1838] ? sched_clock_cpu+0x75/0x400 [ 95.587217][ T1838] out_of_memory+0x7ee/0xbd0 [ 95.587239][ T1838] ? __cfi_out_of_memory+0x10/0x10 [ 95.587258][ T1838] ? mutex_lock_killable+0x104/0x1c0 [ 95.587287][ T1838] ? __cfi_mutex_lock_killable+0x10/0x10 [ 95.587318][ T1838] mem_cgroup_out_of_memory+0x279/0x350 [ 95.587349][ T1838] ? drain_obj_stock+0xed0/0xed0 [ 95.587382][ T1838] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 95.587413][ T1838] try_charge_memcg+0x8f7/0xde0 [ 95.587440][ T1838] ? __cfi_try_charge_memcg+0x10/0x10 [ 95.587465][ T1838] ? __alloc_pages_noprof+0x30d/0x6c0 [ 95.587491][ T1838] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 95.587515][ T1838] ? __folio_batch_add_and_move+0x2ab/0x370 [ 95.587540][ T1838] __mem_cgroup_charge+0xf6/0x410 [ 95.587568][ T1838] ? __kasan_check_write+0x18/0x20 [ 95.587596][ T1838] ? _raw_spin_lock+0x8c/0x120 [ 95.587631][ T1838] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 95.587662][ T1838] shmem_alloc_and_add_folio+0x86d/0x1050 [ 95.587709][ T1838] ? put_swap_device+0x130/0x130 [ 95.587743][ T1838] ? shmem_huge_global_enabled+0x2da/0x360 [ 95.587777][ T1838] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 95.587812][ T1838] ? __kasan_check_write+0x18/0x20 [ 95.587839][ T1838] ? _raw_spin_lock+0x8c/0x120 [ 95.587874][ T1838] shmem_get_folio_gfp+0x5f0/0x1380 [ 95.587911][ T1838] ? shmem_get_folio+0xc0/0xc0 [ 95.587941][ T1838] ? follow_page_pte+0xa5c/0xb90 [ 95.587965][ T1838] ? inode_to_bdi+0x6d/0x100 [ 95.587990][ T1838] shmem_write_begin+0xf4/0x270 [ 95.588026][ T1838] generic_perform_write+0x32d/0x960 [ 95.588056][ T1838] ? __cfi_generic_perform_write+0x10/0x10 [ 95.588082][ T1838] ? down_write+0xe9/0x2a0 [ 95.588113][ T1838] ? file_update_time+0xa3/0x220 [ 95.588138][ T1838] shmem_file_write_iter+0x105/0x130 [ 95.588163][ T1838] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 95.588188][ T1838] __kernel_write_iter+0x392/0x830 [ 95.588217][ T1838] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 95.588242][ T1838] ? __cfi___kernel_write_iter+0x10/0x10 [ 95.588270][ T1838] ? get_dump_page+0x160/0x220 [ 95.588293][ T1838] ? __asan_memset+0x39/0x50 [ 95.588320][ T1838] ? iov_iter_bvec+0xc0/0x180 [ 95.588354][ T1838] dump_user_range+0xb06/0xdf0 [ 95.588385][ T1838] ? __cfi_dump_emit+0x10/0x10 [ 95.588412][ T1838] ? __cfi_dump_user_range+0x10/0x10 [ 95.588442][ T1838] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 95.588472][ T1838] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 95.588503][ T1838] elf_core_dump+0x2cd9/0x3810 [ 95.588543][ T1838] ? __cfi_elf_core_dump+0x10/0x10 [ 95.588585][ T1838] ? dump_interrupted+0xf0/0xf0 [ 95.588611][ T1838] ? filp_open+0x182/0x1d0 [ 95.588633][ T1838] ? 0xffffffffff600000 [ 95.588651][ T1838] do_coredump+0x1bf7/0x2bd0 [ 95.588688][ T1838] ? __cfi_do_coredump+0x10/0x10 [ 95.588715][ T1838] ? asm_exc_general_protection+0x2b/0x30 [ 95.588750][ T1838] ? __kasan_slab_free+0x6a/0x80 [ 95.588782][ T1838] ? kmem_cache_free+0x1c1/0x4c0 [ 95.588813][ T1838] get_signal+0x11fd/0x14f0 [ 95.588842][ T1838] arch_do_signal_or_restart+0x96/0x720 [ 95.588874][ T1838] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 95.588905][ T1838] ? fixup_iopl_exception+0xdd/0x2e0 [ 95.588937][ T1838] irqentry_exit_to_user_mode+0x4e/0xb0 [ 95.588967][ T1838] irqentry_exit+0x16/0x60 [ 95.588996][ T1838] exc_general_protection+0x15a/0x1f0 [ 95.589021][ T1838] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 95.589049][ T1838] asm_exc_general_protection+0x2b/0x30 [ 95.589075][ T1838] RIP: 0033:0x7f927778e931 [ 95.589094][ T1838] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 95.589117][ T1838] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 95.589138][ T1838] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 95.589156][ T1838] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 95.589173][ T1838] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 95.589190][ T1838] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 95.589206][ T1838] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 95.589225][ T1838] [ 95.589233][ T1838] memory: usage 298096kB, limit 307200kB, failcnt 49486 [ 95.688088][ T345] usb 5-1: config 1 interface 0 has no altsetting 0 [ 95.688314][ T65] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 95.694833][ T345] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.698820][ T1838] memory+swap: usage 401188kB, limit 9007199254740988kB, failcnt 0 [ 95.703591][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.709097][ T1838] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 95.716882][ T345] usb 5-1: Product: syz [ 95.725660][ T1838] Memory cgroup stats for [ 95.731565][ T31] usb 4-1: 0:2 : does not exist [ 95.746909][ T1838] /syz3 [ 95.756891][ T345] usb 5-1: Manufacturer: syz [ 95.777130][ T1838] : [ 95.782284][ T31] usb 4-1: USB disconnect, device number 32 [ 95.807561][ T1838] cache 283348992 [ 95.809828][ T345] usb 5-1: SerialNumber: syz [ 95.817066][ T1838] rss 225280 [ 96.158431][ T1838] rss_huge 0 [ 96.161664][ T1838] shmem 283082752 [ 96.165315][ T1838] mapped_file 8192 [ 96.169089][ T1838] dirty 8192 [ 96.172303][ T1838] writeback 0 [ 96.175612][ T1838] workingset_refault_anon 20 [ 96.180304][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 96.185551][ T1838] workingset_refault_file 18331 [ 96.190570][ T1838] swap 127975424 [ 96.194279][ T1838] swapcached 20480 [ 96.198112][ T1838] pgpgin 288852 [ 96.201705][ T1838] pgpgout 220130 [ 96.205372][ T1838] pgfault 51654 [ 96.209291][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.220316][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.230247][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.243142][ T65] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.252278][ T1838] pgmajfault 445 [ 96.255844][ T1838] inactive_anon 120356864 [ 96.260251][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.268752][ T1838] active_anon 162652160 [ 96.273191][ T65] usb 2-1: config 0 descriptor?? [ 96.278256][ T1838] inactive_file 266240 [ 96.282475][ T1838] active_file 0 [ 96.287321][ T1838] unevictable 0 [ 96.290913][ T1838] hierarchical_memory_limit 314572800 [ 96.296428][ T1838] hierarchical_memsw_limit 9223372036854771712 [ 96.302643][ T1838] total_cache 283348992 [ 96.306817][ T1838] total_rss 225280 [ 96.310645][ T1838] total_rss_huge 0 [ 96.314426][ T1838] total_shmem 283082752 [ 96.318629][ T1838] total_mapped_file 8192 [ 96.322905][ T1838] total_dirty 8192 [ 96.326647][ T1838] total_writeback 0 [ 96.330541][ T1838] total_workingset_refault_anon 20 [ 96.335778][ T1838] total_workingset_refault_file 18331 [ 96.341203][ T1838] total_swap 127975424 [ 96.345294][ T1838] total_swapcached 20480 [ 96.349620][ T1838] total_pgpgin 288852 [ 96.353633][ T1838] total_pgpgout 220130 [ 96.357754][ T1838] total_pgfault 51654 [ 96.361750][ T1838] total_pgmajfault 445 [ 96.365843][ T1838] total_inactive_anon 120356864 [ 96.370954][ T1838] total_active_anon 162652160 [ 96.375667][ T1838] total_inactive_file 266240 [ 96.380401][ T1838] total_active_file 0 [ 96.384412][ T1838] total_unevictable 0 [ 96.388473][ T1838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1849,uid=0 [ 96.403330][ T1838] Memory cgroup out of memory: Killed process 1849 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:35208kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 96.425060][ T345] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 96.528156][ T1842] syz.3.472 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 96.596943][ T1842] CPU: 0 UID: 0 PID: 1842 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 96.596985][ T1842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.597001][ T1842] Call Trace: [ 96.597009][ T1842] [ 96.597018][ T1842] __dump_stack+0x21/0x30 [ 96.597056][ T1842] dump_stack_lvl+0x10c/0x190 [ 96.597082][ T1842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.597109][ T1842] ? ___ratelimit+0x3f7/0x5a0 [ 96.597134][ T1842] dump_stack+0x19/0x20 [ 96.597159][ T1842] dump_header+0xd7/0x490 [ 96.597193][ T1842] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 96.597219][ T1842] oom_kill_process+0x4c0/0x7e0 [ 96.597241][ T1842] ? sched_clock_cpu+0x75/0x400 [ 96.597269][ T1842] out_of_memory+0x7ee/0xbd0 [ 96.597290][ T1842] ? __cfi_out_of_memory+0x10/0x10 [ 96.597312][ T1842] ? mutex_lock_killable+0x92/0x1c0 [ 96.597348][ T1842] ? __cfi_mutex_lock_killable+0x10/0x10 [ 96.597379][ T1842] mem_cgroup_out_of_memory+0x279/0x350 [ 96.597411][ T1842] ? drain_obj_stock+0xed0/0xed0 [ 96.597443][ T1842] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 96.597475][ T1842] try_charge_memcg+0x8f7/0xde0 [ 96.597500][ T1842] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 96.597531][ T1842] ? __cfi_try_charge_memcg+0x10/0x10 [ 96.597558][ T1842] ? __alloc_pages_noprof+0x30d/0x6c0 [ 96.597597][ T1842] __mem_cgroup_charge+0xf6/0x410 [ 96.597625][ T1842] ? filemap_get_entry+0x3fb/0x460 [ 96.597648][ T1842] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 96.597677][ T1842] filemap_add_folio+0x57/0x2d0 [ 96.597711][ T1842] __filemap_get_folio+0x4c2/0x7c0 [ 96.597736][ T1842] filemap_fault+0xb41/0x16b0 [ 96.597761][ T1842] ? __cfi_filemap_fault+0x10/0x10 [ 96.597803][ T1842] ? __cfi_filemap_map_pages+0x10/0x10 [ 96.597827][ T1842] ? __cfi_lru_add+0x10/0x10 [ 96.597847][ T1842] ? _raw_spin_lock+0x8c/0x120 [ 96.597880][ T1842] ? __cfi__raw_spin_lock+0x10/0x10 [ 96.597915][ T1842] do_pte_missing+0x376b/0x3e50 [ 96.597941][ T1842] ? pte_marker_clear+0x1b0/0x1b0 [ 96.597962][ T1842] ? __pte_offset_map+0x1b0/0x230 [ 96.597996][ T1842] ? pte_offset_map_rw_nolock+0xba/0x110 [ 96.598022][ T1842] handle_mm_fault+0x1166/0x1b90 [ 96.598055][ T1842] ? __kasan_check_write+0x18/0x20 [ 96.598087][ T1842] ? __cfi_handle_mm_fault+0x10/0x10 [ 96.598120][ T1842] ? follow_page_pte+0x2bd/0xb90 [ 96.598145][ T1842] ? gup_must_unshare+0x1e0/0x1e0 [ 96.598169][ T1842] ? vma_is_secretmem+0x11/0x50 [ 96.598195][ T1842] __get_user_pages+0x1169/0x22d0 [ 96.598218][ T1842] ? __kasan_check_write+0x18/0x20 [ 96.598250][ T1842] ? populate_vma_page_range+0x230/0x230 [ 96.598273][ T1842] ? __kernel_write_iter+0x65e/0x830 [ 96.598303][ T1842] get_dump_page+0x107/0x220 [ 96.598325][ T1842] ? __cfi_get_dump_page+0x10/0x10 [ 96.598354][ T1842] ? __asan_memset+0x39/0x50 [ 96.598382][ T1842] dump_user_range+0x181/0xdf0 [ 96.598413][ T1842] ? __cfi_dump_emit+0x10/0x10 [ 96.598441][ T1842] ? __cfi_dump_user_range+0x10/0x10 [ 96.598471][ T1842] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 96.598502][ T1842] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 96.598534][ T1842] elf_core_dump+0x2cd9/0x3810 [ 96.598573][ T1842] ? __cfi_elf_core_dump+0x10/0x10 [ 96.598615][ T1842] ? dump_interrupted+0xf0/0xf0 [ 96.598641][ T1842] ? filp_open+0x182/0x1d0 [ 96.598663][ T1842] ? 0xffffffffff600000 [ 96.598682][ T1842] do_coredump+0x1bf7/0x2bd0 [ 96.598713][ T1842] ? __cfi_do_coredump+0x10/0x10 [ 96.598740][ T1842] ? asm_exc_general_protection+0x2b/0x30 [ 96.598775][ T1842] ? __kasan_slab_free+0x6a/0x80 [ 96.598808][ T1842] ? kmem_cache_free+0x1c1/0x4c0 [ 96.598839][ T1842] get_signal+0x11fd/0x14f0 [ 96.598867][ T1842] arch_do_signal_or_restart+0x96/0x720 [ 96.598901][ T1842] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 96.598934][ T1842] ? fixup_iopl_exception+0xdd/0x2e0 [ 96.598967][ T1842] irqentry_exit_to_user_mode+0x4e/0xb0 [ 96.599011][ T1842] irqentry_exit+0x16/0x60 [ 96.599039][ T1842] exc_general_protection+0x15a/0x1f0 [ 96.599063][ T1842] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 96.599090][ T1842] asm_exc_general_protection+0x2b/0x30 [ 96.599115][ T1842] RIP: 0033:0x7f927778e931 [ 96.599133][ T1842] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 96.599153][ T1842] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 96.599174][ T1842] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 96.599191][ T1842] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 96.599207][ T1842] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 96.599224][ T1842] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 96.599240][ T1842] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 96.599260][ T1842] [ 96.599286][ T1842] memory: usage 291480kB, limit 307200kB, failcnt 50790 [ 96.792602][ T36] audit: type=1400 audit(7004407751.015:380): avc: denied { read write } for pid=2509 comm="syz.4.592" name="lp0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.798298][ T65] microsoft 0003:045E:07DA.000F: unexpected long global item [ 96.812838][ T36] audit: type=1400 audit(7004407751.015:381): avc: denied { open } for pid=2509 comm="syz.4.592" path="/dev/usb/lp0" dev="devtmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.818014][ T65] microsoft 0003:045E:07DA.000F: parse failed [ 96.886123][ C1] usblp0: nonzero write bulk status received: -71 [ 96.916977][ T65] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 96.987728][ T36] audit: type=1326 audit(7004407751.205:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.017140][ T2512] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.032803][ T36] audit: type=1326 audit(7004407751.205:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.038440][ T412] usb 5-1: USB disconnect, device number 13 [ 97.049090][ T36] audit: type=1326 audit(7004407751.205:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.082339][ T412] usblp0: removed [ 97.116668][ T2512] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 97.154322][ T1842] memory+swap: usage 426176kB, limit 9007199254740988kB, failcnt 0 [ 97.163302][ T36] audit: type=1326 audit(7004407751.205:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.198028][ T2515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.226921][ T2512] SELinux: failed to load policy [ 97.240686][ T2515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.246906][ T36] audit: type=1326 audit(7004407751.205:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.276683][ T1842] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 97.281891][ T36] audit: type=1326 audit(7004407751.205:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.294418][ T1842] Memory cgroup stats for [ 97.302371][ T36] audit: type=1326 audit(7004407751.205:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.325478][ T1842] /syz3 [ 97.332412][ T36] audit: type=1326 audit(7004407751.205:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2509 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x7ffc0000 [ 97.355628][ T1842] : [ 97.409218][ T1842] cache 314474496 [ 97.415343][ T1842] rss 98304 [ 97.418922][ T1842] rss_huge 0 [ 97.422237][ T1842] shmem 314474496 [ 97.425923][ T1842] mapped_file 0 [ 97.429460][ T1842] dirty 0 [ 97.432451][ T1842] writeback 0 [ 97.435763][ T1842] workingset_refault_anon 26 [ 97.440413][ T1842] workingset_refault_file 18633 [ 97.445733][ T1842] swap 127954944 [ 97.446773][ T412] usb 2-1: USB disconnect, device number 33 [ 97.449320][ T1842] swapcached 20480 [ 97.459394][ T1842] pgpgin 310214 [ 97.463347][ T1842] pgpgout 233925 [ 97.467012][ T1842] pgfault 52676 [ 97.470491][ T1842] pgmajfault 461 [ 97.474042][ T1842] inactive_anon 267907072 [ 97.478433][ T1842] active_anon 46551040 [ 97.482507][ T1842] inactive_file 0 [ 97.486128][ T1842] active_file 0 [ 97.489674][ T1842] unevictable 0 [ 97.493141][ T1842] hierarchical_memory_limit 314572800 [ 97.498639][ T1842] hierarchical_memsw_limit 9223372036854771712 [ 97.504849][ T1842] total_cache 314474496 [ 97.509050][ T1842] total_rss 98304 [ 97.512710][ T1842] total_rss_huge 0 [ 97.516443][ T1842] total_shmem 314474496 [ 97.520811][ T1842] total_mapped_file 0 [ 97.524822][ T1842] total_dirty 0 [ 97.528331][ T1842] total_writeback 0 [ 97.532152][ T1842] total_workingset_refault_anon 26 [ 97.537396][ T1842] total_workingset_refault_file 18633 [ 97.542825][ T1842] total_swap 127954944 [ 97.546966][ T1842] total_swapcached 20480 [ 97.551244][ T1842] total_pgpgin 310214 [ 97.555250][ T1842] total_pgpgout 233925 [ 97.559408][ T1842] total_pgfault 52676 [ 97.563394][ T1842] total_pgmajfault 461 [ 97.567533][ T1842] total_inactive_anon 267907072 [ 97.572392][ T1842] total_active_anon 46551040 [ 97.577107][ T1842] total_inactive_file 0 [ 97.581276][ T1842] total_active_file 0 [ 97.585249][ T1842] total_unevictable 0 [ 97.589271][ T1842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1883,uid=0 [ 97.604112][ T1842] Memory cgroup out of memory: Killed process 1883 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:38528kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 97.703509][ T2524] input: syz0 as /devices/virtual/input/input28 [ 97.836584][ T1848] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.887860][ T1848] CPU: 1 UID: 0 PID: 1848 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 97.887916][ T1848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.887931][ T1848] Call Trace: [ 97.887938][ T1848] [ 97.887947][ T1848] __dump_stack+0x21/0x30 [ 97.887980][ T1848] dump_stack_lvl+0x10c/0x190 [ 97.888006][ T1848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.888033][ T1848] ? ___ratelimit+0x3f7/0x5a0 [ 97.888060][ T1848] dump_stack+0x19/0x20 [ 97.888084][ T1848] dump_header+0xd7/0x490 [ 97.888127][ T1848] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 97.888152][ T1848] oom_kill_process+0x4c0/0x7e0 [ 97.888173][ T1848] ? sched_clock_cpu+0x75/0x400 [ 97.888219][ T1848] out_of_memory+0x7ee/0xbd0 [ 97.888241][ T1848] ? __cfi_out_of_memory+0x10/0x10 [ 97.888261][ T1848] ? mutex_lock_killable+0x92/0x1c0 [ 97.888291][ T1848] ? __cfi_mutex_lock_killable+0x10/0x10 [ 97.888321][ T1848] mem_cgroup_out_of_memory+0x279/0x350 [ 97.888354][ T1848] ? drain_obj_stock+0xed0/0xed0 [ 97.888386][ T1848] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 97.888417][ T1848] try_charge_memcg+0x8f7/0xde0 [ 97.888444][ T1848] ? __cfi_try_charge_memcg+0x10/0x10 [ 97.888477][ T1848] ? __alloc_pages_noprof+0x30d/0x6c0 [ 97.888502][ T1848] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 97.888527][ T1848] ? __folio_batch_add_and_move+0x2ab/0x370 [ 97.888552][ T1848] __mem_cgroup_charge+0xf6/0x410 [ 97.888580][ T1848] ? __kasan_check_write+0x18/0x20 [ 97.888609][ T1848] ? _raw_spin_lock+0x8c/0x120 [ 97.888643][ T1848] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 97.888674][ T1848] shmem_alloc_and_add_folio+0x86d/0x1050 [ 97.888713][ T1848] ? put_swap_device+0x130/0x130 [ 97.888747][ T1848] ? shmem_huge_global_enabled+0x2da/0x360 [ 97.888780][ T1848] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 97.888812][ T1848] ? __kasan_check_write+0x18/0x20 [ 97.888839][ T1848] ? _raw_spin_lock+0x8c/0x120 [ 97.888875][ T1848] shmem_get_folio_gfp+0x5f0/0x1380 [ 97.888911][ T1848] ? shmem_get_folio+0xc0/0xc0 [ 97.888942][ T1848] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 97.888969][ T1848] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 97.888997][ T1848] ? inode_to_bdi+0x6d/0x100 [ 97.889044][ T1848] shmem_write_begin+0xf4/0x270 [ 97.889081][ T1848] generic_perform_write+0x32d/0x960 [ 97.889112][ T1848] ? __cfi_generic_perform_write+0x10/0x10 [ 97.889140][ T1848] ? down_write+0xe9/0x2a0 [ 97.889168][ T1848] ? mnt_get_write_access_file+0x1af/0x3b0 [ 97.889193][ T1848] ? mnt_put_write_access_file+0xc2/0x100 [ 97.889218][ T1848] ? file_update_time+0x1ef/0x220 [ 97.889244][ T1848] shmem_file_write_iter+0x105/0x130 [ 97.889269][ T1848] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 97.889294][ T1848] __kernel_write_iter+0x392/0x830 [ 97.889324][ T1848] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 97.889350][ T1848] ? __cfi___kernel_write_iter+0x10/0x10 [ 97.889379][ T1848] ? get_dump_page+0x160/0x220 [ 97.889403][ T1848] ? __asan_memset+0x39/0x50 [ 97.889429][ T1848] ? iov_iter_bvec+0xc0/0x180 [ 97.889468][ T1848] dump_user_range+0xb06/0xdf0 [ 97.889498][ T1848] ? __cfi_dump_emit+0x10/0x10 [ 97.889525][ T1848] ? __cfi_dump_user_range+0x10/0x10 [ 97.889555][ T1848] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 97.889584][ T1848] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 97.889616][ T1848] elf_core_dump+0x2cd9/0x3810 [ 97.889655][ T1848] ? __cfi_elf_core_dump+0x10/0x10 [ 97.889698][ T1848] ? dump_interrupted+0xf0/0xf0 [ 97.889725][ T1848] ? filp_open+0x182/0x1d0 [ 97.889748][ T1848] ? 0xffffffffff600000 [ 97.889767][ T1848] do_coredump+0x1bf7/0x2bd0 [ 97.889798][ T1848] ? __cfi_do_coredump+0x10/0x10 [ 97.889826][ T1848] ? asm_exc_general_protection+0x2b/0x30 [ 97.889860][ T1848] ? __kasan_slab_free+0x6a/0x80 [ 97.889893][ T1848] ? kmem_cache_free+0x1c1/0x4c0 [ 97.889923][ T1848] get_signal+0x11fd/0x14f0 [ 97.889953][ T1848] arch_do_signal_or_restart+0x96/0x720 [ 97.889985][ T1848] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 97.890017][ T1848] ? fixup_iopl_exception+0xdd/0x2e0 [ 97.890050][ T1848] irqentry_exit_to_user_mode+0x4e/0xb0 [ 97.890081][ T1848] irqentry_exit+0x16/0x60 [ 97.890110][ T1848] exc_general_protection+0x15a/0x1f0 [ 97.890135][ T1848] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 97.890162][ T1848] asm_exc_general_protection+0x2b/0x30 [ 97.890187][ T1848] RIP: 0033:0x7f927778e931 [ 97.890207][ T1848] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 97.890228][ T1848] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 97.890250][ T1848] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 97.890267][ T1848] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 97.890284][ T1848] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 97.890302][ T1848] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 97.890318][ T1848] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 97.890338][ T1848] [ 97.890347][ T1848] memory: usage 307088kB, limit 307200kB, failcnt 52960 [ 98.005584][ T2533] rust_binder: Write failure EINVAL in pid:753 [ 98.013734][ T1848] memory+swap: usage 425772kB, limit 9007199254740988kB, failcnt 0 [ 98.016629][ T2534] rust_binder: Write failure EINVAL in pid:753 [ 98.022522][ T1848] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 98.126905][ T412] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 98.135381][ T1848] Memory cgroup stats for [ 98.311995][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 98.316520][ T1848] /syz3 [ 98.336441][ T412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 98.342017][ T1848] : [ 98.350515][ T412] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.376528][ T1848] cache 287301632 [ 98.385750][ T412] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.392698][ T1848] rss 86016 [ 98.398859][ T412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.409165][ T1848] rss_huge 0 [ 98.417913][ T412] usb 5-1: config 0 descriptor?? [ 98.419786][ T1848] shmem 287035392 [ 98.509466][ T1848] mapped_file 8192 [ 98.513217][ T1848] dirty 8192 [ 98.516439][ T1848] writeback 0 [ 98.519793][ T1848] workingset_refault_anon 26 [ 98.524399][ T1848] workingset_refault_file 18730 [ 98.529282][ T1848] swap 121888768 [ 98.533013][ T1848] swapcached 24576 [ 98.536977][ T1848] pgpgin 311253 [ 98.540465][ T1848] pgpgout 241599 [ 98.544027][ T1848] pgfault 52845 [ 98.547749][ T1848] pgmajfault 463 [ 98.551377][ T1848] inactive_anon 237780992 [ 98.555790][ T1848] active_anon 49348608 [ 98.561460][ T1848] inactive_file 4096 [ 98.565394][ T1848] active_file 262144 [ 98.569392][ T1848] unevictable 0 [ 98.572934][ T1848] hierarchical_memory_limit 314572800 [ 98.578419][ T1848] hierarchical_memsw_limit 9223372036854771712 [ 98.584656][ T1848] total_cache 287301632 [ 98.589041][ T1848] total_rss 86016 [ 98.592723][ T1848] total_rss_huge 0 [ 98.596502][ T1848] total_shmem 287035392 [ 98.600710][ T1848] total_mapped_file 8192 [ 98.604979][ T1848] total_dirty 8192 [ 98.608754][ T1848] total_writeback 0 [ 98.612581][ T1848] total_workingset_refault_anon 26 [ 98.617768][ T1848] total_workingset_refault_file 18730 [ 98.623165][ T1848] total_swap 121888768 [ 98.627621][ T1848] total_swapcached 24576 [ 98.633052][ T1848] total_pgpgin 311253 [ 98.637218][ T1848] total_pgpgout 241599 [ 98.640599][ T2554] rust_binder: Write failure EINVAL in pid:764 [ 98.641356][ T1848] total_pgfault 52845 [ 98.651738][ T1848] total_pgmajfault 463 [ 98.656339][ T1848] total_inactive_anon 237780992 [ 98.661515][ T1848] total_active_anon 49348608 [ 98.666150][ T1848] total_inactive_file 4096 [ 98.670640][ T1848] total_active_file 262144 [ 98.675074][ T1848] total_unevictable 0 [ 98.679108][ T1848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1835,uid=0 [ 98.693957][ T1848] Memory cgroup out of memory: Killed process 1835 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:36976kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 98.786912][ T345] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 98.817552][ T1873] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.838588][ T412] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 98.857195][ T412] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 98.866892][ T412] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.896815][ T1873] CPU: 1 UID: 0 PID: 1873 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 98.896861][ T1873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.896875][ T1873] Call Trace: [ 98.896882][ T1873] [ 98.896892][ T1873] __dump_stack+0x21/0x30 [ 98.896923][ T1873] dump_stack_lvl+0x10c/0x190 [ 98.896949][ T1873] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.896976][ T1873] ? ___ratelimit+0x3f7/0x5a0 [ 98.897003][ T1873] dump_stack+0x19/0x20 [ 98.897030][ T1873] dump_header+0xd7/0x490 [ 98.897065][ T1873] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 98.897088][ T1873] oom_kill_process+0x4c0/0x7e0 [ 98.897107][ T1873] ? sched_clock_cpu+0x75/0x400 [ 98.897132][ T1873] out_of_memory+0x7ee/0xbd0 [ 98.897151][ T1873] ? __cfi_out_of_memory+0x10/0x10 [ 98.897170][ T1873] ? mutex_lock_killable+0x104/0x1c0 [ 98.897200][ T1873] ? __cfi_mutex_lock_killable+0x10/0x10 [ 98.897231][ T1873] mem_cgroup_out_of_memory+0x279/0x350 [ 98.897264][ T1873] ? drain_obj_stock+0xed0/0xed0 [ 98.897295][ T1873] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 98.897336][ T1873] try_charge_memcg+0x8f7/0xde0 [ 98.897363][ T1873] ? __cfi_try_charge_memcg+0x10/0x10 [ 98.897388][ T1873] ? __alloc_pages_noprof+0x30d/0x6c0 [ 98.897415][ T1873] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 98.897441][ T1873] __mem_cgroup_charge+0xf6/0x410 [ 98.897469][ T1873] ? __sched_text_start+0x10/0x10 [ 98.897493][ T1873] ? _raw_spin_lock+0x8c/0x120 [ 98.897527][ T1873] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 98.897558][ T1873] shmem_alloc_and_add_folio+0x86d/0x1050 [ 98.897597][ T1873] ? put_swap_device+0x130/0x130 [ 98.897645][ T1873] ? shmem_huge_global_enabled+0x2da/0x360 [ 98.897679][ T1873] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 98.897713][ T1873] ? shmem_get_folio_gfp+0xca/0x1380 [ 98.897746][ T1873] shmem_get_folio_gfp+0x5f0/0x1380 [ 98.897781][ T1873] ? shmem_get_folio+0xc0/0xc0 [ 98.897811][ T1873] ? follow_page_pte+0xa5c/0xb90 [ 98.897834][ T1873] ? inode_to_bdi+0x6d/0x100 [ 98.897859][ T1873] shmem_write_begin+0xf4/0x270 [ 98.897894][ T1873] generic_perform_write+0x32d/0x960 [ 98.897924][ T1873] ? __cfi_generic_perform_write+0x10/0x10 [ 98.897949][ T1873] ? down_write+0xe9/0x2a0 [ 98.897979][ T1873] ? file_update_time+0xa3/0x220 [ 98.898004][ T1873] shmem_file_write_iter+0x105/0x130 [ 98.898028][ T1873] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 98.898051][ T1873] __kernel_write_iter+0x392/0x830 [ 98.898079][ T1873] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 98.898104][ T1873] ? __cfi___kernel_write_iter+0x10/0x10 [ 98.898148][ T1873] ? get_dump_page+0x160/0x220 [ 98.898170][ T1873] ? __asan_memset+0x39/0x50 [ 98.898197][ T1873] ? iov_iter_bvec+0xc0/0x180 [ 98.898229][ T1873] dump_user_range+0xb06/0xdf0 [ 98.898259][ T1873] ? __cfi_dump_emit+0x10/0x10 [ 98.898286][ T1873] ? __cfi_dump_user_range+0x10/0x10 [ 98.898315][ T1873] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 98.898352][ T1873] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 98.898383][ T1873] elf_core_dump+0x2cd9/0x3810 [ 98.898440][ T1873] ? __cfi_elf_core_dump+0x10/0x10 [ 98.898483][ T1873] ? dump_interrupted+0xf0/0xf0 [ 98.898511][ T1873] ? filp_open+0x182/0x1d0 [ 98.898534][ T1873] ? 