last executing test programs: 11.67677545s ago: executing program 0 (id=241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000002c0)=0x4) rt_sigaction(0x40000022, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0x1, 0x5, 0x4, 0x0, 0x5, 0x0, [{0xbdb, 0x9, 0x2}, {0x0, 0x7, 0x5, '\x00', 0x3002}, {0x9, 0xade9, 0x200, '\x00', 0x100}, {0x9, 0x33, 0x3, '\x00', 0x2000}, {0x80000001, 0x80000000, 0x6, '\x00', 0x805}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000140)={0x11, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r9, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r9, 0x0) listen(r10, 0x0) pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f00000000c0)={0x400000000000000, 0x8080000, 0x800, 0x5, 0x13}) 11.590982741s ago: executing program 0 (id=242): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$cont(0x20, r0, 0x0, 0x0) (async) ptrace$cont(0x1f, r0, 0xfffffffffffffffc, 0x3) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 11.088972629s ago: executing program 0 (id=247): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x3, 0x8}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x3, 0x8}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000040)={0x403, r0, 'id1\x00'}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 11.087882049s ago: executing program 0 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200000fe097d3fa7d4b87c66a3d0e03e76296ddc470e6972307153cc86bb889a329945b9388f73f8800f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 7.561311974s ago: executing program 0 (id=277): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x3) (async) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000480)={r2, 0x5, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0xa, 0x12, 0x10, "ee2188a7d4243bec30601f36adc3018fd0a555357f2ce3d496d667ab472064ebe1dd58687e445fd3d9e91fa40f16122775ae6c7806fe05c0b53706ca34fb1a9d", "0f86e21b54f1ec3d6a4b2c2f6256fd7e457a3f6b3a50eff8b84d2ec009291535799a1efa31cd2dc93deaca4fb454257455d7d93636b47b62ac9703d7cd88b3f0", "cb78feec4d1d473a4e3c7d6a16828dbd68a8f90ce96f0e1da4e8f7971be1bf01", [0xed, 0x3]}}) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace(0x4207, r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000003600)='comm\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockname$packet(r5, &(0x7f0000001600), &(0x7f0000001640)=0x14) (async) getsockname$packet(r5, &(0x7f0000001600)={0x11, 0x0, 0x0}, &(0x7f0000001640)=0x14) sendmmsg(r5, &(0x7f0000003700)=[{{&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000003ac0)="37187dd7efc08716118ff3f5257e6041ac2df288357c36c245b58a22338b5646f2a3fd1419c18118315227ee99a9a96cadea0581d96178dc25ed33f093e160229157cff1b08fafe4b08b542df2faf341d676c932b7568d92322936cfc9aa1561d21f1ec64a6e207f5759026df7855f93ee9749f49d8012586cd2cda918e8419366c8bfb47652eaf700373dcac159d018651f93a35c49b55e44c9c2a2d404908bc1c8c5b58928ea8f45dc6011a09208be308c51cd5e7292cbbdde6d1c00f847961cb52e", 0xc3}, {&(0x7f0000000240)="4a4b66a0ad5d90af0610159cb213138e9444b58971686a2d28780ed4e88d792473694ca186d8d8a1ab5b27e61f6fc2ea6a7b64941204f5405ae6f12a45fc4e9c9c3c31b4b9d7e60cdcfd0ade6b22a9ae4167f7cc1d9d2d053c2dc875da59c164b496ac9d62fe861ec02112a42041ba6de437e8197580749b76847154fa8ebebdb9b7438fba7385747d78", 0x8a}, {&(0x7f0000000300)="aeacf9910ee4413535e47da22864c586120136371bf7be17a6f12b20f1744c6ca629cf9eaa93c96df363fd489df8fc49b435a86ccde9230e59b23e6e8113a6602b131376144337fa878d2fa9ddd4a9159267723f2b02a29489e50a8667c6fee02bd29afed4a8dd9f511263d9bef75191c99a0be5424d0a2c896d36eda6a5cc69cf38a4a6f1ea6b92852d4c88adca72a15101912ef9be7be60dfb", 0x9a}, {&(0x7f00000003c0)="4e5c310769e305c17d2d47f0936d9c455b7f2a59c8713c5a6cd77020b527acc8a1574c6682dd842aaef10c4e2600f4e57f1872d29cd92586c40dd95631bc9f3554b97dab2dedc5e78bd9c4759c6275ad35d87fd331a5e954152fb19aeec629c613ba40f082d5cd990daab3ff52d338b5912659896e3310a29ed7365ab345be4f55564ebc8e38f97dd181e04a314871139571608667abe8cffdbbb7079c0d6af687fd7e2215ad8492bb1d13a23a1260ffd8e29711bac2f7279f9764ec81807180549ddbcde8f505715439715e34fa6b5986", 0xd1}, {&(0x7f0000000080)="99f21a562dab4a97d772f7c75640462e4aac6352151ab44472afc9546e6580df21229ca629283554dffd65", 0x2b}], 0x5, &(0x7f00000000c0)=[{0x28, 0x112, 0x368, "11ba2f53724a9edd3fe7829c2bcdd2ad4d89cb5b"}], 0x28}}, {{&(0x7f0000000540)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)="34ad0a3c47f7d0a056128811b19c1747be9d94544741be9b204de82733a6da49ad1bf058b78e8c1f12fe4dc781990b2fd04294fd490237af9b076ebb756460f07287c42fb0102043cea51b33806669f26983b7b6b21af34ce2d0", 0x5a}, {&(0x7f0000000640)="2ba31392db4b818c3ce0cf64c82276909917b88b0a817291440a4bd1db68d4cc496a24a8d646daafdc032010fc306cdf628955ecdfa6f38aeefb37", 0x3b}, {&(0x7f0000000680)="9b9fae942010efc49ff57bd7b67a4d7524746682e030ddfacf9094f29837e0", 0x1f}, {&(0x7f00000006c0)="c28488da3997e2ef7d71dae1f215580a03c598f37a387a3fe3552e281b283d2f524b5c5b221e6376e794b19e8904656261a606a36395e79fd50c97be13565de17be987dbdc7c23842d178f2add56f544706cfc2b830a3b44b0dad562d33fcf024509b48d1a1cbeae10b2faf68c255848e8cd87114e723cbe396c1149c0ef5a16a89a00154f5a06cfe6dc5d3660144812a621ff26c64142daddfde62a5a7edfa91cc9de9f9f5b3789e3bfdca0f7ff9a", 0xaf}, {&(0x7f0000000780)="ccd9a5968b720f12ad687272d575e36c4f6e1c31dbfcff771aee70b39f2f808e2874fe2c94963e14fc9ee17e10b611abfa6881510679f299e3079a69d7a33cbbff1697ec42c20b295c49366a89c7af79e3e009c092e04b56e9c0d67742103143f6092fd672b0d872764c362b86b73efe31f27a5efca5d9d6708456c772d406c54224b1636492c094f803b4a4b9a9d410705a11c816c6c1f8a93ee73c8bb2c0784e75a83993211ee30702ee5e74b156fc2037c4981bf673044d2000b17fb785e134815fc76a487a6ceff42f6518c961e58b50901e0fa4af0695fc141b3ef614d5ab0a9782868c3017fb384696898c960156ad", 0xf2}, {&(0x7f0000000880)="3aaa7e54f8b36c307bc164887c33f4a378477fe02a891f3341e7739fe7cafe4d1aff2e24abb53af46f81133c9102197add34af13215c2c28048f7001b0382edca4b782e3a2ba15ff771f04147e203704216d3e7bb4f00da503464f4edb6119797fa2da8e246bacfb22de6704ee627c51d6ea9728c529ab448b7b56eccc4f0a864fb3f983727ca20b", 0x88}], 0x6, &(0x7f00000009c0)=[{0x30, 0x109, 0x9, "a4f166206926d531e85059e06a770e4679d8181f2cb4414d55e058aab959"}, {0x98, 0x10c, 0x3, "0c8b291192f9c5fa1847697876eef09a6f3ed8ff4ca22c69483ee0d103e13d57a0c33e51dd2b0b78f994c87a706789eee678bde5b146c5a95372fcbae09cb08787ba06b3a4c042d88e3cdafaf8932cd9b86c47391480e12737836f758576f1a298f2a2b42b41766c4fe1671c0f6e85ee5a07bd87871177e49b0f509c0981288cec09e960b992e573"}, {0x90, 0x104, 0x0, "08baa29dad3e2199bf1c41fea4b4da57c1e8e149df73b48a1acff61329f471ed8c8891504200974121de8e2dd6201f3d78504e04859978c8dac41aa3caeaf9e3a1c564b09765f18d591c943cfc6c629ee7db8484180d887b95a2dc683d6c1e2b126409c6c044b0029fc79810954a0de8c1a401a21a06005e1c1e91"}], 0x158}}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x4, @multicast, 'ip6gre0\x00'}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000bc0)="e06af96be4b1d6bc268230ba12e7964506eebb0556ffe5d52ebf1cb23e9c8ae0c29ab7fd3e7edd5a84ade5df24bd332f1158c11adc2597acc3303703ed30f619caf172d363bb3d62a0e1d9b73bf457baf8516a023b1c201a36a6d267abc8029abf150d6aac6c8e1d0e8b00da066572b58cbf0e72961a78b5ca2c09bf30d5d07b3dc7cc79b5b339f69561aa52158180c97ad8a97dcf0867c1736893e8cb014295fbf3f2bf078bb6", 0xa7}, {&(0x7f0000000c80)="3b8cb0a3f2cbbfd93a9a1aadff6126e2c5a0cc6a351b540318d58858474853517bf0047821a9ba1ca466bf541aff38081a2d7fdbf22a439e8697aab53e98eb2bf0ac257e2f9cfef7c65fbfab3b2a6743b145ea97747ef9a18de5cfeffb077bc29e30883f3c62b878d8e25684c249dbcb7497db7b0d6c77ee3f14e6c076f41ba79735d26b51cb2e187b0fa8f7d80de3a0b9d22d5b0786b71ee3eb2b6e1e5da6db78a17b631fe7b4392f4ad3af5e6acce820ba883ed694119815a85418482b922f3b9ae21b308b89a68dcb4f5db353c661fdfd94e701233d137a15263adbba8d5968e4b92968fc55f53314b3c9341a1ecde51ac79bf7726c13", 0xf8}, {&(0x7f0000000d80)="fb4ade2ec24afb04db70c78456fab0468e9d2e9a97088b28b9251a57abe223fbd43fe5d55c860470f2f9cce4457e21902a", 0x31}, {&(0x7f0000000dc0)="74eb3b0d4677c55e9473654ea19ef973ed9334fc75ef1b1fb58c12203b058199826d128ab4ac06bd1e343faf0eb0c0c3e00c8c09043b3f68f2852eaa339f936d6d4ff74d1d7b39ce1a17bfbdda09da5764470939b7e44bd895195178f0863639ccaa37fd6a7be6163c013cb3a99af313e4ffd6f0bf885a09169e1fedaf776459cc7a774af30b", 0x86}, {&(0x7f0000000e80)="a514fca96c85ecfca332a11f84dc83cc9e6ba73aee76eaafe279376cfcf32540a3cc4a2db83701ac4022bbc716137bff2d563abee69eebc55c5514b04332edc7c996cff02cd4fcf784200e1f55efc4d616066952158085002af5c406762fdd92c0a61dd5acabb99a720ff19b6fb1da661e783d73890912df1bb7da406d3794b0bf33d5ca208c5631c601bc8d10f29e0712436eb662116107d55e363f0bea0e1175939ed6f0017ad40e1db57d7f", 0xad}, {&(0x7f0000000f40)="b94fecaf70d6a28980d9f73f208f4281c80e86f27bf2e5e85e54706fc736567380d713d8da42e27191c6e52be228ea5f2dc407b78872622978cfb52d077adddc9cc0e8efd40236c529ea6d643d82fc96fc6d0ee8b7f326f7fd03b78755c378298ffb99bef3475061947eaeaf8bfbcbc2e1842b1d2e091e82e4b4e488382b0ba1504bc4223b9cd8ba7f6e7dc24ece325fea59c5591c8d7a6367d8b93397f76c1d119c462e5af8bd1cb10d5fe4b46687d97e6a1fb17ea8b0c09a0d11f492ffd66b5d1004d028730db79806f6f2beacc5557b45b3182e17627ac3d4e1423dc22cc8c472fd09e53f593b4b8e9cb3007c056953443fb89490d4", 0xf7}, {&(0x7f0000001040)="3aa607904009c2bb223b058b99825f37d7db98d717c21bb5232b954533298ef0cbf10c05d5c1a359397de70167d0236b9ae83425cbcad9ce78b1d14e2f75a68e3cd44701dd76714eff0d3921f4cf3c03836133c599121b4bce98b097e2425233eea9a4a67482c4a6a1ad7b246076ef4a2032c024dd8fe94dd6a2984aab976ace3592fa6491e4145974b25467d5c9b9e21f606f4e680cdd04f55e154e80d8906f2e051c57e5d07ed7093dbd7559f5dab1cbc533e9a411320d46b2b347f5604f532ce3c13833264426a40d286858923ad1790de7b7407937a73ebd", 0xda}, {&(0x7f0000001180)="4ed953ce0d063aabf3abb5049ab719ddbfd0d78524752b8af55f94622adee2", 0x1f}], 0x8, &(0x7f0000001240)=[{0xa0, 0x10b, 0x7e6c, "ffa0c6e0b0d6e42201b0df91cee7be250b9150d2468c723d363b5929ad34a7244ee168313828a0b594f579235a093d332ed2dff9abdad22ddd0e4785dac3325505d4ddcd47be5513530a1024f00fb3f503edf28003cd12bd526107fb3e6f5221631b49730f39e6283d904b991ca0610cbfca60b9e86916975e67fc25b0e47bbc3d5e4ff918bae4c3bea91c11fc24b791"}, {0x108, 0x108, 0xeb, "c9614c14aac2fed46c8719eee13d8cc0c031e46d56f891382188ab13330dcbcc39fa04a889dffd03b7df8cfa14aa7043d31646eb3d461f5ab239f35991c5fcca7959e1e49ebd57161cdc3899954c710e2027317d44988a0b1c1be1499b92a5c2bd229cffe8ecbb3e62582b9ed0868f6e14fee9da2b0cb1ba72afac4f7f11b5afba42f476be12884391f251c7b87cee7257c59722e723c2ab6efb54697906f383099962797ebd6e93f927e03c81224d00196b98de57df0e84d4d8ff5fd50f2d4b297ba835553bc4cd18dae5d5d80885329084a27cb053e73a7f140ea8cb96cac8801e08312f2a6548ee0d34e0702ddfaef7fe13"}, {0xb8, 0x114, 0xc, "294a1d1987ce511cd042ec745f46509b5ea361438f66ddb1a77813fc9bb388de3a3ce4915a5ca119c4f845663bfc81e46d6484a69b1357158ffe1b70710f6e1e22983bec0fa41f657fc901a1003695ba5ae0c8d9b9750eeb5d3273c108186d56afcc95812657f5644f3e05bff37ba9d957760518fc4e3b189f009b8c51e3f72b9c967d567c14fd86bfa22af02687274f72b7e461425011e0964acb9e45736e80892970a257f2bfa8"}, {0x42, 0x10e, 0x9, "ebd041d5d86b6036be79fcac3eb9a23933fc987f1dc0be5ab9fa0010b4a0fc33e8a1b4c7a60e0b5a8b171b103231336738a8f15d1885206220caa29d44ba24d1be5136040f241023c13b12eeb7b2ba722a5319c5409ae3e2972ceb6544319838fe"}, {0xd8, 0x3a, 0x0, "c04e4bdacdf683a6abaf50c1e15f3c3a2bff21fbdb9df05125bd5b012e0fdcc5a2f9a69451e040e3fa63512d4ae2df2f1a2b7f1a4750cc3ba8142e8c5a162ca5cdfc8884bc2cdc847c73e258e44c62a346a52d16e0b103d71fe92e85d8ea18f301467613527aaea1dc4b3fd07e8c95a0fb533bfeb2dd6994c2335739f8968481ec83f1c8cb99c800ffa727fc7282653391e57da1b05bede7ef7dcbc50102e221dd6dd02640fdeab82d9017ceb9615d4a823baccea0230e27a431d8336e07087a11c5635a3e275f"}], 0x3b0}}, {{&(0x7f0000001680)=@xdp={0x2c, 0x6, r6, 0x13}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001700)="c46fbbe1f601fa92905b14e1336958398eeafa832a82cf4681dc5f707333fa92ead0d5ef0707d0f6c7a219e3cf207c8b054a0f63f04df282a89e9365d0a2b095869246e33d133bc255ca3860d79a8cc5e47178cf7573f5695b2ce5ffbb43612d1b5a6ce1e7152c24e06afa720c5f7938ae27cb3f261574e5b3db97f816c1f9f1db3deceefea50e1976d3399fec0eb328b3213a9996ba17a6ded191a5523e0feb045a70348b7da1e7944936318245dd54cc0acac1f65dcbb7c5472c58fa38f44630176945b24041add7434bf79f23252bf07b5e5f", 0xd4}, {&(0x7f0000001800)="60371b3ea06aaf70a7e6346a9bf1c63e1888cdf99b564d50be06e48da102515212ae29ae8e760da860d3d9dcb1ffaafaeedef1ff22a287c8b9921f28b5e106b69a8ec344b596fb0f6644e975129f3bb40079e8140862d04c7fb24df19f92a54c8b1a99606b1ad330a09c280b4a76df05a43c1ac8e77e96e24a78692973cea3586d5b8dc84c7c4c5b5ee583c6229636c24144282268a567f3b2eefcb9a81b13144d", 0xa1}, {&(0x7f00000018c0)="ebc3311cd53adc", 0x7}, {&(0x7f0000001900)="c90e1b7a", 0x4}, {&(0x7f0000001940)="dc11254b1f2620cb1d18d18e34bd2406da9522e2b40e37673f64b7a02a9afe6d29ceb1f144e9a6d3d8d123cffe75fa3909a12f0bdaa4f4e3b4f7a441ca17c1dafad7843316aea4ffe5ae947cac8a20b58b62577d64e911e2e11a13932903b407a06a5798a459b7d0cf83acbbb93929e78245ca1b8308e770c2e0bf2339ee279946a49dc02e8c3a39fc82e5a7bc7f140e4a47b8a1ec01273130f3cb1af5cceba4145d4cfa054295c8e2373a588971e76f9877f01073ce057ae33b35144fd9ce983c0e46d3bed42c0906ab1bbd706224d093776aa7b9344b", 0xd7}, {&(0x7f0000001a40)="35e9c96f6efcb5d486e949df06f1a4667c431da399959ca0f9dd83c4ecc0b0ec09dcf03a9ed70c3fbd221f493f27f4f64bb6b90e6a8b7a8ca6acdd65095edf59db26596d1dfca1675a06532ddeaddb35ce12cc1099bab18bfccc4bb0cb8de904f60439f9e7069983dadd32a5e31bf828dd571c6210d79cf3c85f70039da2a5f4c70a50e52a0dc33e8a0a9e9f82a89df8c1f165baa80745b0555cf2158e424e706b4105f06aab2d609a97254ec9ddcd8d97846a654622d13aeaced798d2ed7a3d2fbdeb0876b4316f73", 0xc9}, {&(0x7f0000001b40)="6055c1d1540336346c56538405322e70de878f2050c326820d3dbce935f7f5006f07cc364de33efe6745a5e56e19ac9a862cb30199faae7084c7575b30fcc6e1e92d272b64c3ad0e2404f8", 0x4b}, {&(0x7f0000001bc0)="d2bff1a62c5966f52c32abfc66e81fab2a74647f65fd78247651a5b9aa3cdf5a4b2b93b506fa9a87d181f6e8225dd71f1507d9d80138c737b421ba9a48fcc63f8a1a4f74e49d76123bef793f21a43eebc90458e7a1fe5216bf41e4ab38b65814ba694de8e40744585cd73aece8c13ee78591cfbaba7683fcc874ec04a2e5213f19d607c20d5598ec8b6328d2d6f7a19a4699e86614713f69b6ff2a744c5c6c743b1a317dd571cf629c2c4041f9556e017c7c98b89b0ebadc470bbd011688ecd8922e2d4170d4647e06ea3b", 0xcb}, {&(0x7f0000001cc0)="1caa8ce540ad0a3cdc0afc4f6a90838704b9ffdc7031e88b5987d26597ade943a59da6e7d482ae99a95679c37ece0f10fc1dfeed131920f345599099b2396244bf400d6888d3dd67b2f06713a1447357f9927a2fee48bb9b12c7fd45e9e2c7f0109e2f78359a6121b70beaf552895f8c04905360284ea1362290a7231e706fcfe6101e900bf4da60e194b6d58515df1a81c1afb6c508d3aadb42505e18f1eaf6d9785df99041de2fbefe66", 0xab}, {&(0x7f0000001d80)="798f6d1c4d8fefae14969ddd6ae6708d6cfdec746cf783e2f8db6765fc251ed95dd3c4ec4a1127d16b0a7578629e06c4f726399f191f352aa6b2c9ecc5ac04dd35c1b5df05191e3ead63190ac271188040a1938a7715d7cb3a31c6c939aff281bd16070fbf1a288e1e767ee1fa67fb97f01d1e2907c8ba3ebf7f0fc3ec198868e8d4117d3678d44fc0de56945eef77b03e82b919685f43d4eb75f67b8dfcef05bd6777eeb1ebef18f42e2ad97274505e2da94eee", 0xb4}, {&(0x7f0000003880)="6ba869bdb7bfeba0edfeb856afbdc635080444b2ff6774e009648e2766ef6e605cb4665937bca93f90cc208c02104983988beb26e3bb1c4806eb92b83ed2543d94952d85e897ed2d8f6f2de7ff8a711a2ca495baa013d8de70d9c1a50f3353198f927a2756e61ca92e83c9ac7b599346fd24a7088db32b8a8071a545d37e53b0ffd459a9c52532203099c91e6a45767d4ad7f0558c3c631df73649ebfadf6247176abfe12ce4b0e3125e4310c735730b3b3bed9c59b1add759012e8bc2eb0a6a10c1650a035fa061966ffb05f52eae5ff98a1926a0ca0261471e81f62bc6540e31888865352c37957ece9990"}, {&(0x7f0000003980)="e437b2bf86f0139793020b393c83744ec0c6512346d51f7bd2cb2c6e74ca0f8cbdcb01c34253bb3d64fb2711a69fabda12c6379916c18a80889f2e2d688e5ba96fd3dcf46bc9940c232514139f6797091908d7ce"}], 0xa}}, {{&(0x7f0000001f00)=@caif, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)="8a8ec7360abc39b6a4e99cfb1b657b6ebdaae59089ca723d8d4f7a06facf9fcb281635aa9ab9cf1037374e41560dc662d1ecfdffc6ac3513352b054bce5193f617c22dca5125a4f0af973c79b78f7f5daf851150af83242767f0e7dbcd52fe2481b98a33", 0x64}], 0x1, &(0x7f0000002040)=[{0x78, 0x6, 0x9, "3f7e9cbe8df1a3f8c8cfbe2135ba47493f7b503af40866081931ea0b26c4ff99ed9e73a93b70d4d4d9b5305fe27fae76bb6561e0ac607fd7e420d31d522d6181c9785eb04ea8a8813c005ddf34e125db47f35c925a4438468fb08fe2acef2d5a81be57d6"}, {0xb0, 0x104, 0x3, "1bf18e382a5a4b4795a0b3a950f3fd66c909afb1da1103d4f199fa54d0382629dc05d3e632624dcb031b1f46d79052b65c1274d26cd3b0a40e38528245519428fa3dccbae2ad87b88657ae42bf5f8a6851058a5af5eba82157e3149e0031be2168a74543f79141dc235cf1c71812cb977dd8dfb33e69809dd98b11b8f385a185d2e60f1216e103e34c750827096c74751d95f08870435b079ab147c86203a478"}, {0x88, 0x107, 0x391800, "94d238343554c898ed99a8e649f0e971ed27b3137c0c90f7ca6083e86f520dcac8ef3be3b852d64da4e462cfc087381a774b3bdf9c3c4bfb60cf7aed4776d642d3e7e9d36e2dfbab7a7963ec427a7ba758f30a8f437336dba7180dddd377857c0fb89c312fccb5d2601f61dbe5701a2cac59"}, {0xc8, 0x104, 0x7, "70d2b1338e2474f5f1045c69168542db9f569a7c6b3ec5fb48e3e90929795df931d9daaf84a0aa7b4f74fb15e6fb5b4323393bed875857c2f2d2e39d941170d843c9d9a43271c7d5ee92e5252a13dedafa4668d830220c9f15bdfaa23741c3270cd4580010427ccb9f9be15441719bf00f22d90b409d33ca9b2329126b3ed2ff891e70ca0649c7894321ac92827ae3b11841fc9569ab9466ff86796d889d30e460007f68cf9cadc5642c8fb41e31506ac43da40cef49a9"}], 0x278}}, {{&(0x7f00000022c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0xae, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002340)="59974aac68ab90891d266424a9210412829395d74da03fa6f2e0a903ecaea7af7cf1c20e3359042b8674029210791651380381ae03c2488e2e22c3257607927aa038801550079258696b6752835fa0a25c14f26a81028aa9c6c083521e71e3d959e9ba73eb777acb752ee3a6a9c043ab87af04931736a2b79007089d04d5b78f2d0bc4a87bef03813845ad0751dfb029453325b18a991f354296de0ce86d", 0x9e}, {&(0x7f0000002400)="94456c5d6981fb4d0f37ad4c2399da981fdeb06fac415c45278ec087cc4b6a4f537100bbdc9132ae8f0b80d56288b6de6baac92b0d9412428b48a46807174613aee9d8e5a2043bb5acbfdb452f7301943a787331b11a2a843a32365950d0ffbb5814454253a3691b20e6b9d8c80ef449", 0x70}, {&(0x7f0000002480)="adda3f63c2515cb9ec410f9ebb69dc85c0bf8d675a055db594e37807326561151cfe21f467692c54695e1efbb308c408e61e3994c90dbe0070716761f48d80f6eb92db7a423dda944e2fd9190548566ce6295a7eb45603f789f919fbe637bd32f968873368a75eb05c7c21620c629475ad43e3fb0157cdc187d5f3b40fe57c975aae7d27f52d37b263bbf5366b20d27b4c07045efa3ddfc1f6f296180d69c51f460ded22a6c85eaba9620a9535dc4317eb5c339ab4081960a324605dda27963ada5f0f03f9837d9d65fa8d9c95b865f132033db61ee2a0059f0a3f58093bbbbd30e6b247b7814b5bbd9970e59d84499a4c3cf2b7", 0xf4}], 0x3, &(0x7f00000025c0)=[{0xc8, 0x10f, 0x8, "0c5aed31a46408656b4a88d7fb3d4bf14244ebf82850e33359caadcea0c9dd05298e2a141f6989454802aa589c299eba28ed6b9d2d7f211dce682e479647723375ae151f838918caad0fc0f93e39e8a27c1cf8a1a66183b653425bad9a20a40d25d04c5e5d59efa530a995eca845f18bfd940da76a396e2972cd59668d109837f5d1111dc57d44c8194f94ed90facc9fed06e7925d80ba11035d524a5d8b547dd6b1ca1e7d8ffe33d9cbf001c8ddb196c1d963518a"}, {0x1010, 0x104, 0x80, "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"}, {0x40, 0x2d, 0x1ff, "2f99ce5b96ed84c07ddb67be19777734001b3226f623ddcc0d6c1dfe8fc54fb73e71a2c85915dcf4f13d8d9b908c"}], 0x1118}}], 0x6, 0x24000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 5.18890685s ago: executing program 2 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000400)=0x3fd, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040), 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x400, 0x12) setns(r2, 0x0) 5.112972241s ago: executing program 2 (id=293): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r2, 0x99b33000) 4.997154803s ago: executing program 2 (id=297): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e1e, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 4.981494543s ago: executing program 2 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) poll(&(0x7f0000000140)=[{r0, 0x240}], 