last executing test programs: 31.899365125s ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000040)="88d0a4332ca430eb314853fe5cef77c890ddaf6e26", 0x15) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 31.827654616s ago: executing program 0 (id=130): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0xb, {{0xa, 0x4e20, 0x3, @private2}}, {{0xa, 0x4e20, 0x9, @mcast2, 0x2}}}, 0x108) ioctl$TIOCSIG(r1, 0x40045436, 0x14) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801b, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x80) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000380)=0xffffffff) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x3e) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020) 31.030691288s ago: executing program 0 (id=141): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x1, 0x6]) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', r4, 0x29, 0x0, 0x1, 0xa0d, 0x20, @loopback, @mcast1, 0x7800, 0x1, 0x0, 0xc}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', r5, 0x20, 0x8000, 0x6, 0x800, {{0x18, 0x4, 0x1, 0x1d, 0x60, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0xe4, [@rand_addr=0x64010101, @remote, @local, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x64, 0x1, 0x9, [{@multicast2, 0x5}, {@multicast2, 0x80}, {@local, 0x9}, {@local, 0x100}, {@multicast1, 0x2}]}, @rr={0x7, 0xb, 0xe0, [@multicast1, @local]}]}}}}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x3, 0x0, [{0x290, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0xb17, 0x0, 0x9}]}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000002c0)={r4, 0x1, 0x6}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) r7 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r9 = syz_socket_connect_nvme_tcp() r10 = accept(r2, 0x0, &(0x7f0000000840)) r11 = syz_io_uring_complete(0x0) getresuid(&(0x7f0000003400)=0x0, &(0x7f0000003440), &(0x7f0000003480)) r13 = getgid() read$FUSE(r1, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005500)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000005600)=0xe8) read$FUSE(r3, &(0x7f0000005640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000007680)=0x0) getresuid(&(0x7f00000076c0), &(0x7f0000007700)=0x0, &(0x7f0000007740)) fcntl$getownex(r1, 0x10, &(0x7f0000007e40)={0x0, 0x0}) fstat(r1, &(0x7f0000007e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getegid() read$FUSE(r2, &(0x7f0000007f00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000009f40)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f000000a040)=0xe8) getgroups(0x3, &(0x7f000000a080)=[0xee00, 0x0, 0xee00]) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f000000a0c0)={'\x00', 0x4, 0x1000, 0x3, 0x33ae, 0x1, 0x0}) sendmmsg$unix(r3, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="e0010706e2", 0x5}, {&(0x7f0000000340)="f6396bb0a9b669a5775663c8295a437c774d87d3fb64853ad1aa18688030b032cfe2e11a77f51dc2d8f44fd22a1b200405012614429c39cb4d393205fb64f71a6b2902ed0937b2965fd78a7ba72d499acd7d3d8ffc941a83f946c35d40270456e8403c81ec8af18ef9152a0fcd6cedc550fd22009117ca2d49c62ee4830ffb70acd1606d5d1c", 0x86}, {&(0x7f0000000400)}, {&(0x7f0000000440)="053e38a4484ca750d1e62a5d0052aad43d453aa88071", 0x16}, {&(0x7f0000000480)="5d93e8076f0c6ad2984454404a68e9c85ab743d2c9afd80b18c626e3b1c5b37e9d74c3c5596e85f8bba728612c29de8edec8e79ce57ab7d006daa0455b442d0104e31897abf4cc23b992a4afd3cdc17cf65c8cecc2595c6ad7745147cc282e50ff4d5441eb39347f4211449aec2fd368f444b8f91d64fcd5862f006754dede1c8c954796652647e5063bd2884f85dc217cb1", 0x92}, {&(0x7f0000000540)="e973877160362870dfb41050ae4d6bee455c67164186d628fabd231b82e590caddfee81e58d2f72bc42eb54d75a31484e9a7cd3467c5f410", 0x38}, {&(0x7f0000000580)="a2beb98401eed8b0cf6d0230e4e98cd1c1e9d9ec0e2b5fdd1d79c3409a5b8454904434ccaf396684c509745c424407ab5d462b1fc60eb8bec6094ce9c4192d77bbcf29ef8de6a53868634e3707dc5ed55be4b6b3ecabb4638da2a1d8", 0x5c}, {&(0x7f0000000600)="6714869bdd18cb235ee16138d9f58ce8ebbb2d1971e7d39f1f84dea3db3dfce3f14397452b2502163b42eb77188d8954b08ebb8cb9e9755056c1323392f42e127007ecb5", 0x44}], 0x8, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r9, r3, r3, r3, r10]}}], 0x48, 0x24008081}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000900)="d4d319f3d1d4730457f82c290b8d37121e1326c3d438e5ec428865bb0727a30c572ae194cd60d7f19ad2419cc6e13f72e3234fdfc31cf28d254506b86949c83e1a9db312262db44b59086e76a0892e7ce2d02ec35efd4f72397c4160e09f2334172ed0629785aa8480455dcf16192d6c1bbb11e55a2d5e14a6c38f40842c9eb5388fd5af80962cc1807651af67d18e5569c280691ce716e458a7acb0e5cab20eed82ef8867184e08dc896d5e90", 0xad}, {&(0x7f00000009c0)="c9f4666b1894c0d1120c62decd90a674a56c03ba4e6b4873a4dd03dae71e5aee17668a7cbc0efbc55489af58c100977a", 0x30}, {&(0x7f0000000a00)="6a83eb3723ef154198b945b917a0f0688d882c0225ff5e1a4d28821fac7473d3701450f0872db34c96c23edccf97485a8a5407fce3e40b097dd759f825587a7b3d055b0e0de700ab803eecb76ee95512ffeda05703b6c9888e1169f5c45b8bf183478811033040a2a87622cec92df24e8380295e", 0x74}, {&(0x7f0000000a80)="da305f7a753ca742ad4c3c223de9cebdd1d1a4146cd26e7db2966c0be2ecc988f1bb154139f47bd47ad7efa716232ed33b4a10ae1b2c9bddc83d12cecd339edf4cad941d857a001d250e0cbdc025c79d0fc13680a7cad911e1d0ea9ff24494c575298baad0f2036914eb4abb70fdcdf5fda67513bbcb76bca845a5c584d5fcf98d929674d8436468bd4caeefa1eff466f9b745767f9471566663575f9ee2026edeb8070394f6ad062e5d07fefae086d848925bf234bf8c762f9908b4270b0e113ede03eefce6ef3b8f183e4e3357423d7fb6d266a86b1a80ec22da3c1b50e78b7538413828", 0xe5}, {&(0x7f0000000b80)="ae3e9abdc1d701765cc31758b821b1c5636feb7f2fe82e4a501d0e0dd0a29d46e61f57f32db592610ee5bd978d9350ce068285220f80713379d8f84820c3fc501280f643fc7dbf0a24b79d55b31c18cab43df4e1343c68348ca493d8ed35ca4ff0ee6bc719263c0c55ec36c29a684b2fe1840c5b30f9a108fdf0605ab5bef9aa7478559423738af2948b43b916ecae144e6e18a8d016c15d3682d214c8f45b4b6b29dcd286044b4ea8f56324c94205e5d1d934c4d3fa97a017de81f8846d1760dfcd7ca6687b6c70cc6f1713335eeb137146f2c7cf0cede8b716220266da2c8f307d055028cbe812ec26fd5ddc134d", 0xef}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="4a3357a25e7adb8d124bb207b4ed02fa54df64217f9352d4aa8df552c4d5fb787549a616ae0a93d554767bac0f4842aa276b0daab14584d1b7caa6483010cd83914ef0989d07a8521737d0d714b959c4d32e9b50ec5af49f01e85b268ec154186e4ab4dc406627206ee394dce6f22ea1883be6addc8e50942e7c4dedf68d130eb8ce", 0x82}, {&(0x7f0000001d40)="ea2fa0ab5494c9afaad4418fd8d1d15e02a1f9696d769878630591a6d149cef3cf41b50fc13120f5bdb73a9b86c69d18c16999dcc7347c034b2fa79a918095d09aa3a3568aa5d14a8dffa7c7cf3b7700529026fdec2880aa83d5e753caa64b2629d2929cba06239abd3cf4fa589d868f0d805a59b4a62f0985f3e357fb87b4d0a0ea6abe80147367a98a10fc625b0f102a30c3cd5f8073f1af556cf0beb74e0b4854fdf466e3d96e958c6b", 0xab}, {&(0x7f0000001e00)="7bc661d552c3759900489f850ba21a4f08570a69fed412ce3061292baaab61c45017e3814ceb50227fc9a97ad201659a3869c4689b15e343164ddaf271be29e3f342ae59e21d752001efbf753196445420aa4de871787e199b37450cecd142a6a8568b2f99b598851e13f9a1727e5cf8", 0x70}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f0000001f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001fc0)="c6706d531584f468f8d68f1abf3bc90aa23fa02b3930ce78b6f14dc1d311c6f2dc084a31adee66f4a7b82ac6e1a1301449bbaa77b24ef7c7960e3feeb9", 