0xffffffffff600000 [ 98.898554][ T1873] do_coredump+0x1bf7/0x2bd0 [ 98.898584][ T1873] ? __cfi_do_coredump+0x10/0x10 [ 98.898611][ T1873] ? asm_exc_general_protection+0x2b/0x30 [ 98.898648][ T1873] ? __kasan_slab_free+0x6a/0x80 [ 98.898681][ T1873] ? kmem_cache_free+0x1c1/0x4c0 [ 98.898713][ T1873] get_signal+0x11fd/0x14f0 [ 98.898743][ T1873] arch_do_signal_or_restart+0x96/0x720 [ 98.898776][ T1873] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 98.898809][ T1873] ? fixup_iopl_exception+0xdd/0x2e0 [ 98.898842][ T1873] irqentry_exit_to_user_mode+0x4e/0xb0 [ 98.898873][ T1873] irqentry_exit+0x16/0x60 [ 98.898902][ T1873] exc_general_protection+0x15a/0x1f0 [ 98.898930][ T1873] asm_exc_general_protection+0x2b/0x30 [ 98.898955][ T1873] RIP: 0033:0x7f927778e931 [ 98.898974][ T1873] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 98.898994][ T1873] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 98.899016][ T1873] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 98.899034][ T1873] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 98.899051][ T1873] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 98.899080][ T1873] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 98.899095][ T1873] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 98.899114][ T1873] [ 99.391441][ T2570] binder: Unknown parameter 'fscontext?}' [ 99.426086][ T345] usb 2-1: config 1 interface 0 has no altsetting 0 [ 99.434624][ T1873] memory: usage 305760kB, limit 307200kB, failcnt 55314 [ 99.453915][ T1873] memory+swap: usage 430912kB, limit 9007199254740988kB, failcnt 0 [ 99.457195][ T2572] /dev/rnullb0: Can't open blockdev [ 99.461990][ T1873] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 99.474120][ T1873] Memory cgroup stats for /syz3: [ 99.474322][ T1873] cache 313774080 [ 99.483011][ T1873] rss 245760 [ 99.486470][ T1873] rss_huge 0 [ 99.489738][ T1873] shmem 313757696 [ 99.493380][ T1873] mapped_file 12288 [ 99.497291][ T1873] dirty 4096 [ 99.500504][ T1873] writeback 0 [ 99.503806][ T1873] workingset_refault_anon 26 [ 99.508475][ T1873] workingset_refault_file 18741 [ 99.513343][ T1873] swap 127975424 [ 99.516947][ T1873] swapcached 20480 [ 99.521212][ T1873] pgpgin 325640 [ 99.524990][ T1873] pgpgout 249484 [ 99.528595][ T1873] pgfault 53865 [ 99.535543][ T1873] pgmajfault 470 [ 99.539174][ T1873] inactive_anon 123637760 [ 99.543513][ T1873] active_anon 190304256 [ 99.547684][ T1873] inactive_file 12288 [ 99.551671][ T1873] active_file 4096 [ 99.555404][ T1873] unevictable 0 [ 99.559023][ T1873] hierarchical_memory_limit 314572800 [ 99.564481][ T1873] hierarchical_memsw_limit 9223372036854771712 [ 99.570919][ T1873] total_cache 313774080 [ 99.575328][ T1873] total_rss 245760 [ 99.585731][ T1873] total_rss_huge 0 [ 99.589557][ T1873] total_shmem 313757696 [ 99.593768][ T1873] total_mapped_file 12288 [ 99.598239][ T345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.607497][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.615512][ T345] usb 2-1: Product: syz [ 99.619877][ T345] usb 2-1: Manufacturer: syz [ 99.624595][ T345] usb 2-1: SerialNumber: syz [ 99.629707][ T1873] total_dirty 4096 [ 99.633449][ T1873] total_writeback 0 [ 99.639958][ T1873] total_workingset_refault_anon 26 [ 99.645120][ T1873] total_workingset_refault_file 18741 [ 99.651091][ T1873] total_swap 127975424 [ 99.655209][ T1873] total_swapcached 20480 [ 99.659533][ T1873] total_pgpgin 325640 [ 99.663539][ T1873] total_pgpgout 249484 [ 99.667647][ T1873] total_pgfault 53865 [ 99.671674][ T1873] total_pgmajfault 470 [ 99.675766][ T1873] total_inactive_anon 123637760 [ 99.681035][ T1873] total_active_anon 190304256 [ 99.685758][ T1873] total_inactive_file 12288 [ 99.690323][ T1873] total_active_file 4096 [ 99.694615][ T1873] total_unevictable 0 [ 99.698686][ T1873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1872,uid=0 [ 99.713523][ T1873] Memory cgroup out of memory: Killed process 1872 (syz.3.472) total-vm:89960kB, anon-rss:916kB, file-rss:35956kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 99.753417][ T412] usb 5-1: USB disconnect, device number 14 [ 99.975484][ T1877] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.996876][ T1877] CPU: 0 UID: 0 PID: 1877 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 99.996914][ T1877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.996929][ T1877] Call Trace: [ 99.996937][ T1877] [ 99.996945][ T1877] __dump_stack+0x21/0x30 [ 99.996987][ T1877] dump_stack_lvl+0x10c/0x190 [ 99.997013][ T1877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.997040][ T1877] ? ___ratelimit+0x3f7/0x5a0 [ 99.997066][ T1877] dump_stack+0x19/0x20 [ 99.997092][ T1877] dump_header+0xd7/0x490 [ 99.997125][ T1877] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 99.997148][ T1877] oom_kill_process+0x4c0/0x7e0 [ 99.997169][ T1877] ? sched_clock_cpu+0x75/0x400 [ 99.997198][ T1877] out_of_memory+0x7ee/0xbd0 [ 99.997219][ T1877] ? __cfi_out_of_memory+0x10/0x10 [ 99.997239][ T1877] ? mutex_lock_killable+0x92/0x1c0 [ 99.997266][ T1877] ? __cfi_mutex_lock_killable+0x10/0x10 [ 99.997297][ T1877] mem_cgroup_out_of_memory+0x279/0x350 [ 99.997329][ T1877] ? drain_obj_stock+0xed0/0xed0 [ 99.997362][ T1877] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 99.997392][ T1877] try_charge_memcg+0x8f7/0xde0 [ 99.997418][ T1877] ? __cfi_try_charge_memcg+0x10/0x10 [ 99.997443][ T1877] ? __alloc_pages_noprof+0x30d/0x6c0 [ 99.997469][ T1877] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 99.997494][ T1877] ? __folio_batch_add_and_move+0x2ab/0x370 [ 99.997518][ T1877] __mem_cgroup_charge+0xf6/0x410 [ 99.997546][ T1877] ? __kasan_check_write+0x18/0x20 [ 99.997586][ T1877] ? _raw_spin_lock+0x8c/0x120 [ 99.997618][ T1877] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 99.997648][ T1877] shmem_alloc_and_add_folio+0x86d/0x1050 [ 99.997685][ T1877] ? put_swap_device+0x130/0x130 [ 99.997719][ T1877] ? shmem_huge_global_enabled+0x2da/0x360 [ 99.997751][ T1877] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 99.997784][ T1877] ? __kasan_check_write+0x18/0x20 [ 99.997810][ T1877] ? _raw_spin_lock+0x8c/0x120 [ 99.997843][ T1877] shmem_get_folio_gfp+0x5f0/0x1380 [ 99.997878][ T1877] ? shmem_get_folio+0xc0/0xc0 [ 99.997908][ T1877] ? follow_page_pte+0xa5c/0xb90 [ 99.997932][ T1877] ? inode_to_bdi+0x6d/0x100 [ 99.997965][ T1877] shmem_write_begin+0xf4/0x270 [ 99.997999][ T1877] generic_perform_write+0x32d/0x960 [ 99.998029][ T1877] ? __cfi_generic_perform_write+0x10/0x10 [ 99.998056][ T1877] ? down_write+0xe9/0x2a0 [ 99.998084][ T1877] ? file_update_time+0xa3/0x220 [ 99.998108][ T1877] shmem_file_write_iter+0x105/0x130 [ 99.998132][ T1877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 99.998157][ T1877] __kernel_write_iter+0x392/0x830 [ 99.998185][ T1877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 99.998209][ T1877] ? __cfi___kernel_write_iter+0x10/0x10 [ 99.998237][ T1877] ? get_dump_page+0x160/0x220 [ 99.998259][ T1877] ? __asan_memset+0x39/0x50 [ 99.998285][ T1877] ? iov_iter_bvec+0xc0/0x180 [ 99.998318][ T1877] dump_user_range+0xb06/0xdf0 [ 99.998347][ T1877] ? __cfi_dump_emit+0x10/0x10 [ 99.998374][ T1877] ? __cfi_dump_user_range+0x10/0x10 [ 99.998402][ T1877] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 99.998432][ T1877] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 99.998463][ T1877] elf_core_dump+0x2cd9/0x3810 [ 99.998500][ T1877] ? __cfi_elf_core_dump+0x10/0x10 [ 99.998541][ T1877] ? dump_interrupted+0xf0/0xf0 [ 99.998568][ T1877] ? filp_open+0x182/0x1d0 [ 99.998590][ T1877] ? 0xffffffffff600000 [ 99.998609][ T1877] do_coredump+0x1bf7/0x2bd0 [ 99.998639][ T1877] ? __cfi_do_coredump+0x10/0x10 [ 99.998665][ T1877] ? asm_exc_general_protection+0x2b/0x30 [ 99.998699][ T1877] ? __kasan_slab_free+0x6a/0x80 [ 99.998731][ T1877] ? kmem_cache_free+0x1c1/0x4c0 [ 99.998761][ T1877] get_signal+0x11fd/0x14f0 [ 99.998788][ T1877] arch_do_signal_or_restart+0x96/0x720 [ 99.998819][ T1877] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 99.998851][ T1877] ? fixup_iopl_exception+0xdd/0x2e0 [ 99.998882][ T1877] irqentry_exit_to_user_mode+0x4e/0xb0 [ 99.998912][ T1877] irqentry_exit+0x16/0x60 [ 99.998940][ T1877] exc_general_protection+0x15a/0x1f0 [ 99.998972][ T1877] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 99.998999][ T1877] asm_exc_general_protection+0x2b/0x30 [ 99.999023][ T1877] RIP: 0033:0x7f927778e931 [ 99.999042][ T1877] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 99.999062][ T1877] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 99.999083][ T1877] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 99.999099][ T1877] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 99.999116][ T1877] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 99.999133][ T1877] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 99.999148][ T1877] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 99.999167][ T1877] [ 99.999175][ T1877] memory: usage 307024kB, limit 307200kB, failcnt 57778 [ 100.137786][ T413] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 100.345850][ T1877] memory+swap: usage 392340kB, limit 9007199254740988kB, failcnt 0 [ 100.398040][ T345] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 100.421151][ T1877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 100.464064][ T2588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 100.528810][ T1877] Memory cgroup stats for /syz3: [ 100.529055][ T1877] cache 279863296 [ 100.537959][ T1877] rss 188416 [ 100.541246][ T1877] rss_huge 0 [ 100.544461][ T1877] shmem 279584768 [ 100.548796][ T413] usb 3-1: Using ep0 maxpacket: 32 [ 100.554074][ T1877] mapped_file 147456 [ 100.558500][ T1877] dirty 4096 [ 100.561874][ T1877] writeback 0 [ 100.565312][ T1877] workingset_refault_anon 28 [ 100.570486][ T1877] workingset_refault_file 18825 [ 100.582129][ T413] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 100.592515][ T413] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.599431][ T1877] swap 127799296 [ 100.603109][ T1877] swapcached 196608 [ 100.610655][ T1877] pgpgin 332550 [ 100.614379][ T413] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.623741][ T413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.632399][ T413] usb 3-1: Product: syz [ 100.636589][ T413] usb 3-1: Manufacturer: ⚱岙끊꫼㰂瑗䣐新ꃑᘉ襠뺄諷⭦̓홋搇禍幍渆滬ᶾ틝Ǒ鋌鬢譻쓙ੜﱣ㨾멞⢞굁ꨀ̓흘朤ꀮ鶔೙哞ᵏ瘮ᩨ彩聬嶠 [ 100.636656][ T2594] rust_binder: Write failure EINVAL in pid:323 [ 100.657226][ T1877] pgpgout 264645 [ 100.666290][ T2595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.667573][ T1877] pgfault 54285 [ 100.679517][ T413] usb 3-1: SerialNumber: syz [ 100.679717][ T2595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.685250][ T1877] pgmajfault 476 [ 100.695946][ T2585] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.706143][ T2593] rust_binder: Error in use_page_slow: ESRCH [ 100.706166][ T2593] rust_binder: use_range failure ESRCH [ 100.706238][ T2596] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 100.718891][ T2593] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 100.726899][ T2596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.727328][ T2596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:323 [ 100.754806][ T1877] inactive_anon 160387072 [ 100.755312][ T2593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 100.768538][ T1877] active_anon 119455744 [ 100.773956][ C0] usblp0: nonzero write bulk status received: -71 [ 100.788517][ T1877] inactive_file 0 [ 100.792389][ T1877] active_file 278528 [ 100.794450][ T412] usb 2-1: USB disconnect, device number 34 [ 100.796306][ T1877] unevictable 0 [ 100.806651][ T412] usblp0: removed [ 100.817419][ T2593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:323 [ 100.817589][ T2551] binder: Bad value for 'max' [ 100.836925][ T1877] hierarchical_memory_limit 314572800 [ 100.860137][ T1877] hierarchical_memsw_limit 9223372036854771712 [ 100.886717][ T1877] total_cache 279863296 [ 100.894580][ T1877] total_rss 188416 [ 100.906012][ T1877] total_rss_huge 0 [ 100.907742][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.918704][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.934865][ T1877] total_shmem 279584768 [ 100.940907][ T413] usb 3-1: USB disconnect, device number 21 [ 100.959019][ T1877] total_mapped_file 147456 [ 100.975935][ T1877] total_dirty 4096 [ 100.979788][ T1877] total_writeback 0 [ 100.983633][ T1877] total_workingset_refault_anon 28 [ 100.990698][ T1877] total_workingset_refault_file 18825 [ 100.997285][ T1877] total_swap 127799296 [ 101.007557][ T1877] total_swapcached 196608 [ 101.011914][ T1877] total_pgpgin 332550 [ 101.026437][ T1877] total_pgpgout 264645 [ 101.030606][ T1877] total_pgfault 54285 [ 101.034639][ T1877] total_pgmajfault 476 [ 101.038873][ T1877] total_inactive_anon 160387072 [ 101.043744][ T1877] total_active_anon 119455744 [ 101.048458][ T1877] total_inactive_file 0 [ 101.052673][ T1877] total_active_file 278528 [ 101.057336][ T1877] total_unevictable 0 [ 101.061348][ T1877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1857,uid=0 [ 101.076163][ T1877] Memory cgroup out of memory: Killed process 1857 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 101.144684][ T1842] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 101.204598][ T1842] CPU: 0 UID: 0 PID: 1842 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 101.204640][ T1842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.204655][ T1842] Call Trace: [ 101.204663][ T1842] [ 101.204673][ T1842] __dump_stack+0x21/0x30 [ 101.204706][ T1842] dump_stack_lvl+0x10c/0x190 [ 101.204732][ T1842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.204759][ T1842] ? ___ratelimit+0x3f7/0x5a0 [ 101.204785][ T1842] dump_stack+0x19/0x20 [ 101.204810][ T1842] dump_header+0xd7/0x490 [ 101.204844][ T1842] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 101.204876][ T1842] oom_kill_process+0x4c0/0x7e0 [ 101.204898][ T1842] ? sched_clock_cpu+0x75/0x400 [ 101.204926][ T1842] out_of_memory+0x7ee/0xbd0 [ 101.204946][ T1842] ? __cfi_out_of_memory+0x10/0x10 [ 101.204967][ T1842] ? mutex_lock_killable+0x104/0x1c0 [ 101.204996][ T1842] ? __cfi_mutex_lock_killable+0x10/0x10 [ 101.205025][ T1842] mem_cgroup_out_of_memory+0x279/0x350 [ 101.205054][ T1842] ? drain_obj_stock+0xed0/0xed0 [ 101.205085][ T1842] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 101.205114][ T1842] try_charge_memcg+0x8f7/0xde0 [ 101.205140][ T1842] ? __cfi_try_charge_memcg+0x10/0x10 [ 101.205164][ T1842] ? __alloc_pages_noprof+0x30d/0x6c0 [ 101.205188][ T1842] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 101.205210][ T1842] ? __folio_batch_add_and_move+0x2ab/0x370 [ 101.205235][ T1842] __mem_cgroup_charge+0xf6/0x410 [ 101.205261][ T1842] ? __kasan_check_write+0x18/0x20 [ 101.205288][ T1842] ? _raw_spin_lock+0x8c/0x120 [ 101.205322][ T1842] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 101.205352][ T1842] shmem_alloc_and_add_folio+0x86d/0x1050 [ 101.205390][ T1842] ? put_swap_device+0x130/0x130 [ 101.205424][ T1842] ? shmem_huge_global_enabled+0x2da/0x360 [ 101.205457][ T1842] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 101.205490][ T1842] ? __kasan_check_write+0x18/0x20 [ 101.205517][ T1842] ? _raw_spin_lock+0x8c/0x120 [ 101.205551][ T1842] shmem_get_folio_gfp+0x5f0/0x1380 [ 101.205586][ T1842] ? shmem_get_folio+0xc0/0xc0 [ 101.205617][ T1842] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 101.205643][ T1842] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 101.205669][ T1842] ? inode_to_bdi+0x6d/0x100 [ 101.205695][ T1842] shmem_write_begin+0xf4/0x270 [ 101.205730][ T1842] generic_perform_write+0x32d/0x960 [ 101.205760][ T1842] ? __cfi_generic_perform_write+0x10/0x10 [ 101.205786][ T1842] ? down_write+0xe9/0x2a0 [ 101.205814][ T1842] ? mnt_get_write_access_file+0x1af/0x3b0 [ 101.205837][ T1842] ? mnt_put_write_access_file+0xc2/0x100 [ 101.205866][ T1842] ? file_update_time+0x1ef/0x220 [ 101.205889][ T1842] shmem_file_write_iter+0x105/0x130 [ 101.205913][ T1842] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 101.205937][ T1842] __kernel_write_iter+0x392/0x830 [ 101.205966][ T1842] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 101.205991][ T1842] ? __cfi___kernel_write_iter+0x10/0x10 [ 101.206019][ T1842] ? get_dump_page+0x160/0x220 [ 101.206043][ T1842] ? __asan_memset+0x39/0x50 [ 101.206069][ T1842] ? iov_iter_bvec+0xc0/0x180 [ 101.206102][ T1842] dump_user_range+0xb06/0xdf0 [ 101.206132][ T1842] ? __cfi_dump_emit+0x10/0x10 [ 101.206160][ T1842] ? __cfi_dump_user_range+0x10/0x10 [ 101.206189][ T1842] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 101.206219][ T1842] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 101.206250][ T1842] elf_core_dump+0x2cd9/0x3810 [ 101.206289][ T1842] ? __cfi_elf_core_dump+0x10/0x10 [ 101.206331][ T1842] ? dump_interrupted+0xf0/0xf0 [ 101.206357][ T1842] ? filp_open+0x182/0x1d0 [ 101.206380][ T1842] ? 0xffffffffff600000 [ 101.206417][ T1842] do_coredump+0x1bf7/0x2bd0 [ 101.206449][ T1842] ? __cfi_do_coredump+0x10/0x10 [ 101.206475][ T1842] ? asm_exc_general_protection+0x2b/0x30 [ 101.206511][ T1842] ? __kasan_slab_free+0x6a/0x80 [ 101.206545][ T1842] ? kmem_cache_free+0x1c1/0x4c0 [ 101.206576][ T1842] get_signal+0x11fd/0x14f0 [ 101.206605][ T1842] arch_do_signal_or_restart+0x96/0x720 [ 101.206637][ T1842] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 101.206670][ T1842] ? fixup_iopl_exception+0xdd/0x2e0 [ 101.206704][ T1842] irqentry_exit_to_user_mode+0x4e/0xb0 [ 101.206735][ T1842] irqentry_exit+0x16/0x60 [ 101.206764][ T1842] exc_general_protection+0x15a/0x1f0 [ 101.206789][ T1842] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 101.206817][ T1842] asm_exc_general_protection+0x2b/0x30 [ 101.206843][ T1842] RIP: 0033:0x7f927778e931 [ 101.206874][ T1842] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 101.206893][ T1842] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 101.206914][ T1842] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 101.206930][ T1842] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 101.206945][ T1842] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 101.206962][ T1842] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 101.206978][ T1842] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 101.206997][ T1842] [ 101.700704][ T1842] memory: usage 307200kB, limit 307200kB, failcnt 59071 [ 101.707891][ T1842] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0 [ 101.716293][ T1842] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 101.724310][ T1842] Memory cgroup stats for /syz3: [ 101.724685][ T1842] cache 314351616 [ 101.734729][ T1842] rss 151552 [ 101.738064][ T1842] rss_huge 0 [ 101.741319][ T1842] shmem 314347520 [ 101.744953][ T1842] mapped_file 0 [ 101.748466][ T1842] dirty 0 [ 101.751420][ T1842] writeback 0 [ 101.754706][ T1842] workingset_refault_anon 31 [ 101.759320][ T1842] workingset_refault_file 19272 [ 101.764177][ T1842] swap 127905792 [ 101.767748][ T1842] swapcached 90112 [ 101.771472][ T1842] pgpgin 348758 [ 101.774920][ T1842] pgpgout 272469 [ 101.778483][ T1842] pgfault 54827 [ 101.781949][ T1842] pgmajfault 485 [ 101.785518][ T1842] inactive_anon 256905216 [ 101.789872][ T1842] active_anon 57663488 [ 101.793945][ T1842] inactive_file 0 [ 101.797594][ T1842] active_file 4096 [ 101.801330][ T1842] unevictable 0 [ 101.804777][ T1842] hierarchical_memory_limit 314572800 [ 101.810289][ T1842] hierarchical_memsw_limit 9223372036854771712 [ 101.816454][ T1842] total_cache 314351616 [ 101.820636][ T1842] total_rss 151552 [ 101.824361][ T1842] total_rss_huge 0 [ 101.828097][ T1842] total_shmem 314347520 [ 101.832255][ T1842] total_mapped_file 0 [ 101.836233][ T1842] total_dirty 0 [ 101.839748][ T1842] total_writeback 0 [ 101.843655][ T1842] total_workingset_refault_anon 31 [ 101.848784][ T1842] total_workingset_refault_file 19272 [ 101.854163][ T1842] total_swap 127905792 [ 101.858249][ T1842] total_swapcached 90112 [ 101.862496][ T1842] total_pgpgin 348758 [ 101.866466][ T1842] total_pgpgout 272469 [ 101.870554][ T1842] total_pgfault 54827 [ 101.874542][ T1842] total_pgmajfault 485 [ 101.878642][ T1842] total_inactive_anon 256905216 [ 101.883494][ T1842] total_active_anon 57663488 [ 101.888101][ T1842] total_inactive_file 0 [ 101.892280][ T1842] total_active_file 4096 [ 101.896512][ T1842] total_unevictable 0 [ 101.900520][ T1842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1848,uid=0 [ 101.922620][ T1842] Memory cgroup out of memory: Killed process 1848 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:42420kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 101.994507][ T1884] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.069574][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 102.069594][ T36] audit: type=1400 audit(7004407756.295:404): avc: denied { lock } for pid=2626 comm="syz.2.625" path="socket:[19734]" dev="sockfs" ino=19734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 102.156916][ T1884] CPU: 0 UID: 0 PID: 1884 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 102.156955][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.156970][ T1884] Call Trace: [ 102.156977][ T1884] [ 102.156986][ T1884] __dump_stack+0x21/0x30 [ 102.157020][ T1884] dump_stack_lvl+0x10c/0x190 [ 102.157047][ T1884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.157075][ T1884] ? ___ratelimit+0x3f7/0x5a0 [ 102.157101][ T1884] dump_stack+0x19/0x20 [ 102.157127][ T1884] dump_header+0xd7/0x490 [ 102.157163][ T1884] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 102.157189][ T1884] oom_kill_process+0x4c0/0x7e0 [ 102.157212][ T1884] ? sched_clock_cpu+0x75/0x400 [ 102.157241][ T1884] out_of_memory+0x7ee/0xbd0 [ 102.157263][ T1884] ? __cfi_out_of_memory+0x10/0x10 [ 102.157285][ T1884] ? mutex_lock_killable+0x104/0x1c0 [ 102.157315][ T1884] ? __cfi_mutex_lock_killable+0x10/0x10 [ 102.157347][ T1884] mem_cgroup_out_of_memory+0x279/0x350 [ 102.157379][ T1884] ? drain_obj_stock+0xed0/0xed0 [ 102.157412][ T1884] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 102.157444][ T1884] try_charge_memcg+0x8f7/0xde0 [ 102.157472][ T1884] ? __cfi_try_charge_memcg+0x10/0x10 [ 102.157498][ T1884] ? __alloc_pages_noprof+0x30d/0x6c0 [ 102.157524][ T1884] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 102.157550][ T1884] ? __folio_batch_add_and_move+0x2ab/0x370 [ 102.157575][ T1884] __mem_cgroup_charge+0xf6/0x410 [ 102.157604][ T1884] ? __kasan_check_write+0x18/0x20 [ 102.157633][ T1884] ? _raw_spin_lock+0x8c/0x120 [ 102.157668][ T1884] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 102.157700][ T1884] shmem_alloc_and_add_folio+0x86d/0x1050 [ 102.157748][ T1884] ? put_swap_device+0x130/0x130 [ 102.157784][ T1884] ? shmem_huge_global_enabled+0x2da/0x360 [ 102.157819][ T1884] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 102.157853][ T1884] ? __kasan_check_write+0x18/0x20 [ 102.157881][ T1884] ? _raw_spin_lock+0x8c/0x120 [ 102.157917][ T1884] shmem_get_folio_gfp+0x5f0/0x1380 [ 102.157954][ T1884] ? shmem_get_folio+0xc0/0xc0 [ 102.157998][ T1884] ? follow_page_pte+0xa5c/0xb90 [ 102.158022][ T1884] ? inode_to_bdi+0x6d/0x100 [ 102.158048][ T1884] shmem_write_begin+0xf4/0x270 [ 102.158084][ T1884] generic_perform_write+0x32d/0x960 [ 102.158114][ T1884] ? __cfi_generic_perform_write+0x10/0x10 [ 102.158142][ T1884] ? down_write+0xe9/0x2a0 [ 102.158171][ T1884] ? file_update_time+0xa3/0x220 [ 102.158197][ T1884] shmem_file_write_iter+0x105/0x130 [ 102.158221][ T1884] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 102.158246][ T1884] __kernel_write_iter+0x392/0x830 [ 102.158275][ T1884] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 102.158301][ T1884] ? __cfi___kernel_write_iter+0x10/0x10 [ 102.158330][ T1884] ? get_dump_page+0x160/0x220 [ 102.158352][ T1884] ? __asan_memset+0x39/0x50 [ 102.158378][ T1884] ? iov_iter_bvec+0xc0/0x180 [ 102.158411][ T1884] dump_user_range+0xb06/0xdf0 [ 102.158440][ T1884] ? __cfi_dump_emit+0x10/0x10 [ 102.158468][ T1884] ? __cfi_dump_user_range+0x10/0x10 [ 102.158496][ T1884] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 102.158546][ T1884] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 102.158579][ T1884] elf_core_dump+0x2cd9/0x3810 [ 102.158618][ T1884] ? __cfi_elf_core_dump+0x10/0x10 [ 102.158661][ T1884] ? dump_interrupted+0xf0/0xf0 [ 102.158688][ T1884] ? filp_open+0x182/0x1d0 [ 102.158712][ T1884] ? 0xffffffffff600000 [ 102.158738][ T1884] do_coredump+0x1bf7/0x2bd0 [ 102.158771][ T1884] ? __cfi_do_coredump+0x10/0x10 [ 102.158809][ T1884] ? asm_exc_general_protection+0x2b/0x30 [ 102.158844][ T1884] ? __kasan_slab_free+0x6a/0x80 [ 102.158876][ T1884] ? kmem_cache_free+0x1c1/0x4c0 [ 102.158905][ T1884] get_signal+0x11fd/0x14f0 [ 102.158933][ T1884] arch_do_signal_or_restart+0x96/0x720 [ 102.158965][ T1884] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 102.158997][ T1884] ? fixup_iopl_exception+0xdd/0x2e0 [ 102.159030][ T1884] irqentry_exit_to_user_mode+0x4e/0xb0 [ 102.159061][ T1884] irqentry_exit+0x16/0x60 [ 102.159090][ T1884] exc_general_protection+0x15a/0x1f0 [ 102.159114][ T1884] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 102.159142][ T1884] asm_exc_general_protection+0x2b/0x30 [ 102.159167][ T1884] RIP: 0033:0x7f927778e931 [ 102.159186][ T1884] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.159208][ T1884] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 102.159230][ T1884] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 102.159248][ T1884] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 102.159266][ T1884] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 102.159284][ T1884] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 102.159300][ T1884] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 102.159320][ T1884] [ 102.159330][ T1884] memory: usage 293156kB, limit 307200kB, failcnt 59173 [ 102.592467][ T2638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 102.599521][ T1884] memory+swap: usage 431924kB, limit 9007199254740988kB, failcnt 0 [ 102.666926][ T1884] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 102.685712][ T1884] Memory cgroup stats for /syz3: [ 102.685873][ T1884] cache 314212352 [ 102.696699][ T1884] rss 106496 [ 102.703158][ T1884] rss_huge 0 [ 102.706535][ T1884] shmem 314212352 [ 102.710454][ T1884] mapped_file 0 [ 102.714201][ T1884] dirty 0 [ 102.717797][ T1884] writeback 0 [ 102.721163][ T1884] workingset_refault_anon 34 [ 102.725810][ T1884] workingset_refault_file 19803 [ 102.731081][ T1884] swap 127901696 [ 102.734703][ T1884] swapcached 86016 [ 102.738675][ T1884] pgpgin 361151 [ 102.742267][ T1884] pgpgout 284907 [ 102.747747][ T1884] pgfault 55525 [ 102.751871][ T1884] pgmajfault 495 [ 102.755684][ T1884] inactive_anon 127840256 [ 102.760460][ T1884] active_anon 186548224 [ 102.764728][ T1884] inactive_file 0 [ 102.768888][ T1884] active_file 0 [ 102.772452][ T1884] unevictable 0 [ 102.775989][ T1884] hierarchical_memory_limit 314572800 [ 102.781759][ T1884] hierarchical_memsw_limit 9223372036854771712 [ 102.788124][ T1884] total_cache 314212352 [ 102.792440][ T1884] total_rss 106496 [ 102.796234][ T1884] total_rss_huge 0 [ 102.800284][ T1884] total_shmem 314212352 [ 102.804673][ T1884] total_mapped_file 0 [ 102.808932][ T1884] total_dirty 0 [ 102.812490][ T1884] total_writeback 0 [ 102.816431][ T1884] total_workingset_refault_anon 34 [ 102.821900][ T1884] total_workingset_refault_file 19803 [ 102.827570][ T1884] total_swap 127901696 [ 102.831723][ T1884] total_swapcached 86016 [ 102.836034][ T1884] total_pgpgin 361151 [ 102.841137][ T1884] total_pgpgout 284907 [ 102.845361][ T1884] total_pgfault 55525 [ 102.849945][ T1884] total_pgmajfault 495 [ 102.854183][ T1884] total_inactive_anon 127840256 [ 102.859291][ T1884] total_active_anon 186548224 [ 102.864046][ T1884] total_inactive_file 0 [ 102.870368][ T1884] total_active_file 0 [ 102.874442][ T1884] total_unevictable 0 [ 102.878716][ T1884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1844,uid=0 [ 102.893816][ T1884] Memory cgroup out of memory: Killed process 1844 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:38696kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 102.974996][ T2650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 103.029275][ T1833] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 103.088925][ T2653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.109024][ T36] audit: type=1326 audit(7004407757.335:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.4.