0x1, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) socket$pppl2tp(0x18, 0x1, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x33, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x1, 0x1b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 4.376923663s ago: executing program 0 (id=305): socket$inet(0x2, 0xa, 0x3) (async) r0 = socket$inet(0x2, 0xa, 0x3) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$cgroup_ro(r1, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$cont(0x18, r3, 0xfffffffffffffffb, 0xb) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000001980)=[{}]) (async) ptrace$peeksig(0x4209, r2, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000001980)=[{}]) write$cgroup_pid(r1, &(0x7f0000000000)=r2, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000a80), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f00000001c0)=""/118, 0x76}], 0x2, 0x3e, 0x3) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f00000001c0)=""/118, 0x76}], 0x2, 0x3e, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 4.068069978s ago: executing program 2 (id=308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "9e3fdcec"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fgetxattr(r3, &(0x7f0000000080)=@random={'user.', '\x00'}, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[]) 3.758264592s ago: executing program 3 (id=309): rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 3.687156243s ago: executing program 3 (id=311): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000080)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000400)=0x4) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x100, 0x0, 0x100, 0x0, 0x0, "8958beca39000000000000000000000200"}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @broadcast}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f00000003c0), 0x486000, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000009, 0x13, r9, 0x2000) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f00000000c0)=0x4fa4, 0x4) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41000000140014"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000380)={r6, 0x1, 0x0, @random="83f047e9529c"}, 0x10) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002480)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r6, 0x4, 0x6, 0x8c, 0x5, 0x28, @local, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1, 0x7800, 0xffff0249, 0x3}}) read$FUSE(r12, &(0x7f0000000440)={0x2020}, 0x2020) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r11, 0x4758f000) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) 3.28934337s ago: executing program 3 (id=319): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) shutdown(r1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400000000000038) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) read(r0, &(0x7f0000000000)=""/188, 0xbc) 2.373322384s ago: executing program 3 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000322004000"/24]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x8004, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.033730699s ago: executing program 3 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d"], 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x2000, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xad) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000050000000000000069000800000042354b25e2e4e8d6000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 2.022296769s ago: executing program 2 (id=329): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c, 0x0}}], 0x2, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000100)={0x0, 0x4, 0x6, 0x0, 0x80010, 0xfffffffd}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) ioctl$FITHAW(r2, 0xc0045878) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.628949645s ago: executing program 1 (id=330): request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xb4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.623830626s ago: executing program 1 (id=331): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000300)=ANY=[]) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'bridge_slave_1\x00', 0x600}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x4, 0x80) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000a00)=""/226) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x4, 0x16, {0x16, 0xb, "3dee902ee316d2b5dfe4d4d63ebc81d03aa0f362"}}, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4f, 0x80, 0x1, 0x0, 0x5, 0x8000, 0x6}}}, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6}, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "6a1a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0xe, 0x86, {0x86, 0x8, "d0ee8a352be68233d1184eb5c4b4cf311418454175b910908b3d8780e42796053174cce1733bbeb1a44b1945aca8e595243c7b777926a0611d1f52e8b80db43ccd7632909bb08f2febe14b957939af5aae5383de3a4d068dea9b23f6e16fbd499b96b115da2b55ef1cd7235a36fe8e982c290b642208a655b434ce7ef9c87481c99f6a7d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f00000001c0)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "d8ef16c8ca2b43f96fc5b253250da988"}, @ssp_cap={0x20, 0x10, 0xa, 0xae, 0x5, 0x3f2a, 0xf, 0x2a, [0xf, 0xffc0f0, 0x8, 0x180ff, 0x0]}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x2, 0x0, 0xa5, "81ce8014", "ed82d14b"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x1, 0x1, 0x8, 0x6, 0x2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x40, 0x17, 0x6f, "0f0c8894ce3f16fec4664d05a660183aed482e05481d24aea71329663fa63413e405eafe4e94cd7c981bf6f5f369eb64f4bba8eb30fe1de7d54f82b1e78edd2404f6fcad6b97c016692a7d5f5939a1669d0c7d635a6fe197d6f93e90381ba4baa0f8c29aa00335dca60a1d014d1b4e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0xb, 0x2, "7bef"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @random="2017ebbb9bbf"}, &(0x7f0000000780)={0x40, 0x19, 0x2, "71d7"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6c}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x4000000000000}}, &(0x7f0000000100)}, 0x1000}], 0xfffffffffffffe23, 0x700000000000000, 0x0}) 957.287086ms ago: executing program 1 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x400448cb, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0x400448cb, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) (async) pipe2(0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) 832.970667ms ago: executing program 1 (id=333): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4) (async) setsockopt$inet6_tcp_buf(r1, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x100c0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffffffffffff) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 832.603227ms ago: executing program 1 (id=334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs$pagemap(r1, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x24000840) r2 = userfaultfd(0x801) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) lseek(r3, 0xfffffffffffffffe, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 357.522485ms ago: executing program 1 (id=335): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0) write(r0, &(0x7f0000000340)="41000000010001", 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000086d0486c200000000000109022400010000a02009040006010300020009210000000122080009058103200002fe09"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x12, r5}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x27) syz_io_uring_setup(0x1e72, &(0x7f0000000140)={0x0, 0x5e03, 0x800, 0x6, 0x186}, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) 0s ago: executing program 3 (id=336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200"], 0x10c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000003c0)=[@decrefs, @release], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 30.383504][ T389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 30.479570][ T399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.483847][ T31] steelseries 0003:1038:12B6.0001: unknown main item tag 0x2 [ 30.514623][ T31] steelseries 0003:1038:12B6.0001: item fetching failed at offset 3/7 [ 30.523317][ T31] steelseries 0003:1038:12B6.0001: probe with driver steelseries failed with error -22 [ 30.542397][ T307] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.556174][ T401] tmpfs: Invalid uid '0x00000000ffffffff' [ 30.681434][ T317] rust_binder: Write failure EINVAL in pid:2 [ 30.702380][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 30.719652][ T307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 162, changing to 11 [ 30.731551][ T307] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 30.744551][ T307] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 30.759555][ T416] netlink: 5 bytes leftover after parsing attributes in process `syz.1.36'. [ 30.764703][ T307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.777536][ T416] 0M: renamed from gretap0 (while UP) [ 30.782658][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.792179][ T307] usb 3-1: Product: syz [ 30.796429][ T307] usb 3-1: Manufacturer: 苯헕拜Ϥછ뚄蹸୦狕⸙氥떖뎧ഔὃȿ葱㶝䈣飱쥗㖣兂䖪묱킆⨼౵辂䚁容⽳⫀啷颐￵栶臻す亿蟣꭭梘悐拺ﰙ湞ḫ [ 30.800363][ T416] 0M: entered allmulticast mode [ 30.815732][ T307] usb 3-1: SerialNumber: syz [ 30.827463][ T416] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 31.013576][ T429] /dev/nbd0: Can't lookup blockdev [ 31.061122][ T386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.074412][ T386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.084935][ T386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.094302][ T386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.126815][ T307] cdc_ncm 3-1:1.0: bind() failure [ 31.134050][ T307] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 31.146016][ T436] overlay: filesystem on ./bus not supported as upperdir [ 31.153341][ T307] cdc_ncm 3-1:1.1: bind() failure [ 31.163354][ T307] usb 3-1: USB disconnect, device number 2 [ 31.531708][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 31.531727][ T36] audit: type=1400 audit(1751095038.900:189): avc: denied { transfer } for pid=450 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.531740][ T451] rust_binder: Failed copying remainder into alloc: EFAULT [ 31.531754][ T451] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 31.564257][ T451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.573103][ T451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49 [ 31.592385][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.605118][ T36] audit: type=1400 audit(1751095038.980:190): avc: denied { setopt } for pid=455 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.630347][ T36] audit: type=1400 audit(1751095039.010:191): avc: denied { write } for pid=455 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.670425][ T36] audit: type=1400 audit(1751095039.040:192): avc: denied { lock } for pid=457 comm="syz.2.49" path="socket:[3979]" dev="sockfs" ino=3979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.752385][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 31.758572][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.765279][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 31.782381][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.792397][ T31] usb 2-1: config 0 descriptor?? [ 31.872398][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.912368][ T449] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.000042][ T36] audit: type=1400 audit(1751095039.370:193): avc: denied { ioctl } for pid=446 comm="syz.1.46" path="pid:[4026532363]" dev="nsfs" ino=4026532363 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.022599][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 32.030699][ T9] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 32.042435][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 32.051584][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.059669][ T9] usb 1-1: Product: syz [ 32.063870][ T9] usb 1-1: Manufacturer: syz [ 32.068478][ T9] usb 1-1: SerialNumber: syz [ 32.072367][ T449] usb 3-1: Using ep0 maxpacket: 32 [ 32.077273][ T9] usb 1-1: config 0 descriptor?? [ 32.079769][ T449] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 32.084113][ T9] usb 1-1: bad CDC descriptors [ 32.091447][ T449] usb 3-1: config 0 has no interface number 0 [ 32.096921][ T9] usb 1-1: unsupported MDLM descriptors [ 32.102482][ T449] usb 3-1: config 0 interface 184 has no altsetting 0 [ 32.116297][ T449] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 32.125462][ T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.133519][ T449] usb 3-1: Product: syz [ 32.137755][ T449] usb 3-1: Manufacturer: syz [ 32.142396][ T449] usb 3-1: SerialNumber: syz [ 32.147891][ T449] usb 3-1: config 0 descriptor?? [ 32.153727][ T449] smsc75xx v1.0.0 [ 32.226382][ T31] ryos 0003:1E7D:31CE.0002: item fetching failed at offset 6/7 [ 32.234242][ T31] ryos 0003:1E7D:31CE.0002: parse failed [ 32.239927][ T31] ryos 0003:1E7D:31CE.0002: probe with driver ryos failed with error -22 [ 32.489247][ T45] usb 4-1: USB disconnect, device number 2 [ 32.507833][ T9] usb 1-1: USB disconnect, device number 2 [ 32.515677][ T36] audit: type=1400 audit(1751095039.900:194): avc: denied { bind } for pid=462 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.565622][ T36] audit: type=1400 audit(1751095039.900:195): avc: granted { setsecparam } for pid=462 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.587963][ T36] audit: type=1400 audit(1751095039.900:196): avc: denied { create } for pid=462 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 32.624321][ T36] audit: type=1400 audit(1751095039.900:197): avc: denied { ioctl } for pid=462 comm="syz.3.50" path="socket:[4443]" dev="sockfs" ino=4443 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.702477][ T477] fuseblk: Unknown parameter 'gr' [ 32.702771][ T36] audit: type=1400 audit(1751095040.070:198): avc: denied { mounton } for pid=476 comm="syz.3.53" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.869881][ T481] rust_binder: Write failure EINVAL in pid:18 [ 32.870021][ T481] rust_binder: Read failure Err(EAGAIN) in pid:18 [ 32.904248][ T484] netlink: 220 bytes leftover after parsing attributes in process `syz.3.55'. [ 32.920289][ T484] rust_binder: Write failure EINVAL in pid:21 [ 32.920423][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 32.932858][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 32.979886][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 33.017960][ T490] rust_binder: Got transaction with invalid offset. [ 33.017999][ T490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.025254][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 33.027282][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 33.036708][ T490] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.052666][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 33.053702][ T490] rust_binder: Read failure Err(EFAULT) in pid:25 [ 33.071222][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 33.089684][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 33.100075][ T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 33.112529][ T449] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 33.131934][ T449] usb 3-1: USB disconnect, device number 3 [ 33.452381][ T449] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.622413][ T449] usb 3-1: Using ep0 maxpacket: 8 [ 33.634106][ T449] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 33.643336][ T449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.659741][ T449] usb 3-1: config 0 descriptor?? [ 34.058705][ T500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.059166][ T500] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 34.066083][ T500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.078879][ T449] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 34.134421][ T500] rust_binder: Write failure EINVAL in pid:32 [ 34.289813][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.349736][ T449] usb 2-1: USB disconnect, device number 2 [ 34.723361][ T64] usb 3-1: USB disconnect, device number 4 [ 34.782720][ T449] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 34.933651][ T449] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.944989][ T449] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 34.956229][ T449] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.963094][ T449] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 34.972219][ T449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.983386][ T449] usb 2-1: config 0 descriptor?? [ 34.990302][ T527] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 35.199964][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.208548][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.218241][ T449] logitech 0003:046D:C286.0004: item fetching failed at offset 0/8 [ 35.226508][ T449] logitech 0003:046D:C286.0004: parse failed [ 35.232713][ T449] logitech 0003:046D:C286.0004: probe with driver logitech failed with error -22 [ 35.252415][ T498] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.402444][ T498] usb 1-1: Using ep0 maxpacket: 32 [ 35.409778][ T498] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.416640][ T498] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 35.426754][ T498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.435697][ T551] rust_binder: Write failure EINVAL in pid:42 [ 35.443797][ T498] usb 1-1: config 0 descriptor?? [ 35.805784][ T566] netlink: 'syz.2.83': attribute type 63 has an invalid length. [ 35.813531][ T566] netlink: 5 bytes leftover after parsing attributes in process `syz.2.83'. [ 35.864389][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 35.871830][ T498] usbhid 1-1:0.0: can't add hid device: -71 [ 35.877845][ T498] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.886575][ T498] usb 1-1: USB disconnect, device number 3 [ 36.342393][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 36.342393][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.492888][ T583] rust_binder: Error while translating object. [ 36.492919][ T583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.499144][ T583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 37.301256][ T590] rust_binder: Error while translating object. [ 37.310464][ T590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.316890][ T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 37.372677][ T592] syzkaller0: entered promiscuous mode [ 37.387287][ T592] syzkaller0: entered allmulticast mode [ 37.454612][ T10] usb 2-1: USB disconnect, device number 3 [ 37.525020][ T610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 37.577727][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 37.577746][ T36] audit: type=1400 audit(1751095044.950:224): avc: denied { write } for pid=615 comm="syz.1.101" path="socket:[5112]" dev="sockfs" ino=5112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.602384][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.671422][ T36] audit: type=1400 audit(1751095045.040:225): avc: denied { execute } for pid=619 comm="syz.1.102" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.782482][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 37.788844][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 37.795729][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 37.804991][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.819102][ T9] usb 4-1: config 0 descriptor?? [ 37.935168][ T633] netlink: 'syz.1.107': attribute