0x3d}, {0xfffffffffffffffc}, {&(0x7f0000002000)="359270de55030fd20b91d748d699cd49127b4a936c4ac21f84ad71726d913574b917fc247f347f1fda63e86d91315ba1216ba6dfe18e97342b398fd5130b0b00bbdbc98ff5c8b371f61c2b036c9f360ea9a893ade6c28d0bc66db9f75dac75de020422cbf37093979d57d66ccca3ceb1668719ccbb9813290a3608ec485267ba654091fed584ad5998212f4a32699c9ca3ef06662f1e9f3c1ec6", 0x9a}, {&(0x7f00000020c0)="c89e3ac2", 0x4}, {&(0x7f0000002100)="fede47d1867099d76dbd74a119ade518bfc8d1d30e44bd42d910abaf7511c6a927feb22b2e0edc7d00f6c602561b30a3d4889774237d104d4ed7c2714f76d623606e240a8616717ee60782b4d91b8fb090605e142fc23e44a7c2bb1b05796a8190acd7573f60e377d09dae4160d3ab3147eee0d706879522787d335ec9a74ce5370fa14dc456f7ff72155904af30184eb5a5316c475a0d6c42798526486d92cfb2732b513a4ed44c110705639e426bd6", 0xb0}, {&(0x7f00000021c0)}, {&(0x7f0000002200)="26b1f650f631955d78339750810d203ad462826ea8d83911144cfbb63df317114985c239948d", 0x26}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="2237483be55785f1ed2d1310c8d18d77ded0495aad2ae61604c1a5b4d45d418af31c12076f747bcb969f9e2c53a90361b471349f56070849451b8c0b5d2804ec3c8d42767492d6707e47f9118f66b342685e1448a1d032ee461a72a4d21feca3223d16a59d70a189576e8adc91ccbe0f8e437e3302b98fe06dd7a75ca7a0899d32eb5b301a46b0ab68090caa2aacfad7c6f323f58516e47f17fad3025f756b04ddbd187fec0a64f8c929b71a80804301299ca99c1496b2c6ed9aecd81b01823c58c4be97835f8db9317118426bb4db5e3981afbf4d6b6241f8892caccf", 0xdd}], 0x9, &(0x7f0000007780)=[@rights={{0x24, 0x1, 0x1, [r3, r2, r2, r2, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, r1, r1, r3, r1, r3, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r1]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, 0xffffffffffffffff}}}], 0xf8}}, {{&(0x7f0000007880)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000007900)="d75b6cc3a4b8babd7ce0c3dc465cdeee54512c7803b9294a605896601e1e9ceaab6bfa99642117f429704ed3a9aad22f105da836e8b4", 0x36}, {&(0x7f0000007940)="d3b5186fe83861b8de87868a37f47a458e476438f14dd66c63581260367b7bb06bb32e5014a5a07b129b09bee84bbb415ca240928656ea36830b95afd9a6ffc8ea8becb59ce5b220d8efdf0b2df515152fce96d4aacc409f65c7d7cee054a65b41906dff02e0af109d5c181c182faea2c176574c", 0x74}, {&(0x7f00000079c0)="d0786993d53904ab1ba6fd4e9bb168a20ec06d531948a5d6bce6969f0a9a2e4157f62a468137bad90facb29bd65eec37c5add39fe3dc3bc86c2712b68c5b2e501902645337351a6b3ee2d13dbc318c7c02ead13d90d8389d2f91a7413e283984c0748e571ed4d3016d2848cce9f0878ae82b181f9cf93e3f2ee06f9134217e1156af49b7b2e40e22592239788bc32a5373128744df84c9aef93ac0500447043ae4", 0xa1}, {&(0x7f0000007a80)="4521ba5408ffbfb97d7a5c02b1cb9cd9c11f83e7def1643c5afce4b433f05065108326942189c44a97894a9a485690b7a550f2afa020362d638a9cb8d21b55d8bbb5c5547a4e77c32e211a", 0x4b}, {&(0x7f0000007b00)="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", 0xfc}, {&(0x7f0000007c00)="5aa2e00fb02f0ae2c2b3b0b47cf7873f440f30d58f137fe84f25a4f0a46ebb19ed8cc3bf56da98cf71de06bf008f278eec76eb8b6d95fcca56d3a88529728a3330112634176fd8c8787bf4afe467961caece4baf0976684b0cbd97a79263f2af11279eaa51153ba8b05b1ac91571bb942f229cd0ed19f09bd03b7b07bc574aaba338e9c3313549bc85521ad04199d3399dc03587583e", 0x96}, {&(0x7f0000007cc0)="5ddaf315f1c7a0c8c9de89f55ca09f1e8086821cb467e0b9bf070e4e18bf496d6510c000b60bf067aab504b360530b90a50fb61b6e3e4f24a8d7afd8014c5f7c98c5f59ce651dd6bfde099d22a98c4ae0686a3d9083e3f68e53d99964ad1713ee8e7311fbd2c6d7f356cfd346c90a143a63dec1ad5d04acca5e701ca04380aa27b302b117ea952db1dd14f5976f2714c8c80a1d558a1ac6a539c47e5ebfb2294bc7590099ad87e1ea41c3b7d1c361c0084363221e145a68908ccdbfa6cea27403ba915cac05292eb4ee3e37f8612609fe8bb65e799b474b5e832bc01c4e5da1ce904bfba20529c", 0xe7}], 0x7, &(0x7f000000a680)=[@cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r3, r3, r3, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r25}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x130, 0x4c004}}], 0x4, 0x4000008) 30.140095271s ago: executing program 0 (id=143): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) 30.139675661s ago: executing program 0 (id=144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x15, 0x3, 0x20004, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x20002, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'user_id'}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 30.041433393s ago: executing program 0 (id=145): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket(0x15, 0x3, 0x3a) r1 = socket(0x10, 0x80000, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000740)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x134) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000017c0)=""/4117, 0x1015}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x52e}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x7, 0x0, &(0x7f0000000340)) write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0x12) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) getresgid(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000380)) socket(0x2e, 0x3, 0x6) unshare(0x40600) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40081271, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f00000008c0)) socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 29.981002644s ago: executing program 32 (id=145): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket(0x15, 0x3, 0x3a) r1 = socket(0x10, 0x80000, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000740)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x134) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000017c0)=""/4117, 0x1015}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x6}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x52e}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x7, 0x2100, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x7, 0x0, &(0x7f0000000340)) write$cgroup_int(r6, &(0x7f0000000180)=0x3, 0x12) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) getresgid(&(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000380)) socket(0x2e, 0x3, 0x6) unshare(0x40600) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40081271, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r9, 0x0, 0xf, 0x0, &(0x7f00000008c0)) socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) 3.159445482s ago: executing program 2 (id=348): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) getpriority(0x4320e11e835fbdba, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a008080"], 0xb8}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x4000000000000}}, &(0x7f0000000100)}, 0x1000}], 0xfffffffffffffe23, 0x700000000000000, 0x0}) 3.158480052s ago: executing program 2 (id=349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.232013036s ago: executing program 2 (id=358): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xa4ad5000) 2.104198308s ago: executing program 2 (id=364): unshare(0x62040200) unshare(0x800) syz_clone(0x8480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) pwritev(r0, 0x0, 0x0, 0x0, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x33d8c000) 1.386678259s ago: executing program 1 (id=372): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) (async) io_setup(0x4, &(0x7f0000000100)) (async) 