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756838e929 code=0x0 [ 103.157197][ T36] audit: type=1400 audit(7004407757.335:406): avc: denied { map } for pid=2652 comm="syz.1.635" path="socket:[19799]" dev="sockfs" ino=19799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.190906][ T2657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.201892][ T1833] CPU: 0 UID: 0 PID: 1833 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 103.201932][ T1833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.201946][ T1833] Call Trace: [ 103.201953][ T1833] [ 103.201962][ T1833] __dump_stack+0x21/0x30 [ 103.201993][ T1833] dump_stack_lvl+0x10c/0x190 [ 103.202020][ T1833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.202046][ T1833] ? ___ratelimit+0x3f7/0x5a0 [ 103.202071][ T1833] dump_stack+0x19/0x20 [ 103.202096][ T1833] dump_header+0xd7/0x490 [ 103.202130][ T1833] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 103.202155][ T1833] oom_kill_process+0x4c0/0x7e0 [ 103.202176][ T1833] ? sched_clock_cpu+0x75/0x400 [ 103.202204][ T1833] out_of_memory+0x7ee/0xbd0 [ 103.202226][ T1833] ? __cfi_out_of_memory+0x10/0x10 [ 103.202247][ T1833] ? mutex_lock_killable+0x92/0x1c0 [ 103.202276][ T1833] ? __cfi_mutex_lock_killable+0x10/0x10 [ 103.202307][ T1833] mem_cgroup_out_of_memory+0x279/0x350 [ 103.202339][ T1833] ? drain_obj_stock+0xed0/0xed0 [ 103.202370][ T1833] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 103.202401][ T1833] try_charge_memcg+0x8f7/0xde0 [ 103.202427][ T1833] ? __cfi_try_charge_memcg+0x10/0x10 [ 103.202451][ T1833] ? __alloc_pages_noprof+0x30d/0x6c0 [ 103.202476][ T1833] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 103.202499][ T1833] ? __folio_batch_add_and_move+0x2ab/0x370 [ 103.202521][ T1833] __mem_cgroup_charge+0xf6/0x410 [ 103.202548][ T1833] ? __kasan_check_write+0x18/0x20 [ 103.202575][ T1833] ? _raw_spin_lock+0x8c/0x120 [ 103.202606][ T1833] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 103.202635][ T1833] shmem_alloc_and_add_folio+0x86d/0x1050 [ 103.202680][ T1833] ? put_swap_device+0x130/0x130 [ 103.202712][ T1833] ? shmem_huge_global_enabled+0x2da/0x360 [ 103.202745][ T1833] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 103.202778][ T1833] ? __kasan_check_write+0x18/0x20 [ 103.202805][ T1833] ? _raw_spin_lock+0x8c/0x120 [ 103.202837][ T1833] shmem_get_folio_gfp+0x5f0/0x1380 [ 103.202870][ T1833] ? shmem_get_folio+0xc0/0xc0 [ 103.202901][ T1833] ? follow_page_pte+0xa5c/0xb90 [ 103.202925][ T1833] ? inode_to_bdi+0x6d/0x100 [ 103.202971][ T1833] shmem_write_begin+0xf4/0x270 [ 103.203007][ T1833] generic_perform_write+0x32d/0x960 [ 103.203038][ T1833] ? __cfi_generic_perform_write+0x10/0x10 [ 103.203066][ T1833] ? down_write+0xe9/0x2a0 [ 103.203097][ T1833] ? file_update_time+0xa3/0x220 [ 103.203124][ T1833] shmem_file_write_iter+0x105/0x130 [ 103.203150][ T1833] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 103.203176][ T1833] __kernel_write_iter+0x392/0x830 [ 103.203206][ T1833] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 103.203232][ T1833] ? __cfi___kernel_write_iter+0x10/0x10 [ 103.203262][ T1833] ? get_dump_page+0x160/0x220 [ 103.203285][ T1833] ? __asan_memset+0x39/0x50 [ 103.203313][ T1833] ? iov_iter_bvec+0xc0/0x180 [ 103.203348][ T1833] dump_user_range+0xb06/0xdf0 [ 103.203379][ T1833] ? __cfi_dump_emit+0x10/0x10 [ 103.203408][ T1833] ? __cfi_dump_user_range+0x10/0x10 [ 103.203438][ T1833] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 103.203470][ T1833] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 103.203501][ T1833] elf_core_dump+0x2cd9/0x3810 [ 103.203540][ T1833] ? __cfi_elf_core_dump+0x10/0x10 [ 103.203580][ T1833] ? dump_interrupted+0xf0/0xf0 [ 103.203606][ T1833] ? filp_open+0x182/0x1d0 [ 103.203628][ T1833] ? 0xffffffffff600000 [ 103.203646][ T1833] do_coredump+0x1bf7/0x2bd0 [ 103.203686][ T1833] ? __cfi_do_coredump+0x10/0x10 [ 103.203713][ T1833] ? asm_exc_general_protection+0x2b/0x30 [ 103.203749][ T1833] ? __kasan_slab_free+0x6a/0x80 [ 103.203781][ T1833] ? kmem_cache_free+0x1c1/0x4c0 [ 103.203811][ T1833] get_signal+0x11fd/0x14f0 [ 103.203839][ T1833] arch_do_signal_or_restart+0x96/0x720 [ 103.203872][ T1833] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 103.203904][ T1833] ? fixup_iopl_exception+0xdd/0x2e0 [ 103.203937][ T1833] irqentry_exit_to_user_mode+0x4e/0xb0 [ 103.203969][ T1833] irqentry_exit+0x16/0x60 [ 103.203999][ T1833] exc_general_protection+0x15a/0x1f0 [ 103.204025][ T1833] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 103.204053][ T1833] asm_exc_general_protection+0x2b/0x30 [ 103.204078][ T1833] RIP: 0033:0x7f927778e931 [ 103.204099][ T1833] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 103.204120][ T1833] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 103.204143][ T1833] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 103.204162][ T1833] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 103.204180][ T1833] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 103.204197][ T1833] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 103.204214][ T1833] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 103.204236][ T1833] [ 103.204376][ T1833] memory: usage 302084kB, limit 307200kB, failcnt 60466 [ 103.351377][ T2666] rust_binder: Error while translating object. [ 103.627542][ T1833] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 103.656928][ T2666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.716893][ T2666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 103.767688][ T1833] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 103.786899][ T412] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 103.804111][ T1833] Memory cgroup stats for /syz3: [ 103.804332][ T1833] cache 313917440 [ 103.824447][ T36] audit: type=1400 audit(7004407758.045:407): avc: denied { mounton } for pid=2668 comm="syz.1.639" path="mnt:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.856876][ T1833] rss 274432 [ 103.860169][ T1833] rss_huge 0 [ 103.868749][ T1833] shmem 313917440 [ 103.872440][ T1833] mapped_file 0 [ 103.875914][ T1833] dirty 0 [ 103.887842][ T36] audit: type=1400 audit(7004407758.115:408): avc: denied { map } for pid=2672 comm="syz.3.640" path="socket:[19881]" dev="sockfs" ino=19881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.916871][ T1833] writeback 0 [ 103.920203][ T1833] workingset_refault_anon 39 [ 103.924821][ T1833] workingset_refault_file 19828 [ 103.929737][ T36] audit: type=1400 audit(7004407758.135:409): avc: denied { read } for pid=2672 comm="syz.3.640" path="socket:[19881]" dev="sockfs" ino=19881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.948055][ T412] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.966905][ T1833] swap 127987712 [ 103.970532][ T1833] swapcached 8192 [ 103.980396][ T2669] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 103.988292][ T1833] pgpgin 366956 [ 103.989126][ T412] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.992488][ T1833] pgpgout 290760 [ 103.992500][ T1833] pgfault 55738 [ 104.004055][ T412] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.032441][ T1833] pgmajfault 504 [ 104.036445][ T1833] inactive_anon 222347264 [ 104.040971][ T1833] active_anon 91320320 [ 104.045248][ T1833] inactive_file 0 [ 104.049088][ T1833] active_file 0 [ 104.052780][ T1833] unevictable 0 [ 104.056330][ T412] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.065534][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.073627][ T412] usb 3-1: Product: syz [ 104.077904][ T412] usb 3-1: Manufacturer: syz [ 104.082539][ T412] usb 3-1: SerialNumber: syz [ 104.087672][ T1833] hierarchical_memory_limit 314572800 [ 104.097232][ T1833] hierarchical_memsw_limit 9223372036854771712 [ 104.104028][ T412] hub 3-1:1.0: bad descriptor, ignoring hub [ 104.111791][ T1833] total_cache 313917440 [ 104.111862][ T412] hub 3-1:1.0: probe with driver hub failed with error -5 [ 104.116971][ T1833] total_rss 274432 [ 104.133220][ T1833] total_rss_huge 0 [ 104.137023][ T1833] total_shmem 313917440 [ 104.141477][ T1833] total_mapped_file 0 [ 104.145483][ T1833] total_dirty 0 [ 104.151368][ T1833] total_writeback 0 [ 104.155207][ T1833] total_workingset_refault_anon 39 [ 104.161874][ T1833] total_workingset_refault_file 19828 [ 104.167485][ T1833] total_swap 127987712 [ 104.171667][ T1833] total_swapcached 8192 [ 104.175875][ T1833] total_pgpgin 366956 [ 104.180220][ T1833] total_pgpgout 290760 [ 104.184395][ T1833] total_pgfault 55738 [ 104.188755][ T1833] total_pgmajfault 504 [ 104.192886][ T1833] total_inactive_anon 222347264 [ 104.198046][ T1833] total_active_anon 91320320 [ 104.202696][ T1833] total_inactive_file 0 [ 104.207202][ T1833] total_active_file 0 [ 104.211331][ T1833] total_unevictable 0 [ 104.215416][ T1833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1877,uid=0 [ 104.230648][ T1833] Memory cgroup out of memory: Killed process 1877 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:37940kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 104.320574][ T412] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.530323][ T2685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.530658][ T2686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 104.552090][ T1843] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 104.575335][ T2661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.585614][ T2661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.601361][ T412] usb 3-1: USB disconnect, device number 22 [ 104.793420][ T1843] CPU: 0 UID: 0 PID: 1843 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 104.793458][ T1843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.793473][ T1843] Call Trace: [ 104.793490][ T1843] [ 104.793500][ T1843] __dump_stack+0x21/0x30 [ 104.793532][ T1843] dump_stack_lvl+0x10c/0x190 [ 104.793560][ T1843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.793586][ T1843] ? ___ratelimit+0x3f7/0x5a0 [ 104.793612][ T1843] dump_stack+0x19/0x20 [ 104.793638][ T1843] dump_header+0xd7/0x490 [ 104.793673][ T1843] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 104.793699][ T1843] oom_kill_process+0x4c0/0x7e0 [ 104.793721][ T1843] ? sched_clock_cpu+0x75/0x400 [ 104.793750][ T1843] out_of_memory+0x7ee/0xbd0 [ 104.793772][ T1843] ? __cfi_out_of_memory+0x10/0x10 [ 104.793793][ T1843] ? mutex_lock_killable+0x92/0x1c0 [ 104.793822][ T1843] ? __cfi_mutex_lock_killable+0x10/0x10 [ 104.793852][ T1843] mem_cgroup_out_of_memory+0x279/0x350 [ 104.793892][ T1843] ? drain_obj_stock+0xed0/0xed0 [ 104.793924][ T1843] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 104.793955][ T1843] try_charge_memcg+0x8f7/0xde0 [ 104.793982][ T1843] ? __cfi_try_charge_memcg+0x10/0x10 [ 104.794008][ T1843] ? __alloc_pages_noprof+0x30d/0x6c0 [ 104.794033][ T1843] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.794058][ T1843] ? __folio_batch_add_and_move+0x2ab/0x370 [ 104.794083][ T1843] __mem_cgroup_charge+0xf6/0x410 [ 104.794111][ T1843] ? __kasan_check_write+0x18/0x20 [ 104.794139][ T1843] ? _raw_spin_lock+0x8c/0x120 [ 104.794173][ T1843] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 104.794204][ T1843] shmem_alloc_and_add_folio+0x86d/0x1050 [ 104.794243][ T1843] ? put_swap_device+0x130/0x130 [ 104.794279][ T1843] ? shmem_huge_global_enabled+0x2da/0x360 [ 104.794314][ T1843] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 104.794346][ T1843] ? __kasan_check_write+0x18/0x20 [ 104.794373][ T1843] ? _raw_spin_lock+0x8c/0x120 [ 104.794406][ T1843] shmem_get_folio_gfp+0x5f0/0x1380 [ 104.794440][ T1843] ? shmem_get_folio+0xc0/0xc0 [ 104.794474][ T1843] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 104.794507][ T1843] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 104.794534][ T1843] ? inode_to_bdi+0x6d/0x100 [ 104.794561][ T1843] shmem_write_begin+0xf4/0x270 [ 104.794596][ T1843] generic_perform_write+0x32d/0x960 [ 104.794625][ T1843] ? __cfi_generic_perform_write+0x10/0x10 [ 104.794651][ T1843] ? down_write+0xe9/0x2a0 [ 104.794679][ T1843] ? mnt_get_write_access_file+0x1af/0x3b0 [ 104.794703][ T1843] ? mnt_put_write_access_file+0xc2/0x100 [ 104.794728][ T1843] ? file_update_time+0x1ef/0x220 [ 104.794752][ T1843] shmem_file_write_iter+0x105/0x130 [ 104.794777][ T1843] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 104.794802][ T1843] __kernel_write_iter+0x392/0x830 [ 104.794830][ T1843] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 104.794856][ T1843] ? __cfi___kernel_write_iter+0x10/0x10 [ 104.794885][ T1843] ? get_dump_page+0x160/0x220 [ 104.794907][ T1843] ? __asan_memset+0x39/0x50 [ 104.794934][ T1843] ? iov_iter_bvec+0xc0/0x180 [ 104.794966][ T1843] dump_user_range+0xb06/0xdf0 [ 104.794997][ T1843] ? __cfi_dump_emit+0x10/0x10 [ 104.795025][ T1843] ? __cfi_dump_user_range+0x10/0x10 [ 104.795054][ T1843] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 104.795084][ T1843] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 104.795114][ T1843] elf_core_dump+0x2cd9/0x3810 [ 104.795151][ T1843] ? __cfi_elf_core_dump+0x10/0x10 [ 104.795193][ T1843] ? dump_interrupted+0xf0/0xf0 [ 104.795220][ T1843] ? filp_open+0x182/0x1d0 [ 104.795242][ T1843] ? 