last executing test programs: 3m24.534767432s ago: executing program 3 (id=89): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 3m24.421085381s ago: executing program 3 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_procfs(0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x290142, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f00000024c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000440)={{0x2, 0x0, 0x80, {0x80a0000, 0x2000}}}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m23.885031394s ago: executing program 3 (id=95): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000100)=[@clear_death], 0x0, 0x0, 0x0}) 3m22.975789347s ago: executing program 3 (id=109): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mount(0x0, 0x0, 0x0, 0x200000, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FICLONE(r0, 0x40049409, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$evdev(&(0x7f0000001a40), 0x2, 0xa040) (rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001100)={0x5b279f6196f49b8d, 0x17, 0x5, 0x9, 0x0, 0xfffffffe, 0x0}) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0/../file0\x00', r3, &(0x7f0000000180)='./file0/../file0\x00', 0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) stat(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)) 3m22.971309817s ago: executing program 3 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.949249259s ago: executing program 3 (id=114): prctl$PR_GET_SECCOMP(0x15) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e1) sendfile(r1, r1, 0x0, 0x1200000000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9c0431575f8614d3538ce09c50eecd6ac579e8e83b944b666145f3afed71231e6653a13509000000000000001be14f53b9fc9b"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4040004) socket$inet6(0xa, 0x6, 0xffffcc87) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000040) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 3m7.360376838s ago: executing program 32 (id=114): prctl$PR_GET_SECCOMP(0x15) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e1) sendfile(r1, r1, 0x0, 0x1200000000000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9c0431575f8614d3538ce09c50eecd6ac579e8e83b944b666145f3afed71231e6653a13509000000000000001be14f53b9fc9b"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4040004) socket$inet6(0xa, 0x6, 0xffffcc87) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000040) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000080)={0x5, &(0x7f00000001c0)=[{@none}, {@fixed}, {@none}, {}, {}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 2m51.195904743s ago: executing program 1 (id=462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x24, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x8, 0xe, [@ibss={0x6, 0x2, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4014080) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000012c0)="353b7584ee5cf55c2e9441548c3cb9df732ff3fda0e169fe67f3c4fba85fe8527d6d9eab0143e81cffd6f89fffe3239708af4f8e3d81c510c5897049ae042f21415147755cbcd30e07ae440a3897e2bb9a3cdacac24386b9733d2053853e57cbc9652de841a511a3cf566f2603a4ee114cbdfa6c487e88808e281ace13097a825ffbe8d71b9cb2b2af5347d91edf8206d8c8145dd6c949924b40ba4ccbca8351420ccbb1158a853a9bbbf120dda9ae520c96e85f35c9b3719d430ab6f3c0fefe27a141d9897cfa0024143d68a5b89e40778fe8d8b471a7ce82747212df39a2dbfef7de958ff3ac8df87e824c0b50ed64380768223ff91a04fd049bd487bb748749f87eb8de4dd56c69b364b66a0b6b213dbca5a71ee60b83922302c9b6d4ac706d57dc67f3ff5f8450c2d332d70826de79e4130951283bc1b46f2117f0bb547674d4e9e86c4ce249c0eb", 0x14a}, {&(0x7f0000000c00)="584a34855a75b7b8e0844a06cb83a760351e10cba23df367aa5cad4e9050f3dd96ed7ad6594f2016ec741bccd0f185a691b23ee2afe6bdc829b9eb03f5142e379145ffe03e505edddb03bd6b2d86e257ab71cd3fc623947fc89e938ae0dea068056ea528d82e4034b231c0a452e7edbf5f0ec7b023894c3ba905f9244d40c299dc24af4506a0761fc6e38e4751284af0d7e14c7032d61f647efd0bd6103dcca873a597894193c34ea813fc032613b6afd9a8a8f8577b10561198e570ea29c1df717c77e6a4b75834c6c4684a659675187e6b05c9e24fca6d17bcaf72fc1bed5973a84af6", 0xe4}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000000600)="2749fe1ad2d948378b487db61c3e367ea7f5755483410970318d8254ddb63fcfa0ecc5f7f7a33fbc9813e55c65b3e394be2430f1e5591869dadff768edb911109adc78de2185558ce7a77d38c5fe7dc331cdea3ceb85541e2bd7e06be0e1014dfba4e5cae4da42dd1cabdf84ebd93302161a982c9a77f703b49073ac4f5454316127e38591e29107b7f7c0d28e36b6dd1ea9e8f3aea2c836159007b9cb", 0x9d}, {&(0x7f0000000340)="c8b69ff7e74af6f4e15a6c7cfb7ef37ac4707f38e94a4c8254247e00b827fc1ea0625695b6df9d55e871356bc1689dcf01a571d2d8cae403a0125fdef54b171ef7e5fbf0584d65c3d6681369bb413b803f2966a4f9a7000962deeb9b362814a2958d51ee15636e256c8baca04993", 0x6e}, {&(0x7f00000010c0)="9bc0bb183bd6d91fd87159aa41df74c119c2e48139fc46ca80f57f07e7de13694259e05ea37e296ef1fd3819c24fd83c659c63af40c6ea5a5f9ea711810063189057e46e9e281abf1c013e3737a554b091a650cc5acb45a77f91653427600b26e2f72fd94e89ad8fb164f0190db7817e4ebea21b686aed84b2ec981c67e36b4da441e773e3c5dbae90dad923489c8aed61da78f34ce52162590352db435dda361afbf5d73211204c25960d6a6d062911e54a22525fad9546864fcdeac8b8dd197e09f1f5b4bc908926f0812870b6c380c0b514a1d556913602d9d8027743ccf22c1b7ec0dfcb1600dbe1e8ff849b14d089eae7", 0xf3}, {&(0x7f00000011c0)="bafae45be255099a5f5ed96a3853656c053f692780ce7de0a34e1969216f4c169b4df3a3f0a22c22f4c206d902c0e240145c11900b1ac7d1d3759e9c325d6873c2009e77bb2b098857183bd6d3af1217801732820138f61f27ac16ab29beb7d6b4623dd21d7c6db64d4a26e52a92d6cbfdd229d36f1b73f701f7ebd9eed3180a22c0740dcaa3fca176a6af40a3fc33d244cd7b1ada522e787d48c682636cc96fac822bc8a0d7a10bcd58d89dc6fe476b10f843c5e433dc90587f1be4dfd01a0f2ecb2ba982e69d6f1c43aa12e49a496261", 0xd1}, {&(0x7f00000001c0)="b94a19d9bdf7324f26a6177c6f7b4c4d564811fcdb4295d95d72d5a1eb39ade33fac1de56a2aeb361e38830bc3d3cb95ae8313c36dd2c4659590f58c", 0x3c}], 0x8}, 0x20004894) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}, {&(0x7f0000000700)="d830144aed19b216c202fb43355e266c5b227c7a3ea7bac969a8d749476c9ba1e76d8eca41e24329bb3febc7603d64f9c46c0395dfa215651fd7387c8813ecfabfbe3114c69daba548611e4803622deca47d7e84f30d41aa5141ee46e496cc02fabdd322c213d30de0ee1dac84b18a09c374785e79380a5e", 0x78}], 0x5}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f00000009c0)="96bd7002996addfa3b96a5e4de5bf18b08fa24022c9ea46b232c5c5291900e9fabf10195e42fc8836affd77df6bc5eff286920ca8d13908aa8f90c94e7b63b774bbe2e5ac79edf301bc28f9e1fee6b024c2d4c0436e61312524f0606ab47be46e4777e99626a0462221cc755693b3647e2a6b19b8b6ec5258f97e805f91c257e87fb34dad721d1067ac24a6d1c1045ce721433df6c4eac2e47cfdcc22e41b9cba665d5d381447a67f6fd599f2fcda2ffd48d1742e586b98786d4107f863d46587bd0e86af74fa27d51a32477ed3343a1577551d12c2c8e42117c30dde830c439a98050a400"/242, 0xf2}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000007500000005000000000000000000000004000000f8ffffff00000000000000000000000000000000ba57b20c5e954192"]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x35b400, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x1c, 0x2e, 0x31f, 0x0, 0x0, "", [@typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) getcwd(&(0x7f0000000000)=""/133, 0x85) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = eventfd2(0x8001, 0x800) ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000, 0x0, r12, 0xc}) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[@ANYRESHEX=r11], 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 2m50.557534814s ago: executing program 1 (id=484): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) connect$802154_dgram(r0, &(0x7f00000000c0), 0x14) mknod$loop(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000480)=""/39, &(0x7f00000004c0)=0x27) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x5, &(0x7f0000000380)=""/106, 0x6a}, 0x2040) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 2m49.664389685s ago: executing program 1 (id=503): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440, 0x0) fcntl$setlease(r2, 0x400, 0x2) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) read$FUSE(r4, 0x0, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3, &(0x7f0000000100)=""/193, &(0x7f0000000040)=0xc1) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000003b, &(0x7f0000000200)=0x9, 0x4) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r7, 0x0, 0x14, 0x0, &(0x7f0000000e80)) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = syz_clone(0x4000000, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r8, 0x7, r9, &(0x7f0000000180)={0xffffffffffffffff, r9, 0xfffffffc}) syz_open_procfs(r10, &(0x7f0000000040)='auxv\x00') bind$802154_raw(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0x5555555555550301}}}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2m48.843884021s ago: executing program 1 (id=514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1908) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)='%((@\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x167342, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xa8000, 0x0) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x9, 0x2, 0xff}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fsopen(&(0x7f0000000140)='aio\x00', 0x1) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) getsockopt$inet_opts(r2, 0x0, 0xd, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 2m47.812428254s ago: executing program 1 (id=530): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) r4 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m47.651935057s ago: executing program 1 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415708, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) getpid() (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) fcntl$dupfd(r2, 0x0, r2) (async) r3 = fcntl$dupfd(r2, 0x0, r2) fremovexattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='se\x00'/19]) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x49}}, 0x22) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4, 0x5) (async) splice(r5, 0x0, r6, 0x0, 0x4, 0x5) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$sock(r7, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40009) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x12000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') socket(0x27, 0x0, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x6}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x6}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup2(r8, r8) getsockopt$packet_int(r9, 0x107, 0x13, 0x0, &(0x7f0000000100)) 2m47.550122905s ago: executing program 33 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415708, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) getpid() (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) fcntl$dupfd(r2, 0x0, r2) (async) r3 = fcntl$dupfd(r2, 0x0, r2) fremovexattr(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='se\x00'/19]) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x49}}, 0x22) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x9000000) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4, 0x5) (async) splice(r5, 0x0, r6, 0x0, 0x4, 0x5) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$sock(r7, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="15", 0x1}], 0x1}}], 0x1, 0x40009) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x12000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') socket(0x27, 0x0, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x6}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x6}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = dup2(r8, r8) getsockopt$packet_int(r9, 0x107, 0x13, 0x0, &(0x7f0000000100)) 1.768586838s ago: executing program 4 (id=3045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x3, 0x9, 0x0, 0x2, 0x800, 0x2, 0x6, 0xd5d, 0x8, 0x9, 0x0, 0x0, 0x3, 0x9, 0x3, 0x1, 0x1, 0x69cf, 0xfff, 0x28001, 0x101, 0x7fff}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.768446858s ago: executing program 4 (id=3046): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket(0x10, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xa0179e08}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r5, 0x0, 0x3) epoll_wait(r4, &(0x7f00000002c0)=[{}, {}], 0x2, 0xdca) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.666344686s ago: executing program 0 (id=3050): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) 1.657270307s ago: executing program 4 (id=3051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x21}) fsetxattr$security_selinux(r0, &(0x7f0000000080), 0x0, 0xfe, 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x4885) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000c59a169900", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r3, &(0x7f00000005c0)=""/197, 0xc5) write$P9_RREADDIR(r3, &(0x7f0000000240)={0xb, 0x29, 0x2, {0xb}}, 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x45) 1.604378291s ago: executing program 0 (id=3052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000800)) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d61783d30303030303030303030303031373737373737a4bd2c0cb0373737372c00e941dc41898bbb70200218eefd80d99578917d9e5cd08bc12b74"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/file0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9d10283e"], 0x1c}], 0x1}, 0x0) setuid(0xee00) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x7a}, 0xb, 0x2, 0x100, 0x4, 0x9, 0xfff7}, 0x16) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x5, 0x401}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x1, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x7, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce0102829709021200010000000009040000000202"], 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89b0, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x5a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) write$UHID_CREATE(r1, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/141, 0x8d, 0x1ff, 0x8001, 0x2, 0x9, 0x80000001}}, 0x120) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000440)=0x277, 0x4) copy_file_range(r1, 0x0, r1, 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="baf80c66b890a8068066efbafc0c66b84a00000066ef2e673ef633f08070f30866b96e0300000f3266b9800000c00f326635001000000f30b84b000f00d09a5aff2c0066b9c40b000066b87e00000066ba000000000f30dbe0660f63bd974b", 0x5f}], 0x1, 0x5e, &(0x7f0000000000)=[@cstype3={0x5, 0x6}, @efer={0x2, 0x1}], 0x2) 1.556047375s ago: executing program 4 (id=3053): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b62000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000bca000/0xe000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e4f000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.487659701s ago: executing program 4 (id=3054): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a18c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52540000000ef7d15e6852b88300b766ab70535837520a57571ae2e7ed0eec5530c9bbe7e3756ba577d82e21dca4343146d99cb3e", 0x70}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5550e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {&(0x7f00000009c0)="9190e42e123ee37d19f2a627aec0b3d42e14db4a0954e630a80066086fc2c4f7a3e33e42e0a6d83e3dc38c5edc7741f5e557c64ede71fdf7b721aafa99a009a769092cbb0dd4345178f3b155f1f53d9085595471faa592bbdc3e3f28de545362d4cadcd1b86d3f8c9b8b0bd14e802453e93f", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000280)="01808d8e2707c513ff18766900d2a16406cbd2bf7405b1b3e3ea25b31806f69954d1d5c2b0b9d25f60dd5b5d811bde8c6601fcd8cf8f3f25812a2acf0b5e69e409282d7881044f440cfd74137b08c64b81fdfc83fa9aa4fb8fd661300c82816f37cf4e6c100cc73a1af35b2bb1024d51bc3af740de6b16f736f7ff5500be7c9656", 0x81}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f2357917d42f98899ebb1bfe1e01a3694356a88dd4", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000001340)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b5418f29756c335f7c6ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534fb262b950f7512e50efa4e6cb7e7b746053c4a61ade3f3788ebd09c8cb461f8cf64d0f696f936d915ead80ef69228cde363e6e9c22024872dd1f4ab2ac3c579e321aca11b042d1faf574b0809243ac751b2a9392694f4168e819f912b83841056b56b1396b81dd6e2af37b3c455ed45fdb193bf353f94811aa216a5e268a85bdb", 0xc6}, {&(0x7f0000001040)="0e85119382927d42bd8eccb5fc985cf2a0f62d61bc81a58e9c88", 0x1a}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb63", 0x55}], 0x4}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea939ec5119563a01696675f867ade147f4009f1921311fd3576492ba947", 0x36}], 0x1}}], 0x6, 0x400c404) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 1.432393605s ago: executing program 4 (id=3055): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x80, 0x10, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x81, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9d, 0xfa}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x3, 0xa4, 0x6f, 0xff, 0x2}, 0x85, &(0x7f0000000300)={0x5, 0xf, 0x85, 0x6, [@generic={0x5, 0x10, 0xa, "54b3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x1, 0x9, 0x6, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf7, 0x4, 0x1}, @generic={0x4f, 0x10, 0xa, "b19206b8a883358e320fed4feec35c09d8719c369d881e6c5dcd8aad8115ae95c65ef25c61f4ba2589311de914c1794fdb2c9740627a517aeffa576cdf4cc99d00d735bfdfbef005901f73c1"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "378b78ea03330f459ecd65c2bdeb731b"}, @ptm_cap={0x3}]}, 0x1, [{0x8b, &(0x7f00000003c0)=@string={0x8b, 0x3, "ffc20928be99e7350713c1e37aed38e800f0da2a9935a2b24c227c4492db9362afaaa1e230b5c872a9453b502336c1e6a9ca3b076c6cf92ad7044db2e2b48eae4c380548360616b17b9c732abd5518fd858bba1d29a68cb408399ae84104885ecd4b52a438c419c0a05e792e3671085e2ea022468c8d582a21694e0e8a3d032ea1f7fdbd0d33c36ab3"}}]}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async, rerun: 64) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) (async) syz_usb_connect(0x0, 0x3d, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.133954919s ago: executing program 0 (id=3056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.12221659s ago: executing program 0 (id=3057): mkdir(&(0x7f0000000040)='./file0\x00', 0x44) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) read(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1840001, &(0x7f00000001c0)={[{@xino_auto, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)=""/238, 0xee) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x10001) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x454c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0x10008, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x100000000, 0xfffffffff0000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r4 = fsopen(&(0x7f0000000380)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1.068395684s ago: executing program 0 (id=3058): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000080)) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x267, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00008500"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) eventfd2(0x6, 0x800) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(r4, 0x0, 0x0) (async) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@loopback, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@initdev}}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000001180)={0x2020}, 0x2020) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) (async) ftruncate(r7, 0xf09) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000a31000/0x3000)=nil, 0x3000}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x100000000000015a) 595.778162ms ago: executing program 0 (id=3063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r4, &(0x7f00000001c0)='m', 0x1, 0x1}]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000024c0)=0xe8) getgroups(0x6, &(0x7f0000002500)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000025c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002940)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000002a40)=0xe8) r12 = getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r13, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r14) getresgid(&(0x7f0000002b80), &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)) syz_fuse_handle_req(r4, &(0x7f0000000240)="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", 0x2000, &(0x7f0000002d80)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x8001, {0x7, 0x2b, 0xd, 0x10000000, 0x7fff, 0x1, 0xbe, 0xfffffffb, 0x0, 0x0, 0x2, 0xc5c}}, &(0x7f0000000000)={0x18, 0x0, 0x5, {0xd}}, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x8}}, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x7}}, &(0x7f00000001c0)={0x18, 0x0, 0x380000000, {0xa}}, &(0x7f0000002240)={0x28, 0x0, 0x4, {{0x8, 0x1}}}, &(0x7f0000002280)={0x60, 0x0, 0x4, {{0x7, 0xffffffffffff0000, 0x1, 0xd, 0x4, 0x4, 0x9, 0x26}}}, &(0x7f0000002300)={0x18, 0xfffffffffffffff5, 0x2, {0x8}}, &(0x7f0000002340)={0x23, 0xfffffffffffffff5, 0x5, {'./binderfs/binder0\x00'}}, &(0x7f0000002380)={0x20, 0x0, 0x7ff, {0x0, 0x5}}, &(0x7f0000002540)={0x78, 0xfffffffffffffffe, 0x2, {0x80, 0x2, 0x0, {0x0, 0xffff, 0x7, 0xfe, 0xde1, 0x3, 0x5, 0xfffffff1, 0x5, 0x4000, 0x6, r6, r7, 0x6, 0x1}}}, &(0x7f0000002600)={0x90, 0xfffffffffffffff5, 0x341, {0x6, 0x3, 0x2, 0xfffffffffffffffa, 0x10001, 0x4, {0x4, 0x2, 0x8000000000000001, 0x3, 0x1, 0x704, 0x4, 0x8, 0x6, 0xc000, 0x3, r8, 0xffffffffffffffff, 0x6, 0x2}}}, &(0x7f00000026c0)={0x30, 0xfffffffffffffffe, 0x6, [{0x2, 0xfffffffffffffff8, 0x7, 0x4, '*((-\xfb\xff&'}]}, &(0x7f0000002880)={0xa8, 0x0, 0xd800000000000000, [{{0x5, 0x0, 0xc088970, 0x6, 0xd, 0x8, {0x2, 0xffff, 0x2, 0x40, 0x3, 0x1, 0xffffffff, 0x9, 0x3, 0xc000, 0x6c4d1250, r9, r10, 0x4, 0x3}}, {0x6, 0xfffffffffffeffff, 0x0, 0x7f}}]}, &(0x7f0000002a80)={0xa0, 0x0, 0xf8, {{0x2, 0x3, 0x4, 0x6, 0xe3bd, 0x1a1, {0x5, 0x1, 0x8, 0x8, 0x9, 0x9, 0xfff, 0x8, 0x6, 0x1000, 0xcab, r11, r12, 0x7, 0x8001}}, {0x0, 0xa}}}, &(0x7f0000002b40)={0x20, 0x0, 0x5438b5fd, {0x4, 0x0, 0x21, 0x4}}, &(0x7f0000002c40)={0x130, 0x0, 0x5, {0x3b5, 0x6, 0x0, '\x00', {0x10000, 0x8, 0x2fe3, 0x2b6, r14, r15, 0x6000, '\x00', 0x100000001, 0x3ff, 0x7cfc, 0x1, {0x10001, 0x6f54}, {0x4, 0x101}, {0x6, 0x5}, {0xffff, 0x53}, 0xffff, 0x8, 0x3, 0x1ff}}}}) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 245.56841ms ago: executing program 5 (id=3074): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002000)='net/ip_mr_vif\x00') r3 = memfd_create(&(0x7f0000002280)='fuse\x00', 0x2) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r6 = timerfd_create(0x54ed5c3347fe26f3, 0x800) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002340), 0x8000, 0x0) syz_clone3(&(0x7f0000002600)={0x60000, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)=0x0, {0x7}, &(0x7f0000002440)=""/172, 0xac, &(0x7f0000002500)=""/152, &(0x7f00000025c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002680)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002780)=0xe8) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000002980)={&(0x7f00000021c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002040)="504f6f8060d8ab561590e88720959d1755cda70e3e499c7cf600ca731e5dd4", 0x1f}], 0x1, &(0x7f0000002880)=[@rights={{0x2c, 0x1, 0x1, [r3, r1, r4, r0, r1, r5, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r6, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r7, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}], 0xd0, 0x4004}, 0x40010) lgetxattr(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)=@random={'btrfs.', '/selinux/user\x00'}, &(0x7f0000002a40)=""/247, 0xf7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x4, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r12, r13, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r12, &(0x7f0000000000)={0x7ff, 0x3, 0x0, 0x3}) 206.484783ms ago: executing program 2 (id=3076): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x6, 0x2, 0x32}, @ptr={0x70742a85, 0x100000, &(0x7f0000000000)=""/128, 0x80, 0x1, 0x3a}, @fda={0x66646185, 0x3, 0x1, 0x9}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0xc30, 0x0, &(0x7f00000020c0)="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"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (rerun: 64) 206.279853ms ago: executing program 5 (id=3077): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) chroot(&(0x7f00000000c0)='./cgroup\x00') 206.115153ms ago: executing program 2 (id=3078): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x6, 0x40}) timer_getoverrun(0x0) mmap(&(0x7f0000428000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) open_tree(r1, &(0x7f0000000280)='\x00', 0x89901) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34608c9c5f50cbfd41d5f420c7f1076ad013791aa561fca17046b2e7aaed3efb1554478eadd321b9274c9f7a8a382070920bf265376d8e820f76877f24dbf5f2e9a295c76e12aa26e1b202cb6af134caf651e461e109cb0bc8ed898efd89898da685fca0523c418410d2944650c10f80d813757d871f933bda846e85d24bde062f39eb56e7fcc5381b8a491f5c602044d9f089160f2a0351241d043fe5fd387797953be1005af3f94d4d6ec0d712c10b6a3a4d5d69a773b41c58c39776e92cd2f387dcef6e73a0831bc279b0954cbf04479bcb917e9bf6d26380d1d7738fd932") setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) get_robust_list(0xffffffffffffffff, 0x0, 0x0) gettid() r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) 155.206417ms ago: executing program 2 (id=3079): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8000000, 0x5fa, 0x84, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x8, 0xb, 0x72, '\x00', 0x6}, {0x0, 0x7f, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb7, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x4}, {0xa, 0x80, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x3, '\x00', 0x1}, {0x8, 0x7, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0xa, 0xd1, '\x00', 0x4}, {0x6c, 0x4, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0}, {0x3e, 0x4c, 0xd, '\x00', 0x3}, {0x7, 0xff, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x8, 0x5f}]}}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (rerun: 64) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) r6 = dup(r5) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xce) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async, rerun: 64) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x51, 0xbf, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x3e, 0x0, 0x0) (async) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mknodat$loop(r6, &(0x7f00000003c0)='./file0\x00', 0x1, 0x1) chdir(&(0x7f0000000380)='./file0\x00') (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="bbdf26bf7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r9) close_range(r8, r0, 0x0) 154.979698ms ago: executing program 5 (id=3080): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = dup3(r0, r0, 0x80000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000001000)='9p\x00') (async) pidfd_getfd(r1, r0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket(0x10, 0xa, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getsockname$packet(r4, 0x0, &(0x7f0000000640)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x82, 0xd, 0x5}}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 154.738348ms ago: executing program 2 (id=3081): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x40, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x8b, 0xfffffffd, 0xfffff300, 0xffffffff, 0x14, "ca72012283d2a128cc0076f7b6ea3aeca4a9f1"}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x1b) 153.945967ms ago: executing program 5 (id=3082): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000002840)=0xabb2) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8108551b, &(0x7f0000002a40)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x4e24, 0x20006de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2, 0x80000}}}, 0x108) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 152.903548ms ago: executing program 2 (id=3083): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) mkdir(&(0x7f00000003c0)='./file0\x00', 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept(r5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 84.376623ms ago: executing program 2 (id=3084): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r3, 0x8948, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x80086601, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 72.466034ms ago: executing program 5 (id=3085): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x50281, 0x0, 0x8}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=3086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424", 0x21) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xfcd4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xfcd4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x5, 0x12, r3, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000040)) timerfd_settime(r1, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) (async) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x10, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x301, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xfffffffffffffffe}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r9, 0x3000006, 0x13, r8, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r9, 0x3000006, 0x13, r8, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): gurations, error -61 [ 213.674038][ T428] usb usb5-port1: attempt power cycle [ 213.866193][ T64] usb 6-1: USB disconnect, device number 59 [ 214.018647][ T428] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 214.049012][ T428] usb 5-1: Using ep0 maxpacket: 32 [ 214.055843][ T428] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.064679][ T428] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 214.072416][ T428] usb 5-1: can't read configurations, error -61 [ 214.208667][ T428] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 214.239014][ T428] usb 5-1: Using ep0 maxpacket: 32 [ 214.245766][ T428] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.256609][ T428] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 214.264378][ T428] usb 5-1: can't read configurations, error -61 [ 214.270817][ T428] usb usb5-port1: unable to enumerate USB device [ 214.277690][ T9057] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 214.300894][ T9057] CPU: 1 UID: 0 PID: 9057 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 214.300933][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.300949][ T9057] Call Trace: [ 214.300957][ T9057] [ 214.300967][ T9057] __dump_stack+0x21/0x30 [ 214.301004][ T9057] dump_stack_lvl+0x10c/0x190 [ 214.301035][ T9057] ? __cfi_dump_stack_lvl+0x10/0x10 [ 214.301066][ T9057] ? ___ratelimit+0x3f7/0x5a0 [ 214.301101][ T9057] dump_stack+0x19/0x20 [ 214.301130][ T9057] dump_header+0xd7/0x490 [ 214.301153][ T9057] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 214.301184][ T9057] oom_kill_process+0x4c0/0x7e0 [ 214.301212][ T9057] ? sched_clock_cpu+0x75/0x400 [ 214.301251][ T9057] out_of_memory+0x7ee/0xbd0 [ 214.301279][ T9057] ? __cfi_out_of_memory+0x10/0x10 [ 214.301304][ T9057] ? mutex_lock_killable+0x92/0x1c0 [ 214.301329][ T9057] ? __cfi_mutex_lock_killable+0x10/0x10 [ 214.301355][ T9057] mem_cgroup_out_of_memory+0x279/0x350 [ 214.301379][ T9057] ? drain_obj_stock+0xed0/0xed0 [ 214.301402][ T9057] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 214.301425][ T9057] try_charge_memcg+0x8f7/0xde0 [ 214.301457][ T9057] ? __cfi_try_charge_memcg+0x10/0x10 [ 214.301488][ T9057] ? __alloc_pages_noprof+0x31f/0x7b0 [ 214.301519][ T9057] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 214.301548][ T9057] ? __folio_batch_add_and_move+0x2ab/0x370 [ 214.301577][ T9057] __mem_cgroup_charge+0xf6/0x410 [ 214.301611][ T9057] ? _raw_spin_lock+0x8c/0x120 [ 214.301641][ T9057] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 214.301677][ T9057] shmem_alloc_and_add_folio+0x86d/0x1050 [ 214.301708][ T9057] ? put_swap_device+0x130/0x130 [ 214.301735][ T9057] ? shmem_huge_global_enabled+0x2da/0x360 [ 214.301761][ T9057] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 214.301785][ T9057] ? __kasan_check_write+0x18/0x20 [ 214.301818][ T9057] ? _raw_spin_lock+0x8c/0x120 [ 214.301848][ T9057] shmem_get_folio_gfp+0x5f0/0x1380 [ 214.301875][ T9057] ? shmem_get_folio+0xc0/0xc0 [ 214.301897][ T9057] ? follow_page_pte+0xa5c/0xb90 [ 214.301926][ T9057] ? inode_to_bdi+0x6d/0x100 [ 214.301958][ T9057] shmem_write_begin+0xf4/0x270 [ 214.301984][ T9057] generic_perform_write+0x330/0x960 [ 214.302022][ T9057] ? __cfi_generic_perform_write+0x10/0x10 [ 214.302053][ T9057] ? down_write+0xe9/0x2a0 [ 214.302078][ T9057] ? file_update_time+0xa3/0x220 [ 214.302109][ T9057] shmem_file_write_iter+0x105/0x130 [ 214.302140][ T9057] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 214.302169][ T9057] __kernel_write_iter+0x392/0x830 [ 214.302192][ T9057] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 214.302222][ T9057] ? __cfi___kernel_write_iter+0x10/0x10 [ 214.302265][ T9057] ? get_dump_page+0x160/0x220 [ 214.302294][ T9057] ? __asan_memset+0x39/0x50 [ 214.302326][ T9057] ? iov_iter_bvec+0xc0/0x180 [ 214.302353][ T9057] dump_user_range+0xb06/0xdf0 [ 214.302384][ T9057] ? __cfi_dump_emit+0x10/0x10 [ 214.302419][ T9057] ? __cfi_dump_user_range+0x10/0x10 [ 214.302440][ T9057] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 214.302475][ T9057] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 214.302511][ T9057] elf_core_dump+0x2cd9/0x3810 [ 214.302542][ T9057] ? __cfi_elf_core_dump+0x10/0x10 [ 214.302573][ T9057] ? dump_interrupted+0xf0/0xf0 [ 214.302607][ T9057] ? 0xffffffffff600000 [ 214.302626][ T9057] do_coredump+0x1bfa/0x2bd0 [ 214.302664][ T9057] ? __cfi_do_coredump+0x10/0x10 [ 214.302697][ T9057] ? asm_exc_page_fault+0x2b/0x30 [ 214.302730][ T9057] ? __kasan_slab_free+0x6a/0x80 [ 214.302754][ T9057] ? kmem_cache_free+0x1c1/0x510 [ 214.302788][ T9057] ? get_signal+0xa75/0x14f0 [ 214.302816][ T9057] get_signal+0x11fd/0x14f0 [ 214.302848][ T9057] arch_do_signal_or_restart+0x96/0x720 [ 214.302884][ T9057] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 214.302922][ T9057] irqentry_exit_to_user_mode+0x4e/0xb0 [ 214.302949][ T9057] irqentry_exit+0x16/0x60 [ 214.302973][ T9057] exc_page_fault+0x66/0xc0 [ 214.302996][ T9057] asm_exc_page_fault+0x2b/0x30 [ 214.303018][ T9057] RIP: 0033:0x7f8be524f927 [ 214.303038][ T9057] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 214.303059][ T9057] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 214.303080][ T9057] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 214.303097][ T9057] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 214.303114][ T9057] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.303129][ T9057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.303143][ T9057] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 214.303161][ T9057] [ 214.303170][ T9057] memory: usage 307200kB, limit 307200kB, failcnt 39543 [ 214.764433][ T9057] memory+swap: usage 432120kB, limit 9007199254740988kB, failcnt 0 [ 214.772761][ T9057] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 214.779746][ T9057] Memory cgroup stats for /syz0: [ 214.779931][ T9057] cache 313786368 [ 214.788563][ T9057] rss 716800 [ 214.791811][ T9057] rss_huge 0 [ 214.795022][ T9057] shmem 313786368 [ 214.798727][ T9057] mapped_file 0 [ 214.802207][ T9057] dirty 0 [ 214.805171][ T9057] writeback 0 [ 214.808470][ T9057] workingset_refault_anon 81 [ 214.813096][ T9057] workingset_refault_file 1608 [ 214.817874][ T9057] swap 127918080 [ 214.821462][ T9057] swapcached 77824 [ 214.825284][ T9057] pgpgin 718305 [ 214.828796][ T9057] pgpgout 642016 [ 214.832353][ T9057] pgfault 302123 [ 214.835982][ T9057] pgmajfault 86 [ 214.839473][ T9057] inactive_anon 128434176 [ 214.843826][ T9057] active_anon 186138624 [ 214.847983][ T9057] inactive_file 0 [ 214.852328][ T9057] active_file 0 [ 214.855797][ T9057] unevictable 0 [ 214.859296][ T9057] hierarchical_memory_limit 314572800 [ 214.864678][ T9057] hierarchical_memsw_limit 9223372036854771712 [ 214.870986][ T9057] total_cache 313786368 [ 214.875158][ T9057] total_rss 716800 [ 214.879256][ T9057] total_rss_huge 0 [ 214.882988][ T9057] total_shmem 313786368 [ 214.887145][ T9057] total_mapped_file 0 [ 214.891220][ T9057] total_dirty 0 [ 214.894728][ T9057] total_writeback 0 [ 214.898531][ T9057] total_workingset_refault_anon 81 [ 214.903683][ T9057] total_workingset_refault_file 1608 [ 214.909055][ T9057] total_swap 127918080 [ 214.913141][ T9057] total_swapcached 77824 [ 214.917377][ T9057] total_pgpgin 718305 [ 214.921411][ T9057] total_pgpgout 642016 [ 214.925489][ T9057] total_pgfault 302123 [ 214.929862][ T9057] total_pgmajfault 86 [ 214.933861][ T9057] total_inactive_anon 128434176 [ 214.938755][ T9057] total_active_anon 186138624 [ 214.943454][ T9057] total_inactive_file 0 [ 214.947609][ T9057] total_active_file 0 [ 214.951622][ T9057] total_unevictable 0 [ 214.955621][ T9057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9052,uid=0 [ 214.970524][ T9057] Memory cgroup out of memory: Killed process 9052 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:49308kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 215.048640][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 215.133371][ T9102] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 215.168758][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 215.168801][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.168817][ T9102] Call Trace: [ 215.168826][ T9102] [ 215.168836][ T9102] __dump_stack+0x21/0x30 [ 215.168881][ T9102] dump_stack_lvl+0x10c/0x190 [ 215.168914][ T9102] ? __cfi_dump_stack_lvl+0x10/0x10 [ 215.168945][ T9102] ? ___ratelimit+0x3f7/0x5a0 [ 215.168982][ T9102] dump_stack+0x19/0x20 [ 215.169012][ T9102] dump_header+0xd7/0x490 [ 215.169035][ T9102] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 215.169067][ T9102] oom_kill_process+0x4c0/0x7e0 [ 215.169094][ T9102] ? sched_clock_cpu+0x75/0x400 [ 215.169125][ T9102] out_of_memory+0x7ee/0xbd0 [ 215.169151][ T9102] ? __cfi_out_of_memory+0x10/0x10 [ 215.169178][ T9102] ? mutex_lock_killable+0x92/0x1c0 [ 215.169202][ T9102] ? __cfi_mutex_lock_killable+0x10/0x10 [ 215.169227][ T9102] mem_cgroup_out_of_memory+0x279/0x350 [ 215.169250][ T9102] ? drain_obj_stock+0xed0/0xed0 [ 215.169274][ T9102] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 215.169296][ T9102] try_charge_memcg+0x8f7/0xde0 [ 215.169327][ T9102] ? __cfi_try_charge_memcg+0x10/0x10 [ 215.169357][ T9102] ? __alloc_pages_noprof+0x31f/0x7b0 [ 215.169388][ T9102] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 215.169418][ T9102] ? __folio_batch_add_and_move+0x2ab/0x370 [ 215.169449][ T9102] __mem_cgroup_charge+0xf6/0x410 [ 215.169484][ T9102] ? _raw_spin_lock+0x8c/0x120 [ 215.169514][ T9102] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 215.169551][ T9102] shmem_alloc_and_add_folio+0x86d/0x1050 [ 215.169582][ T9102] ? put_swap_device+0x130/0x130 [ 215.169608][ T9102] ? shmem_huge_global_enabled+0x2da/0x360 [ 215.169634][ T9102] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 215.169660][ T9102] ? __kasan_check_write+0x18/0x20 [ 215.169694][ T9102] ? _raw_spin_lock+0x8c/0x120 [ 215.169725][ T9102] shmem_get_folio_gfp+0x5f0/0x1380 [ 215.169752][ T9102] ? shmem_get_folio+0xc0/0xc0 [ 215.169775][ T9102] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 215.169809][ T9102] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 215.169842][ T9102] ? inode_to_bdi+0x6d/0x100 [ 215.169886][ T9102] shmem_write_begin+0xf4/0x270 [ 215.169914][ T9102] generic_perform_write+0x330/0x960 [ 215.169948][ T9102] ? __cfi_generic_perform_write+0x10/0x10 [ 215.169979][ T9102] ? down_write+0xe9/0x2a0 [ 215.170003][ T9102] ? mnt_get_write_access_file+0x1af/0x3b0 [ 215.170033][ T9102] ? mnt_put_write_access_file+0xc2/0x100 [ 215.170064][ T9102] ? file_update_time+0x1ef/0x220 [ 215.170095][ T9102] shmem_file_write_iter+0x105/0x130 [ 215.170126][ T9102] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 215.170156][ T9102] __kernel_write_iter+0x392/0x830 [ 215.170177][ T9102] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 215.170208][ T9102] ? __cfi___kernel_write_iter+0x10/0x10 [ 215.170244][ T9102] ? get_dump_page+0x160/0x220 [ 215.170273][ T9102] ? __asan_memset+0x39/0x50 [ 215.170306][ T9102] ? iov_iter_bvec+0xc0/0x180 [ 215.170334][ T9102] dump_user_range+0xb06/0xdf0 [ 215.170358][ T9102] ? __cfi_dump_emit+0x10/0x10 [ 215.170393][ T9102] ? __cfi_dump_user_range+0x10/0x10 [ 215.170416][ T9102] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 215.170452][ T9102] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 215.170488][ T9102] elf_core_dump+0x2cd9/0x3810 [ 215.170521][ T9102] ? __cfi_elf_core_dump+0x10/0x10 [ 215.170557][ T9102] ? dump_interrupted+0xf0/0xf0 [ 215.170592][ T9102] ? 