1.328096549s ago: executing program 1 (id=373): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f0000000340)="00bffdf63d", 0x5, 0xd1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) pipe2(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.327764549s ago: executing program 1 (id=374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000580)=[@uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x4, 0x40000000}}, @code={0x1, 0x79, {"0fc7be5a1da045c7442400c8520000c7442402ed150000c7442406000000000f011c2466baf80cb8add6b383ef66bafc0cec0f01ca44dec866b89a000f00d0420fc76d04b9800000c00f3235000100000f300f2266c744240000010000c744240201000000ff1c24"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x61, {"66420f3880b67da6000066baa100ecc4a1c976ee66baf80cb80efe7883ef66bafc0cb000ee400f30c42155e1d148b8c88e0cab3699a03b0f23d00f21f835000000070f23f80f0f019e0f3226f30fc731"}}, @code={0x1, 0x5c, {"2e36420f00d866baf80cb8240e9986ef66bafc0ced41e10dc744240009010000c7442402ef1f6b63ff2c24c442412f13660f22160fc75e86f2f347d34abac441cdc654e002ad650f005d00"}}, @code={0x1, 0x5b, {"c7442400f3890000c7442402fc000000c7442406000000000f01142466f30f1eff0fc75d002e400f01c4f2f00fb39e02000000400f30c4c1a5154a0a642e26f2456fc4e289086d000f09"}}, @cpuid={0x2, 0x18, {0x8, 0xe}}, @cpuid={0x2, 0x18, {0x1, 0x5}}, @code={0x1, 0x70, {"c4e1fc10b300a00000652e6466430f59fab805000000b9009000000f01d9b9800000c00f3235008000000f30676566430f3831de420f01c43e470f0748b88cde0000000000000f23c80f21f835040010000f23f8b9400900000f320f1c7000"}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0xb2, 0x2}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x6, 0xffffff3c}}, @uexit={0x0, 0x18, 0xc3b}, @code={0x1, 0x99, {"c744240005000000c744240200000000c7442406000000000f01142466baf80cb89e80e68bef66bafc0c66b8f32f66efb9800000c00f3235008000000f30c7442400f1ffffffc744240200300000c7442406000000000f011c24430f22423e0fc769550f20d835200000000f22d83626f22e26d00966b8f1008ee8440f20c03504000000440f22c0"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x72, {"c744240000800000c744240201000000c7442406000000000f011c242e470f011e66bad004ecb805000000b9584958000f01c12ef3440f09c744240033000000c744240200000000ff2c24c4a2f8f30f450f01d1410fc7aa00000000663e400f09"}}, @uexit={0x0, 0x18, 0x81}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x10}}, @code={0x1, 0x64, {"452a70000f01c4b9800000c00f3235000400000f30c4213967961146708266baf80cb83efb0784ef66bafc0c66b888e466efc481c564f266baa000ec2e64670fc7b575c500002e0f2132660f3881870000c0fe"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x100000000}, @uexit={0x0, 0x18, 0xc}, @code={0x1, 0x60, {"66b895000f00d0660f51698f42f4c441ad75ecc4a1c16be8c4a17a12560066410f38804ae7c7442400135b5ca5c744240202000000c7442406000000000f011424f2440f01df66470fc7354e5e7670"}}, @code={0x1, 0x66, {"66ba4000ed0f013d5f380000c4c2953b6f030f20d835080000000f22d8470fc7b8b3e142d7c46178298f70f00000c74424001d000000c744240200500000ff1c2466b89a008ed866ba4300ed2e440fc73500400000"}}, @cpuid={0x2, 0x18, {0xedb, 0x5}}, @code={0x1, 0x6a, {"2666450f383dd066baf80cb846ef9287ef66bafc0c66b8550d66ef66baf80cb82b4e498bef66bafc0cec2e2ef3470f09c4c3f9611e1466baf80cb8e8041e8bef66bafc0cb80a000000ef440fc731650f350f07c401791049d4"}}, @cpuid={0x2, 0x18, {0x7, 0x81}}, @uexit={0x0, 0x18, 0x3}], 0x698}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="dee6440f20c03505000000440f22c00f20e035400000000f22e0b8fc0000000f23c00f21f835020005000f23f80f23ab0f201dc4e1f850fe810da08d00000d000000b995090000b800000000ba010000000f300fc7a980ef0000", 0x5a}], 0x1, 0x39, &(0x7f0000000240)=[@cr0={0x0, 0x10}, @dstype0={0x6, 0x7}], 0x2) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1.326812649s ago: executing program 1 (id=375): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) mount(&(0x7f00000000c0)=@md0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='hfsplus\x00', 0x1040, &(0x7f0000000240)='workdir') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1.30187884s ago: executing program 1 (id=376): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 1.28651566s ago: executing program 1 (id=377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000009d90467a0000000008001090274395897f0caa82b040006010300020009210000000122080009058103000400fe09"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000080ffffffff000000006f5e00000700000000000000080000807f0000d33755"]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x88, 0x2d, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd63"], 0x66) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)=ANY=[@ANYBLOB="24000000000014000000000000", @ANYRES32=0x0, @ANYBLOB="09000280976b640868000000"], 0x24}], 0x1}, 0xcc000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.199995942s ago: executing program 2 (id=378): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004c8, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='}!@-\x00', &(0x7f00000001c0)='\x00', 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) remap_file_pages(&(0x7f0000563000/0x4000)=nil, 0x4000, 0x1, 0x81, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x202812, r0, 0x7dfff000) 776.846368ms ago: executing program 4 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902a300030100c0000904000000010100000a24010000030201020d240600000300000a0000000008240800000000500c240200000003000000000013240600060600000700090000000000000000052403"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x200c81, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000140), 0xfffffffffffffffd, 0x101000) 615.99793ms ago: executing program 3 (id=399): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x561, 0x0, 0x390}]}) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000100)=0x3) 615.72805ms ago: executing program 3 (id=400): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x13, r0, 0x99b33000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 564.066101ms ago: executing program 3 (id=401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 560.352822ms ago: executing program 3 (id=402): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r0, &(0x7f0000000000)=""/2, 0x2) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 559.263482ms ago: executing program 3 (id=403): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fgetxattr(r0, &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = eventfd(0x6) io_submit(r1, 0x1, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x1000000, 0x0, 0x2, r2, 0x0, 0x0, 0x1, 0x0, 0x1, r3}]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000734000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r4, 0x1000) r5 = socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x80000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) read$FUSE(r6, &(0x7f0000008180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0xc0db9596503ede22}}, 0xfffffffffffffe56) syz_fuse_handle_req(r6, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x5, {0x6, 0x2, 0x0, 0x3, 0xfffffffe, 0x5, {0x6, 0x0, 0x1ff, 0xd298, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x1000, 0x0, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) pipe2$9p(&(0x7f0000000080), 