0xffffffffff600000 [ 104.795261][ T1843] do_coredump+0x1bf7/0x2bd0 [ 104.795292][ T1843] ? __cfi_do_coredump+0x10/0x10 [ 104.795318][ T1843] ? asm_exc_general_protection+0x2b/0x30 [ 104.795352][ T1843] ? __kasan_slab_free+0x6a/0x80 [ 104.795385][ T1843] ? kmem_cache_free+0x1c1/0x4c0 [ 104.795415][ T1843] get_signal+0x11fd/0x14f0 [ 104.795442][ T1843] arch_do_signal_or_restart+0x96/0x720 [ 104.795474][ T1843] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 104.795514][ T1843] ? fixup_iopl_exception+0xdd/0x2e0 [ 104.795546][ T1843] irqentry_exit_to_user_mode+0x4e/0xb0 [ 104.795577][ T1843] irqentry_exit+0x16/0x60 [ 104.795605][ T1843] exc_general_protection+0x15a/0x1f0 [ 104.795629][ T1843] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 104.795655][ T1843] asm_exc_general_protection+0x2b/0x30 [ 104.795680][ T1843] RIP: 0033:0x7f927778e931 [ 104.795700][ T1843] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 104.795720][ T1843] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 104.795743][ T1843] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 104.795760][ T1843] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 104.795778][ T1843] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 104.795796][ T1843] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 104.795812][ T1843] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 104.795832][ T1843] [ 105.396948][ T2691] input: syz0 as /devices/virtual/input/input31 [ 105.411308][ T36] audit: type=1400 audit(7004407759.635:410): avc: denied { search } for pid=2658 comm="syz.2.638" name="/" dev="configfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.453100][ T2694] rust_binder: Error while translating object. [ 105.453139][ T2694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.459394][ T2694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 105.468972][ T1843] memory: usage 307196kB, limit 307200kB, failcnt 63342 [ 105.472846][ T2694] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.478185][ T1843] memory+swap: usage 432052kB, limit 9007199254740988kB, failcnt 0 [ 105.507053][ T1843] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 105.514008][ T1843] Memory cgroup stats for /syz3: [ 105.514161][ T2658] usblp0: removed [ 105.514179][ T1843] cache 314150912 [ 105.526583][ T1843] rss 290816 [ 105.529857][ T1843] rss_huge 0 [ 105.533092][ T1843] shmem 314150912 [ 105.536742][ T1843] mapped_file 0 [ 105.540469][ T1843] dirty 0 [ 105.543412][ T1843] writeback 73728 [ 105.547078][ T1843] workingset_refault_anon 48 [ 105.551688][ T1843] workingset_refault_file 20462 [ 105.560292][ T36] audit: type=1400 audit(7004407759.785:411): avc: denied { append } for pid=2697 comm="syz.4.647" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.567872][ T1843] swap 127852544 [ 105.586509][ T1843] swapcached 143360 [ 105.592172][ T1843] pgpgin 372945 [ 105.595672][ T1843] pgpgout 296657 [ 105.599290][ T1843] pgfault 56030 [ 105.602763][ T1843] pgmajfault 520 [ 105.606322][ T1843] inactive_anon 149082112 [ 105.610918][ T1843] active_anon 164700160 [ 105.615093][ T1843] inactive_file 0 [ 105.618792][ T1843] active_file 0 [ 105.622344][ T1843] unevictable 0 [ 105.625818][ T1843] hierarchical_memory_limit 314572800 [ 105.631240][ T1843] hierarchical_memsw_limit 9223372036854771712 [ 105.637432][ T1843] total_cache 314150912 [ 105.641606][ T1843] total_rss 290816 [ 105.645339][ T1843] total_rss_huge 0 [ 105.649132][ T1843] total_shmem 314150912 [ 105.653313][ T1843] total_mapped_file 0 [ 105.657352][ T1843] total_dirty 0 [ 105.660831][ T1843] total_writeback 73728 [ 105.665083][ T1843] total_workingset_refault_anon 48 [ 105.670279][ T412] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 105.690198][ T1843] total_workingset_refault_file 20462 [ 105.696927][ T1843] total_swap 127852544 [ 105.701074][ T1843] total_swapcached 143360 [ 105.705421][ T1843] total_pgpgin 372945 [ 105.709572][ T1843] total_pgpgout 296657 [ 105.713669][ T1843] total_pgfault 56030 [ 105.717730][ T1843] total_pgmajfault 520 [ 105.721823][ T1843] total_inactive_anon 149082112 [ 105.726691][ T1843] total_active_anon 164700160 [ 105.731456][ T1843] total_inactive_file 0 [ 105.735633][ T1843] total_active_file 0 [ 105.739668][ T1843] total_unevictable 0 [ 105.743667][ T1843] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1884,uid=0 [ 105.758693][ T1843] Memory cgroup out of memory: Killed process 1884 (syz.3.472) total-vm:89960kB, anon-rss:944kB, file-rss:39032kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 105.816896][ T412] usb 2-1: device descriptor read/64, error -71 [ 106.056905][ T412] usb 2-1: device descriptor read/64, error -71 [ 106.117865][ T2720] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.129669][ T2722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.130021][ T2722] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 106.296888][ T412] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 106.376784][ T1837] syz.3.472 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 106.406964][ T1837] CPU: 0 UID: 0 PID: 1837 Comm: syz.3.472 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 106.407007][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.407023][ T1837] Call Trace: [ 106.407032][ T1837] [ 106.407042][ T1837] __dump_stack+0x21/0x30 [ 106.407076][ T1837] dump_stack_lvl+0x10c/0x190 [ 106.407116][ T1837] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.407144][ T1837] ? ___ratelimit+0x3f7/0x5a0 [ 106.407170][ T1837] dump_stack+0x19/0x20 [ 106.407197][ T1837] dump_header+0xd7/0x490 [ 106.407231][ T1837] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 106.407271][ T1837] oom_kill_process+0x4c0/0x7e0 [ 106.407294][ T1837] ? sched_clock_cpu+0x75/0x400 [ 106.407321][ T1837] out_of_memory+0x7ee/0xbd0 [ 106.407341][ T1837] ? __cfi_out_of_memory+0x10/0x10 [ 106.407363][ T1837] ? mutex_lock_killable+0x92/0x1c0 [ 106.407393][ T1837] ? __cfi_mutex_lock_killable+0x10/0x10 [ 106.407423][ T1837] mem_cgroup_out_of_memory+0x279/0x350 [ 106.407456][ T1837] ? drain_obj_stock+0xed0/0xed0 [ 106.407489][ T1837] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 106.407519][ T1837] try_charge_memcg+0x8f7/0xde0 [ 106.407545][ T1837] ? __cfi_try_charge_memcg+0x10/0x10 [ 106.407571][ T1837] ? __alloc_pages_noprof+0x30d/0x6c0 [ 106.407610][ T1837] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 106.407633][ T1837] ? __folio_batch_add_and_move+0x2ab/0x370 [ 106.407658][ T1837] __mem_cgroup_charge+0xf6/0x410 [ 106.407686][ T1837] ? __kasan_check_write+0x18/0x20 [ 106.407714][ T1837] ? _raw_spin_lock+0x8c/0x120 [ 106.407746][ T1837] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 106.407776][ T1837] shmem_alloc_and_add_folio+0x86d/0x1050 [ 106.407815][ T1837] ? put_swap_device+0x130/0x130 [ 106.407848][ T1837] ? shmem_huge_global_enabled+0x2da/0x360 [ 106.407882][ T1837] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 106.407914][ T1837] ? __kasan_check_write+0x18/0x20 [ 106.407941][ T1837] ? _raw_spin_lock+0x8c/0x120 [ 106.407975][ T1837] shmem_get_folio_gfp+0x5f0/0x1380 [ 106.408011][ T1837] ? shmem_get_folio+0xc0/0xc0 [ 106.408041][ T1837] ? follow_page_pte+0xa5c/0xb90 [ 106.408065][ T1837] ? inode_to_bdi+0x6d/0x100 [ 106.408091][ T1837] shmem_write_begin+0xf4/0x270 [ 106.408145][ T1837] generic_perform_write+0x32d/0x960 [ 106.408194][ T1837] ? __cfi_generic_perform_write+0x10/0x10 [ 106.408222][ T1837] ? down_write+0xe9/0x2a0 [ 106.408260][ T1837] ? file_update_time+0xa3/0x220 [ 106.408286][ T1837] shmem_file_write_iter+0x105/0x130 [ 106.408312][ T1837] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 106.408337][ T1837] __kernel_write_iter+0x392/0x830 [ 106.408367][ T1837] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 106.408394][ T1837] ? __cfi___kernel_write_iter+0x10/0x10 [ 106.408423][ T1837] ? get_dump_page+0x160/0x220 [ 106.408447][ T1837] ? __asan_memset+0x39/0x50 [ 106.408475][ T1837] ? iov_iter_bvec+0xc0/0x180 [ 106.408509][ T1837] dump_user_range+0xb06/0xdf0 [ 106.408541][ T1837] ? __cfi_dump_emit+0x10/0x10 [ 106.408569][ T1837] ? __cfi_dump_user_range+0x10/0x10 [ 106.408599][ T1837] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 106.408631][ T1837] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 106.408663][ T1837] elf_core_dump+0x2cd9/0x3810 [ 106.408702][ T1837] ? __cfi_elf_core_dump+0x10/0x10 [ 106.408746][ T1837] ? dump_interrupted+0xf0/0xf0 [ 106.408774][ T1837] ? filp_open+0x182/0x1d0 [ 106.408797][ T1837] ? 0xffffffffff600000 [ 106.408818][ T1837] do_coredump+0x1bf7/0x2bd0 [ 106.408850][ T1837] ? __cfi_do_coredump+0x10/0x10 [ 106.408878][ T1837] ? asm_exc_general_protection+0x2b/0x30 [ 106.408914][ T1837] ? __kasan_slab_free+0x6a/0x80 [ 106.408947][ T1837] ? kmem_cache_free+0x1c1/0x4c0 [ 106.408978][ T1837] get_signal+0x11fd/0x14f0 [ 106.409008][ T1837] arch_do_signal_or_restart+0x96/0x720 [ 106.409041][ T1837] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 106.409074][ T1837] ? fixup_iopl_exception+0xdd/0x2e0 [ 106.409109][ T1837] irqentry_exit_to_user_mode+0x4e/0xb0 [ 106.409141][ T1837] irqentry_exit+0x16/0x60 [ 106.409171][ T1837] exc_general_protection+0x15a/0x1f0 [ 106.409196][ T1837] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 106.409223][ T1837] asm_exc_general_protection+0x2b/0x30 [ 106.409259][ T1837] RIP: 0033:0x7f927778e931 [ 106.409292][ T1837] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 106.409314][ T1837] RSP: 002b:00002000000001e0 EFLAGS: 00010217 [ 106.409350][ T1837] RAX: 0000000000000000 RBX: 00007f92779b6080 RCX: 00007f927778e929 [ 106.409368][ T1837] RDX: 0000200000000040 RSI: 00002000000001e0 RDI: 0000000000100000 [ 106.409386][ T1837] RBP: 00007f9277810b39 R08: 0000200000000200 R09: 0000200000000200 [ 106.409415][ T1837] R10: 0000200000000080 R11: 0000000000000206 R12: 0000000000000000 [ 106.409431][ T1837] R13: 0000000000000000 R14: 00007f92779b6080 R15: 00007fffa4efd0f8 [ 106.409449][ T1837] [ 106.409458][ T1837] memory: usage 306964kB, limit 307200kB, failcnt 66913 [ 106.891214][ T412] usb 2-1: device descriptor read/64, error -71 [ 106.910287][ T1837] memory+swap: usage 398628kB, limit 9007199254740988kB, failcnt 0 [ 106.936687][ T1837] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 106.956895][ T451] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 106.976900][ T1837] Memory cgroup stats for /syz3: [ 106.977070][ T1837] cache 267595776 [ 106.985724][ T1837] rss 274432 [ 106.999863][ T1837] rss_huge 0 [ 107.003103][ T1837] shmem 263532544 [ 107.006746][ T1837] mapped_file 0 [ 107.016871][ T1837] dirty 0 [ 107.019853][ T1837] writeback 0 [ 107.027076][ T1837] workingset_refault_anon 82 [ 107.031705][ T1837] workingset_refault_file 21454 [ 107.056817][ T1837] swap 118353920 [ 107.060591][ T1837] swapcached 487424 [ 107.064417][ T1837] pgpgin 384476 [ 107.086951][ T1837] pgpgout 319480 [ 107.106895][ T451] usb 3-1: Using ep0 maxpacket: 8 [ 107.112029][ T1837] pgfault 56424 [ 107.115592][ T1837] pgmajfault 548 [ 107.120011][ T451] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.128352][ T451] usb 3-1: config 179 has no interface number 0 [ 107.134633][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.145756][ T412] usb 2-1: device descriptor read/64, error -71 [ 107.157071][ T1837] inactive_anon 130781184 [ 107.161452][ T1837] active_anon 133357568 [ 107.165632][ T1837] inactive_file 0 [ 107.169701][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.187006][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.206893][ T451] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.217083][ T1837] active_file 4063232 [ 107.221091][ T1837] unevictable 0 [ 107.224571][ T1837] hierarchical_memory_limit 314572800 [ 107.230281][ T451] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.230403][ T2740] rust_binder: Write failure EINVAL in pid:396 [ 107.243664][ T451] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.253919][ T2740] rust_binder: Read failure Err(EAGAIN) in pid:396 [ 107.259313][ T2741] rust_binder: Read failure Err(EAGAIN) in pid:396 [ 107.266891][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.281798][ T412] usb usb2-port1: attempt power cycle [ 107.297315][ T1837] hierarchical_memsw_limit 9223372036854771712 [ 107.303790][ T1837] total_cache 267595776 [ 107.308153][ T2730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 107.308849][ T1837] total_rss 274432 [ 107.332455][ T451] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 107.345171][ T1837] total_rss_huge 0 [ 107.357759][ T1837] total_shmem 263532544 [ 107.362619][ T1837] total_mapped_file 0 [ 107.366636][ T1837] total_dirty 0 [ 107.386976][ T1837] total_writeback 0 [ 107.391065][ T1837] total_workingset_refault_anon 82 [ 107.396209][ T1837] total_workingset_refault_file 21454 [ 107.403684][ T2748] rust_binder: Write failure EINVAL in pid:404 [ 107.410278][ T1837] total_swap 118353920 [ 107.438190][ T1837] total_swapcached 487424 [ 107.444823][ T1837] total_pgpgin 384476 [ 107.449100][ T1837] total_pgpgout 319480 [ 107.455266][ T1837] total_pgfault 56424 [ 107.459801][ T1837] total_pgmajfault 548 [ 107.464096][ T1837] total_inactive_anon 130781184 [ 107.469110][ T1837] total_active_anon 133357568 [ 107.473848][ T1837] total_inactive_file 0 [ 107.478068][ T1837] total_active_file 4063232 [ 107.482617][ T1837] total_unevictable 0 [ 107.486619][ T1837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.472,pid=1836,uid=0 [ 107.501912][ T1837] Memory cgroup out of memory: OOM victim 1836 (syz.3.472) is already exiting. Skip killing the task [ 107.534280][ T413] usb 3-1: USB disconnect, device number 23 [ 107.626932][ T412] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 107.658041][ T412] usb 2-1: device descriptor read/8, error -71 [ 107.752644][ T2758] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 107.787948][ T412] usb 2-1: device descriptor read/8, error -71 [ 108.026928][ T412] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 108.047964][ T412] usb 2-1: device descriptor read/8, error -71 [ 108.114125][ T2761] binder: Bad value for 'max' [ 108.177913][ T412] usb 2-1: device descriptor read/8, error -71 [ 108.287011][ T412] usb usb2-port1: unable to enumerate USB device [ 108.341283][ T2763] : renamed from vcan0 (while UP) [ 108.356902][ T345] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 108.508741][ T345] usb 3-1: config 9 has an invalid interface number: 51 but max is 0 [ 108.517071][ T345] usb 3-1: config 9 has no interface number 0 [ 108.528895][ T345] usb 3-1: string descriptor 0 read error: -22 [ 108.535137][ T345] usb 3-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 108.546890][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.762316][ T345] usb 3-1: USB disconnect, device number 24 [ 108.786165][ T2776] usb usb8: usbfs: process 2776 (syz.3.675) did not claim interface 0 before use [ 108.899062][ T36] audit: type=1400 audit(7004407763.125:412): avc: denied { ioctl } for pid=2782 comm="syz.3.677" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.186913][ T345] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 109.194480][ T413] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 109.291465][ T2795] binder: Unknown parameter ' Gx8%@J' [ 109.310005][ T2798] binder: Unknown parameter 'fscontext?