0xffffffffff600000 [ 215.170613][ T9102] do_coredump+0x1bfa/0x2bd0 [ 215.170652][ T9102] ? __cfi_do_coredump+0x10/0x10 [ 215.170685][ T9102] ? asm_exc_page_fault+0x2b/0x30 [ 215.170718][ T9102] ? __kasan_slab_free+0x6a/0x80 [ 215.170743][ T9102] ? kmem_cache_free+0x1c1/0x510 [ 215.170777][ T9102] ? get_signal+0xa75/0x14f0 [ 215.170806][ T9102] get_signal+0x11fd/0x14f0 [ 215.170837][ T9102] arch_do_signal_or_restart+0x96/0x720 [ 215.170881][ T9102] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 215.170921][ T9102] irqentry_exit_to_user_mode+0x4e/0xb0 [ 215.170949][ T9102] irqentry_exit+0x16/0x60 [ 215.170974][ T9102] exc_page_fault+0x66/0xc0 [ 215.170999][ T9102] asm_exc_page_fault+0x2b/0x30 [ 215.171022][ T9102] RIP: 0033:0x7f8be524f927 [ 215.171043][ T9102] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 215.171064][ T9102] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 215.171086][ T9102] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 215.171103][ T9102] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 215.171120][ T9102] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 215.171137][ T9102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.171153][ T9102] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 215.171174][ T9102] [ 215.171185][ T9102] memory: usage 306376kB, limit 307200kB, failcnt 41719 [ 215.219774][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.323026][ T9102] memory+swap: usage 426220kB, limit 9007199254740988kB, failcnt 0 [ 215.358647][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.360466][ T9102] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 215.399379][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.411981][ T9102] Memory cgroup stats for [ 215.413398][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.418371][ T9102] /syz0: [ 215.418524][ T9102] cache 306937856 [ 215.432514][ T10] usb 6-1: SerialNumber: syz [ 215.532272][ T9102] rss 610304 [ 215.750957][ T9182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.753037][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.768122][ T9102] rss_huge 0 [ 215.771501][ T9102] shmem 306937856 [ 215.775157][ T9102] mapped_file 0 [ 215.776567][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.778762][ T9102] dirty 0 [ 215.789548][ T9102] writeback 61440 [ 215.793215][ T9102] workingset_refault_anon 81 [ 215.797823][ T9102] workingset_refault_file 1608 [ 215.802649][ T9102] swap 127860736 [ 215.806344][ T9102] swapcached 131072 [ 215.810338][ T9102] pgpgin 721445 [ 215.814032][ T9102] pgpgout 646841 [ 215.817609][ T9102] pgfault 302320 [ 215.818242][ T10] usb 6-1: 0:2 : does not exist [ 215.822856][ T9102] pgmajfault 86 [ 215.852045][ T10] usb 6-1: USB disconnect, device number 60 [ 215.872940][ T4961] udevd[4961]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.893873][ T9102] inactive_anon 73228288 [ 215.918746][ T9102] active_anon 232153088 [ 215.931194][ T9102] inactive_file 0 [ 215.940558][ T9102] active_file 0 [ 215.944083][ T9102] unevictable 0 [ 215.947580][ T9102] hierarchical_memory_limit 314572800 [ 215.972440][ T9102] hierarchical_memsw_limit 9223372036854771712 [ 215.984919][ T9102] total_cache 306937856 [ 215.989462][ T9102] total_rss 610304 [ 215.993301][ T9102] total_rss_huge 0 [ 215.997093][ T9102] total_shmem 306937856 [ 216.011940][ T9102] total_mapped_file 0 [ 216.018789][ T9102] total_dirty 0 [ 216.046105][ T9102] total_writeback 61440 [ 216.051377][ T9102] total_workingset_refault_anon 81 [ 216.056702][ T9102] total_workingset_refault_file 1608 [ 216.078642][ T9102] total_swap 127860736 [ 216.088665][ T9102] total_swapcached 131072 [ 216.100720][ T9102] total_pgpgin 721445 [ 216.109561][ T9102] total_pgpgout 646841 [ 216.113678][ T9102] total_pgfault 302320 [ 216.130717][ T9102] total_pgmajfault 86 [ 216.134874][ T9102] total_inactive_anon 73228288 [ 216.144435][ T9102] total_active_anon 232153088 [ 216.149222][ T9102] total_inactive_file 0 [ 216.153790][ T9102] total_active_file 0 [ 216.157848][ T9102] total_unevictable 0 [ 216.162120][ T9102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9047,uid=0 [ 216.177155][ T9102] Memory cgroup out of memory: Killed process 9047 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:48512kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 216.378645][ T64] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 216.548660][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 216.557367][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.571567][ T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 216.591179][ T64] usb 5-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.58 [ 216.600500][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.616970][ T64] usb 5-1: Product: syz [ 216.627337][ T64] usb 5-1: Manufacturer: syz [ 216.637895][ T64] usb 5-1: SerialNumber: syz [ 216.652977][ T64] usb 5-1: config 0 descriptor?? [ 216.671639][ T9112] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 216.690284][ T9204] tipc: Trying to set illegal importance in message [ 216.812913][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 216.812953][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.812969][ T9112] Call Trace: [ 216.812977][ T9112] [ 216.812987][ T9112] __dump_stack+0x21/0x30 [ 216.813027][ T9112] dump_stack_lvl+0x10c/0x190 [ 216.813058][ T9112] ? __cfi_dump_stack_lvl+0x10/0x10 [ 216.813088][ T9112] ? ___ratelimit+0x3f7/0x5a0 [ 216.813122][ T9112] dump_stack+0x19/0x20 [ 216.813151][ T9112] dump_header+0xd7/0x490 [ 216.813174][ T9112] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 216.813204][ T9112] oom_kill_process+0x4c0/0x7e0 [ 216.813231][ T9112] ? sched_clock_cpu+0x75/0x400 [ 216.813263][ T9112] out_of_memory+0x7ee/0xbd0 [ 216.813289][ T9112] ? __cfi_out_of_memory+0x10/0x10 [ 216.813315][ T9112] ? mutex_lock_killable+0x92/0x1c0 [ 216.813340][ T9112] ? __cfi_mutex_lock_killable+0x10/0x10 [ 216.813364][ T9112] mem_cgroup_out_of_memory+0x279/0x350 [ 216.813386][ T9112] ? drain_obj_stock+0xed0/0xed0 [ 216.813407][ T9112] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 216.813428][ T9112] try_charge_memcg+0x8f7/0xde0 [ 216.813458][ T9112] ? __cfi_try_charge_memcg+0x10/0x10 [ 216.813487][ T9112] ? __alloc_pages_noprof+0x31f/0x7b0 [ 216.813518][ T9112] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 216.813547][ T9112] ? __folio_batch_add_and_move+0x2ab/0x370 [ 216.813577][ T9112] __mem_cgroup_charge+0xf6/0x410 [ 216.813612][ T9112] ? _raw_spin_lock+0x8c/0x120 [ 216.813643][ T9112] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 216.813678][ T9112] shmem_alloc_and_add_folio+0x86d/0x1050 [ 216.813708][ T9112] ? put_swap_device+0x130/0x130 [ 216.813735][ T9112] ? shmem_huge_global_enabled+0x2da/0x360 [ 216.813760][ T9112] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 216.813785][ T9112] ? __kasan_check_write+0x18/0x20 [ 216.813828][ T9112] ? _raw_spin_lock+0x8c/0x120 [ 216.813858][ T9112] shmem_get_folio_gfp+0x5f0/0x1380 [ 216.813886][ T9112] ? shmem_get_folio+0xc0/0xc0 [ 216.813908][ T9112] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 216.813942][ T9112] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 216.813975][ T9112] ? inode_to_bdi+0x6d/0x100 [ 216.814006][ T9112] shmem_write_begin+0xf4/0x270 [ 216.814033][ T9112] generic_perform_write+0x330/0x960 [ 216.814069][ T9112] ? __cfi_generic_perform_write+0x10/0x10 [ 216.814102][ T9112] ? down_write+0xe9/0x2a0 [ 216.814126][ T9112] ? mnt_get_write_access_file+0x1af/0x3b0 [ 216.814157][ T9112] ? mnt_put_write_access_file+0xc2/0x100 [ 216.814187][ T9112] ? file_update_time+0x1ef/0x220 [ 216.814219][ T9112] shmem_file_write_iter+0x105/0x130 [ 216.814248][ T9112] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 216.814279][ T9112] __kernel_write_iter+0x392/0x830 [ 216.814302][ T9112] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 216.814333][ T9112] ? __cfi___kernel_write_iter+0x10/0x10 [ 216.814368][ T9112] ? get_dump_page+0x160/0x220 [ 216.814396][ T9112] ? __asan_memset+0x39/0x50 [ 216.814429][ T9112] ? iov_iter_bvec+0xc0/0x180 [ 216.814457][ T9112] dump_user_range+0xb06/0xdf0 [ 216.814480][ T9112] ? __cfi_dump_emit+0x10/0x10 [ 216.814515][ T9112] ? __cfi_dump_user_range+0x10/0x10 [ 216.814537][ T9112] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 216.814572][ T9112] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 216.814608][ T9112] elf_core_dump+0x2cd9/0x3810 [ 216.814639][ T9112] ? __cfi_elf_core_dump+0x10/0x10 [ 216.814673][ T9112] ? dump_interrupted+0xf0/0xf0 [ 216.814709][ T9112] ? 0xffffffffff600000 [ 216.814729][ T9112] do_coredump+0x1bfa/0x2bd0 [ 216.814767][ T9112] ? __cfi_do_coredump+0x10/0x10 [ 216.814809][ T9112] ? asm_exc_page_fault+0x2b/0x30 [ 216.814842][ T9112] ? __kasan_slab_free+0x6a/0x80 [ 216.814867][ T9112] ? kmem_cache_free+0x1c1/0x510 [ 216.814902][ T9112] ? get_signal+0xa75/0x14f0 [ 216.814932][ T9112] get_signal+0x11fd/0x14f0 [ 216.814965][ T9112] arch_do_signal_or_restart+0x96/0x720 [ 216.815002][ T9112] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 216.815040][ T9112] irqentry_exit_to_user_mode+0x4e/0xb0 [ 216.815068][ T9112] irqentry_exit+0x16/0x60 [ 216.815092][ T9112] exc_page_fault+0x66/0xc0 [ 216.815116][ T9112] asm_exc_page_fault+0x2b/0x30 [ 216.815139][ T9112] RIP: 0033:0x7f8be524f927 [ 216.815159][ T9112] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 216.815181][ T9112] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 216.815203][ T9112] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 216.815221][ T9112] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 216.815238][ T9112] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.815254][ T9112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 216.815270][ T9112] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 216.815293][ T9112] [ 216.928957][ T9112] memory: usage 306300kB, limit 307200kB, failcnt 44490 [ 216.940692][ T64] ums-cypress 5-1:0.0: USB Mass Storage device detected [ 217.011477][ T9112] memory+swap: usage 419556kB, limit 9007199254740988kB, failcnt 0 [ 217.011501][ T9112] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.011515][ T9112] Memory cgroup stats for /syz0: [ 217.011667][ T9112] cache 305922048 [ 217.332635][ T9216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2893'. [ 217.362932][ T9216] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 217.368705][ T9112] rss 655360 [ 217.373015][ T9112] rss_huge 0 [ 217.376242][ T9112] shmem 305725440 [ 217.379938][ T9112] mapped_file 196608 [ 217.502718][ T64] usb 5-1: USB disconnect, device number 22 [ 217.558681][ T9112] dirty 0 [ 217.563409][ T9112] writeback 0 [ 217.566733][ T9112] workingset_refault_anon 81 [ 217.662462][ T9112] workingset_refault_file 1688 [ 217.667289][ T9112] swap 122793984 [ 217.798273][ T9112] swapcached 0 [ 217.838684][ T9112] pgpgin 727001 [ 217.842760][ T9112] pgpgout 652602 [ 217.848942][ T9112] pgfault 302702 [ 217.852534][ T9112] pgmajfault 87 [ 217.856013][ T9112] inactive_anon 15503360 [ 217.860633][ T9112] active_anon 287010816 [ 217.864920][ T9112] inactive_file 0 [ 217.868581][ T9112] active_file 196608 [ 217.872851][ T9112] unevictable 0 [ 217.876339][ T9112] hierarchical_memory_limit 314572800 [ 217.881984][ T9112] hierarchical_memsw_limit 9223372036854771712 [ 217.895387][ T9112] total_cache 305922048 [ 217.901399][ T9112] total_rss 655360 [ 217.905201][ T9112] total_rss_huge 0 [ 217.914103][ T9112] total_shmem 305725440 [ 217.918309][ T9112] total_mapped_file 196608 [ 217.923248][ T9112] total_dirty 0 [ 217.926855][ T9112] total_writeback 0 [ 217.931155][ T9112] total_workingset_refault_anon 81 [ 217.936357][ T9112] total_workingset_refault_file 1688 [ 217.942112][ T9112] total_swap 122793984 [ 217.946300][ T9112] total_swapcached 0 [ 217.950538][ T9112] total_pgpgin 727001 [ 217.954716][ T9112] total_pgpgout 652602 [ 217.959236][ T9112] total_pgfault 302702 [ 217.963374][ T9112] total_pgmajfault 87 [ 217.967904][ T9112] total_inactive_anon 15503360 [ 217.974596][ T9112] total_active_anon 287010816 [ 217.978671][ T428] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 217.979674][ T9112] total_inactive_file 0 [ 217.992169][ T9112] total_active_file 196608 [ 217.996621][ T9112] total_unevictable 0 [ 218.001301][ T36] audit: type=1400 audit(1756448949.838:1047): avc: denied { getopt } for pid=9227 comm="syz.4.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.001501][ T9112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9068,uid=0 [ 218.060736][ T9112] Memory cgroup out of memory: Killed process 9068 (syz.0.2849) total-vm:90104kB, anon-rss:1052kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 218.108747][ T9046] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 218.119200][ T9233] FAT-fs (rnullb0): bogus number of reserved sectors [ 218.138649][ T428] usb 6-1: Using ep0 maxpacket: 16 [ 218.138683][ T9233] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 218.156904][ T428] usb 6-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 218.166090][ T9046] CPU: 0 UID: 0 PID: 9046 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 218.166131][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.166147][ T9046] Call Trace: [ 218.166155][ T9046] [ 218.166164][ T9046] __dump_stack+0x21/0x30 [ 218.166202][ T9046] dump_stack_lvl+0x10c/0x190 [ 218.166234][ T9046] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.166267][ T9046] ? ___ratelimit+0x3f7/0x5a0 [ 218.166303][ T9046] dump_stack+0x19/0x20 [ 218.166332][ T9046] dump_header+0xd7/0x490 [ 218.166355][ T9046] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 218.166386][ T9046] oom_kill_process+0x4c0/0x7e0 [ 218.166414][ T9046] ? sched_clock_cpu+0x75/0x400 [ 218.166449][ T9046] out_of_memory+0x7ee/0xbd0 [ 218.166477][ T9046] ? __cfi_out_of_memory+0x10/0x10 [ 218.166504][ T9046] ? mutex_lock_killable+0x104/0x1c0 [ 218.166529][ T9046] ? __cfi_mutex_lock_killable+0x10/0x10 [ 218.166556][ T9046] mem_cgroup_out_of_memory+0x279/0x350 [ 218.166582][ T9046] ? drain_obj_stock+0xed0/0xed0 [ 218.166607][ T9046] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 218.166631][ T9046] try_charge_memcg+0x8f7/0xde0 [ 218.166665][ T9046] ? __cfi_try_charge_memcg+0x10/0x10 [ 218.166696][ T9046] ? __alloc_pages_noprof+0x31f/0x7b0 [ 218.166726][ T9046] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 218.166757][ T9046] ? __folio_batch_add_and_move+0x2ab/0x370 [ 218.166788][ T9046] __mem_cgroup_charge+0xf6/0x410 [ 218.166823][ T9046] ? _raw_spin_lock+0x8c/0x120 [ 218.166854][ T9046] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 218.166892][ T9046] shmem_alloc_and_add_folio+0x86d/0x1050 [ 218.166923][ T9046] ? put_swap_device+0x130/0x130 [ 218.166960][ T9046] ? shmem_huge_global_enabled+0x2da/0x360 [ 218.166987][ T9046] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 218.167012][ T9046] ? __kasan_check_write+0x18/0x20 [ 218.167045][ T9046] ? _raw_spin_lock+0x8c/0x120 [ 218.167075][ T9046] shmem_get_folio_gfp+0x5f0/0x1380 [ 218.167104][ T9046] ? shmem_get_folio+0xc0/0xc0 [ 218.167128][ T9046] ? follow_page_pte+0xa5c/0xb90 [ 218.167159][ T9046] ? inode_to_bdi+0x6d/0x100 [ 218.167193][ T9046] shmem_write_begin+0xf4/0x270 [ 218.167221][ T9046] generic_perform_write+0x330/0x960 [ 218.167258][ T9046] ? __cfi_generic_perform_write+0x10/0x10 [ 218.167291][ T9046] ? down_write+0xe9/0x2a0 [ 218.167317][ T9046] ? file_update_time+0xa3/0x220 [ 218.167349][ T9046] shmem_file_write_iter+0x105/0x130 [ 218.167372][ T428] usb 6-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 218.167378][ T9046] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 218.167416][ T9046] __kernel_write_iter+0x392/0x830 [ 218.167436][ T9046] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 218.167466][ T9046] ? __cfi___kernel_write_iter+0x10/0x10 [ 218.167504][ T9046] ? get_dump_page+0x160/0x220 [ 218.167535][ T9046] ? __asan_memset+0x39/0x50 [ 218.167569][ T9046] ? iov_iter_bvec+0xc0/0x180 [ 218.167599][ T9046] dump_user_range+0xb06/0xdf0 [ 218.167624][ T9046] ? __cfi_dump_emit+0x10/0x10 [ 218.167661][ T9046] ? __cfi_dump_user_range+0x10/0x10 [ 218.167684][ T9046] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 218.167718][ T9046] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 218.167755][ T9046] elf_core_dump+0x2cd9/0x3810 [ 218.167788][ T9046] ? __cfi_elf_core_dump+0x10/0x10 [ 218.167825][ T9046] ? dump_interrupted+0xf0/0xf0 [ 218.167861][ T9046] ? 