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r9, 0xfffff000) lsm_get_self_attr(0x68, &(0x7f00000015c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000040)=0x1020, 0x1) 513.611912ms ago: executing program 3 (id=404): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async, rerun: 64) r3 = eventfd2(0x0, 0x0) (rerun: 64) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r3, &(0x7f00000000c0)=0x33482a8d, 0x8) (async) r4 = socket(0x10, 0x80003, 0x0) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="65f75e62e35ffb0c154ef6c066f4ae67dbddcc18fc"], 0x0}, 0x0) (async, rerun: 64) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) (async, rerun: 64) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x800, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 182.787737ms ago: executing program 4 (id=405): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 119.969838ms ago: executing program 4 (id=406): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'vcan0\x00', {}, 0x7}) r0 = syz_io_uring_complete(0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0xeeef0000, 0x113000, 0x1}) chdir(&(0x7f0000000080)='./file0\x00') timerfd_create(0x9, 0x80000) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="499660a679c448ec7fd9e11eb5167c1ea4c139232382b0f72cffa650d6ec51c786dc554f03a40b76d3f4b983f342a171051866f96be8bbf6c8484f04b0a194815b228a294cd2b65979ab3cf073de65abda23738e1ddfba5e96df0a0b5958ac547ba6d25dfeda3d12b05f91bcc8b89843bd9589b7a48f656c61a23c6cbb0b3d78742a0894b9051fd4b298a0e5bc231c97886444f285b3b77537e5f4c8e0be1acdabfe84dcd11f7c1741", 0xa9, 0x1, &(0x7f00000001c0)={0xa, 0x4e22, 0x81, @remote, 0x3}, 0x1c) rmdir(&(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x8, 0x3, 0x1}}, 0x14) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xffffffffffffff93) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000002c0)) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x1110040, &(0x7f0000000700)={[{@nfs_export_off}], [{@uid_eq={'uid', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fowner_gt={'fowner>', r5}}]}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000780)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f00000007c0)=""/4096, &(0x7f00000017c0)=0x1000) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001840)='./file1\x00', &(0x7f0000001880)={0x561101, 0x100, 0xc}, 0x18) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', &(0x7f0000001940)={0x1a6a00, 0xf, 0x8}, 0x18) renameat(r8, &(0x7f00000018c0)='./file0/file0\x00', r9, &(0x7f0000001980)='./file1\x00') r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/bus/input/devices\x00', 0x0, 0x0) close(r2) getsockopt(r10, 0x4, 0x8, &(0x7f0000001a00)=""/1, &(0x7f0000001a40)=0x1) setsockopt$inet_tcp_int(r7, 0x6, 0xc, &(0x7f0000001a80)=0xcb9, 0x4) lstat(&(0x7f0000001ac0)='.\x00', &(0x7f0000001b00)) 119.740038ms ago: executing program 4 (id=407): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0xe}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x200, 0xb, 0xf78, 0x500, 0x5, 0x1000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x2, 0x0, 0x2c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) 119.388258ms ago: executing program 4 (id=408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x8, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) poll(&(0x7f0000000140)=[{r2, 0x240}], 0x1, 0x6) (async) poll(&(0x7f0000000140)=[{r2, 0x240}], 0x1, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 28.686969ms ago: executing program 4 (id=409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@decrefs], 0x0, 0x0, 0x0}) (async) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@code={0x1, 0x63, {"66b83e010f00d8440f090f21e464440f789b1146000066baf80cb882103085ef66bafc0c66edc4c2fd058807000000c4e37d05a73f6500009bb9f00900000f3266672ef2400f2a0a6766400f00910b000000"}}, @code={0x1, 0x5c, {"46ab420f0966baf80cb8888ffd89ef66bafc0cb80f820000efb805000000b9b04bebdb0f01c1f3400fa7e8400f58d4b9800000c00f3235008000000f30260f01c342312a0f001500500000"}}, @cpuid={0x2, 0x18, {0x0, 0x80000001}}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x90, {"0f017096c74424005f890000c74424020b000000c7442406000000000f011424c482d0f39800780000c4c19d71d306663e460f01780e420f01c5c744240000580000c744240200000080c7442406000000000f011424b976020000b838000000ba000000000f30c7442400d1000000c74424021bca0000ff1c243e420f01cf"}}, @code={0x1, 0x71, {"f3460fc736460f01d83e0f78d4440f20c03506000000440f22c048b80000c0fe000000000f23c00f21f835010000000f23f86566450f3881320f01c9c4e36179b70db500000066b842000f00d0c744240090000000c744240202000000ff1c24"}}, @cpuid={0x2, 0x18, {0x1ff, 0xb}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x7, 0x9}}], 0x238}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 2 (id=410): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) kernel console output (not intermixed with test programs): rss_huge 0 [ 41.248598][ T987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.270280][ T987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.392734][ T793] shmem 293609472 [ 41.397301][ T793] mapped_file 3846144 [ 41.478104][ T793] dirty 0 [ 41.558905][ T793] writeback 225280 [ 41.643958][ T793] workingset_refault_anon 15 [ 41.648616][ T793] workingset_refault_file 16949 [ 41.782855][ T793] swap 126590976 [ 41.879910][ T793] swapcached 225280 [ 41.883774][ T793] pgpgin 178053 [ 41.977674][ T793] pgpgout 105735 [ 42.026042][ T1003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.026086][ T1003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.044345][ T793] pgfault 28270 [ 42.084062][ T793] pgmajfault 406 [ 42.149963][ T793] inactive_anon 291008512 [ 42.154352][ T793] active_anon 1310720 [ 42.158347][ T793] inactive_file 0 [ 42.263734][ T1018] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.338134][ T1021] binder: Bad value for 'max' [ 42.363499][ T793] active_file 3522560 [ 42.367524][ T793] unevictable 0 [ 42.399204][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 42.399220][ T36] audit: type=1400 audit(1751020774.798:300): avc: denied { map } for pid=1022 comm="syz.4.214" path="socket:[9174]" dev="sockfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.431550][ T1023] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388857856 i:0 err:EBUSY [ 42.431598][ T1023] rust_binder: Error in use_page_slow: EBUSY [ 42.435000][ T36] audit: type=1400 audit(1751020774.798:301): avc: denied { read } for pid=1022 comm="syz.4.214" path="socket:[9174]" dev="sockfs" ino=9174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.453126][ T1023] rust_binder: use_range failure EBUSY [ 42.489952][ T1023] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 42.495455][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 42.532489][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:90 [ 42.561252][ T1034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 42.584413][ T793] hierarchical_memory_limit 314572800 [ 42.626190][ T1036] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 42.638879][ T1036] rust_binder: Write failure EINVAL in pid:144 [ 42.656058][ T36] audit: type=1400 