type 58 has an invalid length. [ 37.947151][ T36] audit: type=1400 audit(1751095045.330:226): avc: denied { relabelfrom } for pid=632 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.967684][ T36] audit: type=1400 audit(1751095045.330:227): avc: denied { relabelto } for pid=632 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.982399][ T403] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 38.055735][ T36] audit: type=1400 audit(1751095045.430:228): avc: denied { bind } for pid=637 comm="syz.1.108" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.075883][ T36] audit: type=1400 audit(1751095045.430:229): avc: denied { node_bind } for pid=637 comm="syz.1.108" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 38.127609][ T36] audit: type=1400 audit(1751095045.500:230): avc: denied { create } for pid=645 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.173550][ T403] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.182788][ T403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.191838][ T403] usb 1-1: config 0 descriptor?? [ 38.228256][ T9] ryos 0003:1E7D:31CE.0005: item fetching failed at offset 6/7 [ 38.236153][ T9] ryos 0003:1E7D:31CE.0005: parse failed [ 38.241843][ T9] ryos 0003:1E7D:31CE.0005: probe with driver ryos failed with error -22 [ 38.265418][ T36] audit: type=1400 audit(1751095045.640:231): avc: denied { ioctl } for pid=647 comm="syz.1.111" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.367133][ T36] audit: type=1400 audit(1751095045.740:232): avc: denied { read } for pid=649 comm="syz.1.112" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.390575][ T36] audit: type=1400 audit(1751095045.740:233): avc: denied { open } for pid=649 comm="syz.1.112" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.421731][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.430287][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.438970][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.447711][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.456100][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.464490][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.472848][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.481174][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.489583][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.498045][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.506396][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.514759][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.523134][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.531458][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.539800][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.548136][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.556505][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.565338][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.573698][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.582043][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.590409][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.598756][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.607125][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.615464][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.623867][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.632281][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.640630][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.648971][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.657335][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.665689][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.674114][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.682446][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.690772][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.699130][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.707454][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.715839][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.724195][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.732527][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.740849][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.749208][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.757613][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.766085][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.774471][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.782865][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.791213][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.799584][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.807961][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.816305][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.824724][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.833257][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.841615][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.849982][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.858337][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.866691][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.875064][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.883410][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.891823][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.900168][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.908723][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.917074][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.925426][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.933795][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.942144][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.950482][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.958837][ T655] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.244323][ T683] usb usb8: usbfs: process 683 (syz.1.122) did not claim interface 0 before use [ 39.442635][ T403] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 39.453262][ T403] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 39.463843][ T403] asix 1-1:0.0: probe with driver asix failed with error -71 [ 39.472302][ T403] usb 1-1: USB disconnect, device number 4 [ 39.932376][ T403] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.966020][ T689] tmpfs: Unknown parameter 'ui`' [ 39.972180][ T689] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.001500][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.087707][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.099785][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.102125][ T693] rust_binder: Error while translating object. [ 40.109688][ T693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.109683][ T403] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.109727][ T403] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.116369][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 40.125404][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.168151][ T403] usb 3-1: config 0 descriptor?? [ 40.175761][ T695] rust_binder: Error while translating object. [ 40.175782][ T695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 40.181988][ T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:150 [ 40.371588][ T449] usb 4-1: USB disconnect, device number 3 [ 40.540268][ T730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 40.575506][ T403] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 40.589081][ T403] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 40.669977][ T739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.672851][ T737] rust_binder: Error while translating object. [ 40.673928][ T739] rust_binder: Error while translating object. [ 40.679548][ T737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.685603][ T739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.692030][ T737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 40.701148][ T739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 40.909035][ T756] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.926461][ T756] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 40.934876][ T756] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.942830][ T756] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 41.339235][ T9] usb 3-1: USB disconnect, device number 5 [ 41.413986][ T780] binder: Bad value for 'defcontext' [ 41.598132][ T777] rust_binder: Error while translating object. [ 41.598156][ T777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 41.604412][ T777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:80 [ 42.022418][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 42.022413][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.062011][ T791] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.118262][ T794] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.134660][ T797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.134696][ T797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 42.136387][ T794] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.285937][ T803] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.285959][ T803] rust_binder: Read failure Err(EFAULT) in pid:90 [ 42.532371][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.692371][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.703663][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.714754][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.724877][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.738076][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.747333][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.756544][ T45] usb 3-1: config 0 descriptor?? [ 42.860318][ T9] usb 1-1: config 127 has an invalid interface number: 54 but max is 0 [ 42.868746][ T9] usb 1-1: config 127 has no interface number 0 [ 42.875162][ T9] usb 1-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 42.884274][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.901899][ T822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 42.911017][ T822] ======================================================= [ 42.911017][ T822] WARNING: The mand mount option has been deprecated and [ 42.911017][ T822] and is ignored by this kernel. Remove the mand [ 42.911017][ T822] option from the mount to silence this warning. [ 42.911017][ T822] ======================================================= [ 42.964495][ T827] __vm_enough_memory: pid: 827, comm: syz.3.169, bytes: 70373039144960 not enough memory for the allocation [ 43.104963][ T9] usb 1-1: string descriptor 0 read error: -71 [ 43.111937][ T9] usb 1-1: Found UVC 0.00 device (1b3f:2002) [ 43.132393][ T9] usb 1-1: No valid video chain found. [ 43.138783][ T9] usb 1-1: USB disconnect, device number 5 [ 43.165796][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.173272][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.180672][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.188125][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.195579][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.203022][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.210435][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.217855][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.225290][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.232702][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.240097][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.247516][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.254957][ T45] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 43.262572][ T45] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 43.274591][ T45] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.717042][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 43.717062][ T36] audit: type=1400 audit(1751095051.090:260): avc: denied { create } for pid=802 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 43.749894][ T836] rust_binder: Write failure EINVAL in pid:90 [ 43.758558][ T36] audit: type=1326 audit(1751095051.130:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=837 comm="syz.3.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8238e929 code=0x0 [ 43.808298][ T850] rust_binder: Error while translating object. [ 43.808329][ T850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.814557][ T850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 43.901084][ T36] audit: type=1400 audit(1751095051.270:262): avc: denied { name_bind } for pid=840 comm="syz.0.172" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 44.046936][ T870] rust_binder: Error in use_page_slow: ESRCH [ 44.046961][ T870] rust_binder: use_range failure ESRCH [ 44.047825][ T36] audit: type=1400 audit(1751095051.420:263): avc: denied { accept } for pid=869 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.053284][ T870] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 44.077361][ T873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 44.077855][ T870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.087469][ T36] audit: type=1326 audit(1751095051.470:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=872 comm="syz.0.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5078d8e929 code=0x0 [ 44.095677][ T870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:150 [ 44.142460][ T36] audit: type=1400 audit(1751095051.510:265): avc: denied { setopt } for pid=874 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.343651][ T885] overlayfs: disabling nfs_export due to verity=on [ 44.350220][ T885] overlayfs: missing 'lowerdir' [ 45.152398][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.294952][ T45] usb 3-1: USB disconnect, device number 6 [ 45.302477][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 45.322758][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.332181][ T892] netlink: 'syz.3.191': attribute type 11 has an invalid length. [ 45.340529][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.340867][ T892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 45.349754][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.362659][ T895] can0: slcan on ptm0. [ 45.367359][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.371366][ T36] audit: type=1400 audit(1751095052.740:266): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 45.383638][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.405971][ T36] audit: type=1400 audit(1751095052.780:267): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.419181][ T892] fuse: Bad value for 'user_id' [ 45.433375][ T36] audit: type=1400 audit(1751095052.790:268): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1480 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.440950][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.472239][ T892] fuse: Bad value for 'user_id' [ 45.479867][ T36] audit: type=1400 audit(1751095052.790:269): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1480 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.482602][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.511884][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.524321][ T9] usb 1-1: config 0 descriptor?? [ 45.733683][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.772400][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.923569][ T45] usb 3-1: config 0 has no interfaces? [ 45.930498][ T45] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 45.939635][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.947385][ T9] usb 1-1: USB disconnect, device number 6 [ 45.947871][ T45] usb 3-1: Product: syz [ 45.956862][ T9] usblp0: removed [ 45.959107][ T45] usb 3-1: Manufacturer: syz [ 45.966806][ T45] usb 3-1: SerialNumber: syz [ 45.972059][ T45] usb 3-1: config 0 descriptor?? [ 46.179437][ T45] usb 3-1: USB disconnect, device number 7 [ 46.223006][ T895] can0 (unregistered): slcan off ptm0. [ 46.475822][ T943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 46.856949][ T972] input: syz0 as /devices/virtual/input/input6 [ 46.892378][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 47.002390][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 47.043471][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 47.051491][ T9] usb 1-1: config 0 has an invalid interface descriptor of length 5, skipping [ 47.060420][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.070601][ T9] usb 1-1: config 0 has no interface number 0 [ 47.077701][ T9] usb 1-1: too many endpoints for config 0 interface 2 altsetting 2: 180, using maximum allowed: 30 [ 47.088760][ T9] usb 1-1: config 0 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 180 [ 47.102209][ T9] usb 1-1: config 0 interface 2 has no altsetting 0 [ 47.110328][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 47.119434][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.127474][ T9] usb 1-1: Product: syz [ 47.131650][ T9] usb 1-1: Manufacturer: syz [ 47.136324][ T10] usb 3-1: device descriptor read/64, error -71 [ 47.142618][ T9] usb 1-1: SerialNumber: syz [ 47.147890][ T9] usb 1-1: config 0 descriptor?? [ 47.332377][ T465] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.356132][ T9] CoreChips 1-1:0.2: probe with driver CoreChips failed with error -22 [ 47.382402][ T10] usb 3-1: device descriptor read/64, error -71 [ 47.482371][ T465] usb 4-1: Using ep0 maxpacket: 16 [ 47.488626][ T465] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 47.499466][ T465] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.509159][ T465] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.521420][ T465] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.530487][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.538516][ T465] usb 4-1: Product: syz [ 47.542716][ T465] usb 4-1: Manufacturer: syz [ 47.547300][ T465] usb 4-1: SerialNumber: syz [ 47.622385][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 47.752389][ T10] usb 3-1: device descriptor read/64, error -71 [ 47.959865][ T465] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 47.992393][ T10] usb 3-1: device descriptor read/64, error -71 [ 48.060110][ T978] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.102622][ T10] usb usb3-port1: attempt power cycle [ 48.442397][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.463492][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.593465][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.724370][ T465] usb 4-1: current rate 14026156 is different from the runtime rate 9338507 [ 48.832394][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.853430][ T10] usb 3-1: device descriptor read/8, error -71 [ 48.946192][ T465] usb 4-1: USB disconnect, device number 4 [ 48.983444][ T10] usb 3-1: device descriptor read/8, error -71 [ 49.092457][ T10] usb usb3-port1: unable to enumerate USB device [ 49.644117][ T10] usb 1-1: USB disconnect, device number 7 [ 49.692394][ T498] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.802239][ T998] overlayfs: failed to resolve './file1': -2 [ 49.873079][ T498] usb 4-1: Using ep0 maxpacket: 8 [ 49.888878][ T498] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 49.901437][ T498] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.926761][ T498] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 49.945811][ T498] usb 4-1: config 0 has no interface number 0 [ 49.953397][ T498] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 49.972508][ T498] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 49.992392][ T498] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 