0xffffffffff600000 [ 218.167882][ T9046] do_coredump+0x1bfa/0x2bd0 [ 218.167922][ T9046] ? __cfi_do_coredump+0x10/0x10 [ 218.167964][ T9046] ? asm_exc_page_fault+0x2b/0x30 [ 218.167999][ T9046] ? __kasan_slab_free+0x6a/0x80 [ 218.168023][ T9046] ? kmem_cache_free+0x1c1/0x510 [ 218.168060][ T9046] ? get_signal+0xa75/0x14f0 [ 218.168091][ T9046] get_signal+0x11fd/0x14f0 [ 218.168125][ T9046] arch_do_signal_or_restart+0x96/0x720 [ 218.168164][ T9046] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 218.168203][ T9046] irqentry_exit_to_user_mode+0x4e/0xb0 [ 218.168232][ T9046] irqentry_exit+0x16/0x60 [ 218.168258][ T9046] exc_page_fault+0x66/0xc0 [ 218.168282][ T9046] asm_exc_page_fault+0x2b/0x30 [ 218.168304][ T9046] RIP: 0033:0x7f8be524f927 [ 218.168325][ T9046] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 218.168349][ T9046] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 218.168372][ T9046] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 218.168391][ T9046] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 218.168409][ T9046] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.168427][ T9046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 218.168442][ T9046] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 218.168465][ T9046] [ 218.168476][ T9046] memory: usage 304168kB, limit 307200kB, failcnt 45059 [ 218.188639][ T428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.238654][ T9046] memory+swap: usage 416936kB, limit 9007199254740988kB, failcnt 0 [ 218.308679][ T428] usb 6-1: Product: syz [ 218.508620][ T9046] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 218.578682][ T428] usb 6-1: Manufacturer: syz [ 218.608624][ T9046] Memory cgroup stats for [ 218.634000][ T428] usb 6-1: SerialNumber: syz [ 218.686054][ T9046] /syz0: [ 218.686205][ T9046] cache 291422208 [ 218.694374][ T9046] rss 565248 [ 218.699716][ T9046] rss_huge 0 [ 218.703002][ T9046] shmem 291414016 [ 218.706685][ T9046] mapped_file 0 [ 218.710453][ T9046] dirty 0 [ 218.713459][ T9046] writeback 0 [ 218.716759][ T9046] workingset_refault_anon 81 [ 218.722165][ T9046] workingset_refault_file 2336 [ 218.738313][ T9046] swap 127913984 [ 218.742433][ T9046] swapcached 0 [ 218.745842][ T9046] pgpgin 736034 [ 218.749780][ T9046] pgpgout 665259 [ 218.753409][ T9046] pgfault 303232 [ 218.757134][ T9046] pgmajfault 89 [ 218.761017][ T9046] inactive_anon 280686592 [ 218.761302][ T9237] incfs: Can't find or create .index dir in ./file0 [ 218.772555][ T36] audit: type=1400 audit(1756448950.598:1048): avc: denied { mounton } for pid=9236 comm="syz.4.2901" path="/17/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.795260][ T9237] incfs: mount failed -1 [ 218.799614][ T9046] active_anon 11292672 [ 218.803715][ T9046] inactive_file 8192 [ 218.808136][ T9046] active_file 0 [ 218.812181][ T36] audit: type=1400 audit(1756448950.648:1049): avc: denied { setattr } for pid=9236 comm="syz.4.2901" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 218.834319][ T9046] unevictable 0 [ 218.839335][ T9046] hierarchical_memory_limit 314572800 [ 218.844924][ T9046] hierarchical_memsw_limit 9223372036854771712 [ 218.852357][ T9046] total_cache 291422208 [ 218.870970][ T9046] total_rss 565248 [ 218.874790][ T9046] total_rss_huge 0 [ 218.879579][ T9046] total_shmem 291414016 [ 218.883886][ T9046] total_mapped_file 0 [ 218.888009][ T9046] total_dirty 0 [ 218.891881][ T9046] total_writeback 0 [ 218.895760][ T9046] total_workingset_refault_anon 81 [ 218.916181][ T428] usb 6-1: USB disconnect, device number 61 [ 218.931884][ T9046] total_workingset_refault_file 2336 [ 218.937281][ T9046] total_swap 127913984 [ 218.941996][ T9046] total_swapcached 0 [ 218.942178][ T9240] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 218.945939][ T9046] total_pgpgin 736034 [ 218.958808][ T9046] total_pgpgout 665259 [ 218.962981][ T9046] total_pgfault 303232 [ 218.967142][ T9046] total_pgmajfault 89 [ 218.971535][ T9046] total_inactive_anon 280686592 [ 218.976473][ T9046] total_active_anon 11292672 [ 218.981372][ T9046] total_inactive_file 8192 [ 218.985911][ T9046] total_active_file 0 [ 219.001068][ T9046] total_unevictable 0 [ 219.013179][ T9046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9050,uid=0 [ 219.039015][ T9046] Memory cgroup out of memory: Killed process 9050 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:53660kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 219.082634][ T9217] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.109916][ T9217] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 219.257721][ T9247] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2905'. [ 219.276706][ T9248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2905'. [ 219.391992][ T9051] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 219.420309][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 219.420349][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.420366][ T9051] Call Trace: [ 219.420374][ T9051] [ 219.420384][ T9051] __dump_stack+0x21/0x30 [ 219.420423][ T9051] dump_stack_lvl+0x10c/0x190 [ 219.420455][ T9051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.420486][ T9051] ? ___ratelimit+0x3f7/0x5a0 [ 219.420523][ T9051] dump_stack+0x19/0x20 [ 219.420553][ T9051] dump_header+0xd7/0x490 [ 219.420578][ T9051] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 219.420610][ T9051] oom_kill_process+0x4c0/0x7e0 [ 219.420638][ T9051] ? sched_clock_cpu+0x75/0x400 [ 219.420671][ T9051] out_of_memory+0x7ee/0xbd0 [ 219.420699][ T9051] ? __cfi_out_of_memory+0x10/0x10 [ 219.420726][ T9051] ? mutex_lock_killable+0x92/0x1c0 [ 219.420752][ T9051] ? __cfi_mutex_lock_killable+0x10/0x10 [ 219.420794][ T9051] mem_cgroup_out_of_memory+0x279/0x350 [ 219.420819][ T9051] ? drain_obj_stock+0xed0/0xed0 [ 219.420843][ T9051] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 219.420867][ T9051] try_charge_memcg+0x8f7/0xde0 [ 219.420901][ T9051] ? __cfi_try_charge_memcg+0x10/0x10 [ 219.420933][ T9051] ? __alloc_pages_noprof+0x31f/0x7b0 [ 219.420965][ T9051] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 219.420995][ T9051] ? __folio_batch_add_and_move+0x2ab/0x370 [ 219.421025][ T9051] __mem_cgroup_charge+0xf6/0x410 [ 219.421061][ T9051] ? _raw_spin_lock+0x8c/0x120 [ 219.421091][ T9051] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 219.421129][ T9051] shmem_alloc_and_add_folio+0x86d/0x1050 [ 219.421160][ T9051] ? put_swap_device+0x130/0x130 [ 219.421186][ T9051] ? shmem_huge_global_enabled+0x2da/0x360 [ 219.421213][ T9051] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 219.421239][ T9051] ? __kasan_check_write+0x18/0x20 [ 219.421273][ T9051] ? _raw_spin_lock+0x8c/0x120 [ 219.421303][ T9051] shmem_get_folio_gfp+0x5f0/0x1380 [ 219.421332][ T9051] ? shmem_get_folio+0xc0/0xc0 [ 219.421355][ T9051] ? follow_page_pte+0xa5c/0xb90 [ 219.421386][ T9051] ? inode_to_bdi+0x6d/0x100 [ 219.421418][ T9051] shmem_write_begin+0xf4/0x270 [ 219.421446][ T9051] generic_perform_write+0x330/0x960 [ 219.421482][ T9051] ? __cfi_generic_perform_write+0x10/0x10 [ 219.421516][ T9051] ? down_write+0xe9/0x2a0 [ 219.421542][ T9051] ? file_update_time+0xa3/0x220 [ 219.421573][ T9051] shmem_file_write_iter+0x105/0x130 [ 219.421605][ T9051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.421636][ T9051] __kernel_write_iter+0x392/0x830 [ 219.421658][ T9051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.421690][ T9051] ? __cfi___kernel_write_iter+0x10/0x10 [ 219.421726][ T9051] ? get_dump_page+0x160/0x220 [ 219.421761][ T9051] ? __asan_memset+0x39/0x50 [ 219.421796][ T9051] ? iov_iter_bvec+0xc0/0x180 [ 219.421828][ T9051] dump_user_range+0xb06/0xdf0 [ 219.421851][ T9051] ? __cfi_dump_emit+0x10/0x10 [ 219.421887][ T9051] ? __cfi_dump_user_range+0x10/0x10 [ 219.421910][ T9051] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 219.421946][ T9051] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 219.421982][ T9051] elf_core_dump+0x2cd9/0x3810 [ 219.422014][ T9051] ? __cfi_elf_core_dump+0x10/0x10 [ 219.422049][ T9051] ? dump_interrupted+0xf0/0xf0 [ 219.422085][ T9051] ? 0xffffffffff600000 [ 219.422105][ T9051] do_coredump+0x1bfa/0x2bd0 [ 219.422150][ T9051] ? __cfi_do_coredump+0x10/0x10 [ 219.422184][ T9051] ? asm_exc_page_fault+0x2b/0x30 [ 219.422242][ T9051] ? __kasan_slab_free+0x6a/0x80 [ 219.422268][ T9051] ? kmem_cache_free+0x1c1/0x510 [ 219.422303][ T9051] ? get_signal+0xa75/0x14f0 [ 219.422341][ T9051] get_signal+0x11fd/0x14f0 [ 219.422375][ T9051] arch_do_signal_or_restart+0x96/0x720 [ 219.422413][ T9051] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 219.422467][ T9051] irqentry_exit_to_user_mode+0x4e/0xb0 [ 219.422502][ T9051] irqentry_exit+0x16/0x60 [ 219.422529][ T9051] exc_page_fault+0x66/0xc0 [ 219.422553][ T9051] asm_exc_page_fault+0x2b/0x30 [ 219.422583][ T9051] RIP: 0033:0x7f8be524f927 [ 219.422603][ T9051] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 219.422624][ T9051] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 219.422643][ T9051] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 219.422657][ T9051] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 219.422672][ T9051] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.422686][ T9051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.422699][ T9051] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 219.422717][ T9051] [ 219.531541][ T9051] memory: usage 307080kB, limit 307200kB, failcnt 47259 [ 219.720870][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'. [ 219.728090][ T9051] memory+swap: usage 416056kB, limit 9007199254740988kB, failcnt 0 [ 219.740013][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2907'. [ 219.742054][ T9051] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 219.791610][ T9250] rust_binder: Error while translating object. [ 219.796953][ T9051] Memory cgroup stats for [ 219.808738][ T9250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 219.810975][ T9051] /syz0 [ 219.818657][ T9250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 219.842283][ T9051] : [ 219.960582][ T9051] cache 313749504 [ 219.966751][ T9051] rss 569344 [ 219.970060][ T9051] rss_huge 0 [ 219.973272][ T9051] shmem 312336384 [ 219.976927][ T9051] mapped_file 1339392 [ 219.981520][ T9051] dirty 0 [ 219.984488][ T9051] writeback 0 [ 219.991210][ T36] audit: type=1400 audit(1756448951.818:1050): avc: denied { associate } for pid=9251 comm="syz.5.2906" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 220.022983][ T9051] workingset_refault_anon 89 [ 220.027718][ T9051] workingset_refault_file 3565 [ 220.049208][ T36] audit: type=1400 audit(1756448951.858:1051): avc: denied { remount } for pid=9256 comm="syz.5.2909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 220.071199][ T9051] swap 118239232 [ 220.074783][ T9051] swapcached 53248 [ 220.078514][ T9051] pgpgin 748881 [ 220.082091][ T9051] pgpgout 672646 [ 220.108644][ T9051] pgfault 303673 [ 220.112270][ T9051] pgmajfault 100 [ 220.115898][ T9051] inactive_anon 242896896 [ 220.158627][ T9051] active_anon 70000640 [ 220.162765][ T9051] inactive_file 0 [ 220.166449][ T9051] active_file 1413120 [ 220.193781][ T9051] unevictable 0 [ 220.197345][ T9051] hierarchical_memory_limit 314572800 [ 220.202787][ T9051] hierarchical_memsw_limit 9223372036854771712 [ 220.209815][ T9051] total_cache 313749504 [ 220.214007][ T9051] total_rss 569344 [ 220.217748][ T9051] total_rss_huge 0 [ 220.223108][ T9051] total_shmem 312336384 [ 220.227760][ T9051] total_mapped_file 1339392 [ 220.232354][ T9051] total_dirty 0 [ 220.235891][ T9051] total_writeback 0 [ 220.239757][ T9051] total_workingset_refault_anon 89 [ 220.244892][ T9051] total_workingset_refault_file 3565 [ 220.250463][ T9051] total_swap 118239232 [ 220.254610][ T9051] total_swapcached 53248 [ 220.258926][ T9051] total_pgpgin 748881 [ 220.264113][ T9051] total_pgpgout 672646 [ 220.268206][ T9051] total_pgfault 303673 [ 220.272353][ T9051] total_pgmajfault 100 [ 220.276443][ T9051] total_inactive_anon 242896896 [ 220.281363][ T9051] total_active_anon 70000640 [ 220.285961][ T9051] total_inactive_file 0 [ 220.290442][ T9051] total_active_file 1413120 [ 220.294978][ T9051] total_unevictable 0 [ 220.299019][ T9051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9044,uid=0 [ 220.313942][ T9051] Memory cgroup out of memory: Killed process 9044 (syz.0.2849) total-vm:89972kB, anon-rss:948kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 220.418646][ T45] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 220.458684][ T1110] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 220.499088][ T9043] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 220.548693][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 220.548732][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.548747][ T9043] Call Trace: [ 220.548755][ T9043] [ 220.548764][ T9043] __dump_stack+0x21/0x30 [ 220.548802][ T9043] dump_stack_lvl+0x10c/0x190 [ 220.548830][ T9043] ? __cfi_dump_stack_lvl+0x10/0x10 [ 220.548860][ T9043] ? ___ratelimit+0x3f7/0x5a0 [ 220.548897][ T9043] dump_stack+0x19/0x20 [ 220.548926][ T9043] dump_header+0xd7/0x490 [ 220.548950][ T9043] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 220.548982][ T9043] oom_kill_process+0x4c0/0x7e0 [ 220.549009][ T9043] ? sched_clock_cpu+0x75/0x400 [ 220.549042][ T9043] out_of_memory+0x7ee/0xbd0 [ 220.549069][ T9043] ? __cfi_out_of_memory+0x10/0x10 [ 220.549096][ T9043] ? mutex_lock_killable+0x104/0x1c0 [ 220.549121][ T9043] ? __cfi_mutex_lock_killable+0x10/0x10 [ 220.549147][ T9043] mem_cgroup_out_of_memory+0x279/0x350 [ 220.549171][ T9043] ? drain_obj_stock+0xed0/0xed0 [ 220.549196][ T9043] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 220.549219][ T9043] try_charge_memcg+0x8f7/0xde0 [ 220.549251][ T9043] ? __cfi_try_charge_memcg+0x10/0x10 [ 220.549283][ T9043] ? __alloc_pages_noprof+0x31f/0x7b0 [ 220.549315][ T9043] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 220.549347][ T9043] __mem_cgroup_charge+0xf6/0x410 [ 220.549383][ T9043] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 220.549426][ T9043] ? pick_next_task_fair+0x900/0x990 [ 220.549459][ T9043] shmem_alloc_and_add_folio+0x86d/0x1050 [ 220.549486][ T9043] ? finish_task_switch+0x13a/0x780 [ 220.549516][ T9043] ? put_swap_device+0x130/0x130 [ 220.549542][ T9043] ? shmem_huge_global_enabled+0x2da/0x360 [ 220.549566][ T9043] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 220.549592][ T9043] ? __kasan_check_write+0x18/0x20 [ 220.549627][ T9043] ? _raw_spin_lock+0x8c/0x120 [ 220.549658][ T9043] shmem_get_folio_gfp+0x5f0/0x1380 [ 220.549687][ T9043] ? shmem_get_folio+0xc0/0xc0 [ 220.549712][ T9043] shmem_write_begin+0xf4/0x270 [ 220.549739][ T9043] generic_perform_write+0x330/0x960 [ 220.549774][ T9043] ? __cfi_generic_perform_write+0x10/0x10 [ 220.549805][ T9043] ? down_write+0xe9/0x2a0 [ 220.549830][ T9043] ? file_update_time+0xa3/0x220 [ 220.549861][ T9043] shmem_file_write_iter+0x105/0x130 [ 220.549893][ T9043] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 220.549922][ T9043] __kernel_write_iter+0x392/0x830 [ 220.549942][ T9043] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 220.549973][ T9043] ? __cfi___kernel_write_iter+0x10/0x10 [ 220.550009][ T9043] ? get_dump_page+0x160/0x220 [ 220.550039][ T9043] ? __asan_memset+0x39/0x50 [ 220.550072][ T9043] ? iov_iter_bvec+0xc0/0x180 [ 220.550099][ T9043] dump_user_range+0xb06/0xdf0 [ 220.550124][ T9043] ? __cfi_dump_emit+0x10/0x10 [ 220.550160][ T9043] ? __cfi_dump_user_range+0x10/0x10 [ 220.550183][ T9043] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 220.550219][ T9043] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 220.550254][ T9043] ? elf_core_dump+0x283a/0x3810 [ 220.550283][ T9043] elf_core_dump+0x2cd9/0x3810 [ 220.550315][ T9043] ? __cfi_elf_core_dump+0x10/0x10 [ 220.550352][ T9043] ? dump_interrupted+0xf0/0xf0 [ 220.550387][ T9043] ? 0xffffffffff600000 [ 220.550408][ T9043] do_coredump+0x1bfa/0x2bd0 [ 220.550456][ T9043] ? __cfi_do_coredump+0x10/0x10 [ 220.550489][ T9043] ? asm_exc_page_fault+0x2b/0x30 [ 220.550520][ T9043] ? __kasan_slab_free+0x6a/0x80 [ 220.550545][ T9043] ? kmem_cache_free+0x1c1/0x510 [ 220.550581][ T9043] ? get_signal+0xa75/0x14f0 [ 220.550608][ T9043] get_signal+0x11fd/0x14f0 [ 220.550638][ T9043] arch_do_signal_or_restart+0x96/0x720 [ 220.550670][ T9043] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 220.550710][ T9043] irqentry_exit_to_user_mode+0x4e/0xb0 [ 220.550737][ T9043] irqentry_exit+0x16/0x60 [ 220.550762][ T9043] exc_page_fault+0x66/0xc0 [ 220.550785][ T9043] asm_exc_page_fault+0x2b/0x30 [ 220.550808][ T9043] RIP: 0033:0x7f8be524f927 [ 220.550828][ T9043] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 220.550849][ T9043] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 220.550872][ T9043] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 220.550889][ T9043] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 220.550907][ T9043] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 220.550923][ T9043] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.550937][ T9043] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 220.550957][ T9043] [ 220.587293][ T9271] overlayfs: failed to clone lowerpath [ 220.591077][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 220.658820][ T9043] memory: usage 305296kB, limit 307200kB, failcnt 49587 [ 220.670089][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.716519][ T9043] memory+swap: usage 421712kB, limit 9007199254740988kB, failcnt 0 [ 220.722147][ T45] usb 6-1: config 1 interface 0 altsetting 105 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 220.982447][ T9043] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.984785][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 221.069491][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.077282][ T9043] Memory cgroup stats for /syz0: [ 221.077577][ T1110] usb 5-1: not running at top speed; connect to a high speed hub [ 221.095175][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 221.098447][ T9043] cache 313552896 [ 221.104381][ T1110] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 221.116824][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.125711][ T1110] usb 5-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 221.136154][ T45] usb 6-1: Product: syz [ 221.140483][ T1110] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.149513][ T45] usb 6-1: SerialNumber: syz [ 221.156238][ T1110] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.165427][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.173674][ T1110] usb 5-1: Product: syz [ 221.177950][ T1110] usb 5-1: Manufacturer: syz [ 221.182657][ T1110] usb 5-1: SerialNumber: syz [ 221.187885][ T9043] rss 454656 [ 221.192401][ T9043] rss_huge 0 [ 221.195699][ T9043] shmem 311291904 [ 221.199479][ T9043] mapped_file 720896 [ 221.203462][ T9043] dirty 0 [ 221.206529][ T9043] writeback 0 [ 221.209912][ T9043] workingset_refault_anon 112 [ 221.214699][ T9043] workingset_refault_file 3772 [ 221.219546][ T9043] swap 127574016 [ 221.223155][ T9043] swapcached 212992 [ 221.227049][ T9043] pgpgin 771443 [ 221.230608][ T9043] pgpgout 695209 [ 221.234209][ T9043] pgfault 305250 [ 221.237835][ T9043] pgmajfault 119 [ 221.241465][ T9043] inactive_anon 204103680 [ 221.245847][ T9043] active_anon 107012096 [ 221.267732][ T9043] inactive_file 0 [ 221.290468][ T9043] active_file 2260992 [ 221.314680][ T9043] unevictable 0 [ 221.335591][ T9043] hierarchical_memory_limit 314572800 [ 221.355136][ T9043] hierarchical_memsw_limit 9223372036854771712 [ 221.378778][ T9043] total_cache 313552896 [ 221.392137][ T9043] total_rss 454656 [ 221.406096][ T9043] total_rss_huge 0 [ 221.413724][ T9043] total_shmem 311291904 [ 221.427717][ T9043] total_mapped_file 720896 [ 221.440118][ T9043] total_dirty 0 [ 221.452226][ T1110] usb 5-1: 0:6 : does not exist [ 221.456955][ T9043] total_writeback 0 [ 221.457226][ T1110] usb 5-1: 0:36 : does not exist [ 221.468768][ T9043] total_workingset_refault_anon 112 [ 221.475873][ T1110] usb 5-1: USB disconnect, device number 23 [ 221.494058][ T45] usbhid 6-1:1.0: can't add hid device: -71 [ 221.500143][ T9043] total_workingset_refault_file 3772 [ 221.500878][ T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 221.506297][ T9043] total_swap 127574016 [ 221.516502][ T45] usb 6-1: USB disconnect, device number 62 [ 221.521015][ T4961] udevd[4961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.525157][ T9043] total_swapcached 212992 [ 221.547401][ T9043] total_pgpgin 771443 [ 221.551797][ T9043] total_pgpgout 695209 [ 221.556144][ T9043] total_pgfault 305250 [ 221.560563][ T9043] total_pgmajfault 119 [ 221.564670][ T9043] total_inactive_anon 204103680 [ 221.569775][ T9043] total_active_anon 107012096 [ 221.574575][ T9043] total_inactive_file 0 [ 221.578909][ T9043] total_active_file 2260992 [ 221.583494][ T9043] total_unevictable 0 [ 221.587646][ T9043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9051,uid=0 [ 221.602619][ T9043] Memory cgroup out of memory: Killed process 9051 (syz.0.2849) total-vm:90104kB, anon-rss:1076kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 221.741135][ T9281] netlink: 'syz.2.2916': attribute type 13 has an invalid length. [ 221.794439][ T9283] overlayfs: failed to clone upperpath [ 221.882333][ T9289] netlink: 'syz.2.2920': attribute type 2 has an invalid length. [ 221.910896][ T9101] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 222.021057][ T9101] CPU: 1 UID: 0 PID: 9101 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 222.021097][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.021112][ T9101] Call Trace: [ 222.021120][ T9101] [ 222.021129][ T9101] __dump_stack+0x21/0x30 [ 222.021166][ T9101] dump_stack_lvl+0x10c/0x190 [ 222.021195][ T9101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.021224][ T9101] ? ___ratelimit+0x3f7/0x5a0 [ 222.021257][ T9101] dump_stack+0x19/0x20 [ 222.021286][ T9101] dump_header+0xd7/0x490 [ 222.021310][ T9101] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 222.021342][ T9101] oom_kill_process+0x4c0/0x7e0 [ 222.021379][ T9101] ? sched_clock_cpu+0x75/0x400 [ 222.021412][ T9101] out_of_memory+0x7ee/0xbd0 [ 222.021438][ T9101] ? __cfi_out_of_memory+0x10/0x10 [ 222.021464][ T9101] ? mutex_lock_killable+0x92/0x1c0 [ 222.021488][ T9101] ? __cfi_mutex_lock_killable+0x10/0x10 [ 222.021514][ T9101] mem_cgroup_out_of_memory+0x279/0x350 [ 222.021539][ T9101] ? drain_obj_stock+0xed0/0xed0 [ 222.021563][ T9101] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 222.021586][ T9101] try_charge_memcg+0x8f7/0xde0 [ 222.021618][ T9101] ? __cfi_try_charge_memcg+0x10/0x10 [ 222.021649][ T9101] ? __alloc_pages_noprof+0x31f/0x7b0 [ 222.021679][ T9101] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 222.021708][ T9101] ? __folio_batch_add_and_move+0x2ab/0x370 [ 222.021736][ T9101] __mem_cgroup_charge+0xf6/0x410 [ 222.021766][ T9101] ? _raw_spin_lock+0x8c/0x120 [ 222.021794][ T9101] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 222.021829][ T9101] shmem_alloc_and_add_folio+0x86d/0x1050 [ 222.021856][ T9101] ? put_swap_device+0x130/0x130 [ 222.021881][ T9101] ? shmem_huge_global_enabled+0x2da/0x360 [ 222.021905][ T9101] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 222.021928][ T9101] ? __kasan_check_write+0x18/0x20 [ 222.021959][ T9101] ? _raw_spin_lock+0x8c/0x120 [ 222.021988][ T9101] shmem_get_folio_gfp+0x5f0/0x1380 [ 222.022015][ T9101] ? shmem_get_folio+0xc0/0xc0 [ 222.022038][ T9101] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 222.022070][ T9101] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 222.022101][ T9101] ? inode_to_bdi+0x6d/0x100 [ 222.022131][ T9101] shmem_write_begin+0xf4/0x270 [ 222.022158][ T9101] generic_perform_write+0x330/0x960 [ 222.022193][ T9101] ? __cfi_generic_perform_write+0x10/0x10 [ 222.022225][ T9101] ? down_write+0xe9/0x2a0 [ 222.022249][ T9101] ? mnt_get_write_access_file+0x1af/0x3b0 [ 222.022279][ T9101] ? mnt_put_write_access_file+0xc2/0x100 [ 222.022308][ T9101] ? file_update_time+0x1ef/0x220 [ 222.022339][ T9101] shmem_file_write_iter+0x105/0x130 [ 222.022376][ T9101] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 222.022406][ T9101] __kernel_write_iter+0x392/0x830 [ 222.022428][ T9101] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 222.022458][ T9101] ? __cfi___kernel_write_iter+0x10/0x10 [ 222.022494][ T9101] ? get_dump_page+0x160/0x220 [ 222.022523][ T9101] ? __asan_memset+0x39/0x50 [ 222.022555][ T9101] ? iov_iter_bvec+0xc0/0x180 [ 222.022582][ T9101] dump_user_range+0xb06/0xdf0 [ 222.022605][ T9101] ? __cfi_dump_emit+0x10/0x10 [ 222.022641][ T9101] ? __cfi_dump_user_range+0x10/0x10 [ 222.022663][ T9101] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 222.022698][ T9101] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 222.022735][ T9101] elf_core_dump+0x2cd9/0x3810 [ 222.022766][ T9101] ? __cfi_elf_core_dump+0x10/0x10 [ 222.022801][ T9101] ? dump_interrupted+0xf0/0xf0 [ 222.022835][ T9101] ? 