audit(1751020775.058:302): avc: denied { nlmsg_write } for pid=1039 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 42.694698][ T36] audit: type=1400 audit(1751020775.098:303): avc: denied { setopt } for pid=1040 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.764625][ T793] hierarchical_memsw_limit 9223372036854771712 [ 42.771429][ T1046] /dev/md0: Can't lookup blockdev [ 42.780866][ T36] audit: type=1400 audit(1751020775.188:304): avc: denied { create } for pid=1043 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.809955][ T305] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 42.816151][ T793] total_cache 297943040 [ 42.834306][ T1048] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.834442][ T793] total_rss 98304 [ 42.874717][ T1060] binder: Unknown parameter 'smackfsdef' [ 42.874839][ T793] total_rss_huge 0 [ 42.906304][ T1062] overlayfs: missing 'lowerdir' [ 42.911870][ T1062] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 42.919788][ T1062] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 42.936254][ T1062] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 42.944749][ T1062] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 42.959903][ T305] usb 3-1: Invalid ep0 maxpacket: 16 [ 42.969926][ T793] total_shmem 293609472 [ 42.974097][ T793] total_mapped_file 3846144 [ 42.978776][ T793] total_dirty 0 [ 42.983601][ T793] total_writeback 225280 [ 42.987861][ T793] total_workingset_refault_anon 15 [ 42.993255][ T793] total_workingset_refault_file 16949 [ 42.998637][ T793] total_swap 126590976 [ 43.008825][ T793] total_swapcached 225280 [ 43.099924][ T305] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 43.128197][ T793] total_pgpgin 178053 [ 43.181501][ T793] total_pgpgout 105735 [ 43.203313][ T793] total_pgfault 28270 [ 43.221588][ T793] total_pgmajfault 406 [ 43.240964][ T793] total_inactive_anon 291008512 [ 43.259911][ T305] usb 3-1: Invalid ep0 maxpacket: 16 [ 43.265435][ T305] usb usb3-port1: attempt power cycle [ 43.275773][ T793] total_active_anon 1310720 [ 43.297558][ T793] total_inactive_file 0 [ 43.305482][ T793] total_active_file 3522560 [ 43.310262][ T793] total_unevictable 0 [ 43.314428][ T793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=773,uid=0 [ 43.329589][ T793] Memory cgroup out of memory: Killed process 773 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:21864kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 43.629964][ T305] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 43.660289][ T305] usb 3-1: Invalid ep0 maxpacket: 16 [ 43.681203][ T782] syz.3.142 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 43.799921][ T305] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 43.840270][ T305] usb 3-1: Invalid ep0 maxpacket: 16 [ 43.849042][ T305] usb usb3-port1: unable to enumerate USB device [ 43.888463][ T782] CPU: 1 UID: 0 PID: 782 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 43.888505][ T782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.888517][ T782] Call Trace: [ 43.888523][ T782] [ 43.888531][ T782] __dump_stack+0x21/0x30 [ 43.888559][ T782] dump_stack_lvl+0x10c/0x190 [ 43.888580][ T782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.888601][ T782] ? ___ratelimit+0x3f7/0x5a0 [ 43.888622][ T782] dump_stack+0x19/0x20 [ 43.888643][ T782] dump_header+0xd7/0x490 [ 43.888669][ T782] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 43.888690][ T782] oom_kill_process+0x4c0/0x7e0 [ 43.888707][ T782] ? sched_clock_cpu+0x75/0x400 [ 43.888730][ T782] out_of_memory+0x7ee/0xbd0 [ 43.888746][ T782] ? __cfi_out_of_memory+0x10/0x10 [ 43.888763][ T782] ? mutex_lock_killable+0x92/0x1c0 [ 43.888786][ T782] ? __cfi_mutex_lock_killable+0x10/0x10 [ 43.888810][ T782] mem_cgroup_out_of_memory+0x279/0x350 [ 43.888835][ T782] ? drain_obj_stock+0xed0/0xed0 [ 43.888861][ T782] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 43.888885][ T782] try_charge_memcg+0x8f7/0xde0 [ 43.888905][ T782] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 43.888929][ T782] ? __cfi_try_charge_memcg+0x10/0x10 [ 43.888950][ T782] ? __alloc_pages_noprof+0x30d/0x6c0 [ 43.888971][ T782] __mem_cgroup_charge+0xf6/0x410 [ 43.888993][ T782] ? filemap_get_entry+0x3fb/0x460 [ 43.889012][ T782] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 43.889035][ T782] filemap_add_folio+0x57/0x2d0 [ 43.889063][ T782] __filemap_get_folio+0x4c2/0x7c0 [ 43.889083][ T782] filemap_fault+0xb41/0x16b0 [ 43.889104][ T782] ? __cfi_filemap_fault+0x10/0x10 [ 43.889124][ T782] ? __cfi_filemap_map_pages+0x10/0x10 [ 43.889144][ T782] ? __cfi_lru_add+0x10/0x10 [ 43.889162][ T782] ? _raw_spin_lock+0x8c/0x120 [ 43.889188][ T782] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.889216][ T782] do_pte_missing+0x376b/0x3e50 [ 43.889237][ T782] ? pte_marker_clear+0x1b0/0x1b0 [ 43.889254][ T782] ? __pte_offset_map+0x1b0/0x230 [ 43.889276][ T782] ? pte_offset_map_rw_nolock+0xba/0x110 [ 43.889297][ T782] handle_mm_fault+0x1166/0x1b90 [ 43.889323][ T782] ? __kasan_check_write+0x18/0x20 [ 43.889347][ T782] ? __cfi_handle_mm_fault+0x10/0x10 [ 43.889373][ T782] ? follow_page_pte+0x2bd/0xb90 [ 43.889393][ T782] ? gup_must_unshare+0x1e0/0x1e0 [ 43.889411][ T782] ? vma_is_secretmem+0x11/0x50 [ 43.889432][ T782] __get_user_pages+0x1169/0x22d0 [ 43.889451][ T782] ? __kasan_check_write+0x18/0x20 [ 43.889476][ T782] ? populate_vma_page_range+0x230/0x230 [ 43.889494][ T782] ? __kernel_write_iter+0x66b/0x830 [ 43.889524][ T782] get_dump_page+0x107/0x220 [ 43.889541][ T782] ? __cfi_get_dump_page+0x10/0x10 [ 43.889559][ T782] ? __asan_memset+0x39/0x50 [ 43.889581][ T782] dump_user_range+0x181/0xdf0 [ 43.889607][ T782] ? __cfi_dump_emit+0x10/0x10 [ 43.889628][ T782] ? __cfi_dump_user_range+0x10/0x10 [ 43.889651][ T782] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 43.889675][ T782] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 43.889699][ T782] elf_core_dump+0x2cd9/0x3810 [ 43.889729][ T782] ? __cfi_elf_core_dump+0x10/0x10 [ 43.889761][ T782] ? dump_interrupted+0xf0/0xf0 [ 43.889783][ T782] ? filp_open+0x182/0x1d0 [ 43.889801][ T782] ? 