50.002516][ T498] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 50.022378][ T498] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.037124][ T498] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 50.046443][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.054694][ T498] usb 4-1: Product: syz [ 50.062376][ T498] usb 4-1: Manufacturer: syz [ 50.067129][ T498] usb 4-1: SerialNumber: syz [ 50.077140][ T498] usb 4-1: config 0 descriptor?? [ 50.093943][ T498] snd-usb-audio 4-1:0.151: probe with driver snd-usb-audio failed with error -12 [ 50.110658][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.317294][ T10] usb 4-1: USB disconnect, device number 5 [ 50.445363][ T983] cgroup: fork rejected by pids controller in /syz0 [ 50.472369][ T64] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 50.643730][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 50.651953][ T64] usb 3-1: not running at top speed; connect to a high speed hub [ 50.660609][ T64] usb 3-1: config 14 has an invalid interface number: 18 but max is 0 [ 50.672356][ T64] usb 3-1: config 14 has no interface number 0 [ 50.678562][ T64] usb 3-1: config 14 interface 18 has no altsetting 0 [ 50.701348][ T64] usb 3-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 50.720756][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.728961][ T64] usb 3-1: Product: syz [ 50.733329][ T64] usb 3-1: Manufacturer: syz [ 50.737950][ T64] usb 3-1: SerialNumber: syz [ 50.845055][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 50.845074][ T36] audit: type=1400 audit(1751095058.220:293): avc: denied { mount } for pid=1039 comm="syz.1.217" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.957166][ T36] audit: type=1400 audit(1751095058.330:294): avc: denied { name_bind } for pid=1013 comm="syz.2.212" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.998782][ T36] audit: type=1400 audit(1751095058.360:295): avc: denied { create } for pid=1013 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.021368][ T64] rtl8150 3-1:14.18: couldn't find required endpoints [ 51.028576][ T64] rtl8150 3-1:14.18: probe with driver rtl8150 failed with error -5 [ 51.052315][ T64] usb 3-1: USB disconnect, device number 12 [ 51.060188][ T36] audit: type=1400 audit(1751095058.410:296): avc: denied { map } for pid=1049 comm="syz.3.222" path="socket:[7979]" dev="sockfs" ino=7979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 51.875298][ T1086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1086 comm=syz.1.232 [ 51.905927][ T1086] rust_binder: Error while translating object. [ 51.905970][ T1086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.919813][ T1086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 51.930037][ T1084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 51.935581][ T36] audit: type=1400 audit(1751095059.300:297): avc: denied { getopt } for pid=1074 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.959327][ T1084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.975341][ T36] audit: type=1400 audit(1751095059.350:298): avc: denied { connect } for pid=1091 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.979893][ T1090] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 51.982112][ T36] audit: type=1400 audit(1751095059.350:299): avc: denied { ioctl } for pid=1089 comm="syz.3.233" path="socket:[8150]" dev="sockfs" ino=8150 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.070325][ T36] audit: type=1400 audit(1751095059.350:300): avc: denied { read } for pid=1091 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.171116][ T1103] rust_binder: Error in use_page_slow: ESRCH [ 52.171141][ T1103] rust_binder: use_range failure ESRCH [ 52.182038][ T1103] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 52.190040][ T1103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.201224][ T1103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:226 [ 52.371069][ T1110] rust_binder: Write failure EFAULT in pid:195 [ 52.483249][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.552407][ T498] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 52.632428][ T10] usb 4-1: device descriptor read/64, error -71 [ 52.657278][ T36] audit: type=1400 audit(1751095060.030:301): avc: denied { create } for pid=1116 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 52.703384][ T498] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 52.711669][ T498] usb 2-1: config 0 has no interface number 0 [ 52.717835][ T498] usb 2-1: config 0 interface 168 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.739191][ T498] usb 2-1: config 0 interface 168 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.749184][ T498] usb 2-1: config 0 interface 168 has no altsetting 0 [ 52.759022][ T498] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 52.768339][ T498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.777600][ T498] usb 2-1: config 0 descriptor?? [ 52.830026][ T1120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 52.830196][ T1120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.902505][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.152393][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 53.187016][ T498] logitech-djreceiver 0003:046D:C70E.0008: hidraw0: USB HID v0.00 Device [HID 046d:c70e] on usb-dummy_hcd.1-1/input168 [ 53.232386][ T449] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 53.282381][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.289585][ T1030] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.308492][ T1030] CPU: 1 UID: 0 PID: 1030 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 53.308526][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.308544][ T1030] Call Trace: [ 53.308551][ T1030] [ 53.308559][ T1030] __dump_stack+0x21/0x30 [ 53.308590][ T1030] dump_stack_lvl+0x10c/0x190 [ 53.308615][ T1030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.308640][ T1030] ? ___ratelimit+0x3f7/0x5a0 [ 53.308664][ T1030] dump_stack+0x19/0x20 [ 53.308687][ T1030] dump_header+0xd7/0x490 [ 53.308718][ T1030] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 53.308742][ T1030] oom_kill_process+0x4c0/0x7e0 [ 53.308761][ T1030] ? sched_clock_cpu+0x75/0x400 [ 53.308787][ T1030] out_of_memory+0x7ee/0xbd0 [ 53.308806][ T1030] ? __cfi_out_of_memory+0x10/0x10 [ 53.308825][ T1030] ? mutex_lock_killable+0x92/0x1c0 [ 53.308850][ T1030] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.308877][ T1030] mem_cgroup_out_of_memory+0x279/0x350 [ 53.308905][ T1030] ? drain_obj_stock+0xed0/0xed0 [ 53.308934][ T1030] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 53.308962][ T1030] try_charge_memcg+0x8f7/0xde0 [ 53.308986][ T1030] ? __cfi_try_charge_memcg+0x10/0x10 [ 53.309009][ T1030] ? __alloc_pages_noprof+0x30d/0x6c0 [ 53.309032][ T1030] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.309055][ T1030] __mem_cgroup_charge+0xf6/0x410 [ 53.309080][ T1030] ? _raw_spin_lock+0x8c/0x120 [ 53.309111][ T1030] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.309139][ T1030] shmem_alloc_and_add_folio+0x86d/0x1050 [ 53.309173][ T1030] ? put_swap_device+0x130/0x130 [ 53.309205][ T1030] ? shmem_huge_global_enabled+0x2da/0x360 [ 53.309232][ T1030] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 53.309257][ T1030] ? __kasan_check_write+0x18/0x20 [ 53.309278][ T1030] ? _raw_spin_lock+0x8c/0x120 [ 53.309304][ T1030] shmem_get_folio_gfp+0x5f0/0x1380 [ 53.309332][ T1030] ? shmem_get_folio+0xc0/0xc0 [ 53.309355][ T1030] ? follow_page_pte+0xa5c/0xb90 [ 53.309373][ T1030] ? inode_to_bdi+0x6d/0x100 [ 53.309393][ T1030] shmem_write_begin+0xf4/0x270 [ 53.309428][ T1030] generic_perform_write+0x32d/0x960 [ 53.309450][ T1030] ? __cfi_generic_perform_write+0x10/0x10 [ 53.309469][ T1030] ? down_write+0xe9/0x2a0 [ 53.309491][ T1030] ? file_update_time+0xa3/0x220 [ 53.309511][ T1030] shmem_file_write_iter+0x105/0x130 [ 53.309532][ T1030] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 53.309552][ T1030] __kernel_write_iter+0x392/0x830 [ 53.309578][ T1030] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 53.309601][ T1030] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.309628][ T1030] ? get_dump_page+0x160/0x220 [ 53.309648][ T1030] ? __asan_memset+0x39/0x50 [ 53.309672][ T1030] ? iov_iter_bvec+0xc0/0x180 [ 53.309702][ T1030] dump_user_range+0xb06/0xdf0 [ 53.309730][ T1030] ? __cfi_dump_emit+0x10/0x10 [ 53.309756][ T1030] ? __cfi_dump_user_range+0x10/0x10 [ 53.309782][ T1030] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 53.309810][ T1030] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 53.309838][ T1030] elf_core_dump+0x2cd9/0x3810 [ 53.309874][ T1030] ? __cfi_elf_core_dump+0x10/0x10 [ 53.309912][ T1030] ? dump_interrupted+0xf0/0xf0 [ 53.309937][ T1030] ? filp_open+0x182/0x1d0 [ 53.309957][ T1030] ? 0xffffffffff600000 [ 53.309981][ T1030] do_coredump+0x1bf7/0x2bd0 [ 53.310010][ T1030] ? __cfi_do_coredump+0x10/0x10 [ 53.310052][ T1030] ? asm_exc_page_fault+0x2b/0x30 [ 53.310084][ T1030] ? __kasan_slab_free+0x6a/0x80 [ 53.310127][ T1030] ? kmem_cache_free+0x1c1/0x4c0 [ 53.310155][ T1030] get_signal+0x11fd/0x14f0 [ 53.310181][ T1030] arch_do_signal_or_restart+0x96/0x720 [ 53.310210][ T1030] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.310242][ T1030] irqentry_exit_to_user_mode+0x4e/0xb0 [ 53.310270][ T1030] irqentry_exit+0x16/0x60 [ 53.310296][ T1030] exc_page_fault+0x66/0xc0 [ 53.310322][ T1030] asm_exc_page_fault+0x2b/0x30 [ 53.310344][ T1030] RIP: 0033:0x7f5078d8e931 [ 53.310361][ T1030] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.310378][ T1030] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 53.310395][ T1030] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 53.310413][ T1030] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 53.310425][ T1030] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.310454][ T1030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.310466][ T1030] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 53.310482][ T1030] [ 53.310524][ T1030] memory: usage 307200kB, limit 307200kB, failcnt 16624 [ 53.542405][ T10] usb 4-1: device descriptor read/64, error -71 [ 53.544867][ T1030] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 53.650640][ T36] audit: type=1400 audit(1751095061.010:302): avc: denied { bind } for pid=1142 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.655213][ T1030] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.660863][ T10] usb usb4-port1: attempt power cycle [ 53.666930][ T1030] Memory cgroup stats for /syz0: [ 53.811886][ T1030] cache 314265600 [ 53.820577][ T1030] rss 245760 [ 53.823850][ T1030] rss_huge 0 [ 53.827075][ T1030] shmem 314265600 [ 53.830730][ T1030] mapped_file 0 [ 53.834311][ T1030] dirty 0 [ 53.837311][ T1030] writeback 0 [ 53.840684][ T449] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.851686][ T449] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 53.862335][ T1030] workingset_refault_anon 8 [ 53.866855][ T1030] workingset_refault_file 32 [ 53.871456][ T1030] swap 127930368 [ 53.874669][ T1146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:133 [ 53.875082][ T449] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.881457][ T1146] kvm: kvm [1145]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 53.884240][ T449] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 53.884267][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.899061][ T1030] swapcached 61440 [ 53.900322][ T449] usb 1-1: config 0 descriptor?? [ 53.925486][ T1030] pgpgin 174795 [ 53.928988][ T1030] pgpgout 97995 [ 53.929101][ T1133] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 53.932727][ T1030] pgfault 24286 [ 53.943232][ T1030] pgmajfault 12 [ 53.946716][ T1030] inactive_anon 138821632 [ 53.951119][ T1030] active_anon 175751168 [ 53.955324][ T1030] inactive_file 0 [ 53.958980][ T1030] active_file 0 [ 53.962569][ T1030] unevictable 0 [ 53.966056][ T1030] hierarchical_memory_limit 314572800 [ 53.972341][ T1030] hierarchical_memsw_limit 9223372036854771712 [ 53.987134][ T1030] total_cache 314265600 [ 53.991337][ T1030] total_rss 245760 [ 53.997482][ T1030] total_rss_huge 0 [ 54.001353][ T1030] total_shmem 314265600 [ 54.005621][ T1030] total_mapped_file 0 [ 54.009663][ T1030] total_dirty 0 [ 54.015153][ T1030] total_writeback 0 [ 54.018985][ T1030] total_workingset_refault_anon 8 [ 54.024302][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.031878][ T1030] total_workingset_refault_file 32 [ 54.038273][ T1030] total_swap 127930368 [ 54.042600][ T1030] total_swapcached 61440 [ 54.046860][ T1030] total_pgpgin 174795 [ 54.050863][ T1030] total_pgpgout 97995 [ 54.055113][ T1030] total_pgfault 24286 [ 54.059412][ T1030] total_pgmajfault 12 [ 54.063494][ T1030] total_inactive_anon 138821632 [ 54.068459][ T1030] total_active_anon 175751168 [ 54.069391][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.073440][ T1030] total_inactive_file 0 [ 54.083583][ T1030] total_active_file 0 [ 54.087593][ T1030] total_unevictable 0 [ 54.092152][ T1030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=986,uid=0 [ 54.107638][ T1030] Memory cgroup out of memory: Killed process 986 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 54.203365][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.232358][ T403] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.393458][ T403] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213 [ 54.412436][ T403] usb 3-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 54.430716][ T1030] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 54.440722][ T403] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 54.453696][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 54.462630][ T403] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 54.471766][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.479868][ T403] usb 3-1: Product: syz [ 54.484253][ T403] usb 3-1: Manufacturer: syz [ 54.488968][ T403] usb 3-1: SerialNumber: syz [ 54.494135][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.501575][ T403] usb 3-1: config 0 descriptor?? [ 54.511366][ T403] usb-storage 3-1:0.0: USB Mass Storage device detected [ 54.523343][ T403] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 54.585738][ T1030] CPU: 1 UID: 0 PID: 1030 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 54.585778][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.585792][ T1030] Call Trace: [ 54.585799][ T1030] [ 54.585807][ T1030] __dump_stack+0x21/0x30 [ 54.585839][ T1030] dump_stack_lvl+0x10c/0x190 [ 54.585865][ T1030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.585890][ T1030] ? ___ratelimit+0x3f7/0x5a0 [ 54.585915][ T1030] dump_stack+0x19/0x20 [ 54.585940][ T1030] dump_header+0xd7/0x490 [ 54.585973][ T1030] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 54.585997][ T1030] oom_kill_process+0x4c0/0x7e0 [ 54.586017][ T1030] ? sched_clock_cpu+0x75/0x400 [ 54.586044][ T1030] out_of_memory+0x7ee/0xbd0 [ 54.586064][ T1030] ? __cfi_out_of_memory+0x10/0x10 [ 54.586084][ T1030] ? mutex_lock_killable+0x104/0x1c0 [ 54.586112][ T1030] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.586141][ T1030] mem_cgroup_out_of_memory+0x279/0x350 [ 54.586171][ T1030] ? drain_obj_stock+0xed0/0xed0 [ 54.586201][ T1030] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 54.586230][ T1030] try_charge_memcg+0x8f7/0xde0 [ 54.586256][ T1030] ? __cfi_try_charge_memcg+0x10/0x10 [ 54.586280][ T1030] ? __alloc_pages_noprof+0x30d/0x6c0 [ 54.586300][ T1030] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 54.586320][ T1030] __mem_cgroup_charge+0xf6/0x410 [ 54.586348][ T1030] ? _raw_spin_lock+0x8c/0x120 [ 54.586380][ T1030] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 54.586409][ T1030] shmem_alloc_and_add_folio+0x86d/0x1050 [ 54.586445][ T1030] ? put_swap_device+0x130/0x130 [ 54.586497][ T1030] ? shmem_huge_global_enabled+0x2da/0x360 [ 54.586544][ T1030] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 54.586578][ T1030] ? __kasan_check_write+0x18/0x20 [ 54.586606][ T1030] ? _raw_spin_lock+0x8c/0x120 [ 54.586640][ T1030] shmem_get_folio_gfp+0x5f0/0x1380 [ 54.586676][ T1030] ? shmem_get_folio+0xc0/0xc0 [ 54.586706][ T1030] ? follow_page_pte+0xa5c/0xb90 [ 54.586730][ T1030] ? inode_to_bdi+0x6d/0x100 [ 54.586756][ T1030] shmem_write_begin+0xf4/0x270 [ 54.586791][ T1030] generic_perform_write+0x32d/0x960 [ 54.586821][ T1030] ? __cfi_generic_perform_write+0x10/0x10 [ 54.586846][ T1030] ? down_write+0xe9/0x2a0 [ 54.586875][ T1030] ? file_update_time+0xa3/0x220 [ 54.586900][ T1030] shmem_file_write_iter+0x105/0x130 [ 54.586924][ T1030] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.586948][ T1030] __kernel_write_iter+0x392/0x830 [ 54.586977][ T1030] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.587002][ T1030] ? __cfi___kernel_write_iter+0x10/0x10 [ 54.587029][ T1030] ? get_dump_page+0x160/0x220 [ 54.587051][ T1030] ? __asan_memset+0x39/0x50 [ 54.587077][ T1030] ? iov_iter_bvec+0xc0/0x180 [ 54.587109][ T1030] dump_user_range+0xb06/0xdf0 [ 54.587140][ T1030] ? __cfi_dump_emit+0x10/0x10 [ 54.587166][ T1030] ? __cfi_dump_user_range+0x10/0x10 [ 54.587195][ T1030] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 54.587225][ T1030] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 54.587255][ T1030] elf_core_dump+0x2cd9/0x3810 [ 54.587292][ T1030] ? __cfi_elf_core_dump+0x10/0x10 [ 54.587333][ T1030] ? dump_interrupted+0xf0/0xf0 [ 54.587360][ T1030] ? filp_open+0x182/0x1d0 [ 54.587383][ T1030] ? 