0xffffffffff600000 [ 222.022854][ T9101] do_coredump+0x1bfa/0x2bd0 [ 222.022893][ T9101] ? __cfi_do_coredump+0x10/0x10 [ 222.022926][ T9101] ? asm_exc_page_fault+0x2b/0x30 [ 222.022958][ T9101] ? __kasan_slab_free+0x6a/0x80 [ 222.022983][ T9101] ? kmem_cache_free+0x1c1/0x510 [ 222.023018][ T9101] ? get_signal+0xa75/0x14f0 [ 222.023047][ T9101] get_signal+0x11fd/0x14f0 [ 222.023079][ T9101] arch_do_signal_or_restart+0x96/0x720 [ 222.023115][ T9101] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 222.023154][ T9101] irqentry_exit_to_user_mode+0x4e/0xb0 [ 222.023182][ T9101] irqentry_exit+0x16/0x60 [ 222.023206][ T9101] exc_page_fault+0x66/0xc0 [ 222.023230][ T9101] asm_exc_page_fault+0x2b/0x30 [ 222.023252][ T9101] RIP: 0033:0x7f8be524f927 [ 222.023272][ T9101] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 222.023294][ T9101] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 222.023316][ T9101] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 222.023334][ T9101] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 222.023351][ T9101] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.023374][ T9101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.023390][ T9101] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 222.023412][ T9101] [ 222.023641][ T9101] memory: usage 303896kB, limit 307200kB, failcnt 55133 [ 222.506520][ T9101] memory+swap: usage 409668kB, limit 9007199254740988kB, failcnt 0 [ 222.514526][ T9101] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 222.521465][ T9101] Memory cgroup stats for /syz0: [ 222.524062][ T9101] cache 289751040 [ 222.538642][ T9101] rss 483328 [ 222.543724][ T9101] rss_huge 0 [ 222.546952][ T9101] shmem 289742848 [ 222.558652][ T9101] mapped_file 0 [ 222.562152][ T9101] dirty 0 [ 222.565111][ T9101] writeback 0 [ 222.568408][ T9101] workingset_refault_anon 115 [ 222.598893][ T522] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 222.603689][ T9101] workingset_refault_file 4361 [ 222.631884][ T9101] swap 127934464 [ 222.635491][ T9101] swapcached 61440 [ 222.662175][ T9101] pgpgin 778565 [ 222.665699][ T9101] pgpgout 708172 [ 222.698623][ T9101] pgfault 305700 [ 222.718624][ T9101] pgmajfault 128 [ 222.738622][ T9101] inactive_anon 30265344 [ 222.738639][ T64] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 222.758628][ T9101] active_anon 259502080 [ 222.762839][ T9101] inactive_file 0 [ 222.770819][ T522] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.778872][ T522] usb 5-1: not running at top speed; connect to a high speed hub [ 222.789028][ T522] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 222.796961][ T9101] active_file 8192 [ 222.797232][ T522] usb 5-1: config 1 has no interface number 0 [ 222.817320][ T522] usb 5-1: config 1 interface 138 has no altsetting 0 [ 222.825601][ T522] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 222.835005][ T522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.845085][ T522] usb 5-1: Product: syz [ 222.848680][ T9101] unevictable 0 [ 222.852763][ T9101] hierarchical_memory_limit 314572800 [ 222.855001][ T522] usb 5-1: Manufacturer: syz [ 222.865101][ T522] usb 5-1: SerialNumber: syz [ 222.908653][ T9101] hierarchical_memsw_limit 9223372036854771712 [ 222.914866][ T9101] total_cache 289751040 [ 222.929723][ T64] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 222.938060][ T64] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.938632][ T9101] total_rss 483328 [ 222.958337][ T64] usb 6-1: config 0 has no interface number 0 [ 222.966135][ T64] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 222.975353][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.986235][ T64] usb 6-1: Product: syz [ 222.990791][ T9101] total_rss_huge 0 [ 222.994779][ T9101] total_shmem 289742848 [ 222.999397][ T64] usb 6-1: Manufacturer: syz [ 223.004064][ T64] usb 6-1: SerialNumber: syz [ 223.011520][ T64] usb 6-1: config 0 descriptor?? [ 223.028384][ T9101] total_mapped_file 0 [ 223.032466][ T9101] total_dirty 0 [ 223.036018][ T9101] total_writeback 0 [ 223.039964][ T9101] total_workingset_refault_anon 115 [ 223.045286][ T9101] total_workingset_refault_file 4361 [ 223.050857][ T9101] total_swap 127934464 [ 223.054971][ T9101] total_swapcached 61440 [ 223.059273][ T9101] total_pgpgin 778565 [ 223.063349][ T9101] total_pgpgout 708172 [ 223.067457][ T9101] total_pgfault 305700 [ 223.071591][ T9101] total_pgmajfault 128 [ 223.089294][ T522] usb 5-1: USB disconnect, device number 24 [ 223.104025][ T4961] udevd[4961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.126597][ T9101] total_inactive_anon 30265344 [ 223.132420][ T9101] total_active_anon 259502080 [ 223.138328][ T9101] total_inactive_file 0 [ 223.143648][ T9101] total_active_file 8192 [ 223.148230][ T9101] total_unevictable 0 [ 223.152812][ T9101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9046,uid=0 [ 223.177314][ T9101] Memory cgroup out of memory: Killed process 9046 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:53712kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 223.220267][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.230391][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.246397][ T64] usb 6-1: USB disconnect, device number 63 [ 223.488306][ T9091] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 223.560753][ T9091] CPU: 0 UID: 0 PID: 9091 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 223.560794][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.560811][ T9091] Call Trace: [ 223.560820][ T9091] [ 223.560830][ T9091] __dump_stack+0x21/0x30 [ 223.560868][ T9091] dump_stack_lvl+0x10c/0x190 [ 223.560901][ T9091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 223.560933][ T9091] ? ___ratelimit+0x3f7/0x5a0 [ 223.560969][ T9091] dump_stack+0x19/0x20 [ 223.561000][ T9091] dump_header+0xd7/0x490 [ 223.561024][ T9091] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 223.561057][ T9091] oom_kill_process+0x4c0/0x7e0 [ 223.561085][ T9091] ? sched_clock_cpu+0x75/0x400 [ 223.561118][ T9091] out_of_memory+0x7ee/0xbd0 [ 223.561145][ T9091] ? __cfi_out_of_memory+0x10/0x10 [ 223.561179][ T9091] ? mutex_lock_killable+0x92/0x1c0 [ 223.561203][ T9091] ? __cfi_mutex_lock_killable+0x10/0x10 [ 223.561230][ T9091] mem_cgroup_out_of_memory+0x279/0x350 [ 223.561254][ T9091] ? drain_obj_stock+0xed0/0xed0 [ 223.561279][ T9091] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 223.561304][ T9091] try_charge_memcg+0x8f7/0xde0 [ 223.561337][ T9091] ? __cfi_try_charge_memcg+0x10/0x10 [ 223.561368][ T9091] ? __alloc_pages_noprof+0x31f/0x7b0 [ 223.561399][ T9091] ? folio_unlock+0x12f/0x1a0 [ 223.561426][ T9091] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 223.561459][ T9091] __mem_cgroup_charge+0xf6/0x410 [ 223.561495][ T9091] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 223.561530][ T9091] ? do_pte_missing+0x2bdb/0x4240 [ 223.561559][ T9091] shmem_alloc_and_add_folio+0x86d/0x1050 [ 223.561590][ T9091] ? put_swap_device+0x130/0x130 [ 223.561617][ T9091] ? shmem_huge_global_enabled+0x2da/0x360 [ 223.561643][ T9091] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 223.561669][ T9091] ? __kasan_check_write+0x18/0x20 [ 223.561703][ T9091] ? _raw_spin_lock+0x8c/0x120 [ 223.561734][ T9091] shmem_get_folio_gfp+0x5f0/0x1380 [ 223.561761][ T9091] ? shmem_get_folio+0xc0/0xc0 [ 223.561784][ T9091] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 223.561818][ T9091] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 223.561851][ T9091] ? inode_to_bdi+0x6d/0x100 [ 223.561883][ T9091] shmem_write_begin+0xf4/0x270 [ 223.561911][ T9091] generic_perform_write+0x330/0x960 [ 223.561947][ T9091] ? __cfi_generic_perform_write+0x10/0x10 [ 223.561981][ T9091] ? down_write+0xe9/0x2a0 [ 223.562005][ T9091] ? mnt_get_write_access_file+0x1af/0x3b0 [ 223.562036][ T9091] ? mnt_put_write_access_file+0xc2/0x100 [ 223.562067][ T9091] ? file_update_time+0x1ef/0x220 [ 223.562099][ T9091] shmem_file_write_iter+0x105/0x130 [ 223.562130][ T9091] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 223.562161][ T9091] __kernel_write_iter+0x392/0x830 [ 223.562190][ T9091] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 223.562221][ T9091] ? __cfi___kernel_write_iter+0x10/0x10 [ 223.562257][ T9091] ? get_dump_page+0x160/0x220 [ 223.562286][ T9091] ? __asan_memset+0x39/0x50 [ 223.562320][ T9091] ? iov_iter_bvec+0xc0/0x180 [ 223.562348][ T9091] dump_user_range+0xb06/0xdf0 [ 223.562372][ T9091] ? __cfi_dump_emit+0x10/0x10 [ 223.562407][ T9091] ? __cfi_dump_user_range+0x10/0x10 [ 223.562430][ T9091] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 223.562466][ T9091] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 223.562503][ T9091] elf_core_dump+0x2cd9/0x3810 [ 223.562535][ T9091] ? __cfi_elf_core_dump+0x10/0x10 [ 223.562570][ T9091] ? dump_interrupted+0xf0/0xf0 [ 223.562606][ T9091] ? 0xffffffffff600000 [ 223.562626][ T9091] do_coredump+0x1bfa/0x2bd0 [ 223.562665][ T9091] ? __cfi_do_coredump+0x10/0x10 [ 223.562699][ T9091] ? asm_exc_page_fault+0x2b/0x30 [ 223.562732][ T9091] ? __kasan_slab_free+0x6a/0x80 [ 223.562757][ T9091] ? kmem_cache_free+0x1c1/0x510 [ 223.562793][ T9091] ? get_signal+0xa75/0x14f0 [ 223.562823][ T9091] get_signal+0x11fd/0x14f0 [ 223.562857][ T9091] arch_do_signal_or_restart+0x96/0x720 [ 223.562893][ T9091] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 223.562932][ T9091] irqentry_exit_to_user_mode+0x4e/0xb0 [ 223.562960][ T9091] irqentry_exit+0x16/0x60 [ 223.562984][ T9091] exc_page_fault+0x66/0xc0 [ 223.563009][ T9091] asm_exc_page_fault+0x2b/0x30 [ 223.563032][ T9091] RIP: 0033:0x7f8be524f927 [ 223.563052][ T9091] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 223.563074][ T9091] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 223.563097][ T9091] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 223.563115][ T9091] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 223.563133][ T9091] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.563151][ T9091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.563175][ T9091] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 223.563197][ T9091] [ 223.563207][ T9091] memory: usage 305440kB, limit 307200kB, failcnt 58024 [ 223.888862][ T9347] rust_binder: Error while translating object. [ 223.902487][ T9091] memory+swap: usage 415684kB, limit 9007199254740988kB, failcnt 0 [ 223.908753][ T9347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 223.937472][ T9091] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 223.958688][ T9347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:66 [ 224.001421][ T9091] Memory cgroup stats for /syz0: [ 224.095685][ T9091] cache 292909056 [ 224.104727][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 224.119462][ T36] audit: type=1400 audit(1756448955.958:1052): avc: denied { append } for pid=9353 comm="syz.4.2944" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.185335][ T9091] rss 487424 [ 224.202741][ T9091] rss_huge 0 [ 224.252321][ T9091] shmem 288780288 [ 224.284641][ T9091] mapped_file 4124672 [ 224.315250][ T9091] dirty 0 [ 224.325048][ T9091] writeback 425984 [ 224.343258][ T9091] workingset_refault_anon 118 [ 224.348010][ T9091] workingset_refault_file 6890 [ 224.400884][ T9091] swap 127557632 [ 224.424076][ T9091] swapcached 434176 [ 224.448806][ T9091] pgpgin 789120 [ 224.463575][ T9091] pgpgout 717890 [ 224.467802][ T9091] pgfault 306268 [ 224.471738][ T9091] pgmajfault 165 [ 224.475397][ T9091] inactive_anon 206938112 [ 224.494881][ T9091] active_anon 82518016 [ 224.500891][ T9091] inactive_file 0 [ 224.506213][ T9091] active_file 4128768 [ 224.512070][ T9091] unevictable 0 [ 224.515797][ T9091] hierarchical_memory_limit 314572800 [ 224.521957][ T9091] hierarchical_memsw_limit 9223372036854771712 [ 224.529028][ T9091] total_cache 292909056 [ 224.533355][ T9091] total_rss 487424 [ 224.537145][ T9091] total_rss_huge 0 [ 224.542710][ T9091] total_shmem 288780288 [ 224.547049][ T9091] total_mapped_file 4124672 [ 224.552131][ T9091] total_dirty 0 [ 224.556021][ T9091] total_writeback 425984 [ 224.556278][ T36] audit: type=1400 audit(1756448956.388:1053): avc: denied { setattr } for pid=9369 comm="syz.4.2950" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.560764][ T9091] total_workingset_refault_anon 118 [ 224.598632][ T36] audit: type=1326 audit(1756448956.428:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9371 comm="syz.2.2951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90e378ebe9 code=0x0 [ 224.613836][ T9091] total_workingset_refault_file 6890 [ 224.645583][ T9091] total_swap 127557632 [ 224.660830][ T9091] total_swapcached 434176 [ 224.673462][ T9091] total_pgpgin 789120 [ 224.687252][ T9091] total_pgpgout 717890 [ 224.701002][ T9091] total_pgfault 306268 [ 224.710641][ T9091] total_pgmajfault 165 [ 224.718220][ T9091] total_inactive_anon 206938112 [ 224.723224][ T9091] total_active_anon 82518016 [ 224.727993][ T9091] total_inactive_file 0 [ 224.732267][ T9091] total_active_file 4128768 [ 224.736870][ T9091] total_unevictable 0 [ 224.741046][ T9091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9091,uid=0 [ 224.756126][ T9091] Memory cgroup out of memory: Killed process 9091 (syz.0.2849) total-vm:90104kB, anon-rss:1060kB, file-rss:53748kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 224.981300][ T9386] exFAT-fs (rnullb0): invalid boot record signature [ 224.993225][ T9386] exFAT-fs (rnullb0): failed to read boot sector [ 225.005320][ T9386] exFAT-fs (rnullb0): failed to recognize exfat type [ 225.066524][ T9098] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 225.105368][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 225.105409][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.105426][ T9098] Call Trace: [ 225.105435][ T9098] [ 225.105444][ T9098] __dump_stack+0x21/0x30 [ 225.105485][ T9098] dump_stack_lvl+0x10c/0x190 [ 225.105517][ T9098] ? __cfi_dump_stack_lvl+0x10/0x10 [ 225.105549][ T9098] ? ___ratelimit+0x3f7/0x5a0 [ 225.105584][ T9098] dump_stack+0x19/0x20 [ 225.105615][ T9098] dump_header+0xd7/0x490 [ 225.105640][ T9098] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 225.105672][ T9098] oom_kill_process+0x4c0/0x7e0 [ 225.105700][ T9098] ? sched_clock_cpu+0x75/0x400 [ 225.105733][ T9098] out_of_memory+0x7ee/0xbd0 [ 225.105761][ T9098] ? __cfi_out_of_memory+0x10/0x10 [ 225.105788][ T9098] ? mutex_lock_killable+0x92/0x1c0 [ 225.105812][ T9098] ? __cfi_mutex_lock_killable+0x10/0x10 [ 225.105839][ T9098] mem_cgroup_out_of_memory+0x279/0x350 [ 225.105863][ T9098] ? drain_obj_stock+0xed0/0xed0 [ 225.105888][ T9098] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 225.105910][ T9098] try_charge_memcg+0x8f7/0xde0 [ 225.105943][ T9098] ? __cfi_try_charge_memcg+0x10/0x10 [ 225.105975][ T9098] ? __alloc_pages_noprof+0x31f/0x7b0 [ 225.106006][ T9098] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 225.106036][ T9098] ? __folio_batch_add_and_move+0x2ab/0x370 [ 225.106067][ T9098] __mem_cgroup_charge+0xf6/0x410 [ 225.106101][ T9098] ? _raw_spin_lock+0x8c/0x120 [ 225.106129][ T9098] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 225.106164][ T9098] shmem_alloc_and_add_folio+0x86d/0x1050 [ 225.106192][ T9098] ? finish_task_switch+0x13a/0x780 [ 225.106224][ T9098] ? put_swap_device+0x130/0x130 [ 225.106250][ T9098] ? shmem_huge_global_enabled+0x2da/0x360 [ 225.106283][ T9098] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 225.106308][ T9098] ? __kasan_check_write+0x18/0x20 [ 225.106342][ T9098] ? _raw_spin_lock+0x8c/0x120 [ 225.106373][ T9098] shmem_get_folio_gfp+0x5f0/0x1380 [ 225.106401][ T9098] ? shmem_get_folio+0xc0/0xc0 [ 225.106423][ T9098] ? follow_page_pte+0xa5c/0xb90 [ 225.106454][ T9098] ? inode_to_bdi+0x6d/0x100 [ 225.106486][ T9098] shmem_write_begin+0xf4/0x270 [ 225.106514][ T9098] generic_perform_write+0x330/0x960 [ 225.106550][ T9098] ? __cfi_generic_perform_write+0x10/0x10 [ 225.106583][ T9098] ? down_write+0xe9/0x2a0 [ 225.106609][ T9098] ? file_update_time+0xa3/0x220 [ 225.106642][ T9098] shmem_file_write_iter+0x105/0x130 [ 225.106673][ T9098] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 225.106704][ T9098] __kernel_write_iter+0x392/0x830 [ 225.106727][ T9098] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 225.106759][ T9098] ? __cfi___kernel_write_iter+0x10/0x10 [ 225.106795][ T9098] ? get_dump_page+0x160/0x220 [ 225.106824][ T9098] ? __asan_memset+0x39/0x50 [ 225.106856][ T9098] ? iov_iter_bvec+0xc0/0x180 [ 225.106883][ T9098] dump_user_range+0xb06/0xdf0 [ 225.106906][ T9098] ? __cfi_dump_emit+0x10/0x10 [ 225.106941][ T9098] ? __cfi_dump_user_range+0x10/0x10 [ 225.106965][ T9098] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 225.107000][ T9098] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 225.107037][ T9098] elf_core_dump+0x2cd9/0x3810 [ 225.107069][ T9098] ? __cfi_elf_core_dump+0x10/0x10 [ 225.107106][ T9098] ? dump_interrupted+0xf0/0xf0 [ 225.107142][ T9098] ? 