0xffffffffff600000 [ 43.889817][ T782] do_coredump+0x1bf7/0x2bd0 [ 43.889842][ T782] ? __cfi_do_coredump+0x10/0x10 [ 43.889861][ T782] ? asm_exc_page_fault+0x2b/0x30 [ 43.889883][ T782] ? __kasan_slab_free+0x6a/0x80 [ 43.889904][ T782] ? kmem_cache_free+0x1c1/0x4c0 [ 43.889928][ T782] get_signal+0x11fd/0x14f0 [ 43.889951][ T782] arch_do_signal_or_restart+0x96/0x720 [ 43.889978][ T782] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 43.890005][ T782] irqentry_exit_to_user_mode+0x4e/0xb0 [ 43.890030][ T782] irqentry_exit+0x16/0x60 [ 43.890053][ T782] exc_page_fault+0x66/0xc0 [ 43.890076][ T782] asm_exc_page_fault+0x2b/0x30 [ 43.890095][ T782] RIP: 0033:0xf136400c05 [ 43.890114][ T782] Code: Unable to access opcode bytes at 0xf136400bdb. [ 43.890124][ T782] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 43.890142][ T782] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 43.890156][ T782] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 43.890171][ T782] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 43.890185][ T782] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 43.890199][ T782] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 43.890216][ T782] [ 44.039945][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 44.157225][ T782] memory: usage 307060kB, limit 307200kB, failcnt 39432 [ 44.180856][ T1069] fuse: Bad value for 'group_id' [ 44.183104][ T782] memory+swap: usage 431528kB, limit 9007199254740988kB, failcnt 0 [ 44.189900][ T1069] fuse: Bad value for 'group_id' [ 44.194478][ T782] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 44.441855][ T10] usb 2-1: config 217 has an invalid interface number: 4 but max is 0 [ 44.450206][ T10] usb 2-1: config 217 has no interface number 0 [ 44.456476][ T10] usb 2-1: config 217 interface 4 has no altsetting 0 [ 44.474899][ T10] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=3b.11 [ 44.484295][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.497827][ T10] usb 2-1: Product: syz [ 44.504304][ T10] usb 2-1: Manufacturer: syz [ 44.512402][ T10] usb 2-1: SerialNumber: syz [ 44.579901][ T782] Memory cgroup stats for /syz3: [ 44.580063][ T782] cache 295157760 [ 44.632658][ T782] rss 192512 [ 44.635901][ T782] rss_huge 0 [ 44.691488][ T782] shmem 291205120 [ 44.705301][ T782] mapped_file 3600384 [ 44.720000][ T36] audit: type=1400 audit(1751020777.118:305): avc: denied { remount } for pid=1057 comm="syz.1.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.789950][ T782] dirty 0 [ 44.790645][ T545] hub 5-1:0.255: bad descriptor, ignoring hub [ 44.798980][ T545] hub 5-1:0.255: probe with driver hub failed with error -5 [ 44.814658][ T782] writeback 24576 [ 44.863180][ T782] workingset_refault_anon 19 [ 44.924845][ T782] workingset_refault_file 25649 [ 44.962752][ T782] swap 127971328 [ 44.966355][ T782] swapcached 24576 [ 45.056798][ T782] pgpgin 199713 [ 45.097818][ T782] pgpgout 128111 [ 45.185309][ T782] pgfault 29889 [ 45.229742][ T782] pgmajfault 610 [ 45.327510][ T782] inactive_anon 110514176 [ 45.414266][ T782] active_anon 179470336 [ 45.418467][ T782] inactive_file 3284992 [ 45.459263][ T36] audit: type=1400 audit(1751020777.858:306): avc: denied { execmod } for pid=1102 comm="syz.4.239" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.480136][ T782] active_file 659456 [ 45.490694][ T782] unevictable 0 [ 45.494171][ T782] hierarchical_memory_limit 314572800 [ 45.513938][ T782] hierarchical_memsw_limit 9223372036854771712 [ 45.532829][ T782] total_cache 295157760 [ 45.537065][ T782] total_rss 192512 [ 45.541088][ T782] total_rss_huge 0 [ 45.544879][ T782] total_shmem 291205120 [ 45.550631][ T782] total_mapped_file 3600384 [ 45.557397][ T782] total_dirty 0 [ 45.571149][ T782] total_writeback 24576 [ 45.579281][ T782] total_workingset_refault_anon 19 [ 45.592747][ T782] total_workingset_refault_file 25649 [ 45.611473][ T782] total_swap 127971328 [ 45.615615][ T782] total_swapcached 24576 [ 45.621575][ T782] total_pgpgin 199713 [ 45.625575][ T782] total_pgpgout 128111 [ 45.629639][ T782] total_pgfault 29889 [ 45.640661][ T782] total_pgmajfault 610 [ 45.650444][ T782] total_inactive_anon 110514176 [ 45.655401][ T782] total_active_anon 179470336 [ 45.665507][ T782] total_inactive_file 3284992 [ 45.672700][ T782] total_active_file 659456 [ 45.677211][ T782] total_unevictable 0 [ 45.681464][ T782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.210,pid=1013,uid=0 [ 45.696434][ T782] Memory cgroup out of memory: OOM victim 1013 (syz.3.210) is already exiting. Skip killing the task [ 45.707847][ T784] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 45.728317][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 45.728356][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.728369][ T784] Call Trace: [ 45.728376][ T784] [ 45.728383][ T784] __dump_stack+0x21/0x30 [ 45.728412][ T784] dump_stack_lvl+0x10c/0x190 [ 45.728436][ T784] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.728457][ T784] ? ___ratelimit+0x3f7/0x5a0 [ 45.728480][ T784] dump_stack+0x19/0x20 [ 45.728502][ T784] dump_header+0xd7/0x490 [ 45.728529][ T784] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 45.728551][ T784] oom_kill_process+0x4c0/0x7e0 [ 45.728568][ T784] ? sched_clock_cpu+0x75/0x400 [ 45.728591][ T784] out_of_memory+0x7ee/0xbd0 [ 45.728609][ T784] ? __cfi_out_of_memory+0x10/0x10 [ 45.728628][ T784] ? mutex_lock_killable+0x104/0x1c0 [ 45.728651][ T784] ? __cfi_mutex_lock_killable+0x10/0x10 [ 45.728677][ T784] mem_cgroup_out_of_memory+0x279/0x350 [ 45.728703][ T784] ? drain_obj_stock+0xed0/0xed0 [ 45.728728][ T784] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 45.728754][ T784] try_charge_memcg+0x8f7/0xde0 [ 45.728776][ T784] ? set_pte_range+0x441/0x660 [ 45.728804][ T784] ? __cfi_try_charge_memcg+0x10/0x10 [ 45.728823][ T784] ? __alloc_pages_noprof+0x30d/0x6c0 [ 45.728842][ T784] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.728861][ T784] __mem_cgroup_charge+0xf6/0x410 [ 45.728881][ T784] ? __cfi_folio_unlock+0x10/0x10 [ 45.728896][ T784] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 45.728920][ T784] shmem_alloc_and_add_folio+0x86d/0x1050 [ 45.728950][ T784] ? put_swap_device+0x130/0x130 [ 45.728976][ T784] ? shmem_huge_global_enabled+0x2da/0x360 [ 45.729002][ T784] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 45.729027][ T784] ? __kasan_check_write+0x18/0x20 [ 45.729050][ T784] ? _raw_spin_lock+0x8c/0x120 [ 45.729076][ T784] shmem_get_folio_gfp+0x5f0/0x1380 [ 45.729104][ T784] ? shmem_get_folio+0xc0/0xc0 [ 45.729127][ T784] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 45.729148][ T784] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 45.729169][ T784] ? inode_to_bdi+0x6d/0x100 [ 45.729190][ T784] shmem_write_begin+0xf4/0x270 [ 45.729218][ T784] generic_perform_write+0x32d/0x960 [ 45.729241][ T784] ? __cfi_generic_perform_write+0x10/0x10 [ 45.729262][ T784] ? down_write+0xe9/0x2a0 [ 45.729284][ T784] ? mnt_get_write_access_file+0x1af/0x3b0 [ 45.729310][ T784] ? mnt_put_write_access_file+0xc2/0x100 [ 45.729330][ T784] ? file_update_time+0x1ef/0x220 [ 45.729350][ T784] shmem_file_write_iter+0x105/0x130 [ 45.729377][ T784] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 45.729397][ T784] __kernel_write_iter+0x392/0x830 [ 45.729419][ T784] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 45.729439][ T784] ? __cfi___kernel_write_iter+0x10/0x10 [ 45.729461][ T784] ? get_dump_page+0x160/0x220 [ 45.729479][ T784] ? __asan_memset+0x39/0x50 [ 45.729500][ T784] ? iov_iter_bvec+0xc0/0x180 [ 45.729527][ T784] dump_user_range+0xb06/0xdf0 [ 45.729551][ T784] ? __cfi_dump_emit+0x10/0x10 [ 45.729571][ T784] ? __cfi_dump_user_range+0x10/0x10 [ 45.729595][ T784] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 45.729618][ T784] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 45.729643][ T784] elf_core_dump+0x2cd9/0x3810 [ 45.729673][ T784] ? __cfi_elf_core_dump+0x10/0x10 [ 45.729705][ T784] ? dump_interrupted+0xf0/0xf0 [ 45.729726][ T784] ? filp_open+0x182/0x1d0 [ 45.729744][ T784] ? 