}' [ 109.346900][ T413] usb 4-1: Using ep0 maxpacket: 16 [ 109.353237][ T413] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 109.364220][ T413] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.375246][ T413] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.388507][ T413] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.395151][ T413] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 109.404262][ T413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.413707][ T413] usb 4-1: config 0 descriptor?? [ 109.419750][ T345] usb 2-1: config 0 has an invalid interface number: 155 but max is 2 [ 109.428360][ T345] usb 2-1: config 0 has an invalid interface number: 83 but max is 2 [ 109.436520][ T345] usb 2-1: config 0 has an invalid interface number: 213 but max is 2 [ 109.449755][ T345] usb 2-1: config 0 has an invalid interface number: 7 but max is 2 [ 109.457807][ T345] usb 2-1: config 0 has an invalid interface number: 111 but max is 2 [ 109.465999][ T345] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 3 [ 109.475021][ T345] usb 2-1: config 0 has no interface number 0 [ 109.481211][ T345] usb 2-1: config 0 has no interface number 1 [ 109.487338][ T345] usb 2-1: config 0 has no interface number 2 [ 109.493448][ T345] usb 2-1: config 0 has no interface number 3 [ 109.499570][ T345] usb 2-1: config 0 has no interface number 4 [ 109.505684][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 109.516492][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 109.527337][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 109.538242][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0x9 is Bulk; changing to Interrupt [ 109.548365][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 109.559198][ T345] usb 2-1: config 0 interface 155 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 109.570023][ T345] usb 2-1: config 0 interface 155 altsetting 14 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 109.581015][ T345] usb 2-1: config 0 interface 155 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 109.591836][ T345] usb 2-1: config 0 interface 83 altsetting 160 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 109.605094][ T345] usb 2-1: config 0 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.616040][ T345] usb 2-1: config 0 interface 7 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 109.626993][ T345] usb 2-1: config 0 interface 7 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 109.637598][ T345] usb 2-1: config 0 interface 7 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 109.650616][ T345] usb 2-1: too many endpoints for config 0 interface 111 altsetting 153: 52, using maximum allowed: 30 [ 109.661700][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x1, skipping [ 109.666910][ T412] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 109.672617][ T345] usb 2-1: config 0 interface 111 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 109.691265][ T345] usb 2-1: config 0 interface 111 altsetting 153 endpoint 0xF has invalid maxpacket 16, setting to 8 [ 109.702174][ T345] usb 2-1: config 0 interface 111 altsetting 153 endpoint 0x3 has invalid maxpacket 64, setting to 8 [ 109.713093][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x6, skipping [ 109.723999][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x3, skipping [ 109.734884][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x3, skipping [ 109.745786][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0xB, skipping [ 109.756688][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x1, skipping [ 109.767603][ T345] usb 2-1: config 0 interface 111 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 109.778689][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x2, skipping [ 109.789592][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x6, skipping [ 109.800509][ T345] usb 2-1: config 0 interface 111 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 109.811587][ T345] usb 2-1: config 0 interface 111 altsetting 153 has a duplicate endpoint with address 0x6, skipping [ 109.816932][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.822494][ T345] usb 2-1: config 0 interface 111 altsetting 153 has 14 endpoint descriptors, different from the interface descriptor's value: 52 [ 109.828668][ T412] usb 3-1: device descriptor read/64, error -71 [ 109.852591][ T413] magicmouse 0003:05AC:0269.0011: item fetching failed at offset 3/7 [ 109.863842][ T36] audit: type=1400 audit(7004407764.095:413): avc: denied { mount } for pid=2805 comm="syz.4.685" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.886057][ T345] usb 2-1: config 0 interface 155 has no altsetting 0 [ 109.886130][ T36] audit: type=1400 audit(7004407764.095:414): avc: denied { watch watch_reads } for pid=2805 comm="syz.4.685" path="/134/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 109.893122][ T413] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed [ 109.923954][ T345] usb 2-1: config 0 interface 83 has no altsetting 0 [ 109.930707][ T345] usb 2-1: config 0 interface 7 has no altsetting 0 [ 109.937353][ T345] usb 2-1: config 0 interface 111 has no altsetting 0 [ 109.944275][ T413] magicmouse 0003:05AC:0269.0011: probe with driver magicmouse failed with error -22 [ 109.955157][ T36] audit: type=1400 audit(7004407764.185:415): avc: denied { unmount } for pid=1325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.053669][ T413] usb 4-1: USB disconnect, device number 33 [ 110.098117][ T412] usb 3-1: device descriptor read/64, error -71 [ 110.336946][ T412] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 110.466933][ T412] usb 3-1: device descriptor read/64, error -71 [ 110.716947][ T412] usb 3-1: device descriptor read/64, error -71 [ 110.786923][ T451] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 110.827035][ T412] usb usb3-port1: attempt power cycle [ 110.936894][ T451] usb 5-1: Using ep0 maxpacket: 16 [ 110.943210][ T451] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 110.951840][ T451] usb 5-1: config 1 has no interface number 0 [ 110.958122][ T451] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 110.968302][ T451] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 110.978562][ T451] usb 5-1: config 1 interface 105 has no altsetting 0 [ 110.987075][ T451] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 110.996430][ T451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.004634][ T451] usb 5-1: Product: syz [ 111.009475][ T451] usb 5-1: Manufacturer: syz [ 111.014095][ T451] usb 5-1: SerialNumber: syz [ 111.027436][ T2816] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.036678][ T2816] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.053308][ T2821] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 111.060538][ T2821] rust_binder: Write failure EINVAL in pid:827 [ 111.166907][ T412] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 111.197864][ T412] usb 3-1: device descriptor read/8, error -71 [ 111.327964][ T412] usb 3-1: device descriptor read/8, error -71 [ 111.445650][ T2816] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.452958][ T2816] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.566919][ T412] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 111.588097][ T412] usb 3-1: device descriptor read/8, error -71 [ 111.717953][ T412] usb 3-1: device descriptor read/8, error -71 [ 111.827061][ T412] usb usb3-port1: unable to enumerate USB device [ 111.940079][ T2828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23635 sclass=netlink_route_socket pid=2828 comm=syz.3.693 [ 111.962311][ T345] usb 2-1: New USB device found, idVendor=12d1, idProduct=713d, bcdDevice=92.0e [ 111.973552][ T345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.988463][ T345] usb 2-1: config 0 descriptor?? [ 111.996978][ T345] usb 2-1: can't set config #0, error -71 [ 112.008701][ T345] usb 2-1: USB disconnect, device number 39 [ 112.022311][ T36] audit: type=1400 audit(7004407766.245:416): avc: denied { mount } for pid=2835 comm="syz.3.696" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.022801][ T2836] devpts: called with bogus options [ 112.049826][ T36] audit: type=1400 audit(7004407766.245:417): avc: denied { remount } for pid=2835 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.073063][ T2836] rust_binder: Error while translating object. [ 112.073109][ T2836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.079387][ T2836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:840 [ 112.096440][ T36] audit: type=1400 audit(7004407766.325:418): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.204614][ T2847] can0: slcan on ptm0. [ 112.210498][ T36] audit: type=1400 audit(7004407766.435:419): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.244454][ T36] audit: type=1400 audit(7004407766.435:420): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.265913][ T36] audit: type=1400 audit(7004407766.435:421): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3784 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.297867][ T2816] rust_binder: Error in use_page_slow: ESRCH [ 112.297895][ T2816] rust_binder: use_range failure ESRCH [ 112.303973][ T2816] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 112.309767][ T2816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.318020][ T2816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 112.434919][ T451] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 112.462266][ T451] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:72:64:a3:88:44 [ 112.476883][ T413] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 112.478936][ T451] usb 5-1: USB disconnect, device number 15 [ 112.494076][ T451] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 112.518431][ T971] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.524868][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.533510][ T451] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 112.536229][ T2880] binder: Unknown parameter 'cgroup.subtree_control' [ 112.545773][ T451] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 112.572267][ T451] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 112.606904][ T413] usb 4-1: device descriptor read/64, error -71 [ 112.760813][ T2909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.707'. [ 112.856914][ T413] usb 4-1: device descriptor read/64, error -71 [ 112.977462][ T2923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 112.977979][ T2923] rust_binder: Error while translating object. [ 112.987352][ T2923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.993589][ T2923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 113.096894][ T413] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 113.236941][ T413] usb 4-1: device descriptor read/64, error -71 [ 113.476917][ T413] usb 4-1: device descriptor read/64, error -71 [ 113.587031][ T413] usb usb4-port1: attempt power cycle [ 113.673150][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.927924][ T413] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 113.947934][ T413] usb 4-1: device descriptor read/8, error -71 [ 113.995275][ T2944] netlink: 104 bytes leftover after parsing attributes in process `syz.4.718'. [ 114.006561][ T2945] netlink: 104 bytes leftover after parsing attributes in process `syz.4.718'. [ 114.078066][ T413] usb 4-1: device descriptor read/8, error -71 [ 114.286908][ T451] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 114.316893][ T413] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 114.337921][ T413] usb 4-1: device descriptor read/8, error -71 [ 114.436897][ T451] usb 5-1: Using ep0 maxpacket: 16 [ 114.443075][ T451] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 114.451350][ T451] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.461473][ T451] usb 5-1: config 1 has no interface number 0 [ 114.467610][ T451] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.478024][ T413] usb 4-1: device descriptor read/8, error -71 [ 114.480696][ T451] usb 5-1: config 1 interface 105 has no altsetting 0 [ 114.495460][ T451] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 114.504568][ T451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.512610][ T451] usb 5-1: Product: syz [ 114.516794][ T451] usb 5-1: Manufacturer: syz [ 114.521472][ T451] usb 5-1: SerialNumber: syz [ 114.527059][ T1242] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.529049][ T2932] Bluetooth: hci0: command 0x1003 tx timeout [ 114.569334][ T2952] /dev/rnullb0: Can't open blockdev [ 114.597086][ T413] usb usb4-port1: unable to enumerate USB device [ 114.734247][ T451] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 114.737473][ T2956] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 114.837522][ T2969] netlink: 9 bytes leftover after parsing attributes in process `syz.1.727'. [ 114.847023][ T2969] gretap0: entered promiscuous mode [ 114.853967][ T2969] netlink: 5 bytes leftover after parsing attributes in process `syz.1.727'. [ 114.862970][ T2969] 0{X: renamed from gretap0 [ 114.868642][ T2969] 0{X: left promiscuous mode [ 114.873711][ T2969] 0{X: entered allmulticast mode [ 114.879988][ T2969] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 115.206936][ T413] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 115.317141][ T2847] can0 (unregistered): slcan off ptm0. [ 115.358063][ T413] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 115.374620][ T413] usb 2-1: config 0 has no interface number 0 [ 115.381100][ T413] usb 2-1: config 0 interface 11 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.394898][ T413] usb 2-1: config 0 interface 11 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.409486][ T413] usb 2-1: config 0 interface 11 has no altsetting 0 [ 115.423613][ T413] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 115.434204][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.445917][ T413] usb 2-1: config 0 descriptor?? [ 115.726915][ T1242] Bluetooth: hci1: command 0x1003 tx timeout [ 115.726914][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 115.776908][ T65] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 115.860329][ T413] logitech-djreceiver 0003:046D:C532.0012: unknown main item tag 0x1 [ 115.869137][ T413] logitech-djreceiver 0003:046D:C532.0012: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.1-1/input11 [ 115.926918][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 115.933221][ T65] usb 4-1: config index 0 descriptor too short (expected 65134, got 101) [ 115.941732][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.952196][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 115.965964][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.975332][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.983368][ T65] usb 4-1: SerialNumber: syz [ 116.070627][ T2977] SELinux: policydb version 51618937 does not match my version range 15-33 [ 116.079439][ T2977] SELinux: failed to load policy [ 116.084565][ T2977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.085111][ T2977] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 116.098830][ T2977] rust_binder: Write failure EINVAL in pid:110 [ 116.100321][ T2977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.116287][ T2977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.130126][ T413] usb 2-1: USB disconnect, device number 40 [ 116.194773][ T65] usb 4-1: USB disconnect, device number 38 [ 116.289473][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 116.289493][ T36] audit: type=1400 audit(7004407770.515:435): avc: denied { execute } for pid=3037 comm="syz.2.737" path="/192/file1" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.324588][ T3039] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 116.324675][ T3038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.436936][ T413] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 116.596902][ T451] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 116.596902][ T413] usb 2-1: Using ep0 maxpacket: 16 [ 116.611368][ T413] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.620191][ T413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.630334][ T413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.640726][ T413] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.649830][ T413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.657871][ T413] usb 2-1: Product: 酁霪敖㍥﹢㉞ጢῺ훇㶾ᔪ䅦储ᤃ೮룅楮㚐훠㕔큨힢㭅莫蓙㎁壜쭧눸뷃䬇쏹雜⒚순ꭚ鯚醆莱▏遪㷊챁厠䵥쬞䖃뽟桔ﺮ끐ᦗ噸鳌ꯀ酥侘顾얔ἒ끜卵ꑒꙜ [ 116.682171][ T413] usb 2-1: SerialNumber: syz [ 116.767621][ T451] usb 3-1: Using ep0 maxpacket: 16 [ 116.774154][ T451] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 116.784234][ T451] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.793949][ T451] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 116.804757][ T451] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.813909][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.821977][ T451] usb 3-1: SerialNumber: syz [ 116.827711][ T3041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.888027][ T36] audit: type=1400 audit(7004407771.115:436): avc: denied { mounton } for pid=3047 comm="syz.3.740" path="/154/file0" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.911295][ T3034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.919864][ T3034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.938270][ T413] usb 2-1: 0:2 : does not exist [ 116.947039][ T413] usb 2-1: USB disconnect, device number 41 [ 116.955749][ T456] udevd[456]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 117.013276][ T3059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.013316][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:122 [ 117.032641][ T3061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.035856][ T3041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.042010][ T3061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:874 [ 117.060226][ T3061] /dev/rnullb0: Can't open blockdev [ 117.094996][ T345] usb 5-1: USB disconnect, device number 16 [ 117.112097][ T3067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'. [ 117.192105][ T36] audit: type=1400 audit(7004407771.415:437): avc: denied { setcheckreqprot } for pid=3062 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.761369][ T36] audit: type=1400 audit(7004407771.985:438): avc: denied { create } for pid=3085 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 117.816936][ T412] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 117.970292][ T412] usb 4-1: Using ep0 maxpacket: 32 [ 117.977760][ T412] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.979080][ T36] audit: type=1400 audit(7004407772.205:439): avc: denied { mounton } for pid=3091 comm="syz.4.755" path="/151/file0" dev="ramfs" ino=22842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 117.986159][ T412] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.017632][ T412] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.026660][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.036776][ T412] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.054420][ T412] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 118.068539][ T3094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 118.068833][ T412] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 118.087321][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.099978][ T412] usb 4-1: config 0 descriptor?? [ 118.119497][ T3095] rust_binder: Write failure EINVAL in pid:467 [ 118.124994][ T3097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.199778][ T3101] syz.1.758: attempt to access beyond end of device [ 118.199778][ T3101] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 118.219170][ T3101] exFAT-fs (loop1): unable to read boot sector [ 118.225373][ T3101] exFAT-fs (loop1): failed to read boot sector [ 118.231861][ T3101] exFAT-fs (loop1): failed to recognize exfat type [ 118.306773][ T412] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 118.354276][ T3106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.445756][ T3116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.452653][ T3116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 118.513443][ T3117] tipc: Started in network mode [ 118.526293][ T65] usb 4-1: USB disconnect, device number 39 [ 118.527556][ T3117] tipc: Node identity 4, cluster identity 4711 [ 118.527572][ T3117] tipc: Node number set to 4 [ 118.535755][ T65] usblp0: removed [ 118.598296][ T3118] rust_binder: Error while translating object. [ 118.598349][ T3118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.604585][ T3118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 119.063433][ T3130] can0: slcan on ptm0. [ 119.120169][ T3130] can0 (unregistered): slcan off ptm0. [ 119.141353][ T3147] /dev/rnullb0: Can't open blockdev [ 119.150486][ T36] audit: type=1400 audit(7004407773.375:440): avc: denied { accept } for pid=3144 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.170275][ T3150] rust_binder: Error while translating object. [ 119.170603][ T3150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 119.183210][ T36] audit: type=1400 audit(7004407773.395:441): avc: denied { getopt } for pid=3149 comm="syz.4.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.186531][ T3150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:485 [ 119.298672][ T3171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.313452][ T3171] rust_binder: Write failure EINVAL in pid:152 [ 119.367201][ T451] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 119.396268][ T3182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.396564][ T3182] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 119.411240][ T451] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 119.431829][ T451] usb 3-1: USB disconnect, device number 29 [ 119.445849][ T36] audit: type=1400 audit(7004407773.665:442): avc: denied { lock } for pid=3188 comm="syz.3.779" path="socket:[21408]" dev="sockfs" ino=21408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.466353][ T3204] 9p filesystem being mounted at /195/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 119.542859][ T36] audit: type=1326 audit(7004407773.765:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3181 comm="syz.1.778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe732f8e929 code=0x0 [ 119.641326][ T3230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.666897][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 119.684133][ T3235] ------------[ cut here ]------------ [ 119.686907][ T412] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 119.689694][ T3235] WARNING: CPU: 1 PID: 3235 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 119.706579][ T3235] Modules linked in: [ 119.710588][ T3235] CPU: 1 UID: 0 PID: 3235 Comm: syz.2.786 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 119.724110][ T3235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.734237][ T3235] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 119.740381][ T3235] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e4 32 ee 05 00 0f 85 c4 00 00 00 c6 05 d7 32 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 119.760048][ T3235] RSP: 0018:ffffc900047c79a0 EFLAGS: 00010246 [ 119.766132][ T3235] RAX: 0000000000000000 RBX: 1ffff920008f8f38 RCX: 0000000000000000 [ 119.774250][ T3235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900047c7a48 [ 119.782315][ T3235] RBP: ffffc900047c7ad0 R08: ffffc900047c7a47 R09: 0000000000000000 [ 119.790338][ T3235] R10: ffffc900047c7a30 R11: fffff520008f8f49 R12: ffffc900047c79e0 [ 119.798360][ T3235] R13: 0000000000000034 R14: dffffc0000000000 R15: 0000000000000000 [ 119.806349][ T3235] FS: 00007feb21f586c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 119.815327][ T3235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.821995][ T3235] CR2: 00007feb21f36f98 CR3: 000000011e9ac000 CR4: 00000000003526b0 [ 119.830027][ T3235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.836916][ T412] usb 4-1: device descriptor read/64, error -71 [ 119.838040][ T3235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.847044][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 119.852299][ T3235] Call Trace: [ 119.859113][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.860697][ T3235] [ 119.860710][ T3235] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 119.872139][ T65] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.874613][ T3235] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 119.881317][ T65] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 119.890126][ T3235] ? try_to_wake_up+0xe17/0x1aa0 [ 119.896244][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.908821][ T3235] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 119.908859][ T3235] ___kmalloc_large_node+0x9c/0x1d0 [ 119.914244][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.920398][ T3235] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 119.920431][ T3235] __kmalloc_large_node_noprof+0x1e/0xe0 [ 119.927058][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.931789][ T3235] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 119.945904][ T65] usb 5-1: config 0 descriptor?? [ 119.947096][ T3235] __kmalloc_noprof+0x26d/0x450 [ 119.976723][ T3235] ? __kasan_check_write+0x18/0x20 [ 119.981973][ T3235] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 119.988010][ T3235] ? __cfi_futex_wake+0x10/0x10 [ 119.992900][ T3235] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 119.999359][ T3235] ? selinux_file_ioctl+0x6e0/0x1360 [ 120.004687][ T3235] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 120.010305][ T3235] ? do_futex+0x356/0x500 [ 120.014684][ T3235] ? __cfi_do_futex+0x10/0x10 [ 120.019419][ T3235] ? __fget_files+0x2c5/0x340 [ 120.024132][ T3235] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.029129][ T3235] ? security_file_ioctl+0x34/0xd0 [ 120.034289][ T3235] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 120.040757][ T3235] __se_sys_ioctl+0x132/0x1b0 [ 120.045466][ T3235] __x64_sys_ioctl+0x7f/0xa0 [ 120.050127][ T3235] x64_sys_call+0x1878/0x2ee0 [ 120.054838][ T3235] do_syscall_64+0x58/0xf0 [ 120.059303][ T3235] ? clear_bhb_loop+0x50/0xa0 [ 120.064012][ T3235] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.069967][ T3235] RIP: 0033:0x7feb2118e929 [ 120.074399][ T3235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.094059][ T3235] RSP: 002b:00007feb21f58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.096969][ T412] usb 4-1: device descriptor read/64, error -71 [ 120.102616][ T3235] RAX: ffffffffffffffda RBX: 00007feb213b6080 RCX: 00007feb2118e929 [ 120.116903][ T3235] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000008 [ 120.124906][ T3235] RBP: 00007feb21210b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.133203][ T3235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.141608][ T3235] R13: 0000000000000000 R14: 00007feb213b6080 R15: 00007ffdbcffa5d8 [ 120.149746][ T3235] [ 120.152788][ T3235] ---[ end trace 0000000000000000 ]--- [ 120.346915][ T412] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 120.357004][ T65] hid (null): invalid report_size 50650 [ 120.362754][ T65] hid (null): nested delimiters [ 120.367728][ T65] hid (null): unknown global tag 0xc [ 120.373192][ T65] hid (null): unknown global tag 0x40 [ 120.496903][ T412] usb 4-1: device descriptor read/64, error -71 [ 120.559458][ T413] usb 5-1: USB disconnect, device number 17 [ 120.736924][ T412] usb 4-1: device descriptor read/64, error -71 [ 120.847022][ T412] usb usb4-port1: attempt power cycle [ 121.186963][ T412] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 121.207971][ T412] usb 4-1: device descriptor read/8, error -71 [ 121.337903][ T412] usb 4-1: device descriptor read/8, error -71 [ 121.576905][ T412] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 121.598006][ T412] usb 4-1: device descriptor read/8, error -71 [ 121.728192][ T412] usb 4-1: device descriptor read/8, error -71 [ 121.837033][ T412] usb usb4-port1: unable to enumerate USB device