0xffffffffff600000 [ 225.107162][ T9098] do_coredump+0x1bfa/0x2bd0 [ 225.107201][ T9098] ? __cfi_do_coredump+0x10/0x10 [ 225.107235][ T9098] ? asm_exc_page_fault+0x2b/0x30 [ 225.107274][ T9098] ? __kasan_slab_free+0x6a/0x80 [ 225.107300][ T9098] ? kmem_cache_free+0x1c1/0x510 [ 225.107337][ T9098] ? get_signal+0xa75/0x14f0 [ 225.107367][ T9098] get_signal+0x11fd/0x14f0 [ 225.107400][ T9098] arch_do_signal_or_restart+0x96/0x720 [ 225.107437][ T9098] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 225.107477][ T9098] irqentry_exit_to_user_mode+0x4e/0xb0 [ 225.107504][ T9098] irqentry_exit+0x16/0x60 [ 225.107528][ T9098] exc_page_fault+0x66/0xc0 [ 225.107551][ T9098] asm_exc_page_fault+0x2b/0x30 [ 225.107573][ T9098] RIP: 0033:0x7f8be524f927 [ 225.107592][ T9098] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 225.107613][ T9098] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 225.107635][ T9098] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 225.107653][ T9098] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 225.107670][ T9098] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.107685][ T9098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.107700][ T9098] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 225.107721][ T9098] [ 225.591235][ T9098] memory: usage 301584kB, limit 307200kB, failcnt 59919 [ 225.598512][ T9098] memory+swap: usage 426660kB, limit 9007199254740988kB, failcnt 0 [ 225.613829][ T9098] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 225.621208][ T9098] Memory cgroup stats for /syz0: [ 225.621385][ T9098] cache 311746560 [ 225.630279][ T9098] rss 589824 [ 225.633583][ T9098] rss_huge 0 [ 225.636919][ T9098] shmem 307486720 [ 225.640886][ T9098] mapped_file 4141056 [ 225.644939][ T36] audit: type=1400 audit(1756448957.478:1055): avc: denied { create } for pid=9391 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 225.666603][ T9392] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2958'. [ 225.667449][ T9098] dirty 12288 [ 225.679421][ T9098] writeback 0 [ 225.682747][ T9098] workingset_refault_anon 122 [ 225.687478][ T9098] workingset_refault_file 8529 [ 225.692587][ T9098] swap 127975424 [ 225.696237][ T9098] swapcached 20480 [ 225.700252][ T9098] pgpgin 805023 [ 225.703804][ T9098] pgpgout 729279 [ 225.707368][ T9098] pgfault 306990 [ 225.711222][ T9098] pgmajfault 182 [ 225.714837][ T9098] inactive_anon 64278528 [ 225.719515][ T9098] active_anon 243503104 [ 225.723684][ T9098] inactive_file 0 [ 225.727373][ T9098] active_file 4202496 [ 225.731817][ T9098] unevictable 0 [ 225.735301][ T9098] hierarchical_memory_limit 314572800 [ 225.740940][ T9098] hierarchical_memsw_limit 9223372036854771712 [ 225.747295][ T9098] total_cache 311746560 [ 225.752387][ T9098] total_rss 589824 [ 225.756405][ T9098] total_rss_huge 0 [ 225.760584][ T9098] total_shmem 307486720 [ 225.764977][ T9098] total_mapped_file 4141056 [ 225.769966][ T9098] total_dirty 12288 [ 225.773885][ T9098] total_writeback 0 [ 225.777908][ T9098] total_workingset_refault_anon 122 [ 225.783650][ T9098] total_workingset_refault_file 8529 [ 225.789423][ T9098] total_swap 127975424 [ 225.793600][ T9098] total_swapcached 20480 [ 225.797854][ T9098] total_pgpgin 805023 [ 225.802451][ T9098] total_pgpgout 729279 [ 225.806652][ T9098] total_pgfault 306990 [ 225.811222][ T9098] total_pgmajfault 182 [ 225.815680][ T9098] total_inactive_anon 64278528 [ 225.821951][ T9098] total_active_anon 243503104 [ 225.826702][ T9098] total_inactive_file 0 [ 225.831115][ T9098] total_active_file 4202496 [ 225.835643][ T9098] total_unevictable 0 [ 225.839924][ T9098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9057,uid=0 [ 225.855031][ T9098] Memory cgroup out of memory: Killed process 9057 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:53792kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 226.048630][ T413] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.056186][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 226.119252][ T36] audit: type=1400 audit(1756448957.958:1056): avc: denied { create } for pid=9397 comm="syz.2.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 226.184572][ T9053] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 226.242276][ T9407] __vm_enough_memory: pid: 9407, comm: syz.5.2965, bytes: 18014402804453376 not enough memory for the allocation [ 226.337142][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 226.337184][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.337200][ T9053] Call Trace: [ 226.337208][ T9053] [ 226.337218][ T9053] __dump_stack+0x21/0x30 [ 226.337255][ T9053] dump_stack_lvl+0x10c/0x190 [ 226.337286][ T9053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 226.337316][ T9053] ? ___ratelimit+0x3f7/0x5a0 [ 226.337353][ T9053] dump_stack+0x19/0x20 [ 226.337382][ T9053] dump_header+0xd7/0x490 [ 226.337406][ T9053] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 226.337437][ T9053] oom_kill_process+0x4c0/0x7e0 [ 226.337465][ T9053] ? sched_clock_cpu+0x75/0x400 [ 226.337497][ T9053] out_of_memory+0x7ee/0xbd0 [ 226.337524][ T9053] ? __cfi_out_of_memory+0x10/0x10 [ 226.337551][ T9053] ? mutex_lock_killable+0x92/0x1c0 [ 226.337574][ T9053] ? __cfi_mutex_lock_killable+0x10/0x10 [ 226.337600][ T9053] mem_cgroup_out_of_memory+0x279/0x350 [ 226.337623][ T9053] ? drain_obj_stock+0xed0/0xed0 [ 226.337647][ T9053] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 226.337669][ T9053] try_charge_memcg+0x8f7/0xde0 [ 226.337701][ T9053] ? __cfi_try_charge_memcg+0x10/0x10 [ 226.337732][ T9053] ? __alloc_pages_noprof+0x31f/0x7b0 [ 226.337761][ T9053] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 226.337790][ T9053] ? __folio_batch_add_and_move+0x2ab/0x370 [ 226.337819][ T9053] __mem_cgroup_charge+0xf6/0x410 [ 226.337852][ T9053] ? _raw_spin_lock+0x8c/0x120 [ 226.337880][ T9053] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 226.337949][ T9053] shmem_alloc_and_add_folio+0x86d/0x1050 [ 226.337978][ T9053] ? put_swap_device+0x130/0x130 [ 226.338001][ T9053] ? shmem_huge_global_enabled+0x2da/0x360 [ 226.338024][ T9053] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 226.338047][ T9053] ? __kasan_check_write+0x18/0x20 [ 226.338077][ T9053] ? _raw_spin_lock+0x8c/0x120 [ 226.338105][ T9053] shmem_get_folio_gfp+0x5f0/0x1380 [ 226.338131][ T9053] ? shmem_get_folio+0xc0/0xc0 [ 226.338151][ T9053] ? follow_page_pte+0xa5c/0xb90 [ 226.338185][ T9053] ? inode_to_bdi+0x6d/0x100 [ 226.338214][ T9053] shmem_write_begin+0xf4/0x270 [ 226.338239][ T9053] generic_perform_write+0x330/0x960 [ 226.338273][ T9053] ? __cfi_generic_perform_write+0x10/0x10 [ 226.338305][ T9053] ? down_write+0xe9/0x2a0 [ 226.338336][ T9053] ? file_update_time+0xa3/0x220 [ 226.338366][ T9053] shmem_file_write_iter+0x105/0x130 [ 226.338395][ T9053] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 226.338424][ T9053] __kernel_write_iter+0x392/0x830 [ 226.338446][ T9053] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 226.338478][ T9053] ? __cfi___kernel_write_iter+0x10/0x10 [ 226.338513][ T9053] ? get_dump_page+0x160/0x220 [ 226.338542][ T9053] ? __asan_memset+0x39/0x50 [ 226.338575][ T9053] ? iov_iter_bvec+0xc0/0x180 [ 226.338600][ T9053] dump_user_range+0xb06/0xdf0 [ 226.338622][ T9053] ? __cfi_dump_emit+0x10/0x10 [ 226.338654][ T9053] ? __cfi_dump_user_range+0x10/0x10 [ 226.338677][ T9053] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 226.338713][ T9053] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 226.338749][ T9053] elf_core_dump+0x2cd9/0x3810 [ 226.338777][ T9053] ? __cfi_elf_core_dump+0x10/0x10 [ 226.338819][ T9053] ? dump_interrupted+0xf0/0xf0 [ 226.338852][ T9053] ? 0xffffffffff600000 [ 226.338872][ T9053] do_coredump+0x1bfa/0x2bd0 [ 226.338917][ T9053] ? __cfi_do_coredump+0x10/0x10 [ 226.338950][ T9053] ? asm_exc_page_fault+0x2b/0x30 [ 226.338981][ T9053] ? __kasan_slab_free+0x6a/0x80 [ 226.339004][ T9053] ? kmem_cache_free+0x1c1/0x510 [ 226.339040][ T9053] ? get_signal+0xa75/0x14f0 [ 226.339070][ T9053] get_signal+0x11fd/0x14f0 [ 226.339100][ T9053] arch_do_signal_or_restart+0x96/0x720 [ 226.339135][ T9053] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 226.339173][ T9053] irqentry_exit_to_user_mode+0x4e/0xb0 [ 226.339200][ T9053] irqentry_exit+0x16/0x60 [ 226.339224][ T9053] exc_page_fault+0x66/0xc0 [ 226.339249][ T9053] asm_exc_page_fault+0x2b/0x30 [ 226.339270][ T9053] RIP: 0033:0x7f8be524f927 [ 226.339289][ T9053] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 226.339311][ T9053] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 226.339332][ T9053] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 226.339350][ T9053] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 226.339366][ T9053] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.339381][ T9053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.339396][ T9053] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 226.339417][ T9053] [ 226.343129][ T9423] 9pnet_fd: Insufficient options for proto=fd [ 226.538652][ T10] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 226.551912][ T9053] memory: usage 306896kB, limit 307200kB, failcnt 62287 [ 226.749186][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.750803][ T9053] memory+swap: usage 431560kB, limit 9007199254740988kB, failcnt 0 [ 226.756857][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 226.764770][ T9053] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 226.764791][ T9053] Memory cgroup stats for [ 226.788637][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.788938][ T9053] /syz0 [ 226.809586][ T10] usb 6-1: config 0 descriptor?? [ 226.817900][ T9053] : [ 226.875256][ T9053] cache 310644736 [ 226.883048][ T9053] rss 581632 [ 226.886397][ T9053] rss_huge 0 [ 226.889689][ T9053] shmem 308326400 [ 226.893345][ T9053] mapped_file 2224128 [ 226.897350][ T9053] dirty 0 [ 226.900343][ T9053] writeback 139264 [ 226.906102][ T9053] workingset_refault_anon 123 [ 226.910888][ T9053] workingset_refault_file 9596 [ 226.917469][ T9053] swap 127586304 [ 226.921139][ T9053] swapcached 262144 [ 226.924978][ T9053] pgpgin 812271 [ 226.928459][ T9053] pgpgout 736698 [ 226.929152][ T9429] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 226.932105][ T9053] pgfault 307511 [ 226.964079][ T9053] pgmajfault 193 [ 226.967645][ T9053] inactive_anon 107466752 [ 226.988654][ T9053] active_anon 201158656 [ 226.992870][ T9053] inactive_file 1589248 [ 226.997059][ T9053] active_file 659456 [ 227.139401][ T9053] unevictable 0 [ 227.142927][ T9053] hierarchical_memory_limit 314572800 [ 227.228637][ T9053] hierarchical_memsw_limit 9223372036854771712 [ 227.279653][ T10] usbhid 6-1:0.0: can't add hid device: -32 [ 227.285717][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 227.298048][ T9053] total_cache 310644736 [ 227.378627][ T9053] total_rss 581632 [ 227.383669][ T9053] total_rss_huge 0 [ 227.423042][ T9053] total_shmem 308326400 [ 227.468284][ T9053] total_mapped_file 2224128 [ 227.529561][ T9053] total_dirty 0 [ 227.567733][ T9053] total_writeback 139264 [ 227.617694][ T9053] total_workingset_refault_anon 123 [ 227.659150][ T9053] total_workingset_refault_file 9596 [ 227.700368][ T9053] total_swap 127586304 [ 227.730980][ T9053] total_swapcached 262144 [ 227.761347][ T9053] total_pgpgin 812271 [ 227.791532][ T9053] total_pgpgout 736698 [ 227.812744][ T9053] total_pgfault 307511 [ 227.821282][ T9053] total_pgmajfault 193 [ 227.829777][ T9053] total_inactive_anon 107466752 [ 227.840211][ T9053] total_active_anon 201158656 [ 227.850598][ T9053] total_inactive_file 1589248 [ 227.859855][ T9053] total_active_file 659456 [ 227.868829][ T9053] total_unevictable 0 [ 227.877216][ T9053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9080,uid=0 [ 227.908502][ T9053] Memory cgroup out of memory: Killed process 9080 (syz.0.2849) total-vm:90104kB, anon-rss:1076kB, file-rss:53836kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 228.133990][ T9055] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 228.246330][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 228.246372][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.246389][ T9055] Call Trace: [ 228.246397][ T9055] [ 228.246407][ T9055] __dump_stack+0x21/0x30 [ 228.246445][ T9055] dump_stack_lvl+0x10c/0x190 [ 228.246477][ T9055] ? __cfi_dump_stack_lvl+0x10/0x10 [ 228.246509][ T9055] ? ___ratelimit+0x3f7/0x5a0 [ 228.246550][ T9055] dump_stack+0x19/0x20 [ 228.246581][ T9055] dump_header+0xd7/0x490 [ 228.246605][ T9055] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 228.246636][ T9055] oom_kill_process+0x4c0/0x7e0 [ 228.246664][ T9055] ? sched_clock_cpu+0x75/0x400 [ 228.246697][ T9055] out_of_memory+0x7ee/0xbd0 [ 228.246725][ T9055] ? __cfi_out_of_memory+0x10/0x10 [ 228.246751][ T9055] ? mutex_lock_killable+0x92/0x1c0 [ 228.246777][ T9055] ? __cfi_mutex_lock_killable+0x10/0x10 [ 228.246803][ T9055] mem_cgroup_out_of_memory+0x279/0x350 [ 228.246833][ T9055] ? drain_obj_stock+0xed0/0xed0 [ 228.246858][ T9055] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 228.246881][ T9055] try_charge_memcg+0x8f7/0xde0 [ 228.246914][ T9055] ? __cfi_try_charge_memcg+0x10/0x10 [ 228.246945][ T9055] ? __alloc_pages_noprof+0x31f/0x7b0 [ 228.246977][ T9055] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 228.247007][ T9055] ? __folio_batch_add_and_move+0x2ab/0x370 [ 228.247037][ T9055] __mem_cgroup_charge+0xf6/0x410 [ 228.247072][ T9055] ? _raw_spin_lock+0x8c/0x120 [ 228.247103][ T9055] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 228.247139][ T9055] shmem_alloc_and_add_folio+0x86d/0x1050 [ 228.247167][ T9055] ? put_swap_device+0x130/0x130 [ 228.247193][ T9055] ? shmem_huge_global_enabled+0x2da/0x360 [ 228.247218][ T9055] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 228.247242][ T9055] ? __kasan_check_write+0x18/0x20 [ 228.247276][ T9055] ? _raw_spin_lock+0x8c/0x120 [ 228.247306][ T9055] shmem_get_folio_gfp+0x5f0/0x1380 [ 228.247334][ T9055] ? shmem_get_folio+0xc0/0xc0 [ 228.247356][ T9055] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 228.247394][ T9055] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 228.247427][ T9055] ? inode_to_bdi+0x6d/0x100 [ 228.247458][ T9055] shmem_write_begin+0xf4/0x270 [ 228.247485][ T9055] generic_perform_write+0x330/0x960 [ 228.247521][ T9055] ? __cfi_generic_perform_write+0x10/0x10 [ 228.247553][ T9055] ? down_write+0xe9/0x2a0 [ 228.247577][ T9055] ? mnt_get_write_access_file+0x1af/0x3b0 [ 228.247608][ T9055] ? mnt_put_write_access_file+0xc2/0x100 [ 228.247638][ T9055] ? file_update_time+0x1ef/0x220 [ 228.247670][ T9055] shmem_file_write_iter+0x105/0x130 [ 228.247700][ T9055] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 228.247731][ T9055] __kernel_write_iter+0x392/0x830 [ 228.247753][ T9055] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 228.247784][ T9055] ? __cfi___kernel_write_iter+0x10/0x10 [ 228.247819][ T9055] ? get_dump_page+0x160/0x220 [ 228.247856][ T9055] ? __asan_memset+0x39/0x50 [ 228.247888][ T9055] ? iov_iter_bvec+0xc0/0x180 [ 228.247915][ T9055] dump_user_range+0xb06/0xdf0 [ 228.247938][ T9055] ? __cfi_dump_emit+0x10/0x10 [ 228.247973][ T9055] ? __cfi_dump_user_range+0x10/0x10 [ 228.247995][ T9055] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 228.248031][ T9055] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 228.248067][ T9055] elf_core_dump+0x2cd9/0x3810 [ 228.248099][ T9055] ? __cfi_elf_core_dump+0x10/0x10 [ 228.248134][ T9055] ? dump_interrupted+0xf0/0xf0 [ 228.248169][ T9055] ? 0xffffffffff600000 [ 228.248189][ T9055] do_coredump+0x1bfa/0x2bd0 [ 228.248225][ T9055] ? __cfi_do_coredump+0x10/0x10 [ 228.248257][ T9055] ? asm_exc_page_fault+0x2b/0x30 [ 228.248290][ T9055] ? __kasan_slab_free+0x6a/0x80 [ 228.248316][ T9055] ? kmem_cache_free+0x1c1/0x510 [ 228.248352][ T9055] ? get_signal+0xa75/0x14f0 [ 228.248382][ T9055] get_signal+0x11fd/0x14f0 [ 228.248416][ T9055] arch_do_signal_or_restart+0x96/0x720 [ 228.248452][ T9055] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 228.248493][ T9055] irqentry_exit_to_user_mode+0x4e/0xb0 [ 228.248521][ T9055] irqentry_exit+0x16/0x60 [ 228.248546][ T9055] exc_page_fault+0x66/0xc0 [ 228.248570][ T9055] asm_exc_page_fault+0x2b/0x30 [ 228.248592][ T9055] RIP: 0033:0x7f8be524f927 [ 228.248612][ T9055] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 228.248631][ T9055] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 228.248654][ T9055] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 228.248671][ T9055] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 228.248690][ T9055] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 228.248706][ T9055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 228.248723][ T9055] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 228.248745][ T9055] [ 228.801901][ T9055] memory: usage 307200kB, limit 307200kB, failcnt 64280 [ 228.830855][ T9055] memory+swap: usage 425424kB, limit 9007199254740988kB, failcnt 0 [ 228.838890][ T9055] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 228.845772][ T9055] Memory cgroup stats for /syz0: [ 228.845942][ T9055] cache 309260288 [ 228.854683][ T9055] rss 647168 [ 228.857915][ T9055] rss_huge 0 [ 228.861219][ T9055] shmem 308862976 [ 228.865227][ T9055] mapped_file 143360 [ 228.869188][ T9055] dirty 0 [ 228.872144][ T9055] writeback 0 [ 228.875444][ T9055] workingset_refault_anon 129 [ 228.880173][ T9055] workingset_refault_file 11298 [ 228.885057][ T9055] swap 127963136 [ 228.888660][ T9055] swapcached 32768 [ 228.892664][ T9055] pgpgin 832114 [ 228.896146][ T9055] pgpgout 756960 [ 228.899772][ T9055] pgfault 308253 [ 228.903337][ T9055] pgmajfault 216 [ 228.906898][ T9055] inactive_anon 17743872 [ 228.911190][ T9055] active_anon 291766272 [ 228.915410][ T9055] inactive_file 16384 [ 228.919723][ T9055] active_file 286720 [ 228.923646][ T9055] unevictable 0 [ 228.927125][ T9055] hierarchical_memory_limit 314572800 [ 228.932550][ T9055] hierarchical_memsw_limit 9223372036854771712 [ 228.938752][ T9055] total_cache 309260288 [ 228.942922][ T9055] total_rss 647168 [ 228.946657][ T9055] total_rss_huge 0 [ 228.950447][ T9055] total_shmem 308862976 [ 228.954623][ T9055] total_mapped_file 143360 [ 228.959120][ T9055] total_dirty 0 [ 228.962605][ T9055] total_writeback 0 [ 228.966426][ T9055] total_workingset_refault_anon 129 [ 228.971680][ T9055] total_workingset_refault_file 11298 [ 228.977073][ T9055] total_swap 127963136 [ 228.981201][ T9055] total_swapcached 32768 [ 228.985459][ T9055] total_pgpgin 832114 [ 228.989528][ T9055] total_pgpgout 756960 [ 228.993703][ T9055] total_pgfault 308253 [ 228.997787][ T9055] total_pgmajfault 216 [ 229.002271][ T9055] total_inactive_anon 17743872 [ 229.007055][ T9055] total_active_anon 291766272 [ 229.011807][ T9055] total_inactive_file 16384 [ 229.016327][ T9055] total_active_file 286720 [ 229.020810][ T9055] total_unevictable 0 [ 229.024810][ T9055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9061,uid=0 [ 229.039720][ T9055] Memory cgroup out of memory: Killed process 9061 (syz.0.2849) total-vm:90104kB, anon-rss:1076kB, file-rss:53860kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 229.261743][ T9098] syz.0.2849 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 229.294718][ T10] usb 6-1: USB disconnect, device number 64 [ 229.330370][ T9450] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.355665][ T9098] CPU: 0 UID: 0 PID: 9098 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 229.355713][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.355729][ T9098] Call Trace: [ 229.355737][ T9098] [ 229.355747][ T9098] __dump_stack+0x21/0x30 [ 229.355785][ T9098] dump_stack_lvl+0x10c/0x190 [ 229.355816][ T9098] ? __cfi_dump_stack_lvl+0x10/0x10 [ 229.355848][ T9098] ? ___ratelimit+0x3f7/0x5a0 [ 229.355883][ T9098] dump_stack+0x19/0x20 [ 229.355911][ T9098] dump_header+0xd7/0x490 [ 229.355934][ T9098] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 229.355965][ T9098] oom_kill_process+0x4c0/0x7e0 [ 229.355992][ T9098] ? sched_clock_cpu+0x75/0x400 [ 229.356025][ T9098] out_of_memory+0x7ee/0xbd0 [ 229.356052][ T9098] ? __cfi_out_of_memory+0x10/0x10 [ 229.356079][ T9098] ? mutex_lock_killable+0x92/0x1c0 [ 229.356104][ T9098] ? __cfi_mutex_lock_killable+0x10/0x10 [ 229.356130][ T9098] mem_cgroup_out_of_memory+0x279/0x350 [ 229.356153][ T9098] ? drain_obj_stock+0xed0/0xed0 [ 229.356176][ T9098] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 229.356199][ T9098] try_charge_memcg+0x8f7/0xde0 [ 229.356230][ T9098] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 229.356265][ T9098] ? __cfi_try_charge_memcg+0x10/0x10 [ 229.356296][ T9098] ? __alloc_pages_noprof+0x31f/0x7b0 [ 229.356327][ T9098] __mem_cgroup_charge+0xf6/0x410 [ 229.356360][ T9098] ? filemap_get_entry+0x3fb/0x460 [ 229.356389][ T9098] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 229.356424][ T9098] filemap_add_folio+0x57/0x2d0 [ 229.356451][ T9098] __filemap_get_folio+0x597/0x9d0 [ 229.356480][ T9098] ? __cfi___filemap_get_folio+0x10/0x10 [ 229.356510][ T9098] ? mm_trace_rss_stat+0x20/0x130 [ 229.356544][ T9098] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 229.356578][ T9098] filemap_fault+0xb41/0x16b0 [ 229.356610][ T9098] ? __cfi_filemap_fault+0x10/0x10 [ 229.356640][ T9098] ? __cfi_filemap_map_pages+0x10/0x10 [ 229.356671][ T9098] ? __cfi_lru_add+0x10/0x10 [ 229.356708][ T9098] ? folio_rotate_reclaimable+0x130/0x130 [ 229.356736][ T9098] do_pte_missing+0x298c/0x4240 [ 229.356766][ T9098] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 229.356795][ T9098] ? pte_marker_clear+0x1b0/0x1b0 [ 229.356823][ T9098] ? put_swap_device+0x130/0x130 [ 229.356850][ T9098] ? __pte_offset_map+0x1b0/0x230 [ 229.356883][ T9098] ? pte_offset_map_rw_nolock+0xba/0x110 [ 229.356915][ T9098] handle_mm_fault+0x1166/0x1b90 [ 229.356938][ T9098] ? __kasan_check_write+0x18/0x20 [ 229.356974][ T9098] ? __cfi_handle_mm_fault+0x10/0x10 [ 229.356998][ T9098] ? follow_page_pte+0x2bd/0xb90 [ 229.357029][ T9098] ? gup_must_unshare+0x1e0/0x1e0 [ 229.357058][ T9098] ? vma_is_secretmem+0x11/0x50 [ 229.357092][ T9098] __get_user_pages+0x1169/0x22d0 [ 229.357120][ T9098] ? __kasan_check_write+0x18/0x20 [ 229.357158][ T9098] ? populate_vma_page_range+0x230/0x230 [ 229.357186][ T9098] ? __kernel_write_iter+0x66b/0x830 [ 229.357209][ T9098] get_dump_page+0x107/0x220 [ 229.357235][ T9098] ? __cfi_get_dump_page+0x10/0x10 [ 229.357263][ T9098] ? __asan_memset+0x39/0x50 [ 229.357297][ T9098] dump_user_range+0x181/0xdf0 [ 229.357321][ T9098] ? __cfi_dump_emit+0x10/0x10 [ 229.357357][ T9098] ? __cfi_dump_user_range+0x10/0x10 [ 229.357379][ T9098] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 229.357415][ T9098] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 229.357450][ T9098] elf_core_dump+0x2cd9/0x3810 [ 229.357481][ T9098] ? __cfi_elf_core_dump+0x10/0x10 [ 229.357516][ T9098] ? dump_interrupted+0xf0/0xf0 [ 229.357551][ T9098] ? 