0xffffffffff600000 [ 45.729761][ T784] do_coredump+0x1bf7/0x2bd0 [ 45.729785][ T784] ? __cfi_do_coredump+0x10/0x10 [ 45.729806][ T784] ? asm_exc_page_fault+0x2b/0x30 [ 45.729833][ T784] ? __kasan_slab_free+0x6a/0x80 [ 45.729862][ T784] ? kmem_cache_free+0x1c1/0x4c0 [ 45.729882][ T784] get_signal+0x11fd/0x14f0 [ 45.729902][ T784] arch_do_signal_or_restart+0x96/0x720 [ 45.729925][ T784] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 45.729950][ T784] irqentry_exit_to_user_mode+0x4e/0xb0 [ 45.729972][ T784] irqentry_exit+0x16/0x60 [ 45.729993][ T784] exc_page_fault+0x66/0xc0 [ 45.730016][ T784] asm_exc_page_fault+0x2b/0x30 [ 45.730035][ T784] RIP: 0033:0xf136400c05 [ 45.730058][ T784] Code: Unable to access opcode bytes at 0xf136400bdb. [ 45.730067][ T784] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 45.730085][ T784] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 45.730100][ T784] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 45.730114][ T784] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 45.730128][ T784] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 45.730142][ T784] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 45.730157][ T784] [ 46.190500][ T784] memory: usage 307200kB, limit 307200kB, failcnt 42283 [ 46.197546][ T784] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 46.206302][ T784] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.213202][ T784] Memory cgroup stats for /syz3: [ 46.213337][ T784] cache 314458112 [ 46.221979][ T784] rss 114688 [ 46.225179][ T784] rss_huge 0 [ 46.228368][ T784] shmem 314421248 [ 46.234485][ T10] ftdi_sio 2-1:217.4: FTDI USB Serial Device converter detected [ 46.235732][ T784] mapped_file 0 [ 46.245708][ T784] dirty 0 [ 46.248642][ T784] writeback 0 [ 46.250692][ T10] ftdi_sio ttyUSB0: unknown device type: 0x3b11 [ 46.252099][ T784] workingset_refault_anon 19 [ 46.263092][ T784] workingset_refault_file 29683 [ 46.267945][ T784] swap 127995904 [ 46.271748][ T784] swapcached 0 [ 46.274206][ T10] usb 2-1: USB disconnect, device number 6 [ 46.275123][ T784] pgpgin 209521 [ 46.289764][ T784] pgpgout 133232 [ 46.296380][ T784] pgfault 30717 [ 46.298856][ T10] ftdi_sio 2-1:217.4: device disconnected [ 46.300178][ T784] pgmajfault 674 [ 46.309267][ T784] inactive_anon 25796608 [ 46.313568][ T784] active_anon 288739328 [ 46.319824][ T784] inactive_file 0 [ 46.323671][ T784] active_file 36864 [ 46.327599][ T784] unevictable 0 [ 46.331104][ T784] hierarchical_memory_limit 314572800 [ 46.338817][ T784] hierarchical_memsw_limit 9223372036854771712 [ 46.345359][ T784] total_cache 314458112 [ 46.349523][ T784] total_rss 114688 [ 46.353337][ T784] total_rss_huge 0 [ 46.357073][ T784] total_shmem 314421248 [ 46.361258][ T784] total_mapped_file 0 [ 46.365229][ T784] total_dirty 0 [ 46.368680][ T784] total_writeback 0 [ 46.372511][ T784] total_workingset_refault_anon 19 [ 46.377617][ T784] total_workingset_refault_file 29683 [ 46.383227][ T784] total_swap 127995904 [ 46.387295][ T784] total_swapcached 0 [ 46.391232][ T784] total_pgpgin 209521 [ 46.395215][ T784] total_pgpgout 133232 [ 46.399286][ T784] total_pgfault 30717 [ 46.403319][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 46.409923][ T784] total_pgmajfault 674 [ 46.414914][ T784] total_inactive_anon 25796608 [ 46.422088][ T784] total_active_anon 288739328 [ 46.426776][ T784] total_inactive_file 0 [ 46.431688][ T784] total_active_file 36864 [ 46.436048][ T784] total_unevictable 0 [ 46.440252][ T784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=789,uid=0 [ 46.455009][ T784] Memory cgroup out of memory: Killed process 789 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 46.498632][ T787] syz.3.142 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 46.509307][ T787] CPU: 1 UID: 0 PID: 787 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 46.509341][ T787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.509354][ T787] Call Trace: [ 46.509360][ T787] [ 46.509368][ T787] __dump_stack+0x21/0x30 [ 46.509395][ T787] dump_stack_lvl+0x10c/0x190 [ 46.509417][ T787] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.509439][ T787] ? ___ratelimit+0x3f7/0x5a0 [ 46.509468][ T787] dump_stack+0x19/0x20 [ 46.509489][ T787] dump_header+0xd7/0x490 [ 46.509514][ T787] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 46.509536][ T787] oom_kill_process+0x4c0/0x7e0 [ 46.509555][ T787] ? sched_clock_cpu+0x75/0x400 [ 46.509578][ T787] out_of_memory+0x7ee/0xbd0 [ 46.509595][ T787] ? __cfi_out_of_memory+0x10/0x10 [ 46.509613][ T787] ? mutex_lock_killable+0x104/0x1c0 [ 46.509641][ T787] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.509665][ T787] mem_cgroup_out_of_memory+0x279/0x350 [ 46.509695][ T787] ? drain_obj_stock+0xed0/0xed0 [ 46.509721][ T787] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 46.509745][ T787] try_charge_memcg+0x8f7/0xde0 [ 46.509766][ T787] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 46.509791][ T787] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.509813][ T787] ? __alloc_pages_noprof+0x30d/0x6c0 [ 46.509834][ T787] __mem_cgroup_charge+0xf6/0x410 [ 46.509860][ T787] ? filemap_get_entry+0x3fb/0x460 [ 46.509877][ T787] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.509897][ T787] filemap_add_folio+0x57/0x2d0 [ 46.509922][ T787] __filemap_get_folio+0x4c2/0x7c0 [ 46.509942][ T787] filemap_fault+0xb41/0x16b0 [ 46.509963][ T787] ? __cfi_filemap_fault+0x10/0x10 [ 46.509983][ T787] ? __cfi_filemap_map_pages+0x10/0x10 [ 46.510003][ T787] ? __cfi_lru_add+0x10/0x10 [ 46.510020][ T787] ? _raw_spin_lock+0x8c/0x120 [ 46.510048][ T787] ? __cfi__raw_spin_lock+0x10/0x10 [ 46.510076][ T787] do_pte_missing+0x376b/0x3e50 [ 46.510097][ T787] ? pte_marker_clear+0x1b0/0x1b0 [ 46.510115][ T787] ? __pte_offset_map+0x1b0/0x230 [ 46.510137][ T787] ? pte_offset_map_rw_nolock+0xba/0x110 [ 46.510159][ T787] handle_mm_fault+0x1166/0x1b90 [ 46.510185][ T787] ? __kasan_check_write+0x18/0x20 [ 46.510209][ T787] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.510236][ T787] ? follow_page_pte+0x2bd/0xb90 [ 46.510256][ T787] ? gup_must_unshare+0x1e0/0x1e0 [ 46.510275][ T787] ? vma_is_secretmem+0x11/0x50 [ 46.510296][ T787] __get_user_pages+0x1169/0x22d0 [ 46.510315][ T787] ? __kasan_check_write+0x18/0x20 [ 46.510340][ T787] ? populate_vma_page_range+0x230/0x230 [ 46.510358][ T787] ? __kernel_write_iter+0x66b/0x830 [ 46.510383][ T787] get_dump_page+0x107/0x220 [ 46.510400][ T787] ? __cfi_get_dump_page+0x10/0x10 [ 46.510418][ T787] ? __asan_memset+0x39/0x50 [ 46.510440][ T787] dump_user_range+0x181/0xdf0 [ 46.510472][ T787] ? __cfi_dump_emit+0x10/0x10 [ 46.510494][ T787] ? __cfi_dump_user_range+0x10/0x10 [ 46.510523][ T787] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 46.510548][ T787] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.510573][ T787] elf_core_dump+0x2cd9/0x3810 [ 46.510604][ T787] ? __cfi_elf_core_dump+0x10/0x10 [ 46.510636][ T787] ? dump_interrupted+0xf0/0xf0 [ 46.510658][ T787] ? filp_open+0x182/0x1d0 [ 46.510677][ T787] ? 