0xffffffffff600000 [ 54.587403][ T1030] do_coredump+0x1bf7/0x2bd0 [ 54.587434][ T1030] ? __cfi_do_coredump+0x10/0x10 [ 54.587460][ T1030] ? asm_exc_page_fault+0x2b/0x30 [ 54.587493][ T1030] ? __kasan_slab_free+0x6a/0x80 [ 54.587524][ T1030] ? kmem_cache_free+0x1c1/0x4c0 [ 54.587565][ T1030] get_signal+0x11fd/0x14f0 [ 54.587593][ T1030] arch_do_signal_or_restart+0x96/0x720 [ 54.587625][ T1030] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.587672][ T1030] irqentry_exit_to_user_mode+0x4e/0xb0 [ 54.587703][ T1030] irqentry_exit+0x16/0x60 [ 54.587730][ T1030] exc_page_fault+0x66/0xc0 [ 54.587756][ T1030] asm_exc_page_fault+0x2b/0x30 [ 54.587779][ T1030] RIP: 0033:0x7f5078d8e931 [ 54.587796][ T1030] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 54.587814][ T1030] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 54.587836][ T1030] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 54.587853][ T1030] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 54.587870][ T1030] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 54.587885][ T1030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 54.587900][ T1030] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 54.587920][ T1030] [ 54.623480][ T10] usb 4-1: device descriptor read/8, error -71 [ 54.626390][ T1030] memory: usage 300248kB, limit 307200kB, failcnt 19656 [ 54.723626][ T1148] rust_binder: Error while translating object. [ 54.727965][ T1030] memory+swap: usage 414912kB, limit 9007199254740988kB, failcnt 0 [ 54.733026][ T10] usb usb4-port1: unable to enumerate USB device [ 54.782468][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.792381][ T1030] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.802398][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 54.820535][ T1030] Memory cgroup stats for [ 54.895589][ T64] usb 3-1: USB disconnect, device number 13 [ 54.903188][ T1030] /syz0: [ 55.132595][ T1030] cache 310050816 [ 55.139240][ T1030] rss 253952 [ 55.149328][ T1030] rss_huge 0 [ 55.155783][ T1030] shmem 309657600 [ 55.162526][ T1030] mapped_file 262144 [ 55.172498][ T1030] dirty 0 [ 55.175500][ T1030] writeback 73728 [ 55.189834][ T1030] workingset_refault_anon 12 [ 55.202730][ T1030] workingset_refault_file 128 [ 55.209382][ T1175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.210620][ T1030] swap 127864832 [ 55.222229][ T1175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.233378][ T1030] swapcached 131072 [ 55.237638][ T1030] pgpgin 182028 [ 55.241683][ T1030] pgpgout 106243 [ 55.245947][ T1030] pgfault 24664 [ 55.249468][ T1030] pgmajfault 17 [ 55.253012][ T1030] inactive_anon 65617920 [ 55.257501][ T1030] active_anon 244346880 [ 55.261854][ T1030] inactive_file 0 [ 55.265676][ T1030] active_file 393216 [ 55.266686][ T1177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 55.269588][ T1030] unevictable 0 [ 55.269600][ T1030] hierarchical_memory_limit 314572800 [ 55.269611][ T1030] hierarchical_memsw_limit 9223372036854771712 [ 55.293752][ T1030] total_cache 310050816 [ 55.298083][ T1030] total_rss 253952 [ 55.301889][ T1030] total_rss_huge 0 [ 55.305710][ T1030] total_shmem 309657600 [ 55.309870][ T1030] total_mapped_file 262144 [ 55.314391][ T1030] total_dirty 0 [ 55.317911][ T1030] total_writeback 73728 [ 55.320206][ T1184] rust_binder: got new transaction with bad transaction stack [ 55.322090][ T1184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 55.322150][ T1185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.330697][ T1030] total_workingset_refault_anon 12 [ 55.350397][ T1030] total_workingset_refault_file 128 [ 55.356033][ T1030] total_swap 127864832 [ 55.360137][ T1030] total_swapcached 131072 [ 55.364733][ T1030] total_pgpgin 182028 [ 55.368752][ T1030] total_pgpgout 106243 [ 55.373083][ T1030] total_pgfault 24664 [ 55.377100][ T1030] total_pgmajfault 17 [ 55.381107][ T1030] total_inactive_anon 65617920 [ 55.387374][ T1030] total_active_anon 244346880 [ 55.392090][ T1030] total_inactive_file 0 [ 55.396560][ T1030] total_active_file 393216 [ 55.401024][ T1030] total_unevictable 0 [ 55.405262][ T1030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=985,uid=0 [ 55.420189][ T1030] Memory cgroup out of memory: Killed process 985 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 55.482299][ T1202] cgroup: none used incorrectly [ 55.610583][ T1034] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.676094][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 55.676131][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.676143][ T1034] Call Trace: [ 55.676149][ T1034] [ 55.676157][ T1034] __dump_stack+0x21/0x30 [ 55.676192][ T1034] dump_stack_lvl+0x10c/0x190 [ 55.676215][ T1034] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.676239][ T1034] ? ___ratelimit+0x3f7/0x5a0 [ 55.676261][ T1034] dump_stack+0x19/0x20 [ 55.676281][ T1034] dump_header+0xd7/0x490 [ 55.676309][ T1034] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 55.676329][ T1034] oom_kill_process+0x4c0/0x7e0 [ 55.676347][ T1034] ? sched_clock_cpu+0x75/0x400 [ 55.676372][ T1034] out_of_memory+0x7ee/0xbd0 [ 55.676390][ T1034] ? __cfi_out_of_memory+0x10/0x10 [ 55.676406][ T1034] ? mutex_lock_killable+0x104/0x1c0 [ 55.676430][ T1034] ? __cfi_mutex_lock_killable+0x10/0x10 [ 55.676456][ T1034] mem_cgroup_out_of_memory+0x279/0x350 [ 55.676500][ T1034] ? drain_obj_stock+0xed0/0xed0 [ 55.676539][ T1034] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 55.676566][ T1034] try_charge_memcg+0x8f7/0xde0 [ 55.676587][ T1034] ? __cfi_try_charge_memcg+0x10/0x10 [ 55.676608][ T1034] ? __alloc_pages_noprof+0x30d/0x6c0 [ 55.676629][ T1034] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 55.676649][ T1034] ? __folio_batch_add_and_move+0x2ab/0x370 [ 55.676673][ T1034] __mem_cgroup_charge+0xf6/0x410 [ 55.676697][ T1034] ? __kasan_check_write+0x18/0x20 [ 55.676720][ T1034] ? _raw_spin_lock+0x8c/0x120 [ 55.676748][ T1034] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 55.676773][ T1034] shmem_alloc_and_add_folio+0x86d/0x1050 [ 55.676808][ T1034] ? put_swap_device+0x130/0x130 [ 55.676837][ T1034] ? shmem_huge_global_enabled+0x2da/0x360 [ 55.676866][ T1034] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 55.676894][ T1034] ? __kasan_check_write+0x18/0x20 [ 55.676916][ T1034] ? _raw_spin_lock+0x8c/0x120 [ 55.676949][ T1034] shmem_get_folio_gfp+0x5f0/0x1380 [ 55.676979][ T1034] ? shmem_get_folio+0xc0/0xc0 [ 55.677004][ T1034] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 55.677027][ T1034] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 55.677049][ T1034] ? inode_to_bdi+0x6d/0x100 [ 55.677074][ T1034] shmem_write_begin+0xf4/0x270 [ 55.677103][ T1034] generic_perform_write+0x32d/0x960 [ 55.677129][ T1034] ? __cfi_generic_perform_write+0x10/0x10 [ 55.677154][ T1034] ? down_write+0xe9/0x2a0 [ 55.677178][ T1034] ? mnt_get_write_access_file+0x1af/0x3b0 [ 55.677206][ T1034] ? mnt_put_write_access_file+0xc2/0x100 [ 55.677226][ T1034] ? file_update_time+0x1ef/0x220 [ 55.677248][ T1034] shmem_file_write_iter+0x105/0x130 [ 55.677268][ T1034] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 55.677288][ T1034] __kernel_write_iter+0x392/0x830 [ 55.677313][ T1034] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 55.677335][ T1034] ? __cfi___kernel_write_iter+0x10/0x10 [ 55.677360][ T1034] ? get_dump_page+0x160/0x220 [ 55.677379][ T1034] ? __asan_memset+0x39/0x50 [ 55.677401][ T1034] ? iov_iter_bvec+0xc0/0x180 [ 55.677430][ T1034] dump_user_range+0xb06/0xdf0 [ 55.677456][ T1034] ? __cfi_dump_emit+0x10/0x10 [ 55.677483][ T1034] ? __cfi_dump_user_range+0x10/0x10 [ 55.677508][ T1034] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 55.677533][ T1034] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 55.677559][ T1034] elf_core_dump+0x2cd9/0x3810 [ 55.677603][ T1034] ? __cfi_elf_core_dump+0x10/0x10 [ 55.677640][ T1034] ? dump_interrupted+0xf0/0xf0 [ 55.677662][ T1034] ? filp_open+0x182/0x1d0 [ 55.677681][ T1034] ? 0xffffffffff600000 [ 55.677696][ T1034] do_coredump+0x1bf7/0x2bd0 [ 55.677721][ T1034] ? __cfi_do_coredump+0x10/0x10 [ 55.677744][ T1034] ? asm_exc_page_fault+0x2b/0x30 [ 55.677773][ T1034] ? __kasan_slab_free+0x6a/0x80 [ 55.677800][ T1034] ? kmem_cache_free+0x1c1/0x4c0 [ 55.677843][ T1034] get_signal+0x11fd/0x14f0 [ 55.677867][ T1034] arch_do_signal_or_restart+0x96/0x720 [ 55.677893][ T1034] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.677926][ T1034] irqentry_exit_to_user_mode+0x4e/0xb0 [ 55.677951][ T1034] irqentry_exit+0x16/0x60 [ 55.677975][ T1034] exc_page_fault+0x66/0xc0 [ 55.677999][ T1034] asm_exc_page_fault+0x2b/0x30 [ 55.678019][ T1034] RIP: 0033:0x7f5078d8e931 [ 55.678036][ T1034] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 55.678054][ T1034] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 55.678072][ T1034] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 55.678086][ T1034] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 55.678099][ T1034] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 55.678112][ T1034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 55.678124][ T1034] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 55.678140][ T1034] [ 56.246081][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 56.246098][ T36] audit: type=1400 audit(1751095063.620:310): avc: denied { setopt } for pid=1209 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.283558][ T465] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 56.334029][ T449] usbhid 1-1:0.0: can't add hid device: -71 [ 56.350663][ T1212] can0: slcan on ptm0. [ 56.352192][ T1034] memory: usage 295812kB, limit 307200kB, failcnt 24526 [ 56.358365][ T449] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.361768][ T1034] memory+swap: usage 419264kB, limit 9007199254740988kB, failcnt 0 [ 56.377413][ T1034] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 56.384330][ T1034] Memory cgroup stats for /syz0: [ 56.384476][ T1034] cache 303476736 [ 56.393061][ T1034] rss 94208 [ 56.393494][ T449] usb 1-1: USB disconnect, device number 8 [ 56.396182][ T1034] rss_huge 0 [ 56.396192][ T1034] shmem 303472640 [ 56.396201][ T1034] mapped_file 0 [ 56.396210][ T1034] dirty 0 [ 56.415318][ T1034] writeback 0 [ 56.418624][ T1034] workingset_refault_anon 12 [ 56.423273][ T1034] workingset_refault_file 161 [ 56.428034][ T1034] swap 126414848 [ 56.431709][ T1034] swapcached 57344 [ 56.435491][ T1034] pgpgin 191001 [ 56.438963][ T1034] pgpgout 116878 [ 56.442980][ T1034] pgfault 25189 [ 56.446696][ T1034] pgmajfault 20 [ 56.450214][ T1034] inactive_anon 209158144 [ 56.454582][ T1034] active_anon 94384128 [ 56.460136][ T1034] inactive_file 0 [ 56.463870][ T1034] active_file 0 [ 56.467143][ T1218] binder: Unknown parameter 'stat ' [ 56.467335][ T1034] unevictable 0 [ 56.467354][ T1034] hierarchical_memory_limit 314572800 [ 56.467365][ T1034] hierarchical_memsw_limit 9223372036854771712 [ 56.474054][ T465] usb 3-1: unable to get BOS descriptor or descriptor too short [ 56.476034][ T1034] total_cache 303476736 [ 56.476063][ T1034] total_rss 94208 [ 56.476072][ T1034] total_rss_huge 0 [ 56.482240][ T465] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 56.487689][ T1034] total_shmem 303472640 [ 56.503126][ T465] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 56.503158][ T465] usb 3-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 56.503188][ T465] usb 3-1: config 1 interface 0 has no altsetting 0 [ 56.552997][ T1034] total_mapped_file 0 [ 56.556999][ T1034] total_dirty 0 [ 56.560462][ T1034] total_writeback 0 [ 56.564365][ T1034] total_workingset_refault_anon 12 [ 56.569489][ T1034] total_workingset_refault_file 161 [ 56.575398][ T1222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.579218][ T1034] total_swap 126414848 [ 56.587868][ T1034] total_swapcached 57344 [ 56.589563][ T1222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.592113][ T1034] total_pgpgin 191001 [ 56.592124][ T1034] total_pgpgout 116878 [ 56.605774][ T1222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.608037][ T1222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:238 [ 56.610316][ T1034] total_pgfault 25189 [ 56.632533][ T403] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 56.640173][ T1034] total_pgmajfault 20 [ 56.644288][ T1034] total_inactive_anon 209158144 [ 56.651622][ T1034] total_active_anon 94384128 [ 56.662359][ T1034] total_inactive_file 0 [ 56.666659][ T1034] total_active_file 0 [ 56.670672][ T1034] total_unevictable 0 [ 56.684538][ T1034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=990,uid=0 [ 56.702074][ T1034] Memory cgroup out of memory: Killed process 990 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 56.803400][ T403] usb 4-1: config 0 has no interfaces? [ 56.810333][ T403] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 56.822361][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.840498][ T403] usb 4-1: Product: syz [ 56.844749][ T403] usb 4-1: Manufacturer: syz [ 56.849358][ T403] usb 4-1: SerialNumber: syz [ 56.861660][ T403] usb 4-1: config 0 descriptor?? [ 57.039472][ T996] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.068115][ T64] usb 4-1: USB disconnect, device number 10 [ 57.097145][ T996] CPU: 0 UID: 0 PID: 996 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 57.097184][ T996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.097200][ T996] Call Trace: [ 57.097208][ T996] [ 57.097216][ T996] __dump_stack+0x21/0x30 [ 57.097249][ T996] dump_stack_lvl+0x10c/0x190 [ 57.097275][ T996] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.097303][ T996] ? ___ratelimit+0x3f7/0x5a0 [ 57.097329][ T996] dump_stack+0x19/0x20 [ 57.097355][ T996] dump_header+0xd7/0x490 [ 57.097396][ T996] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 57.097422][ T996] oom_kill_process+0x4c0/0x7e0 [ 57.097443][ T996] ? sched_clock_cpu+0x75/0x400 [ 57.097471][ T996] out_of_memory+0x7ee/0xbd0 [ 57.097492][ T996] ? __cfi_out_of_memory+0x10/0x10 [ 57.097512][ T996] ? mutex_lock_killable+0x92/0x1c0 [ 57.097540][ T996] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.097569][ T996] mem_cgroup_out_of_memory+0x279/0x350 [ 57.097600][ T996] ? drain_obj_stock+0xed0/0xed0 [ 57.097632][ T996] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 57.097661][ T996] try_charge_memcg+0x8f7/0xde0 [ 57.097687][ T996] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.097723][ T996] ? __alloc_pages_noprof+0x30d/0x6c0 [ 57.097747][ T996] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.097770][ T996] ? __folio_batch_add_and_move+0x2ab/0x370 [ 57.097793][ T996] __mem_cgroup_charge+0xf6/0x410 [ 57.097818][ T996] ? __kasan_check_write+0x18/0x20 [ 57.097843][ T996] ? _raw_spin_lock+0x8c/0x120 [ 57.097875][ T996] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.097905][ T996] shmem_alloc_and_add_folio+0x86d/0x1050 [ 57.097941][ T996] ? put_swap_device+0x130/0x130 [ 57.097973][ T996] ? shmem_huge_global_enabled+0x2da/0x360 [ 57.098005][ T996] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 57.098036][ T996] ? __kasan_check_write+0x18/0x20 [ 57.098062][ T996] ? _raw_spin_lock+0x8c/0x120 [ 57.098094][ T996] shmem_get_folio_gfp+0x5f0/0x1380 [ 57.098128][ T996] ? shmem_get_folio+0xc0/0xc0 [ 57.098158][ T996] ? follow_page_pte+0xa5c/0xb90 [ 57.098181][ T996] ? inode_to_bdi+0x6d/0x100 [ 57.098206][ T996] shmem_write_begin+0xf4/0x270 [ 57.098239][ T996] generic_perform_write+0x32d/0x960 [ 57.098267][ T996] ? __cfi_generic_perform_write+0x10/0x10 [ 57.098291][ T996] ? down_write+0xe9/0x2a0 [ 57.098319][ T996] ? file_update_time+0xa3/0x220 [ 57.098342][ T996] shmem_file_write_iter+0x105/0x130 [ 57.098365][ T996] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.098394][ T996] __kernel_write_iter+0x392/0x830 [ 57.098420][ T996] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.098445][ T996] ? __cfi___kernel_write_iter+0x10/0x10 [ 57.098473][ T996] ? get_dump_page+0x160/0x220 [ 57.098493][ T996] ? __asan_memset+0x39/0x50 [ 57.098518][ T996] ? iov_iter_bvec+0xc0/0x180 [ 57.098549][ T996] dump_user_range+0xb06/0xdf0 [ 57.098578][ T996] ? __cfi_dump_emit+0x10/0x10 [ 57.098604][ T996] ? __cfi_dump_user_range+0x10/0x10 [ 57.098631][ T996] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 57.098660][ T996] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.098690][ T996] elf_core_dump+0x2cd9/0x3810 [ 57.098728][ T996] ? __cfi_elf_core_dump+0x10/0x10 [ 57.098770][ T996] ? dump_interrupted+0xf0/0xf0 [ 57.098796][ T996] ? filp_open+0x182/0x1d0 [ 57.098819][ T996] ? 0xffffffffff600000 [ 57.098838][ T996] do_coredump+0x1bf7/0x2bd0 [ 57.098868][ T996] ? __cfi_do_coredump+0x10/0x10 [ 57.098894][ T996] ? asm_exc_page_fault+0x2b/0x30 [ 57.098928][ T996] ? __kasan_slab_free+0x6a/0x80 [ 57.098959][ T996] ? kmem_cache_free+0x1c1/0x4c0 [ 57.098989][ T996] get_signal+0x11fd/0x14f0 [ 57.099017][ T996] arch_do_signal_or_restart+0x96/0x720 [ 57.099066][ T996] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.099101][ T996] irqentry_exit_to_user_mode+0x4e/0xb0 [ 57.099132][ T996] irqentry_exit+0x16/0x60 [ 57.099160][ T996] exc_page_fault+0x66/0xc0 [ 57.099188][ T996] asm_exc_page_fault+0x2b/0x30 [ 57.099212][ T996] RIP: 0033:0x7f5078d8e931 [ 57.099230][ T996] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 57.099253][ T996] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 57.099275][ T996] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 57.099293][ T996] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 57.099309][ T996] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 57.099325][ T996] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.099339][ T996] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 57.099359][ T996] [ 57.099368][ T996] memory: usage 303964kB, limit 307200kB, failcnt 28093 [ 57.243118][ T1243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.265409][ T996] memory+swap: usage 391472kB, limit 9007199254740988kB, failcnt 0 [ 57.584251][ T1243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.592064][ T996] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.598970][ T996] Memory cgroup stats for /syz0: [ 57.599144][ T996] cache 290439168 [ 57.609330][ T996] rss 155648 [ 57.613597][ T996] rss_huge 0 [ 57.616819][ T996] shmem 290013184 [ 57.620125][ T1211] can0 (unregistered): slcan off ptm0. [ 57.620454][ T996] mapped_file 425984 [ 57.620465][ T996] dirty 0 [ 57.620474][ T996] writeback 0 [ 57.642348][ T996] workingset_refault_anon 12 [ 57.646969][ T996] workingset_refault_file 205 [ 57.651665][ T996] swap 127959040 [ 57.661031][ T996] swapcached 36864 [ 57.671249][ T996] pgpgin 198472 [ 57.674906][ T996] pgpgout 127517 [ 57.682508][ T996] pgfault 25873 [ 57.686007][ T996] pgmajfault 24 [ 57.689477][ T996] inactive_anon 60227584 [ 57.702735][ T996] active_anon 229974016 [ 57.706986][ T996] inactive_file 0 [ 57.710678][ T996] active_file 0 [ 57.714445][ T996] unevictable 425984 [ 57.719765][ T996] hierarchical_memory_limit 314572800 [ 57.725438][ T996] hierarchical_memsw_limit 9223372036854771712 [ 57.731604][ T996] total_cache 290439168 [ 57.747631][ T996] total_rss 155648 [ 57.751399][ T996] total_rss_huge 0 [ 57.772354][ T996] total_shmem 290013184 [ 57.776562][ T996] total_mapped_file 425984 [ 57.781038][ T996] total_dirty 0 [ 57.791570][ T996] total_writeback 0 [ 57.801297][ T996] total_workingset_refault_anon 12 [ 57.815017][ T996] total_workingset_refault_file 205 [ 57.820246][ T996] total_swap 127959040 [ 57.834759][ T996] total_swapcached 36864 [ 57.839042][ T996] total_pgpgin 198472 [ 57.845418][ T996] total_pgpgout 127517 [ 57.850338][ T996] total_pgfault 25873 [ 57.858630][ T996] total_pgmajfault 24 [ 57.872580][ T996] total_inactive_anon 60227584 [ 57.877752][ T996] total_active_anon 229974016 [ 57.882706][ T996] total_inactive_file 0 [ 57.886901][ T996] total_active_file 0 [ 57.891016][ T996] total_unevictable 425984 [ 57.895767][ T996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=991,uid=0 [ 57.910642][ T996] Memory cgroup out of memory: Killed process 991 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 58.128443][ T1012] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.192404][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 58.192441][ T1012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.192455][ T1012] Call Trace: [ 58.192462][ T1012] [ 58.192470][ T1012] __dump_stack+0x21/0x30 [ 58.192500][ T1012] dump_stack_lvl+0x10c/0x190 [ 58.192523][ T1012] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.192546][ T1012] ? ___ratelimit+0x3f7/0x5a0 [ 58.192569][ T1012] dump_stack+0x19/0x20 [ 58.192592][ T1012] dump_header+0xd7/0x490 [ 58.192624][ T1012] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 58.192645][ T1012] oom_kill_process+0x4c0/0x7e0 [ 58.192663][ T1012] ? sched_clock_cpu+0x75/0x400 [ 58.192687][ T1012] out_of_memory+0x7ee/0xbd0 [ 58.192705][ T1012] ? __cfi_out_of_memory+0x10/0x10 [ 58.192723][ T1012] ? mutex_lock_killable+0x92/0x1c0 [ 58.192749][ T1012] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.192776][ T1012] mem_cgroup_out_of_memory+0x279/0x350 [ 58.192804][ T1012] ? drain_obj_stock+0xed0/0xed0 [ 58.192832][ T1012] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 58.192859][ T1012] try_charge_memcg+0x8f7/0xde0 [ 58.192882][ T1012] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.192905][ T1012] ? __alloc_pages_noprof+0x30d/0x6c0 [ 58.192928][ T1012] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.192951][ T1012] __mem_cgroup_charge+0xf6/0x410 [ 58.192977][ T1012] ? _raw_spin_lock+0x8c/0x120 [ 58.193008][ T1012] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.193035][ T1012] shmem_alloc_and_add_folio+0x86d/0x1050 [ 58.193071][ T1012] ? put_swap_device+0x130/0x130 [ 58.193103][ T1012] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.193135][ T1012] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.193166][ T1012] ? __kasan_check_write+0x18/0x20 [ 58.193190][ T1012] ? _raw_spin_lock+0x8c/0x120 [ 58.193222][ T1012] shmem_get_folio_gfp+0x5f0/0x1380 [ 58.193262][ T1012] ? shmem_get_folio+0xc0/0xc0 [ 58.193289][ T1012] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 58.193314][ T1012] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 58.193337][ T1012] ? inode_to_bdi+0x6d/0x100 [ 58.193361][ T1012] shmem_write_begin+0xf4/0x270 [ 58.193394][ T1012] generic_perform_write+0x32d/0x960 [ 58.193422][ T1012] ? __cfi_generic_perform_write+0x10/0x10 [ 58.193445][ T1012] ? down_write+0xe9/0x2a0 [ 58.193472][ T1012] ? mnt_get_write_access_file+0x1af/0x3b0 [ 58.193494][ T1012] ? mnt_put_write_access_file+0xc2/0x100 [ 58.193515][ T1012] ? file_update_time+0x1ef/0x220 [ 58.193538][ T1012] shmem_file_write_iter+0x105/0x130 [ 58.193560][ T1012] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.193581][ T1012] __kernel_write_iter+0x392/0x830 [ 58.193605][ T1012] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.193626][ T1012] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.193652][ T1012] ? get_dump_page+0x160/0x220 [ 58.193672][ T1012] ? __asan_memset+0x39/0x50 [ 58.193694][ T1012] ? iov_iter_bvec+0xc0/0x180 [ 58.193723][ T1012] dump_user_range+0xb06/0xdf0 [ 58.193750][ T1012] ? __cfi_dump_emit+0x10/0x10 [ 58.193775][ T1012] ? __cfi_dump_user_range+0x10/0x10 [ 58.193801][ T1012] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 58.193828][ T1012] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.193855][ T1012] elf_core_dump+0x2cd9/0x3810 [ 58.193890][ T1012] ? __cfi_elf_core_dump+0x10/0x10 [ 58.193929][ T1012] ? dump_interrupted+0xf0/0xf0 [ 58.193954][ T1012] ? filp_open+0x182/0x1d0 [ 58.193974][ T1012] ? 