0xffffffffff600000 [ 229.357571][ T9098] do_coredump+0x1bfa/0x2bd0 [ 229.357610][ T9098] ? __cfi_do_coredump+0x10/0x10 [ 229.357661][ T9098] ? asm_exc_page_fault+0x2b/0x30 [ 229.357694][ T9098] ? __kasan_slab_free+0x6a/0x80 [ 229.357725][ T9098] ? kmem_cache_free+0x1c1/0x510 [ 229.357759][ T9098] ? get_signal+0xa75/0x14f0 [ 229.357788][ T9098] get_signal+0x11fd/0x14f0 [ 229.357821][ T9098] arch_do_signal_or_restart+0x96/0x720 [ 229.357858][ T9098] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 229.357898][ T9098] irqentry_exit_to_user_mode+0x4e/0xb0 [ 229.357926][ T9098] irqentry_exit+0x16/0x60 [ 229.357950][ T9098] exc_page_fault+0x66/0xc0 [ 229.357974][ T9098] asm_exc_page_fault+0x2b/0x30 [ 229.357996][ T9098] RIP: 0033:0x7f8be524f927 [ 229.358015][ T9098] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 229.358036][ T9098] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 229.358059][ T9098] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 229.358076][ T9098] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 229.358093][ T9098] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.358110][ T9098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.358126][ T9098] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 229.358148][ T9098] [ 229.418656][ T9098] memory: usage 281796kB, limit 307200kB, failcnt 65762 [ 229.857202][ T9098] memory+swap: usage 414044kB, limit 9007199254740988kB, failcnt 0 [ 229.865342][ T9098] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 229.872288][ T9098] Memory cgroup stats for /syz0: [ 229.872449][ T9098] cache 294772736 [ 229.881223][ T9098] rss 512000 [ 229.884442][ T9098] rss_huge 0 [ 229.887659][ T9098] shmem 290643968 [ 229.891388][ T9098] mapped_file 4124672 [ 229.895424][ T9098] dirty 0 [ 229.899613][ T9098] writeback 8192 [ 229.903211][ T9098] workingset_refault_anon 130 [ 229.937286][ T9098] workingset_refault_file 12639 [ 230.020632][ T9098] swap 127959040 [ 230.049368][ T9098] swapcached 36864 [ 230.078688][ T9098] pgpgin 840356 [ 230.082288][ T9098] pgpgout 768771 [ 230.096009][ T9098] pgfault 308492 [ 230.108620][ T9098] pgmajfault 226 [ 230.112219][ T9098] inactive_anon 192090112 [ 230.148550][ T9098] active_anon 98299904 [ 230.168655][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 230.188365][ T9098] inactive_file 372736 [ 230.218626][ T9098] active_file 3747840 [ 230.238627][ T9098] unevictable 0 [ 230.242164][ T9098] hierarchical_memory_limit 314572800 [ 230.288280][ T9098] hierarchical_memsw_limit 9223372036854771712 [ 230.298636][ T1110] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 230.305686][ T9098] total_cache 294772736 [ 230.320812][ T9098] total_rss 512000 [ 230.329698][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.340047][ T10] usb 6-1: config 0 has no interfaces? [ 230.349711][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 230.358947][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 230.368878][ T10] usb 6-1: Product: syz [ 230.375492][ T10] usb 6-1: Manufacturer: syz [ 230.375744][ T9098] total_rss_huge 0 [ 230.382791][ T10] usb 6-1: SerialNumber: syz [ 230.390174][ T10] usb 6-1: config 0 descriptor?? [ 230.407711][ T9098] total_shmem 290643968 [ 230.418664][ T9098] total_mapped_file 4124672 [ 230.423208][ T9098] total_dirty 0 [ 230.426681][ T9098] total_writeback 8192 [ 230.430948][ T1110] usb 5-1: device descriptor read/64, error -71 [ 230.437428][ T9098] total_workingset_refault_anon 130 [ 230.442770][ T9098] total_workingset_refault_file 12639 [ 230.448155][ T9098] total_swap 127959040 [ 230.452408][ T9098] total_swapcached 36864 [ 230.456663][ T9098] total_pgpgin 840356 [ 230.460908][ T9098] total_pgpgout 768771 [ 230.464994][ T9098] total_pgfault 308492 [ 230.469091][ T9098] total_pgmajfault 226 [ 230.473162][ T9098] total_inactive_anon 192090112 [ 230.478002][ T9098] total_active_anon 98299904 [ 230.482620][ T9098] total_inactive_file 372736 [ 230.487215][ T9098] total_active_file 3747840 [ 230.491767][ T9098] total_unevictable 0 [ 230.495755][ T9098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9101,uid=0 [ 230.510647][ T9098] Memory cgroup out of memory: Killed process 9101 (syz.0.2849) total-vm:90104kB, anon-rss:1076kB, file-rss:53772kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 230.548490][ T9054] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 230.600547][ T10] usb 6-1: USB disconnect, device number 65 [ 230.628674][ T9054] CPU: 0 UID: 0 PID: 9054 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 230.628719][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.628735][ T9054] Call Trace: [ 230.628743][ T9054] [ 230.628753][ T9054] __dump_stack+0x21/0x30 [ 230.628789][ T9054] dump_stack_lvl+0x10c/0x190 [ 230.628820][ T9054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.628851][ T9054] ? ___ratelimit+0x3f7/0x5a0 [ 230.628885][ T9054] dump_stack+0x19/0x20 [ 230.628916][ T9054] dump_header+0xd7/0x490 [ 230.628941][ T9054] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 230.628972][ T9054] oom_kill_process+0x4c0/0x7e0 [ 230.629001][ T9054] ? sched_clock_cpu+0x75/0x400 [ 230.629034][ T9054] out_of_memory+0x7ee/0xbd0 [ 230.629062][ T9054] ? __cfi_out_of_memory+0x10/0x10 [ 230.629089][ T9054] ? mutex_lock_killable+0x92/0x1c0 [ 230.629115][ T9054] ? __cfi_mutex_lock_killable+0x10/0x10 [ 230.629141][ T9054] mem_cgroup_out_of_memory+0x279/0x350 [ 230.629166][ T9054] ? drain_obj_stock+0xed0/0xed0 [ 230.629191][ T9054] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 230.629215][ T9054] try_charge_memcg+0x8f7/0xde0 [ 230.629249][ T9054] ? __cfi_try_charge_memcg+0x10/0x10 [ 230.629281][ T9054] ? __alloc_pages_noprof+0x31f/0x7b0 [ 230.629312][ T9054] ? folio_unlock+0x12f/0x1a0 [ 230.629339][ T9054] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 230.629372][ T9054] __mem_cgroup_charge+0xf6/0x410 [ 230.629407][ T9054] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 230.629442][ T9054] ? do_pte_missing+0x2bdb/0x4240 [ 230.629472][ T9054] shmem_alloc_and_add_folio+0x86d/0x1050 [ 230.629502][ T9054] ? put_swap_device+0x130/0x130 [ 230.629527][ T9054] ? shmem_huge_global_enabled+0x2da/0x360 [ 230.629552][ T9054] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 230.629576][ T9054] ? __kasan_check_write+0x18/0x20 [ 230.629610][ T9054] ? _raw_spin_lock+0x8c/0x120 [ 230.629649][ T9054] shmem_get_folio_gfp+0x5f0/0x1380 [ 230.629677][ T9054] ? shmem_get_folio+0xc0/0xc0 [ 230.629700][ T9054] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 230.629734][ T9054] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 230.629768][ T9054] ? inode_to_bdi+0x6d/0x100 [ 230.629801][ T9054] shmem_write_begin+0xf4/0x270 [ 230.629828][ T9054] generic_perform_write+0x330/0x960 [ 230.629865][ T9054] ? __cfi_generic_perform_write+0x10/0x10 [ 230.629898][ T9054] ? down_write+0xe9/0x2a0 [ 230.629922][ T9054] ? mnt_get_write_access_file+0x1af/0x3b0 [ 230.629954][ T9054] ? mnt_put_write_access_file+0xc2/0x100 [ 230.629986][ T9054] ? file_update_time+0x1ef/0x220 [ 230.630018][ T9054] shmem_file_write_iter+0x105/0x130 [ 230.630050][ T9054] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 230.630080][ T9054] __kernel_write_iter+0x392/0x830 [ 230.630103][ T9054] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 230.630134][ T9054] ? __cfi___kernel_write_iter+0x10/0x10 [ 230.630170][ T9054] ? get_dump_page+0x160/0x220 [ 230.630197][ T9054] ? __asan_memset+0x39/0x50 [ 230.630229][ T9054] ? iov_iter_bvec+0xc0/0x180 [ 230.630254][ T9054] dump_user_range+0xb06/0xdf0 [ 230.630279][ T9054] ? __cfi_dump_emit+0x10/0x10 [ 230.630313][ T9054] ? __cfi_dump_user_range+0x10/0x10 [ 230.630336][ T9054] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 230.630371][ T9054] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 230.630408][ T9054] elf_core_dump+0x2cd9/0x3810 [ 230.630440][ T9054] ? __cfi_elf_core_dump+0x10/0x10 [ 230.630477][ T9054] ? dump_interrupted+0xf0/0xf0 [ 230.630513][ T9054] ? 0xffffffffff600000 [ 230.630532][ T9054] do_coredump+0x1bfa/0x2bd0 [ 230.630571][ T9054] ? __cfi_do_coredump+0x10/0x10 [ 230.630606][ T9054] ? asm_exc_page_fault+0x2b/0x30 [ 230.630645][ T9054] ? __kasan_slab_free+0x6a/0x80 [ 230.630669][ T9054] ? kmem_cache_free+0x1c1/0x510 [ 230.630703][ T9054] ? get_signal+0xa75/0x14f0 [ 230.630733][ T9054] get_signal+0x11fd/0x14f0 [ 230.630767][ T9054] arch_do_signal_or_restart+0x96/0x720 [ 230.630804][ T9054] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 230.630844][ T9054] irqentry_exit_to_user_mode+0x4e/0xb0 [ 230.630871][ T9054] irqentry_exit+0x16/0x60 [ 230.630896][ T9054] exc_page_fault+0x66/0xc0 [ 230.630921][ T9054] asm_exc_page_fault+0x2b/0x30 [ 230.630944][ T9054] RIP: 0033:0x7f8be524f927 [ 230.630973][ T9054] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 230.630991][ T9054] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 230.631012][ T9054] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 230.631027][ T9054] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 230.631043][ T9054] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.631060][ T9054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.631075][ T9054] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 230.631096][ T9054] [ 231.107954][ T1110] usb 5-1: device descriptor read/64, error -71 [ 231.110420][ T9054] memory: usage 306908kB, limit 307200kB, failcnt 66593 [ 231.123001][ T9054] memory+swap: usage 431832kB, limit 9007199254740988kB, failcnt 0 [ 231.130990][ T9054] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 231.137989][ T9054] Memory cgroup stats for /syz0: [ 231.138157][ T9054] cache 313733120 [ 231.147012][ T9054] rss 651264 [ 231.150513][ T9054] rss_huge 0 [ 231.153732][ T9054] shmem 313188352 [ 231.157386][ T9054] mapped_file 503808 [ 231.161444][ T9054] dirty 0 [ 231.164397][ T9054] writeback 0 [ 231.167695][ T9054] workingset_refault_anon 156 [ 231.172561][ T9054] workingset_refault_file 13105 [ 231.177430][ T9054] swap 127938560 [ 231.181122][ T9054] swapcached 57344 [ 231.184960][ T9054] pgpgin 851771 [ 231.188438][ T9054] pgpgout 775482 [ 231.192039][ T9054] pgfault 308813 [ 231.195701][ T9054] pgmajfault 246 [ 231.199284][ T9054] inactive_anon 34967552 [ 231.203625][ T9054] active_anon 278802432 [ 231.207918][ T9054] inactive_file 516096 [ 231.212151][ T9054] active_file 0 [ 231.215630][ T9054] unevictable 0 [ 231.219430][ T9054] hierarchical_memory_limit 314572800 [ 231.224821][ T9054] hierarchical_memsw_limit 9223372036854771712 [ 231.231073][ T9054] total_cache 313733120 [ 231.235246][ T9054] total_rss 651264 [ 231.239016][ T9054] total_rss_huge 0 [ 231.243201][ T9054] total_shmem 313188352 [ 231.247390][ T9054] total_mapped_file 503808 [ 231.252330][ T9054] total_dirty 0 [ 231.255882][ T9054] total_writeback 0 [ 231.264742][ T9054] total_workingset_refault_anon 156 [ 231.270249][ T9054] total_workingset_refault_file 13105 [ 231.275903][ T9054] total_swap 127938560 [ 231.280025][ T9054] total_swapcached 57344 [ 231.284357][ T9054] total_pgpgin 851771 [ 231.288358][ T9054] total_pgpgout 775482 [ 231.292503][ T9054] total_pgfault 308813 [ 231.296751][ T9054] total_pgmajfault 246 [ 231.300874][ T9054] total_inactive_anon 34967552 [ 231.307456][ T9054] total_active_anon 278802432 [ 231.312528][ T9054] total_inactive_file 516096 [ 231.317222][ T9054] total_active_file 0 [ 231.321253][ T9054] total_unevictable 0 [ 231.325252][ T9054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9072,uid=0 [ 231.340239][ T9054] Memory cgroup out of memory: Killed process 9072 (syz.0.2849) total-vm:90104kB, anon-rss:948kB, file-rss:56164kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 231.348669][ T1110] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 231.498641][ T1110] usb 5-1: device descriptor read/64, error -71 [ 231.529761][ T9513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 231.697342][ T9053] syz.0.2849 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 231.738659][ T1110] usb 5-1: device descriptor read/64, error -71 [ 231.788646][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.0.2849 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 231.788690][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.788707][ T9053] Call Trace: [ 231.788716][ T9053] [ 231.788726][ T9053] __dump_stack+0x21/0x30 [ 231.788772][ T9053] dump_stack_lvl+0x10c/0x190 [ 231.788804][ T9053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.788836][ T9053] ? ___ratelimit+0x3f7/0x5a0 [ 231.788872][ T9053] dump_stack+0x19/0x20 [ 231.788903][ T9053] dump_header+0xd7/0x490 [ 231.788926][ T9053] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 231.788958][ T9053] oom_kill_process+0x4c0/0x7e0 [ 231.788992][ T9053] ? sched_clock_cpu+0x75/0x400 [ 231.789024][ T9053] out_of_memory+0x7ee/0xbd0 [ 231.789052][ T9053] ? __cfi_out_of_memory+0x10/0x10 [ 231.789079][ T9053] ? mutex_lock_killable+0x92/0x1c0 [ 231.789105][ T9053] ? __cfi_mutex_lock_killable+0x10/0x10 [ 231.789131][ T9053] mem_cgroup_out_of_memory+0x279/0x350 [ 231.789156][ T9053] ? drain_obj_stock+0xed0/0xed0 [ 231.789180][ T9053] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 231.789204][ T9053] try_charge_memcg+0x8f7/0xde0 [ 231.789237][ T9053] ? __cfi_try_charge_memcg+0x10/0x10 [ 231.789270][ T9053] ? __alloc_pages_noprof+0x31f/0x7b0 [ 231.789301][ T9053] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 231.789332][ T9053] ? __folio_batch_add_and_move+0x2ab/0x370 [ 231.789363][ T9053] __mem_cgroup_charge+0xf6/0x410 [ 231.789398][ T9053] ? _raw_spin_lock+0x8c/0x120 [ 231.789429][ T9053] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 231.789467][ T9053] shmem_alloc_and_add_folio+0x86d/0x1050 [ 231.789497][ T9053] ? put_swap_device+0x130/0x130 [ 231.789524][ T9053] ? shmem_huge_global_enabled+0x2da/0x360 [ 231.789549][ T9053] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 231.789574][ T9053] ? __kasan_check_write+0x18/0x20 [ 231.789607][ T9053] ? _raw_spin_lock+0x8c/0x120 [ 231.789637][ T9053] shmem_get_folio_gfp+0x5f0/0x1380 [ 231.789665][ T9053] ? shmem_get_folio+0xc0/0xc0 [ 231.789687][ T9053] ? follow_page_pte+0xa5c/0xb90 [ 231.789718][ T9053] ? inode_to_bdi+0x6d/0x100 [ 231.789757][ T9053] shmem_write_begin+0xf4/0x270 [ 231.789785][ T9053] generic_perform_write+0x330/0x960 [ 231.789821][ T9053] ? __cfi_generic_perform_write+0x10/0x10 [ 231.789855][ T9053] ? down_write+0xe9/0x2a0 [ 231.789881][ T9053] ? file_update_time+0xa3/0x220 [ 231.789913][ T9053] shmem_file_write_iter+0x105/0x130 [ 231.789944][ T9053] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 231.789974][ T9053] __kernel_write_iter+0x392/0x830 [ 231.789997][ T9053] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 231.790042][ T9053] ? __cfi___kernel_write_iter+0x10/0x10 [ 231.790078][ T9053] ? get_dump_page+0x160/0x220 [ 231.790113][ T9053] ? __asan_memset+0x39/0x50 [ 231.790146][ T9053] ? iov_iter_bvec+0xc0/0x180 [ 231.790173][ T9053] dump_user_range+0xb06/0xdf0 [ 231.790197][ T9053] ? __cfi_dump_emit+0x10/0x10 [ 231.790232][ T9053] ? __cfi_dump_user_range+0x10/0x10 [ 231.790254][ T9053] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 231.790290][ T9053] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 231.790326][ T9053] elf_core_dump+0x2cd9/0x3810 [ 231.790357][ T9053] ? __cfi_elf_core_dump+0x10/0x10 [ 231.790393][ T9053] ? dump_interrupted+0xf0/0xf0 [ 231.790429][ T9053] ? 