0xffffffffff600000 [ 58.193992][ T1012] do_coredump+0x1bf7/0x2bd0 [ 58.194020][ T1012] ? __cfi_do_coredump+0x10/0x10 [ 58.194045][ T1012] ? asm_exc_page_fault+0x2b/0x30 [ 58.194077][ T1012] ? __kasan_slab_free+0x6a/0x80 [ 58.194106][ T1012] ? kmem_cache_free+0x1c1/0x4c0 [ 58.194134][ T1012] get_signal+0x11fd/0x14f0 [ 58.194160][ T1012] arch_do_signal_or_restart+0x96/0x720 [ 58.194190][ T1012] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.194222][ T1012] irqentry_exit_to_user_mode+0x4e/0xb0 [ 58.194256][ T1012] irqentry_exit+0x16/0x60 [ 58.194282][ T1012] exc_page_fault+0x66/0xc0 [ 58.194308][ T1012] asm_exc_page_fault+0x2b/0x30 [ 58.194329][ T1012] RIP: 0033:0x7f5078d8e931 [ 58.194347][ T1012] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.194366][ T1012] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 58.194386][ T1012] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 58.194403][ T1012] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 58.194418][ T1012] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 58.194433][ T1012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.194447][ T1012] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 58.194465][ T1012] [ 58.194474][ T1012] memory: usage 307056kB, limit 307200kB, failcnt 29621 [ 58.684492][ T465] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.693445][ T1012] memory+swap: usage 422584kB, limit 9007199254740988kB, failcnt 0 [ 58.702618][ T1012] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.712376][ T1012] Memory cgroup stats for /syz0: [ 58.712553][ T1012] cache 304504832 [ 58.721741][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.735437][ T465] usb 3-1: can't set config #1, error -71 [ 58.738661][ T1286] FAT-fs (rnullb0): bogus number of reserved sectors [ 58.754894][ T465] usb 3-1: USB disconnect, device number 14 [ 58.757909][ T1012] rss 122880 [ 58.772331][ T1286] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 58.785123][ T1292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.785592][ T1292] rust_binder: Write failure EINVAL in pid:253 [ 58.794825][ T1012] rss_huge 0 [ 58.808990][ T1292] netlink: 57 bytes leftover after parsing attributes in process `syz.1.288'. [ 58.822762][ T1292] rust_binder: Read failure Err(EAGAIN) in pid:253 [ 58.834037][ T1012] shmem 300011520 [ 58.857061][ T1012] mapped_file 425984 [ 58.860999][ T1012] dirty 0 [ 58.867828][ T1296] fuse: Unknown parameter 'grouKid' [ 58.892340][ T1012] writeback 176128 [ 58.912537][ T1300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.941876][ T1012] workingset_refault_anon 42 [ 58.982415][ T1012] workingset_refault_file 1342 [ 59.012402][ T1012] swap 125947904 [ 59.045371][ T1012] swapcached 331776 [ 59.049904][ T1012] pgpgin 210299 [ 59.053785][ T1314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 59.053821][ T1314] rust_binder: Read failure Err(EFAULT) in pid:265 [ 59.062580][ T1012] pgpgout 135846 [ 59.087911][ T1012] pgfault 26248 [ 59.105236][ T1012] pgmajfault 51 [ 59.108733][ T1012] inactive_anon 201969664 [ 59.113734][ T36] audit: type=1326 audit(1751095066.490:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1319 comm="syz.2.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff339b8e929 code=0x0 [ 59.115767][ T1318] rust_binder: Error while translating object. [ 59.143169][ T1012] active_anon 98234368 [ 59.153818][ T36] audit: type=1400 audit(1751095066.490:312): avc: denied { write } for pid=1317 comm="syz.3.298" path="socket:[10755]" dev="sockfs" ino=10755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.162681][ T1318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 59.179346][ T1322] rust_binder: Write failure EFAULT in pid:148 [ 59.192418][ T1318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:280 [ 59.203458][ T36] audit: type=1400 audit(1751095066.490:313): avc: denied { getopt } for pid=1317 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.233701][ T1012] inactive_file 0 [ 59.242393][ T1012] active_file 4067328 [ 59.248368][ T1326] binder: Bad value for 'defcontext' [ 59.252366][ T1012] unevictable 425984 [ 59.262364][ T1012] hierarchical_memory_limit 314572800 [ 59.267964][ T1329] rust_binder: Error in use_page_slow: ESRCH [ 59.267986][ T1329] rust_binder: use_range failure ESRCH [ 59.278101][ T1012] hierarchical_memsw_limit 9223372036854771712 [ 59.279945][ T1329] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 59.294333][ T1329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.294369][ T1329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:282 [ 59.302378][ T1012] total_cache 304504832 [ 59.320449][ T1012] total_rss 122880 [ 59.332966][ T1012] total_rss_huge 0 [ 59.336898][ T1012] total_shmem 300011520 [ 59.341191][ T1012] total_mapped_file 425984 [ 59.346886][ T1012] total_dirty 0 [ 59.350478][ T1012] total_writeback 176128 [ 59.354796][ T1012] total_workingset_refault_anon 42 [ 59.370095][ T1012] total_workingset_refault_file 1342 [ 59.380178][ T1012] total_swap 125947904 [ 59.390264][ T1012] total_swapcached 331776 [ 59.400371][ T1012] total_pgpgin 210299 [ 59.410460][ T1012] total_pgpgout 135846 [ 59.414678][ T1012] total_pgfault 26248 [ 59.418669][ T1012] total_pgmajfault 51 [ 59.422846][ T1012] total_inactive_anon 201969664 [ 59.427730][ T1012] total_active_anon 98234368 [ 59.432626][ T1012] total_inactive_file 0 [ 59.442418][ T1012] total_active_file 4067328 [ 59.452416][ T1012] total_unevictable 425984 [ 59.456854][ T1012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=992,uid=0 [ 59.491794][ T1012] Memory cgroup out of memory: OOM victim 992 (syz.0.209) is already exiting. Skip killing the task [ 59.501472][ T1331] syz.3.303: attempt to access beyond end of device [ 59.501472][ T1331] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.774389][ T36] audit: type=1400 audit(1751095067.150:314): avc: denied { nlmsg_write } for pid=1338 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 59.795435][ T1339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272 [ 59.799186][ T1005] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.819344][ T1005] CPU: 0 UID: 0 PID: 1005 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 59.819382][ T1005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.819397][ T1005] Call Trace: [ 59.819404][ T1005] [ 59.819413][ T1005] __dump_stack+0x21/0x30 [ 59.819445][ T1005] dump_stack_lvl+0x10c/0x190 [ 59.819472][ T1005] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.819499][ T1005] ? ___ratelimit+0x3f7/0x5a0 [ 59.819525][ T1005] dump_stack+0x19/0x20 [ 59.819551][ T1005] dump_header+0xd7/0x490 [ 59.819584][ T1005] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 59.819609][ T1005] oom_kill_process+0x4c0/0x7e0 [ 59.819630][ T1005] ? sched_clock_cpu+0x75/0x400 [ 59.819657][ T1005] out_of_memory+0x7ee/0xbd0 [ 59.819678][ T1005] ? __cfi_out_of_memory+0x10/0x10 [ 59.819698][ T1005] ? mutex_lock_killable+0x92/0x1c0 [ 59.819726][ T1005] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.819756][ T1005] mem_cgroup_out_of_memory+0x279/0x350 [ 59.819787][ T1005] ? drain_obj_stock+0xed0/0xed0 [ 59.819819][ T1005] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 59.819849][ T1005] try_charge_memcg+0x8f7/0xde0 [ 59.819875][ T1005] ? __cfi_try_charge_memcg+0x10/0x10 [ 59.819900][ T1005] ? __alloc_pages_noprof+0x30d/0x6c0 [ 59.819924][ T1005] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.819948][ T1005] ? __folio_batch_add_and_move+0x2ab/0x370 [ 59.819972][ T1005] __mem_cgroup_charge+0xf6/0x410 [ 59.819999][ T1005] ? __kasan_check_write+0x18/0x20 [ 59.820026][ T1005] ? _raw_spin_lock+0x8c/0x120 [ 59.820066][ T1005] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 59.820095][ T1005] shmem_alloc_and_add_folio+0x86d/0x1050 [ 59.820133][ T1005] ? put_swap_device+0x130/0x130 [ 59.820166][ T1005] ? shmem_huge_global_enabled+0x2da/0x360 [ 59.820199][ T1005] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 59.820231][ T1005] ? __kasan_check_write+0x18/0x20 [ 59.820258][ T1005] ? _raw_spin_lock+0x8c/0x120 [ 59.820291][ T1005] shmem_get_folio_gfp+0x5f0/0x1380 [ 59.820326][ T1005] ? shmem_get_folio+0xc0/0xc0 [ 59.820356][ T1005] ? follow_page_pte+0xa5c/0xb90 [ 59.820379][ T1005] ? inode_to_bdi+0x6d/0x100 [ 59.820405][ T1005] shmem_write_begin+0xf4/0x270 [ 59.820438][ T1005] generic_perform_write+0x32d/0x960 [ 59.820468][ T1005] ? __cfi_generic_perform_write+0x10/0x10 [ 59.820493][ T1005] ? down_write+0xe9/0x2a0 [ 59.820522][ T1005] ? file_update_time+0xa3/0x220 [ 59.820547][ T1005] shmem_file_write_iter+0x105/0x130 [ 59.820570][ T1005] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.820594][ T1005] __kernel_write_iter+0x392/0x830 [ 59.820623][ T1005] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.820647][ T1005] ? __cfi___kernel_write_iter+0x10/0x10 [ 59.820675][ T1005] ? get_dump_page+0x160/0x220 [ 59.820697][ T1005] ? __asan_memset+0x39/0x50 [ 59.820723][ T1005] ? iov_iter_bvec+0xc0/0x180 [ 59.820756][ T1005] dump_user_range+0xb06/0xdf0 [ 59.820785][ T1005] ? __cfi_dump_emit+0x10/0x10 [ 59.820812][ T1005] ? __cfi_dump_user_range+0x10/0x10 [ 59.820841][ T1005] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 59.820870][ T1005] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 59.820900][ T1005] elf_core_dump+0x2cd9/0x3810 [ 59.820937][ T1005] ? __cfi_elf_core_dump+0x10/0x10 [ 59.820978][ T1005] ? dump_interrupted+0xf0/0xf0 [ 59.821004][ T1005] ? filp_open+0x182/0x1d0 [ 59.821026][ T1005] ? 0xffffffffff600000 [ 59.821052][ T1005] do_coredump+0x1bf7/0x2bd0 [ 59.821082][ T1005] ? __cfi_do_coredump+0x10/0x10 [ 59.821108][ T1005] ? asm_exc_page_fault+0x2b/0x30 [ 59.821141][ T1005] ? __kasan_slab_free+0x6a/0x80 [ 59.821174][ T1005] ? kmem_cache_free+0x1c1/0x4c0 [ 59.821204][ T1005] get_signal+0x11fd/0x14f0 [ 59.821231][ T1005] arch_do_signal_or_restart+0x96/0x720 [ 59.821262][ T1005] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 59.821297][ T1005] irqentry_exit_to_user_mode+0x4e/0xb0 [ 59.821328][ T1005] irqentry_exit+0x16/0x60 [ 59.821356][ T1005] exc_page_fault+0x66/0xc0 [ 59.821383][ T1005] asm_exc_page_fault+0x2b/0x30 [ 59.821406][ T1005] RIP: 0033:0x7f5078d8e931 [ 59.821423][ T1005] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 59.821443][ T1005] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 59.821463][ T1005] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 59.821478][ T1005] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 59.821493][ T1005] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 59.821508][ T1005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 59.821521][ T1005] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 59.821541][ T1005] [ 59.821562][ T1005] memory: usage 307200kB, limit 307200kB, failcnt 30756 [ 60.212374][ T465] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.212974][ T1005] memory+swap: usage 431864kB, limit 9007199254740988kB, failcnt 0 [ 60.304055][ T1005] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.310965][ T1005] Memory cgroup stats for /syz0: [ 60.311112][ T1005] cache 314183680 [ 60.319809][ T1005] rss 143360 [ 60.323212][ T1005] rss_huge 0 [ 60.326674][ T1005] shmem 313753600 [ 60.330389][ T1005] mapped_file 0 [ 60.332998][ T1349] binder: Binderfs stats mode cannot be changed during a remount [ 60.333908][ T36] audit: type=1400 audit(1751095067.710:315): avc: denied { remount } for pid=1347 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.341714][ T1005] dirty 0 [ 60.371513][ T1005] writeback 0 [ 60.375495][ T1005] workingset_refault_anon 61 [ 60.380521][ T1005] workingset_refault_file 1447 [ 60.385856][ T1005] swap 127655936 [ 60.389458][ T1005] swapcached 266240 [ 60.393502][ T1005] pgpgin 229136 [ 60.397010][ T1005] pgpgout 152336 [ 60.400781][ T1005] pgfault 27448 [ 60.404492][ T1005] pgmajfault 63 [ 60.407952][ T1005] inactive_anon 212488192 [ 60.409686][ T465] usb 3-1: Using ep0 maxpacket: 16 [ 60.412284][ T1005] active_anon 101654528 [ 60.412294][ T1005] inactive_file 0 [ 60.425676][ T1005] active_file 430080 [ 60.427455][ T1356] netlink: 596 bytes leftover after parsing attributes in process `syz.1.312'. [ 60.429633][ T1005] unevictable 0 [ 60.447587][ T465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.458583][ T1005] hierarchical_memory_limit 314572800 [ 60.464018][ T465] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.474007][ T1005] hierarchical_memsw_limit 9223372036854771712 [ 60.480175][ T1005] total_cache 314183680 [ 60.484533][ T465] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 60.493661][ T1005] total_rss 143360 [ 60.494156][ T465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.497623][ T1005] total_rss_huge 0 [ 60.509266][ T1005] total_shmem 313753600 [ 60.509824][ T465] usb 3-1: config 0 descriptor?? [ 60.513490][ T1005] total_mapped_file 0 [ 60.523523][ T1005] total_dirty 0 [ 60.527040][ T1005] total_writeback 0 [ 60.530968][ T1005] total_workingset_refault_anon 61 [ 60.536302][ T1005] total_workingset_refault_file 1447 [ 60.541882][ T1005] total_swap 127655936 [ 60.547604][ T1005] total_swapcached 266240 [ 60.551828][ T1365] batadv_slave_0: entered promiscuous mode [ 60.554246][ T1005] total_pgpgin 229136 [ 60.561544][ T36] audit: type=1400 audit(1751095067.940:316): avc: denied { map } for pid=1353 comm="syz.3.311" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.563526][ T1005] total_pgpgout 152336 [ 60.589903][ T1005] total_pgfault 27448 [ 60.594055][ T1005] total_pgmajfault 63 [ 60.594495][ T1367] input: syz0 as /devices/virtual/input/input7 [ 60.601583][ T1005] total_inactive_anon 212488192 [ 60.609355][ T1005] total_active_anon 101654528 [ 60.614602][ T1005] total_inactive_file 0 [ 60.618778][ T1005] total_active_file 430080 [ 60.623349][ T1005] total_unevictable 0 [ 60.627609][ T1005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=987,uid=0 [ 60.649051][ T1005] Memory cgroup out of memory: Killed process 987 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 60.715144][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.719010][ T36] audit: type=1400 audit(1751095068.090:317): avc: denied { ioctl } for pid=1375 comm="syz.1.317" path="socket:[11303]" dev="sockfs" ino=11303 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.751578][ T1353] batadv_slave_0: left promiscuous mode [ 60.793128][ T988] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 60.863408][ T1387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.912640][ T1391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.919482][ T1391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:306 [ 60.931204][ T465] gt683r_led 0003:1770:FF00.0009: item fetching failed at offset 1/5 [ 60.959153][ T465] gt683r_led 0003:1770:FF00.0009: hid parsing failed [ 60.967017][ T465] gt683r_led 0003:1770:FF00.0009: probe with driver gt683r_led failed with error -22 [ 61.040349][ T988] CPU: 0 UID: 0 PID: 988 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 61.040390][ T988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.040406][ T988] Call Trace: [ 61.040414][ T988] [ 61.040423][ T988] __dump_stack+0x21/0x30 [ 61.040457][ T988] dump_stack_lvl+0x10c/0x190 [ 61.040483][ T988] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.040510][ T988] ? ___ratelimit+0x3f7/0x5a0 [ 61.040536][ T988] dump_stack+0x19/0x20 [ 61.040562][ T988] dump_header+0xd7/0x490 [ 61.040597][ T988] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 61.040622][ T988] oom_kill_process+0x4c0/0x7e0 [ 61.040644][ T988] ? sched_clock_cpu+0x75/0x400 [ 61.040671][ T988] out_of_memory+0x7ee/0xbd0 [ 61.040693][ T988] ? __cfi_out_of_memory+0x10/0x10 [ 61.040713][ T988] ? mutex_lock_killable+0x92/0x1c0 [ 61.040741][ T988] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.040837][ T988] mem_cgroup_out_of_memory+0x279/0x350 [ 61.040873][ T988] ? drain_obj_stock+0xed0/0xed0 [ 61.040917][ T988] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 61.040949][ T988] try_charge_memcg+0x8f7/0xde0 [ 61.040975][ T988] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.040999][ T988] ? __alloc_pages_noprof+0x30d/0x6c0 [ 61.041029][ T988] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.041055][ T988] __mem_cgroup_charge+0xf6/0x410 [ 61.041083][ T988] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.041111][ T988] ? __cfi___switch_to+0x10/0x10 [ 61.041140][ T988] shmem_alloc_and_add_folio+0x86d/0x1050 [ 61.041180][ T988] ? put_swap_device+0x130/0x130 [ 61.041214][ T988] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.041248][ T988] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.041281][ T988] ? __kasan_check_write+0x18/0x20 [ 61.041307][ T988] ? _raw_spin_lock+0x8c/0x120 [ 61.041341][ T988] shmem_get_folio_gfp+0x5f0/0x1380 [ 61.041377][ T988] ? shmem_get_folio+0xc0/0xc0 [ 61.041408][ T988] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 61.041435][ T988] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 61.041460][ T988] ? inode_to_bdi+0x6d/0x100 [ 61.041485][ T988] shmem_write_begin+0xf4/0x270 [ 61.041522][ T988] generic_perform_write+0x32d/0x960 [ 61.041552][ T988] ? __cfi_generic_perform_write+0x10/0x10 [ 61.041579][ T988] ? down_write+0xe9/0x2a0 [ 61.041607][ T988] ? mnt_get_write_access_file+0x1af/0x3b0 [ 61.041630][ T988] ? mnt_put_write_access_file+0xc2/0x100 [ 61.041653][ T988] ? file_update_time+0x1ef/0x220 [ 61.041676][ T988] shmem_file_write_iter+0x105/0x130 [ 61.041698][ T988] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.041720][ T988] __kernel_write_iter+0x392/0x830 [ 61.041749][ T988] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.041772][ T988] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.041800][ T988] ? get_dump_page+0x160/0x220 [ 61.041824][ T988] ? __asan_memset+0x39/0x50 [ 61.041851][ T988] ? iov_iter_bvec+0xc0/0x180 [ 61.041885][ T988] dump_user_range+0xb06/0xdf0 [ 61.041924][ T988] ? __cfi_dump_emit+0x10/0x10 [ 61.041953][ T988] ? __cfi_dump_user_range+0x10/0x10 [ 61.041983][ T988] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 61.042014][ T988] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.042044][ T988] elf_core_dump+0x2cd9/0x3810 [ 61.042082][ T988] ? __cfi_elf_core_dump+0x10/0x10 [ 61.042124][ T988] ? dump_interrupted+0xf0/0xf0 [ 61.042151][ T988] ? filp_open+0x182/0x1d0 [ 61.042174][ T988] ? 0xffffffffff600000 [ 61.042194][ T988] do_coredump+0x1bf7/0x2bd0 [ 61.042225][ T988] ? __cfi_do_coredump+0x10/0x10 [ 61.042252][ T988] ? asm_exc_page_fault+0x2b/0x30 [ 61.042285][ T988] ? __kasan_slab_free+0x6a/0x80 [ 61.042321][ T988] ? kmem_cache_free+0x1c1/0x4c0 [ 61.042351][ T988] get_signal+0x11fd/0x14f0 [ 61.042380][ T988] arch_do_signal_or_restart+0x96/0x720 [ 61.042412][ T988] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.042448][ T988] irqentry_exit_to_user_mode+0x4e/0xb0 [ 61.042480][ T988] irqentry_exit+0x16/0x60 [ 61.042509][ T988] exc_page_fault+0x66/0xc0 [ 61.042537][ T988] asm_exc_page_fault+0x2b/0x30 [ 61.042561][ T988] RIP: 0033:0x7f5078d8e931 [ 61.042580][ T988] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.042601][ T988] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 61.042622][ T988] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 61.042640][ T988] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 61.042657][ T988] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 61.042673][ T988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.042687][ T988] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 61.042707][ T988] [ 61.511197][ T465] usb 3-1: USB disconnect, device number 15 [ 61.558186][ T988] memory: usage 307200kB, limit 307200kB, failcnt 31472 [ 61.565494][ T988] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 61.573448][ T988] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 61.580429][ T988] Memory cgroup stats for /syz0: [ 61.580601][ T988] cache 314417152 [ 61.589331][ T988] rss 135168 [ 61.592595][ T988] rss_huge 0 [ 61.595871][ T988] shmem 314413056 [ 61.599515][ T988] mapped_file 0 [ 61.603035][ T988] dirty 0 [ 61.606284][ T988] writeback 0 [ 61.609757][ T988] workingset_refault_anon 62 [ 61.614683][ T988] workingset_refault_file 1551 [ 61.619534][ T988] swap 127942656 [ 61.624154][ T988] swapcached 36864 [ 61.629568][ T988] pgpgin 238173 [ 61.633092][ T988] pgpgout 161374 [ 61.636791][ T988] pgfault 27938 [ 61.640309][ T988] pgmajfault 67 [ 61.643843][ T988] inactive_anon 3465216 [ 61.648126][ T988] active_anon 310583296 [ 61.652408][ T988] inactive_file 0 [ 61.656123][ T988] active_file 4096 [ 61.659868][ T988] unevictable 0 [ 61.663410][ T988] hierarchical_memory_limit 314572800 [ 61.668876][ T988] hierarchical_memsw_limit 9223372036854771712 [ 61.675231][ T988] total_cache 314417152 [ 61.679424][ T988] total_rss 135168 [ 61.683202][ T988] total_rss_huge 0 [ 61.687044][ T988] total_shmem 314413056 [ 61.691430][ T988] total_mapped_file 0 [ 61.695719][ T988] total_dirty 0 [ 61.699649][ T988] total_writeback 0 [ 61.705125][ T988] total_workingset_refault_anon 62 [ 61.710299][ T988] total_workingset_refault_file 1551 [ 61.715667][ T988] total_swap 127942656 [ 61.719843][ T988] total_swapcached 36864 [ 61.724164][ T988] total_pgpgin 238173 [ 61.724621][ T1403] binder: Bad value for 'max' [ 61.728224][ T988] total_pgpgout 161374 [ 61.736975][ T988] total_pgfault 27938 [ 61.741240][ T988] total_pgmajfault 67 [ 61.745304][ T988] total_inactive_anon 3465216 [ 61.750082][ T988] total_active_anon 310583296 [ 61.754829][ T988] total_inactive_file 0 [ 61.758244][ T1405] rust_binder: Write failure EFAULT in pid:316 [ 61.759051][ T988] total_active_file 4096 [ 61.769504][ T988] total_unevictable 0 [ 61.773555][ T988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=1005,uid=0 [ 61.788471][ T988] Memory cgroup out of memory: Killed process 1005 (syz.0.209) total-vm:89960kB, anon-rss:916kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 62.024728][ T1337] syz.0.305 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 62.070667][ T1409] capability: warning: `syz.2.329' uses 32-bit capabilities (legacy support in use) [ 62.112342][ T1337] CPU: 1 UID: 0 PID: 1337 Comm: syz.0.305 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 62.112381][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.112396][ T1337] Call Trace: [ 62.112403][ T1337] [ 62.112412][ T1337] __dump_stack+0x21/0x30 [ 62.112445][ T1337] dump_stack_lvl+0x10c/0x190 [ 62.112472][ T1337] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.112499][ T1337] ? ___ratelimit+0x3f7/0x5a0 [ 62.112526][ T1337] dump_stack+0x19/0x20 [ 62.112551][ T1337] dump_header+0xd7/0x490 [ 62.112596][ T1337] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 62.112621][ T1337] oom_kill_process+0x4c0/0x7e0 [ 62.112642][ T1337] ? sched_clock_cpu+0x75/0x400 [ 62.112678][ T1337] out_of_memory+0x7ee/0xbd0 [ 62.112697][ T1337] ? __cfi_out_of_memory+0x10/0x10 [ 62.112716][ T1337] ? mutex_lock_killable+0x92/0x1c0 [ 62.112742][ T1337] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.112769][ T1337] mem_cgroup_out_of_memory+0x279/0x350 [ 62.112798][ T1337] ? drain_obj_stock+0xed0/0xed0 [ 62.112827][ T1337] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 62.112855][ T1337] try_charge_memcg+0x8f7/0xde0 [ 62.112879][ T1337] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.112909][ T1337] ? __alloc_pages_noprof+0x30d/0x6c0 [ 62.112932][ T1337] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.112956][ T1337] __mem_cgroup_charge+0xf6/0x410 [ 62.112982][ T1337] ? __futex_queue+0x19a/0x340 [ 62.113011][ T1337] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.113036][ T1337] ? __cfi___futex_queue+0x10/0x10 [ 62.113063][ T1337] ? futex_wait_setup+0x1bc/0x260 [ 62.113086][ T1337] folio_prealloc+0x67/0x240 [ 62.113117][ T1337] do_pte_missing+0x1603/0x3e50 [ 62.113139][ T1337] ? __cfi_futex_wake_mark+0x10/0x10 [ 62.113160][ T1337] ? pte_marker_clear+0x1b0/0x1b0 [ 62.113179][ T1337] ? __pte_offset_map+0x1b0/0x230 [ 62.113203][ T1337] ? pte_offset_map_rw_nolock+0xba/0x110 [ 62.113228][ T1337] handle_mm_fault+0x1166/0x1b90 [ 62.113260][ T1337] ? __cfi_handle_mm_fault+0x10/0x10 [ 62.113289][ T1337] ? lock_vma_under_rcu+0x49d/0x530 [ 62.113322][ T1337] ? __se_sys_futex+0x28f/0x300 [ 62.113353][ T1337] do_user_addr_fault+0x96c/0x1200 [ 62.113383][ T1337] exc_page_fault+0x59/0xc0 [ 62.113409][ T1337] asm_exc_page_fault+0x2b/0x30 [ 62.113430][ T1337] RIP: 0033:0x7f5078c4e02e [ 62.113449][ T1337] Code: f6 31 c0 e8 b4 f1 13 00 48 81 c4 90 00 00 00 48 98 5b c3 66 0f 1f 84 00 00 00 00 00 41 54 55 53 48 89 fb 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89 [ 62.113467][ T1337] RSP: 002b:00007f5079cc9f70 EFLAGS: 00010202 [ 62.113488][ T1337] RAX: 0000000000000000 RBX: 00007f5078e11e33 RCX: 00007f5078e28471 [ 62.113503][ T1337] RDX: 00000000000082ee RSI: 0000000000000000 RDI: 00007f5078e11e33 [ 62.113518][ T1337] RBP: 00007f5078fb5fa0 R08: 0000000020e5f13b R09: 7fffffffffffffff [ 62.113534][ T1337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5078fb5fac [ 62.113549][ T1337] R13: 0000000000000001 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 62.113567][ T1337] [ 62.282381][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 62.400347][ T1411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.404686][ T403] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 62.408700][ T1411] rust_binder: inc_ref_done called when no active inc_refs [ 62.429217][ T1411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:318 [ 62.479455][ T1413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.492433][ T1337] memory: usage 300684kB, limit 307200kB, failcnt 33812 [ 62.497104][ T36] audit: type=1400 audit(1751095069.850:318): avc: denied { attach_queue } for pid=1412 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.532551][ T1413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.542398][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 62.542429][ T1413] rust_binder: Read failure Err(EFAULT) in pid:320 [ 62.602553][ T1337] memory+swap: usage 427176kB, limit 9007199254740988kB, failcnt 0 [ 62.618208][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.629195][ T403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.639125][ T403] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.648362][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.665420][ T403] usb 3-1: config 0 descriptor?? [ 62.680485][ T1337] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.688607][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 62.699776][ T10] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 62.709063][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.717211][ T10] usb 4-1: Product: syz [ 62.721462][ T10] usb 4-1: Manufacturer: syz [ 62.726253][ T10] usb 4-1: SerialNumber: syz [ 62.732052][ T10] usb 4-1: config 0 descriptor?? [ 62.738255][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 62.744422][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 62.747890][ T1337] Memory cgroup stats for /syz0: [ 62.751771][ T1337] cache 314339328 [ 62.760679][ T1337] rss 118784 [ 62.763235][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 62.764124][ T1337] rss_huge 0 [ 62.776050][ T1337] shmem 314339328 [ 62.779737][ T1337] mapped_file 0 [ 62.783269][ T1337] dirty 0 [ 62.786266][ T1337] writeback 0 [ 62.789562][ T1337] workingset_refault_anon 62 [ 62.794746][ T1337] workingset_refault_file 1551 [ 62.799536][ T1337] swap 127868928 [ 62.803121][ T1337] swapcached 126976 [ 62.806953][ T1337] pgpgin 246603 [ 62.810426][ T1337] pgpgout 169803 [ 62.814001][ T1337] pgfault 28342 [ 62.817486][ T1337] pgmajfault 68 [ 62.820948][ T1337] inactive_anon 112484352 [ 62.825335][ T1337] active_anon 202088448 [ 62.829518][ T1337] inactive_file 0 [ 62.829904][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.833206][ T1337] active_file 0 [ 62.833220][ T1337] unevictable 0 [ 62.833228][ T1337] hierarchical_memory_limit 314572800 [ 62.833237][ T1337] hierarchical_memsw_limit 9223372036854771712 [ 62.867496][ T1337] total_cache 314339328 [ 62.871688][ T1337] total_rss 118784 [ 62.875540][ T1337] total_rss_huge 0 [ 62.879300][ T1337] total_shmem 314339328 [ 62.883479][ T1337] total_mapped_file 0 [ 62.887479][ T1337] total_dirty 0 [ 62.890942][ T1337] total_writeback 0 [ 62.894790][ T1337] total_workingset_refault_anon 62 [ 62.899917][ T1337] total_workingset_refault_file 1551 [ 62.905434][ T1337] total_swap 127868928 [ 62.909537][ T1337] total_swapcached 126976 [ 62.914005][ T1337] total_pgpgin 246603 [ 62.918061][ T1337] total_pgpgout 169803 [ 62.922132][ T1337] total_pgfault 28342 [ 62.926178][ T1337] total_pgmajfault 68 [ 62.930174][ T1337] total_inactive_anon 112484352 [ 62.935064][ T1337] total_active_anon 202088448 [ 62.939774][ T1337] total_inactive_file 0 [ 62.944000][ T1337] total_active_file 0 [ 62.948271][ T1337] total_unevictable 0 [ 62.950124][ T1407] rust_binder: Write failure EINVAL in pid:306 [ 62.952276][ T1337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=1004,uid=0 [ 62.973292][ T1337] Memory cgroup out of memory: Killed process 1004 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 63.076720][ T403] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 63.094329][ T403] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input8 [ 63.132171][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 63.181256][ T403] keytouch 0003:0926:3333.000A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 63.223146][ T995] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 63.252500][ T449] usb 4-1: USB disconnect, device number 11 [ 63.280909][ T465] usb 3-1: USB disconnect, device number 16 [ 63.302302][ T995] CPU: 1 UID: 0 PID: 995 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 63.302343][ T995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.302357][ T995] Call Trace: [ 63.302363][ T995] [ 63.302373][ T995] __dump_stack+0x21/0x30 [ 63.302402][ T995] dump_stack_lvl+0x10c/0x190 [ 63.302426][ T995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 63.302461][ T995] ? ___ratelimit+0x3f7/0x5a0 [ 63.302486][ T995] dump_stack+0x19/0x20 [ 63.302510][ T995] dump_header+0xd7/0x490 [ 63.302544][ T995] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 63.302569][ T995] oom_kill_process+0x4c0/0x7e0 [ 63.302590][ T995] ? sched_clock_cpu+0x75/0x400 [ 63.302617][ T995] out_of_memory+0x7ee/0xbd0 [ 63.302638][ T995] ? __cfi_out_of_memory+0x10/0x10 [ 63.302657][ T995] ? mutex_lock_killable+0x92/0x1c0 [ 63.302685][ T995] ? __cfi_mutex_lock_killable+0x10/0x10 [ 63.302713][ T995] mem_cgroup_out_of_memory+0x279/0x350 [ 63.302742][ T995] ? drain_obj_stock+0xed0/0xed0 [ 63.302773][ T995] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 63.302803][ T995] try_charge_memcg+0x8f7/0xde0 [ 63.302829][ T995] ? __cfi_try_charge_memcg+0x10/0x10 [ 63.302855][ T995] ? __alloc_pages_noprof+0x30d/0x6c0 [ 63.302880][ T995] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 63.302904][ T995] ? __folio_batch_add_and_move+0x2ab/0x370 [ 63.302927][ T995] __mem_cgroup_charge+0xf6/0x410 [ 63.302953][ T995] ? __kasan_check_write+0x18/0x20 [ 63.302978][ T995] ? _raw_spin_lock+0x8c/0x120 [ 63.303011][ T995] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 63.303041][ T995] shmem_alloc_and_add_folio+0x86d/0x1050 [ 63.303079][ T995] ? put_swap_device+0x130/0x130 [ 63.303112][ T995] ? shmem_huge_global_enabled+0x2da/0x360 [ 63.303146][ T995] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 63.303179][ T995] ? __kasan_check_write+0x18/0x20 [ 63.303205][ T995] ? _raw_spin_lock+0x8c/0x120 [ 63.303239][ T995] shmem_get_folio_gfp+0x5f0/0x1380 [ 63.303274][ T995] ? shmem_get_folio+0xc0/0xc0 [ 63.303304][ T995] ? follow_page_pte+0xa5c/0xb90 [ 63.303327][ T995] ? inode_to_bdi+0x6d/0x100 [ 63.303353][ T995] shmem_write_begin+0xf4/0x270 [ 63.303388][ T995] generic_perform_write+0x32d/0x960 [ 63.303418][ T995] ? __cfi_generic_perform_write+0x10/0x10 [ 63.303451][ T995] ? down_write+0xe9/0x2a0 [ 63.303480][ T995] ? file_update_time+0xa3/0x220 [ 63.303505][ T995] shmem_file_write_iter+0x105/0x130 [ 63.303530][ T995] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 63.303555][ T995] __kernel_write_iter+0x392/0x830 [ 63.303583][ T995] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 63.303607][ T995] ? __cfi___kernel_write_iter+0x10/0x10 [ 63.303635][ T995] ? get_dump_page+0x160/0x220 [ 63.303657][ T995] ? __asan_memset+0x39/0x50 [ 63.303684][ T995] ? iov_iter_bvec+0xc0/0x180 [ 63.303717][ T995] dump_user_range+0xb06/0xdf0 [ 63.303747][ T995] ? __cfi_dump_emit+0x10/0x10 [ 63.303774][ T995] ? __cfi_dump_user_range+0x10/0x10 [ 63.303803][ T995] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 63.303833][ T995] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 63.303863][ T995] elf_core_dump+0x2cd9/0x3810 [ 63.303899][ T995] ? __cfi_elf_core_dump+0x10/0x10 [ 63.303938][ T995] ? dump_interrupted+0xf0/0xf0 [ 63.303963][ T995] ? filp_open+0x182/0x1d0 [ 63.303985][ T995] ? 0xffffffffff600000 [ 63.304004][ T995] do_coredump+0x1bf7/0x2bd0 [ 63.304034][ T995] ? __cfi_do_coredump+0x10/0x10 [ 63.304060][ T995] ? asm_exc_page_fault+0x2b/0x30 [ 63.304093][ T995] ? __kasan_slab_free+0x6a/0x80 [ 63.304124][ T995] ? kmem_cache_free+0x1c1/0x4c0 [ 63.304152][ T995] get_signal+0x11fd/0x14f0 [ 63.304179][ T995] arch_do_signal_or_restart+0x96/0x720 [ 63.304209][ T995] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 63.304242][ T995] irqentry_exit_to_user_mode+0x4e/0xb0 [ 63.304272][ T995] irqentry_exit+0x16/0x60 [ 63.304300][ T995] exc_page_fault+0x66/0xc0 [ 63.304328][ T995] asm_exc_page_fault+0x2b/0x30 [ 63.304351][ T995] RIP: 0033:0x7f5078d8e931 [ 63.304368][ T995] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 63.304387][ T995] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 63.304407][ T995] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 63.304422][ T995] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 63.304445][ T995] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 63.304460][ T995] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 63.304473][ T995] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 63.304492][ T995] [ 63.721999][ T1428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.743840][ T995] memory: usage 294528kB, limit 307200kB, failcnt 36305 [ 63.749350][ T1428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.752932][ T995] memory+swap: usage 418888kB, limit 9007199254740988kB, failcnt 0 [ 63.794269][ T995] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.801233][ T995] Memory cgroup stats for /syz0: [ 63.801376][ T995] cache 300675072 [ 63.810001][ T995] rss 90112 [ 63.813157][ T995] rss_huge 0 [ 63.816583][ T995] shmem 296226816 [ 63.820246][ T995] mapped_file 4194304 [ 63.824273][ T995] dirty 0 [ 63.827213][ T995] writeback 0 [ 63.830498][ T995] workingset_refault_anon 71 [ 63.835192][ T995] workingset_refault_file 2637 [ 63.839968][ T995] swap 127057920 [ 63.843551][ T995] swapcached 929792 [ 63.847375][ T995] pgpgin 253277 [ 63.850847][ T995] pgpgout 179628 [ 63.854432][ T995] pgfault 28470 [ 63.857896][ T995] pgmajfault 79 [ 63.861363][ T995] inactive_anon 24793088 [ 63.865918][ T995] active_anon 272392192 [ 63.870087][ T995] inactive_file 0 [ 63.873785][ T995] active_file 4448256 [ 63.877774][ T995] unevictable 0 [ 63.881328][ T995] hierarchical_memory_limit 314572800 [ 63.887237][ T995] hierarchical_memsw_limit 9223372036854771712 [ 63.893716][ T995] total_cache 300675072 [ 63.898128][ T995] total_rss 90112 [ 63.901956][ T995] total_rss_huge 0 [ 63.905865][ T995] total_shmem 296226816 [ 63.910396][ T995] total_mapped_file 4194304 [ 63.915711][ T995] total_dirty 0 [ 63.919302][ T995] total_writeback 0 [ 63.942375][ T995] total_workingset_refault_anon 71 [ 63.952545][ T995] total_workingset_refault_file 2637 [ 63.968174][ T995] total_swap 127057920 [ 63.972279][ T995] total_swapcached 929792 [ 63.982361][ T995] total_pgpgin 253277 [ 63.986389][ T995] total_pgpgout 179628 [ 63.998092][ T995] total_pgfault 28470 [ 64.012340][ T995] total_pgmajfault 79 [ 64.016414][ T995] total_inactive_anon 24793088 [ 64.021196][ T995] total_active_anon 272392192 [ 64.036083][ T995] total_inactive_file 0 [ 64.042498][ T995] total_active_file 4448256 [ 64.047076][ T995] total_unevictable 0 [ 64.051249][ T995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.209,pid=1006,uid=0 [ 64.071786][ T995] Memory cgroup out of memory: Killed process 1006 (syz.0.209) total-vm:89960kB, anon-rss:940kB, file-rss:60144kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 64.104037][ T1430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.336'. [ 64.122897][ T1430] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 64.122897][ T1430] attempt to subtract with overflow [ 