0xffffffffff600000 [ 231.790448][ T9053] do_coredump+0x1bfa/0x2bd0 [ 231.790488][ T9053] ? __cfi_do_coredump+0x10/0x10 [ 231.790523][ T9053] ? asm_exc_page_fault+0x2b/0x30 [ 231.790555][ T9053] ? __kasan_slab_free+0x6a/0x80 [ 231.790580][ T9053] ? kmem_cache_free+0x1c1/0x510 [ 231.790616][ T9053] ? get_signal+0xa75/0x14f0 [ 231.790646][ T9053] get_signal+0x11fd/0x14f0 [ 231.790680][ T9053] arch_do_signal_or_restart+0x96/0x720 [ 231.790717][ T9053] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 231.790762][ T9053] irqentry_exit_to_user_mode+0x4e/0xb0 [ 231.790790][ T9053] irqentry_exit+0x16/0x60 [ 231.790814][ T9053] exc_page_fault+0x66/0xc0 [ 231.790838][ T9053] asm_exc_page_fault+0x2b/0x30 [ 231.790861][ T9053] RIP: 0033:0x7f8be524f927 [ 231.790893][ T9053] Code: 88 15 d2 5d e9 00 88 05 cf 5d e9 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 231.790919][ T9053] RSP: 002b:00007f8be61d5120 EFLAGS: 00010202 [ 231.790942][ T9053] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8be538ebe9 [ 231.790959][ T9053] RDX: 00007f8be61d5140 RSI: 00007f8be61d5270 RDI: 000000000000000b [ 231.790975][ T9053] RBP: 00007f8be5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 231.790990][ T9053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.791006][ T9053] R13: 00007f8be55b6128 R14: 00007f8be55b6090 R15: 00007ffe20a59a18 [ 231.791026][ T9053] [ 231.791036][ T9053] memory: usage 280524kB, limit 307200kB, failcnt 69419 [ 232.265025][ T1110] usb usb5-port1: attempt power cycle [ 232.267486][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'. [ 232.287132][ T9053] memory+swap: usage 392252kB, limit 9007199254740988kB, failcnt 0 [ 232.328617][ T9053] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 232.347935][ T9053] Memory cgroup stats for /syz0: [ 232.348111][ T9053] cache 277573632 [ 232.366084][ T9053] rss 663552 [ 232.374101][ T9053] rss_huge 0 [ 232.377565][ T9053] shmem 277573632 [ 232.381338][ T9053] mapped_file 0 [ 232.384984][ T9053] dirty 0 [ 232.388019][ T9053] writeback 212992 [ 232.392173][ T9053] workingset_refault_anon 158 [ 232.397147][ T9053] workingset_refault_file 14100 [ 232.402297][ T9053] swap 127676416 [ 232.411147][ T9053] swapcached 319488 [ 232.415498][ T9053] pgpgin 865963 [ 232.419345][ T9053] pgpgout 798473 [ 232.423266][ T9053] pgfault 309112 [ 232.427238][ T9053] pgmajfault 257 [ 232.431402][ T9053] inactive_anon 157003776 [ 232.436550][ T9053] active_anon 121266176 [ 232.441462][ T9053] inactive_file 0 [ 232.445629][ T9053] active_file 0 [ 232.449155][ T9053] unevictable 0 [ 232.452628][ T9053] hierarchical_memory_limit 314572800 [ 232.458013][ T9053] hierarchical_memsw_limit 9223372036854771712 [ 232.464215][ T9053] total_cache 277573632 [ 232.468521][ T9053] total_rss 663552 [ 232.472809][ T9053] total_rss_huge 0 [ 232.476861][ T9053] total_shmem 277573632 [ 232.478658][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 232.481706][ T9053] total_mapped_file 0 [ 232.498643][ T9053] total_dirty 0 [ 232.502133][ T9053] total_writeback 212992 [ 232.506386][ T9053] total_workingset_refault_anon 158 [ 232.518644][ T9053] total_workingset_refault_file 14100 [ 232.528712][ T9053] total_swap 127676416 [ 232.532821][ T9053] total_swapcached 319488 [ 232.537172][ T9053] total_pgpgin 865963 [ 232.558634][ T9053] total_pgpgout 798473 [ 232.562760][ T9053] total_pgfault 309112 [ 232.566862][ T9053] total_pgmajfault 257 [ 232.588702][ T9053] total_inactive_anon 157003776 [ 232.593605][ T9053] total_active_anon 121266176 [ 232.598297][ T9053] total_inactive_file 0 [ 232.608661][ T1110] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 232.616331][ T9053] total_active_file 0 [ 232.628630][ T9053] total_unevictable 0 [ 232.632666][ T9053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2849,pid=9053,uid=0 [ 232.649010][ T1110] usb 5-1: device descriptor read/8, error -71 [ 232.649675][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.668621][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.668626][ T9053] Memory cgroup out of memory: Killed process 9053 (syz.0.2849) total-vm:90104kB, anon-rss:1076kB, file-rss:53900kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 232.687798][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.719036][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.728305][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.728790][ T9542] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 232.736590][ T10] usb 6-1: Product: syz [ 232.748753][ T10] usb 6-1: Manufacturer: syz [ 232.753389][ T10] usb 6-1: SerialNumber: syz [ 232.759822][ T10] cdc_mbim 6-1:1.0: MBIM functional descriptor missing [ 232.766787][ T10] cdc_mbim 6-1:1.0: bind() failure [ 232.779725][ T1110] usb 5-1: device descriptor read/8, error -71 [ 232.900793][ T9552] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3013'. [ 232.968859][ T9535] kvm: user requested TSC rate below hardware speed [ 233.018673][ T1110] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 233.030268][ T10] usb 6-1: USB disconnect, device number 66 [ 233.055002][ T1110] usb 5-1: device descriptor read/8, error -71 [ 233.108935][ T9562] 9pnet_fd: p9_fd_create_unix (9562): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.176790][ T9567] rust_binder: Error while translating object. [ 233.176887][ T9567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.189271][ T1110] usb 5-1: device descriptor read/8, error -71 [ 233.193628][ T9567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 233.264763][ T36] audit: type=1326 audit(1756448965.098:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.308752][ T1110] usb usb5-port1: unable to enumerate USB device [ 233.318629][ T36] audit: type=1326 audit(1756448965.098:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.358700][ T36] audit: type=1326 audit(1756448965.098:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.388627][ T36] audit: type=1326 audit(1756448965.098:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.418316][ T36] audit: type=1326 audit(1756448965.098:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.467127][ T36] audit: type=1326 audit(1756448965.108:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.494552][ T36] audit: type=1326 audit(1756448965.108:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.528473][ T36] audit: type=1326 audit(1756448965.118:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.598629][ T36] audit: type=1326 audit(1756448965.348:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.649631][ T9584] rust_binder: Got transaction with invalid offset. [ 233.649720][ T9584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.656654][ T36] audit: type=1326 audit(1756448965.348:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9574 comm="syz.4.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a458ebe9 code=0x7ffc0000 [ 233.698711][ T9584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 233.900615][ T9601] tipc: Started in network mode [ 233.929478][ T9601] tipc: Node identity 960930fe559f, cluster identity 4711 [ 233.936746][ T9601] tipc: Enabled bearer , priority 0 [ 233.975074][ T9601] rust_binder: Write failure EFAULT in pid:265 [ 233.976620][ T9599] tipc: Disabling bearer [ 234.378646][ T10] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 234.419481][ T9609] cgroup: none used incorrectly [ 234.528639][ T10] usb 6-1: device descriptor read/64, error -71 [ 234.585909][ T9611] overlayfs: conflicting options: userxattr,verity=require [ 234.684616][ T9616] /dev/loop0: Can't lookup blockdev [ 234.684627][ T9617] /dev/loop0: Can't lookup blockdev [ 234.695935][ T9619] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 234.788648][ T10] usb 6-1: device descriptor read/64, error -71 [ 235.050247][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 235.188658][ T10] usb 6-1: device descriptor read/64, error -71 [ 235.438656][ T10] usb 6-1: device descriptor read/64, error -71 [ 235.548807][ T10] usb usb6-port1: attempt power cycle [ 235.692834][ T9650] rust_binder: Error while translating object. [ 235.692868][ T9650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.699200][ T9650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 235.750103][ T9656] overlayfs: failed to clone upperpath [ 235.777398][ T9652] rust_binder: Error while translating object. [ 235.777498][ T9652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 235.784232][ T9652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:148 [ 235.908682][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 235.939675][ T10] usb 6-1: device descriptor read/8, error -71 [ 236.069771][ T10] usb 6-1: device descriptor read/8, error -71 [ 236.308708][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 236.329697][ T10] usb 6-1: device descriptor read/8, error -71 [ 236.459709][ T10] usb 6-1: device descriptor read/8, error -71 [ 236.568819][ T10] usb usb6-port1: unable to enumerate USB device [ 237.096103][ T9701] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3064'. [ 237.192947][ T9715] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3070'. [ 237.256016][ T9728] overlayfs: failed to clone upperpath [ 237.350520][ T9754] overlayfs: failed to clone upperpath [ 237.483754][ T10] rust_binder: 9758: removing orphan mapping 0:24 [ 237.512039][ T9135] ------------[ cut here ]------------ [ 237.517598][ T9135] WARNING: CPU: 1 PID: 9135 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 237.525689][ T9135] Modules linked in: [ 237.529624][ T9135] CPU: 1 UID: 0 PID: 9135 Comm: syz.5.2870 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 237.541205][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.551490][ T9135] RIP: 0010:drop_nlink+0xce/0x110 [ 237.556565][ T9135] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 237.576240][ T9135] RSP: 0018:ffffc9000505f860 EFLAGS: 00010293 [ 237.582369][ T9135] RAX: ffffffff81edc76e RBX: ffff88811e849308 RCX: ffff888111264c00 [ 237.590653][ T9135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.598694][ T9135] RBP: ffffc9000505f888 R08: 0000000000000003 R09: 0000000000000004 [ 237.606684][ T9135] R10: dffffc0000000000 R11: fffff52000a0befc R12: dffffc0000000000 [ 237.614791][ T9135] R13: 1ffff11023d0926a R14: ffff88811e849350 R15: 0000000000000000 [ 237.622840][ T9135] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 237.631817][ T9135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.638422][ T9135] CR2: 00007f91006e8710 CR3: 000000011c304000 CR4: 00000000003526b0 [ 237.646447][ T9135] Call Trace: [ 237.649882][ T9135] [ 237.652837][ T9135] shmem_rmdir+0x5f/0x90 [ 237.657108][ T9135] vfs_rmdir+0x3e0/0x560 [ 237.661398][ T9135] incfs_kill_sb+0x109/0x230 [ 237.666036][ T9135] deactivate_locked_super+0xd5/0x2a0 [ 237.671487][ T9135] deactivate_super+0xb8/0xe0 [ 237.676236][ T9135] cleanup_mnt+0x3f1/0x480 [ 237.680728][ T9135] __cleanup_mnt+0x1d/0x40 [ 237.685175][ T9135] task_work_run+0x1e3/0x250 [ 237.689813][ T9135] ? __cfi_task_work_run+0x10/0x10 [ 237.694954][ T9135] ? free_nsproxy+0x223/0x290 [ 237.699719][ T9135] do_exit+0x9bc/0x2630 [ 237.703922][ T9135] ? __sched_text_start+0x10/0x10 [ 237.709093][ T9135] ? __cfi_do_exit+0x10/0x10 [ 237.713723][ T9135] ? __kasan_check_write+0x18/0x20 [ 237.718887][ T9135] ? _raw_spin_lock_irq+0x8d/0x120 [ 237.724042][ T9135] ? __kasan_check_read+0x15/0x20 [ 237.729140][ T9135] ? cgroup_update_frozen+0x160/0x990 [ 237.734556][ T9135] do_group_exit+0x22a/0x300 [ 237.739243][ T9135] ? cgroup_leave_frozen+0x16c/0x2b0 [ 237.744577][ T9135] get_signal+0x139d/0x14f0 [ 237.749141][ T9135] arch_do_signal_or_restart+0x96/0x720 [ 237.754730][ T9135] ? common_nsleep+0x93/0xb0 [ 237.759470][ T9135] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 237.765663][ T9135] ? __se_sys_clock_nanosleep+0x300/0x390 [ 237.771439][ T9135] ? __kasan_check_read+0x15/0x20 [ 237.776591][ T9135] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 237.782814][ T9135] syscall_exit_to_user_mode+0x58/0xb0 [ 237.788328][ T9135] do_syscall_64+0x64/0xf0 [ 237.792802][ T9135] ? clear_bhb_loop+0x50/0xa0 [ 237.797530][ T9135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.803494][ T9135] RIP: 0033:0x7f90ff9c14a5 [ 237.807932][ T9135] Code: Unable to access opcode bytes at 0x7f90ff9c147b. [ 237.815003][ T9135] RSP: 002b:00007f9100830f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 237.823486][ T9135] RAX: fffffffffffffdfc RBX: 00007f90ffbb5fa0 RCX: 00007f90ff9c14a5 [ 237.831525][ T9135] RDX: 00007f9100830fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.839567][ T9135] RBP: 00007f90ffa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 237.847569][ T9135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.855677][ T9135] R13: 00007f90ffbb6038 R14: 00007f90ffbb5fa0 R15: 00007fffba3c3878 [ 237.863721][ T9135] [ 237.866785][ T9135] ---[ end trace 0000000000000000 ]--- [ 237.872754][ T9135] ================================================================== [ 237.880890][ T9135] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 237.887407][ T9135] Write of size 4 at addr 0000000000000168 by task syz.5.2870/9135 [ 237.895300][ T9135] [ 237.897631][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.5.2870 Tainted: G W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 237.897658][ T9135] Tainted: [W]=WARN [ 237.897665][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.897677][ T9135] Call Trace: [ 237.897685][ T9135] [ 237.897692][ T9135] __dump_stack+0x21/0x30 [ 237.897719][ T9135] dump_stack_lvl+0x10c/0x190 [ 237.897743][ T9135] ? __cfi_dump_stack_lvl+0x10/0x10 [ 237.897769][ T9135] print_report+0x3d/0x70 [ 237.897787][ T9135] kasan_report+0x163/0x1a0 [ 237.897807][ T9135] ? ihold+0x24/0x70 [ 237.897825][ T9135] ? _raw_spin_unlock+0x45/0x60 [ 237.897847][ T9135] ? ihold+0x24/0x70 [ 237.897865][ T9135] kasan_check_range+0x299/0x2a0 [ 237.897884][ T9135] __kasan_check_write+0x18/0x20 [ 237.897908][ T9135] ihold+0x24/0x70 [ 237.897925][ T9135] vfs_rmdir+0x26a/0x560 [ 237.897947][ T9135] incfs_kill_sb+0x109/0x230 [ 237.897978][ T9135] deactivate_locked_super+0xd5/0x2a0 [ 237.898000][ T9135] deactivate_super+0xb8/0xe0 [ 237.898021][ T9135] cleanup_mnt+0x3f1/0x480 [ 237.898040][ T9135] __cleanup_mnt+0x1d/0x40 [ 237.898057][ T9135] task_work_run+0x1e3/0x250 [ 237.898078][ T9135] ? __cfi_task_work_run+0x10/0x10 [ 237.898097][ T9135] ? free_nsproxy+0x223/0x290 [ 237.898130][ T9135] do_exit+0x9bc/0x2630 [ 237.898160][ T9135] ? __sched_text_start+0x10/0x10 [ 237.898196][ T9135] ? __cfi_do_exit+0x10/0x10 [ 237.898228][ T9135] ? __kasan_check_write+0x18/0x20 [ 237.898252][ T9135] ? _raw_spin_lock_irq+0x8d/0x120 [ 237.898274][ T9135] ? __kasan_check_read+0x15/0x20 [ 237.898297][ T9135] ? cgroup_update_frozen+0x160/0x990 [ 237.898314][ T9135] do_group_exit+0x22a/0x300 [ 237.898335][ T9135] ? cgroup_leave_frozen+0x16c/0x2b0 [ 237.898352][ T9135] get_signal+0x139d/0x14f0 [ 237.898375][ T9135] arch_do_signal_or_restart+0x96/0x720 [ 237.898401][ T9135] ? common_nsleep+0x93/0xb0 [ 237.898417][ T9135] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 237.898442][ T9135] ? __se_sys_clock_nanosleep+0x300/0x390 [ 237.898470][ T9135] ? __kasan_check_read+0x15/0x20 [ 237.898494][ T9135] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 237.898516][ T9135] syscall_exit_to_user_mode+0x58/0xb0 [ 237.898535][ T9135] do_syscall_64+0x64/0xf0 [ 237.898557][ T9135] ? clear_bhb_loop+0x50/0xa0 [ 237.898576][ T9135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.898594][ T9135] RIP: 0033:0x7f90ff9c14a5 [ 237.898609][ T9135] Code: Unable to access opcode bytes at 0x7f90ff9c147b. [ 237.898618][ T9135] RSP: 002b:00007f9100830f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 237.898637][ T9135] RAX: fffffffffffffdfc RBX: 00007f90ffbb5fa0 RCX: 00007f90ff9c14a5 [ 237.898651][ T9135] RDX: 00007f9100830fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.898663][ T9135] RBP: 00007f90ffa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 237.898675][ T9135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 237.898686][ T9135] R13: 00007f90ffbb6038 R14: 00007f90ffbb5fa0 R15: 00007fffba3c3878 [ 237.898702][ T9135] [ 237.898708][ T9135] ================================================================== [ 238.198168][ T9135] Disabling lock debugging due to kernel taint [ 238.204526][ T9135] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 238.212398][ T9135] #PF: supervisor write access in kernel mode [ 238.218593][ T9135] #PF: error_code(0x0002) - not-present page [ 238.224602][ T9135] PGD 800000012dc21067 P4D 800000012dc21067 PUD 0 [ 238.231140][ T9135] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 238.237238][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.5.2870 Tainted: G B W syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 238.250278][ T9135] Tainted: [B]=BAD_PAGE, [W]=WARN [ 238.255315][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.265381][ T9135] RIP: 0010:ihold+0x2a/0x70 [ 238.269912][ T9135] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 238.289527][ T9135] RSP: 0018:ffffc9000505f8a0 EFLAGS: 00010246 [ 238.295635][ T9135] RAX: ffff888111264c00 RBX: 0000000000000000 RCX: ffff888111264c00 [ 238.303648][ T9135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.312259][ T9135] RBP: ffffc9000505f8b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 238.320259][ T9135] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811e849314 [ 238.328285][ T9135] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 238.336283][ T9135] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 238.345240][ T9135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.351842][ T9135] CR2: 0000000000000168 CR3: 000000011c710000 CR4: 00000000003526b0 [ 238.359861][ T9135] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 238.367878][ T9135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 238.375871][ T9135] Call Trace: [ 238.379193][ T9135] [ 238.382152][ T9135] vfs_rmdir+0x26a/0x560 [ 238.386413][ T9135] incfs_kill_sb+0x109/0x230 [ 238.391020][ T9135] deactivate_locked_super+0xd5/0x2a0 [ 238.396402][ T9135] deactivate_super+0xb8/0xe0 [ 238.401114][ T9135] cleanup_mnt+0x3f1/0x480 [ 238.405573][ T9135] __cleanup_mnt+0x1d/0x40 [ 238.410004][ T9135] task_work_run+0x1e3/0x250 [ 238.414624][ T9135] ? __cfi_task_work_run+0x10/0x10 [ 238.419758][ T9135] ? free_nsproxy+0x223/0x290 [ 238.424461][ T9135] do_exit+0x9bc/0x2630 [ 238.428642][ T9135] ? __sched_text_start+0x10/0x10 [ 238.433919][ T9135] ? __cfi_do_exit+0x10/0x10 [ 238.438542][ T9135] ? __kasan_check_write+0x18/0x20 [ 238.443689][ T9135] ? _raw_spin_lock_irq+0x8d/0x120 [ 238.448826][ T9135] ? __kasan_check_read+0x15/0x20 [ 238.453882][ T9135] ? cgroup_update_frozen+0x160/0x990 [ 238.459269][ T9135] do_group_exit+0x22a/0x300 [ 238.463870][ T9135] ? cgroup_leave_frozen+0x16c/0x2b0 [ 238.469173][ T9135] get_signal+0x139d/0x14f0 [ 238.473696][ T9135] arch_do_signal_or_restart+0x96/0x720 [ 238.479256][ T9135] ? common_nsleep+0x93/0xb0 [ 238.483952][ T9135] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 238.490137][ T9135] ? __se_sys_clock_nanosleep+0x300/0x390 [ 238.495954][ T9135] ? __kasan_check_read+0x15/0x20 [ 238.501039][ T9135] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 238.507122][ T9135] syscall_exit_to_user_mode+0x58/0xb0 [ 238.512596][ T9135] do_syscall_64+0x64/0xf0 [ 238.517043][ T9135] ? clear_bhb_loop+0x50/0xa0 [ 238.521733][ T9135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 238.527651][ T9135] RIP: 0033:0x7f90ff9c14a5 [ 238.532164][ T9135] Code: Unable to access opcode bytes at 0x7f90ff9c147b. [ 238.539190][ T9135] RSP: 002b:00007f9100830f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 238.547612][ T9135] RAX: fffffffffffffdfc RBX: 00007f90ffbb5fa0 RCX: 00007f90ff9c14a5 [ 238.555592][ T9135] RDX: 00007f9100830fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.563569][ T9135] RBP: 00007f90ffa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 238.571546][ T9135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.579524][ T9135] R13: 00007f90ffbb6038 R14: 00007f90ffbb5fa0 R15: 00007fffba3c3878 [ 238.587523][ T9135] [ 238.590556][ T9135] Modules linked in: [ 238.594492][ T9135] CR2: 0000000000000168 [ 238.598647][ T9135] ---[ end trace 0000000000000000 ]--- [ 238.604100][ T9135] RIP: 0010:ihold+0x2a/0x70 [ 238.608622][ T9135] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 238.628251][ T9135] RSP: 0018:ffffc9000505f8a0 EFLAGS: 00010246 [ 238.634347][ T9135] RAX: ffff888111264c00 RBX: 0000000000000000 RCX: ffff888111264c00 [ 238.642330][ T9135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.650307][ T9135] RBP: ffffc9000505f8b0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 238.658372][ T9135] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88811e849314 [ 238.666361][ T9135] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 238.674338][ T9135] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 238.683359][ T9135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.689946][ T9135] CR2: 0000000000000168 CR3: 000000011c710000 CR4: 00000000003526b0 [ 238.697931][ T9135] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 238.705918][ T9135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 238.713954][ T9135] Kernel panic - not syncing: Fatal exception [ 238.720914][ T9135] Kernel Offset: disabled [ 238.725254][ T9135] Rebooting in 86400 seconds..