64.146030][ T36] audit: type=1400 audit(1751095071.520:319): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.170027][ T1430] ------------[ cut here ]------------ [ 64.175606][ T1430] kernel BUG at rust/helpers/bug.c:7! [ 64.192736][ T1430] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 64.196842][ T36] audit: type=1400 audit(1751095071.520:320): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.199723][ T1430] CPU: 1 UID: 0 PID: 1430 Comm: syz.3.336 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 64.234474][ T1430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.244561][ T1430] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 64.246042][ T36] audit: type=1400 audit(1751095071.520:321): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.249884][ T1430] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7e 89 4f b6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 34 4d 06 3a 90 90 90 90 90 90 90 90 90 [ 64.290710][ T1430] RSP: 0018:ffffc9000e165a90 EFLAGS: 00010246 [ 64.296819][ T1430] RAX: 0000000000000061 RBX: 1ffff92001c2cb54 RCX: d90b88db06b6e800 [ 64.296998][ T36] audit: type=1400 audit(1751095071.520:322): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.304815][ T1430] RDX: ffffc90002675000 RSI: 0000000000002801 RDI: 0000000000002802 [ 64.304836][ T1430] RBP: ffffc9000e165a90 R08: ffffc9000e165787 R09: 1ffff92001c2caf0 [ 64.304855][ T1430] R10: dffffc0000000000 R11: fffff52001c2caf1 R12: 0000000000000000 [ 64.304874][ T1430] R13: dffffc0000000000 R14: ffffc9000e165ac0 R15: ffffc9000e165af0 [ 64.357247][ T1430] FS: 00007f8f809f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.365698][ T36] audit: type=1400 audit(1751095071.520:323): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.366203][ T1430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.393180][ T1430] CR2: 00007ffda05f4e0c CR3: 0000000106714000 CR4: 00000000003526b0 [ 64.401182][ T1430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.407778][ T36] audit: type=1400 audit(1751095071.520:324): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.409170][ T1430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.409191][ T1430] Call Trace: [ 64.443290][ T1430] [ 64.446242][ T1430] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 64.453741][ T1430] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 64.458041][ T36] audit: type=1400 audit(1751095071.520:325): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.461754][ T1430] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 64.494482][ T1430] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 64.508072][ T1430] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 64.518699][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.523848][ T1430] ? _raw_spin_lock+0x8c/0x120 [ 64.528648][ T1430] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.533879][ T1430] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 64.541113][ T1430] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 64.549039][ T1430] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 64.558971][ T1430] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 64.569589][ T1430] ? __asan_memcpy+0x5a/0x80 [ 64.574213][ T1430] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 64.583972][ T1430] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 64.594087][ T1430] ? kvm_sched_clock_read+0x15/0x30 [ 64.599322][ T1430] ? sched_clock_noinstr+0xd/0x30 [ 64.604383][ T1430] ? sched_clock+0x44/0x60 [ 64.608833][ T1430] ? sched_clock_cpu+0x75/0x400 [ 64.613722][ T1430] ? __cfi_sched_clock_cpu+0x10/0x10 [ 64.619046][ T1430] ? enqueue_entity+0x448/0xf90 [ 64.623928][ T1430] ? cgroup_rstat_updated+0x132/0x7f0 [ 64.629340][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.634497][ T1430] ? _raw_spin_lock+0x8c/0x120 [ 64.639315][ T1430] ? __cfi__raw_spin_lock+0x10/0x10 [ 64.644561][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.649732][ T1430] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 64.659331][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.664479][ T1430] ? __switch_to+0xc7b/0x1310 [ 64.669201][ T1430] ? __cfi___switch_to+0x10/0x10 [ 64.674176][ T1430] ? pick_next_task_fair+0x870/0x900 [ 64.679496][ T1430] ? _raw_spin_lock+0x8c/0x120 [ 64.684329][ T1430] ? __sched_text_start+0x10/0x10 [ 64.689388][ T1430] ? __queue_work+0xb5d/0x1120 [ 64.694181][ T1430] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 64.704125][ T1430] ? preempt_schedule_common+0x2d/0x60 [ 64.709625][ T1430] ? preempt_schedule+0xb0/0xd0 [ 64.714505][ T1430] ? __cfi_preempt_schedule+0x10/0x10 [ 64.719913][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.725056][ T1430] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 64.730557][ T1430] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 64.736517][ T1430] ? kvm_sched_clock_read+0x15/0x30 [ 64.741757][ T1430] ? sched_clock_noinstr+0xd/0x30 [ 64.746815][ T1430] ? sched_clock+0x44/0x60 [ 64.751259][ T1430] ? sched_clock_cpu+0x75/0x400 [ 64.756140][ T1430] ? __cfi_sched_clock_cpu+0x10/0x10 [ 64.761456][ T1430] ? plist_check_list+0x2a1/0x2c0 [ 64.766535][ T1430] ? plist_check_list+0x2a8/0x2c0 [ 64.771611][ T1430] ? __kasan_check_read+0x15/0x20 [ 64.776666][ T1430] ? psi_group_change+0xb44/0x1130 [ 64.781809][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.786956][ T1430] ? enqueue_pushable_task+0x24f/0x3f0 [ 64.792448][ T1430] ? psi_task_change+0x1ce/0x360 [ 64.797431][ T1430] ? enqueue_task+0x1133/0x11f0 [ 64.802326][ T1430] ? native_smp_send_reschedule+0x3d/0x60 [ 64.808088][ T1430] ? ttwu_do_activate+0x1e2/0x630 [ 64.813157][ T1430] ? resched_curr+0x1c6/0x430 [ 64.817876][ T1430] ? __cfi_resched_curr+0x10/0x10 [ 64.822947][ T1430] ? update_rq_clock+0x31b/0x7c0 [ 64.827922][ T1430] ? ttwu_do_activate+0x630/0x630 [ 64.832988][ T1430] ? __kasan_check_read+0x15/0x20 [ 64.838043][ T1430] ? task_woken_rt+0x70/0x260 [ 64.842754][ T1430] ? try_to_wake_up+0xdd2/0x1aa0 [ 64.847739][ T1430] ? __kasan_check_write+0x18/0x20 [ 64.852881][ T1430] ? _raw_spin_lock+0x8c/0x120 [ 64.857699][ T1430] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.863532][ T1430] ? swake_up_one+0x14b/0x160 [ 64.868274][ T1430] ? swake_up_one_online+0x4d/0xf0 [ 64.873414][ T1430] ? rcu_preempt_deferred_qs_irqrestore+0x846/0x980 [ 64.880036][ T1430] ? rcu_read_unlock_special+0xab/0x480 [ 64.885625][ T1430] ? __rcu_read_unlock+0xc0/0xc0 [ 64.890600][ T1430] ? __asan_memset+0x39/0x50 [ 64.895226][ T1430] ? __rcu_read_unlock+0x68/0xc0 [ 64.900186][ T1430] ? ctnetlink_create_conntrack+0xb67/0xe50 [ 64.906122][ T1430] ? ctnetlink_get_ct_unconfirmed+0x1b0/0x1b0 [ 64.912225][ T1430] ? once_disable_jump+0x162/0x220 [ 64.917374][ T1430] ? __siphash_unaligned+0x23f/0x3c0 [ 64.922695][ T1430] ? cgroup_rstat_updated+0x132/0x7f0 [ 64.928101][ T1430] ? __kasan_check_read+0x15/0x20 [ 64.933166][ T1430] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 64.938923][ T1430] ? __cfi_nf_conntrack_eventmask_report+0x10/0x10 [ 64.945481][ T1430] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 64.950972][ T1430] ? update_cfs_group+0x260/0x260 [ 64.956041][ T1430] ? is_bpf_text_address+0x17b/0x1a0 [ 64.961362][ T1430] ? kernel_text_address+0xa9/0xe0 [ 64.966526][ T1430] ? unwind_get_return_address+0x51/0x90 [ 64.972194][ T1430] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 64.978384][ T1430] ? arch_stack_walk+0x10b/0x170 [ 64.983366][ T1430] ? stack_depot_save_flags+0x38/0x800 [ 64.988943][ T1430] ? kasan_save_alloc_info+0x40/0x50 [ 64.994264][ T1430] ? kasan_save_track+0x4f/0x80 [ 64.999152][ T1430] ? kasan_save_track+0x3e/0x80 [ 65.004034][ T1430] ? kasan_save_alloc_info+0x40/0x50 [ 65.009346][ T1430] ? __kasan_kmalloc+0x96/0xb0 [ 65.014153][ T1430] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 65.020779][ T1430] ? krealloc_noprof+0x8d/0x130 [ 65.025666][ T1430] ? rust_helper_krealloc+0x33/0xd0 [ 65.030903][ T1430] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 65.040489][ T1430] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 65.051038][ T1430] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 65.060359][ T1430] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 65.069085][ T1430] ? __se_sys_ioctl+0x132/0x1b0 [ 65.074084][ T1430] ? __x64_sys_ioctl+0x7f/0xa0 [ 65.078898][ T1430] ? do_syscall_64+0x58/0xf0 [ 65.083529][ T1430] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.089632][ T1430] ? cgroup_rstat_updated+0x132/0x7f0 [ 65.095035][ T1430] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 65.100780][ T1430] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 65.106265][ T1430] ? update_curr_dl_se+0x10c/0xb20 [ 65.111407][ T1430] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 65.117506][ T1430] ? update_curr+0x60d/0xc60 [ 65.122143][ T1430] ? __kasan_check_write+0x18/0x20 [ 65.127304][ T1430] ? _raw_spin_lock+0x8c/0x120 [ 65.132111][ T1430] ? __cfi__raw_spin_lock+0x10/0x10 [ 65.137345][ T1430] ? _raw_spin_unlock+0x45/0x60 [ 65.142228][ T1430] ? rust_helper_spin_unlock+0x19/0x30 [ 65.147762][ T1430] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 65.158319][ T1430] ? update_load_avg+0x506/0x19a0 [ 65.163372][ T1430] ? __kasan_check_read+0x15/0x20 [ 65.168425][ T1430] ? update_cfs_group+0x127/0x260 [ 65.173507][ T1430] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 65.184308][ T1430] ? kvm_sched_clock_read+0x15/0x30 [ 65.189540][ T1430] ? sched_clock_noinstr+0xd/0x30 [ 65.194596][ T1430] ? sched_clock+0x44/0x60 [ 65.199040][ T1430] ? sched_clock_cpu+0x75/0x400 [ 65.203925][ T1430] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 65.210026][ T1430] ? xfd_validate_state+0x68/0x150 [ 65.215167][ T1430] ? save_fpregs_to_fpstate+0x196/0x230 [ 65.220756][ T1430] ? __cfi___switch_to+0x10/0x10 [ 65.225723][ T1430] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 65.234875][ T1430] ? _raw_spin_unlock+0x45/0x60 [ 65.239774][ T1430] ? __switch_to_asm+0x3d/0x70 [ 65.244588][ T1430] ? avc_has_extended_perms+0x7c7/0xdd0 [ 65.250167][ T1430] ? __asan_memcpy+0x5a/0x80 [ 65.253395][ T999] syz.0.209 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.254781][ T1430] ? avc_has_extended_perms+0x921/0xdd0 [ 65.270049][ T1430] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 65.279640][ T1430] ? do_vfs_ioctl+0xeda/0x1e30 [ 65.284445][ T1430] ? __futex_queue+0x19a/0x340 [ 65.289253][ T1430] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 65.294921][ T1430] ? __cfi___futex_queue+0x10/0x10 [ 65.300070][ T1430] ? futex_wait_setup+0x1bc/0x260 [ 65.305124][ T1430] ? __futex_wait+0x218/0x2a0 [ 65.309829][ T1430] ? ioctl_has_perm+0x384/0x4d0 [ 65.314708][ T1430] ? has_cap_mac_admin+0xd0/0xd0 [ 65.319682][ T1430] ? futex_wake+0x5fb/0x900 [ 65.324214][ T1430] ? futex_setup_timer+0xb4/0xd0 [ 65.329184][ T1430] ? futex_wait+0x288/0x540 [ 65.332603][ T999] CPU: 0 UID: 0 PID: 999 Comm: syz.0.209 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 65.332642][ T999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.332658][ T999] Call Trace: [ 65.332666][ T999] [ 65.332675][ T999] __dump_stack+0x21/0x30 [ 65.332711][ T999] dump_stack_lvl+0x10c/0x190 [ 65.332739][ T999] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.332768][ T999] ? ___ratelimit+0x3f7/0x5a0 [ 65.332796][ T999] dump_stack+0x19/0x20 [ 65.332823][ T999] dump_header+0xd7/0x490 [ 65.332859][ T999] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 65.332886][ T999] oom_kill_process+0x4c0/0x7e0 [ 65.332910][ T999] ? sched_clock_cpu+0x75/0x400 [ 65.332939][ T999] out_of_memory+0x7ee/0xbd0 [ 65.332963][ T999] ? __cfi_out_of_memory+0x10/0x10 [ 65.332984][ T999] ? mutex_lock_killable+0x92/0x1c0 [ 65.333015][ T999] ? __cfi_mutex_lock_killable+0x10/0x10 [ 65.333048][ T999] mem_cgroup_out_of_memory+0x279/0x350 [ 65.333081][ T999] ? drain_obj_stock+0xed0/0xed0 [ 65.333115][ T999] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 65.333147][ T999] try_charge_memcg+0x8f7/0xde0 [ 65.333176][ T999] ? __cfi_try_charge_memcg+0x10/0x10 [ 65.333203][ T999] ? __alloc_pages_noprof+0x30d/0x6c0 [ 65.333240][ T999] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.333266][ T999] ? __folio_batch_add_and_move+0x2ab/0x370 [ 65.333291][ T999] __mem_cgroup_charge+0xf6/0x410 [ 65.333320][ T999] ? __kasan_check_write+0x18/0x20 [ 65.333349][ T999] ? _raw_spin_lock+0x8c/0x120 [ 65.333395][ T999] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 65.333425][ T999] shmem_alloc_and_add_folio+0x86d/0x1050 [ 65.333463][ T999] ? put_swap_device+0x130/0x130 [ 65.333496][ T999] ? shmem_huge_global_enabled+0x2da/0x360 [ 65.333529][ T999] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 65.333561][ T999] ? __kasan_check_write+0x18/0x20 [ 65.333588][ T999] ? _raw_spin_lock+0x8c/0x120 [ 65.333623][ T999] shmem_get_folio_gfp+0x5f0/0x1380 [ 65.333658][ T999] ? shmem_get_folio+0xc0/0xc0 [ 65.333688][ T999] ? follow_page_pte+0xa5c/0xb90 [ 65.333711][ T999] ? inode_to_bdi+0x6d/0x100 [ 65.333737][ T999] shmem_write_begin+0xf4/0x270 [ 65.333774][ T999] generic_perform_write+0x32d/0x960 [ 65.333805][ T999] ? __cfi_generic_perform_write+0x10/0x10 [ 65.333833][ T999] ? down_write+0xe9/0x2a0 [ 65.333863][ T999] ? file_update_time+0xa3/0x220 [ 65.333888][ T999] shmem_file_write_iter+0x105/0x130 [ 65.333913][ T999] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 65.333937][ T999] __kernel_write_iter+0x392/0x830 [ 65.333965][ T999] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 65.333990][ T999] ? __cfi___kernel_write_iter+0x10/0x10 [ 65.334019][ T999] ? get_dump_page+0x160/0x220 [ 65.334040][ T999] ? __asan_memset+0x39/0x50 [ 65.334068][ T999] ? iov_iter_bvec+0xc0/0x180 [ 65.334100][ T999] dump_user_range+0xb06/0xdf0 [ 65.334130][ T999] ? __cfi_dump_emit+0x10/0x10 [ 65.334158][ T999] ? __cfi_dump_user_range+0x10/0x10 [ 65.334186][ T999] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 65.334216][ T999] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 65.334256][ T999] elf_core_dump+0x2cd9/0x3810 [ 65.334294][ T999] ? __cfi_elf_core_dump+0x10/0x10 [ 65.334335][ T999] ? dump_interrupted+0xf0/0xf0 [ 65.334363][ T999] ? filp_open+0x182/0x1d0 [ 65.334384][ T999] ? 0xffffffffff600000 [ 65.334402][ T999] do_coredump+0x1bf7/0x2bd0 [ 65.334433][ T999] ? __cfi_do_coredump+0x10/0x10 [ 65.334459][ T999] ? asm_exc_page_fault+0x2b/0x30 [ 65.334491][ T999] ? __kasan_slab_free+0x6a/0x80 [ 65.334523][ T999] ? kmem_cache_free+0x1c1/0x4c0 [ 65.334554][ T999] get_signal+0x11fd/0x14f0 [ 65.334581][ T999] arch_do_signal_or_restart+0x96/0x720 [ 65.334612][ T999] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.334648][ T999] irqentry_exit_to_user_mode+0x4e/0xb0 [ 65.334678][ T999] irqentry_exit+0x16/0x60 [ 65.334707][ T999] exc_page_fault+0x66/0xc0 [ 65.334735][ T999] asm_exc_page_fault+0x2b/0x30 [ 65.334759][ T999] RIP: 0033:0x7f5078d8e931 [ 65.334777][ T999] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.334798][ T999] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 65.334818][ T999] RAX: 0000000000000000 RBX: 00007f5078fb5fa0 RCX: 00007f5078d8e929 [ 65.334835][ T999] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 65.334852][ T999] RBP: 00007f5078e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.334868][ T999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.334883][ T999] R13: 0000000000000000 R14: 00007f5078fb5fa0 R15: 00007ffda05f5b68 [ 65.334902][ T999] [ 65.355477][ T999] memory: usage 306960kB, limit 307200kB, failcnt 40558 [ 65.357110][ T1430] ? __cfi_futex_wait+0x10/0x10 [ 65.365876][ T999] memory+swap: usage 431900kB, limit 9007199254740988kB, failcnt 0 [ 65.367665][ T1430] ? selinux_file_ioctl+0x6e0/0x1360 [ 65.400921][ T999] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.401052][ T1430] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 65.428129][ T999] Memory cgroup stats for [ 65.431947][ T1430] ? do_futex+0x309/0x500 [ 65.431988][ T1430] ? __cfi_do_futex+0x10/0x10 [ 65.432023][ T1430] ? __fget_files+0x2c5/0x340 [ 65.477397][ T999] /syz0 [ 65.479443][ T1430] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 65.510741][ T999] : [ 65.512245][ T1430] ? __se_sys_ioctl+0x114/0x1b0 [ 65.524863][ T999] cache 314310656 [ 65.527308][ T1430] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 65.532139][ T999] rss 73728 [ 65.537005][ T1430] __se_sys_ioctl+0x132/0x1b0 [ 65.537045][ T1430] __x64_sys_ioctl+0x7f/0xa0 [ 65.542220][ T999] rss_huge 0 [ 65.546503][ T1430] x64_sys_call+0x1878/0x2ee0 [ 65.546542][ T1430] do_syscall_64+0x58/0xf0 [ 65.552091][ T999] shmem 314306560 [ 65.557607][ T1430] ? clear_bhb_loop+0x50/0xa0 [ 65.557641][ T1430] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.562338][ T999] mapped_file 0 [ 65.566990][ T1430] RIP: 0033:0x7f8f8238e929 [ 65.572539][ T999] dirty 0 [ 65.578076][ T1430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.583475][ T999] writeback 40960 [ 65.588979][ T1430] RSP: 002b:00007f8f809f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.594970][ T999] workingset_refault_anon 98 [ 65.599365][ T1430] RAX: ffffffffffffffda RBX: 00007f8f825b5fa0 RCX: 00007f8f8238e929 [ 65.604217][ T999] workingset_refault_file 3157 [ 65.608622][ T1430] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000004 [ 65.608644][ T1430] RBP: 00007f8f82410b39 R08: 0000000000000000 R09: 0000000000000000 [ 65.613665][ T999] swap 127778816 [ 65.618143][ T1430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.618163][ T1430] R13: 0000000000000000 R14: 00007f8f825b5fa0 R15: 00007ffe461b5178 [ 65.623665][ T999] swapcached 176128 [ 65.629662][ T1430] [ 65.629674][ T1430] Modules linked in: [ 65.636546][ T999] pgpgin 288883 [ 65.641286][ T1430] ---[ end trace 0000000000000000 ]--- [ 65.649131][ T999] pgpgout 212091 [ 65.652927][ T1430] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 65.714441][ T999] pgfault 30223 [ 65.715300][ T1430] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7e 89 4f b6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 34 4d 06 3a 90 90 90 90 90 90 90 90 90 [ 65.724176][ T999] pgmajfault 117 [ 65.724584][ T1430] RSP: 0018:ffffc9000e165a90 EFLAGS: 00010246 [ 65.744437][ T999] inactive_anon 111849472 [ 65.750202][ T1430] [ 65.750212][ T1430] RAX: 0000000000000061 RBX: 1ffff92001c2cb54 RCX: d90b88db06b6e800 [ 65.765065][ T999] active_anon 202596352 [ 65.766286][ T1430] RDX: ffffc90002675000 RSI: 0000000000002801 RDI: 0000000000002802 [ 65.774563][ T999] inactive_file 0 [ 65.782247][ T1430] RBP: ffffc9000e165a90 R08: ffffc9000e165787 R09: 1ffff92001c2caf0 [ 65.792776][ T999] active_file 4096 [ 65.793241][ T1430] R10: dffffc0000000000 R11: fffff52001c2caf1 R12: 0000000000000000 [ 65.800203][ T999] unevictable 0 [ 65.805015][ T1430] R13: dffffc0000000000 R14: ffffc9000e165ac0 R15: ffffc9000e165af0 [ 65.805037][ T1430] FS: 00007f8f809f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 65.812970][ T999] hierarchical_memory_limit 314572800 [ 65.818707][ T1430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.825119][ T999] hierarchical_memsw_limit 9223372036854771712 [ 65.830855][ T1430] CR2: 00007ffda05f4e0c CR3: 0000000106714000 CR4: 00000000003526b0 [ 65.835102][ T999] total_cache 314310656 [ 65.839535][ T1430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.844153][ T999] total_rss 73728 [ 65.848894][ T1430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.851589][ T999] total_rss_huge 0 [ 65.860413][ T1430] Kernel panic - not syncing: Fatal exception [ 65.862776][ T1430] Kernel Offset: disabled