0xffffffffff600000 [ 46.510693][ T787] do_coredump+0x1bf7/0x2bd0 [ 46.510717][ T787] ? __cfi_do_coredump+0x10/0x10 [ 46.510739][ T787] ? asm_exc_page_fault+0x2b/0x30 [ 46.510766][ T787] ? __kasan_slab_free+0x6a/0x80 [ 46.510793][ T787] ? kmem_cache_free+0x1c1/0x4c0 [ 46.510817][ T787] get_signal+0x11fd/0x14f0 [ 46.510840][ T787] arch_do_signal_or_restart+0x96/0x720 [ 46.510865][ T787] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.510893][ T787] irqentry_exit_to_user_mode+0x4e/0xb0 [ 46.510918][ T787] irqentry_exit+0x16/0x60 [ 46.510940][ T787] exc_page_fault+0x66/0xc0 [ 46.510963][ T787] asm_exc_page_fault+0x2b/0x30 [ 46.510981][ T787] RIP: 0033:0xf136400c05 [ 46.511001][ T787] Code: Unable to access opcode bytes at 0xf136400bdb. [ 46.511010][ T787] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 46.511027][ T787] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 46.511040][ T787] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 46.511053][ T787] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 46.511066][ T787] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 46.511078][ T787] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 46.511093][ T787] [ 46.955442][ T787] memory: usage 307180kB, limit 307200kB, failcnt 42622 [ 46.962472][ T787] memory+swap: usage 430488kB, limit 9007199254740988kB, failcnt 0 [ 46.977121][ T787] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.984392][ T787] Memory cgroup stats for /syz3: [ 46.984664][ T787] cache 314183680 [ 46.993798][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.004779][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.014613][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.021348][ T787] rss 126976 [ 47.027565][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.039725][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.048687][ T45] usb 3-1: config 0 descriptor?? [ 47.053715][ T787] rss_huge 0 [ 47.077224][ T787] shmem 314089472 [ 47.088723][ T787] mapped_file 61440 [ 47.096883][ T787] dirty 0 [ 47.109986][ T787] writeback 0 [ 47.128511][ T787] workingset_refault_anon 23 [ 47.136347][ T787] workingset_refault_file 29852 [ 47.141515][ T787] swap 126517248 [ 47.143097][ T1122] netlink: 'syz.4.245': attribute type 27 has an invalid length. [ 47.145592][ T787] swapcached 16384 [ 47.156818][ T787] pgpgin 213110 [ 47.160329][ T787] pgpgout 136884 [ 47.163898][ T787] pgfault 30961 [ 47.167860][ T787] pgmajfault 691 [ 47.171598][ T787] inactive_anon 92004352 [ 47.175840][ T787] active_anon 222212096 [ 47.180042][ T787] inactive_file 0 [ 47.183687][ T787] active_file 94208 [ 47.187563][ T787] unevictable 0 [ 47.191297][ T787] hierarchical_memory_limit 314572800 [ 47.196686][ T787] hierarchical_memsw_limit 9223372036854771712 [ 47.202961][ T787] total_cache 314183680 [ 47.207132][ T787] total_rss 126976 [ 47.210899][ T787] total_rss_huge 0 [ 47.214720][ T787] total_shmem 314089472 [ 47.218923][ T787] total_mapped_file 61440 [ 47.223328][ T787] total_dirty 0 [ 47.226855][ T787] total_writeback 0 [ 47.230700][ T787] total_workingset_refault_anon 23 [ 47.235807][ T787] total_workingset_refault_file 29852 [ 47.241252][ T787] total_swap 126517248 [ 47.245326][ T787] total_swapcached 16384 [ 47.249560][ T787] total_pgpgin 213110 [ 47.254256][ T787] total_pgpgout 136884 [ 47.267679][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 47.273254][ T787] total_pgfault 30961 [ 47.283851][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 47.286442][ T1126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.292780][ T45] usb 3-1: USB disconnect, device number 15 [ 47.299964][ T1126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:139 [ 47.304545][ T787] total_pgmajfault 691 [ 47.311997][ T1129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.318400][ T787] total_inactive_anon 92004352 [ 47.322759][ T36] audit: type=1400 audit(1751020779.698:307): avc: denied { nlmsg_read } for pid=1125 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.327843][ T787] total_active_anon 222212096 [ 47.360106][ T787] total_inactive_file 0 [ 47.363132][ T1134] binder: Bad value for 'max' [ 47.364474][ T787] total_active_file 94208 [ 47.373442][ T787] total_unevictable 0 [ 47.377423][ T787] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=784,uid=0 [ 47.392437][ T787] Memory cgroup out of memory: Killed process 784 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:23000kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 47.413935][ T1137] input: syz1 as /devices/virtual/input/input9 [ 47.428296][ T36] audit: type=1400 audit(1751020779.828:308): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.474348][ T36] audit: type=1400 audit(1751020779.828:309): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.507890][ T36] audit: type=1400 audit(1751020779.828:310): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=482 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.558011][ T36] audit: type=1326 audit(1751020779.958:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1141 comm="syz.4.252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76d098e929 code=0x0 [ 47.651196][ T779] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 47.740451][ T1150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 47.740491][ T1150] rust_binder: Read failure Err(EFAULT) in pid:156 [ 47.781810][ T779] CPU: 0 UID: 0 PID: 779 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 47.781869][ T779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.781883][ T779] Call Trace: [ 47.781889][ T779] [ 47.781898][ T779] __dump_stack+0x21/0x30 [ 47.781931][ T779] dump_stack_lvl+0x10c/0x190 [ 47.781952][ T779] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.781974][ T779] ? ___ratelimit+0x3f7/0x5a0 [ 47.781995][ T779] dump_stack+0x19/0x20 [ 47.782016][ T779] dump_header+0xd7/0x490 [ 47.782043][ T779] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 47.782063][ T779] oom_kill_process+0x4c0/0x7e0 [ 47.782081][ T779] ? sched_clock_cpu+0x75/0x400 [ 47.782102][ T779] out_of_memory+0x7ee/0xbd0 [ 47.782120][ T779] ? __cfi_out_of_memory+0x10/0x10 [ 47.782137][ T779] ? mutex_lock_killable+0x104/0x1c0 [ 47.782160][ T779] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.782184][ T779] mem_cgroup_out_of_memory+0x279/0x350 [ 47.782209][ T779] ? drain_obj_stock+0xed0/0xed0 [ 47.782234][ T779] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 47.782258][ T779] try_charge_memcg+0x8f7/0xde0 [ 47.782279][ T779] ? set_pte_range+0x441/0x660 [ 47.782305][ T779] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.782325][ T779] ? __alloc_pages_noprof+0x30d/0x6c0 [ 47.782353][ T779] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.782373][ T779] __mem_cgroup_charge+0xf6/0x410 [ 47.782395][ T779] ? __cfi_folio_unlock+0x10/0x10 [ 47.782413][ T779] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.782437][ T779] shmem_alloc_and_add_folio+0x86d/0x1050 [ 47.782468][ T779] ? put_swap_device+0x130/0x130 [ 47.782494][ T779] ? shmem_huge_global_enabled+0x2da/0x360 [ 47.782521][ T779] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 47.782546][ T779] ? __kasan_check_write+0x18/0x20 [ 47.782568][ T779] ? _raw_spin_lock+0x8c/0x120 [ 47.782595][ T779] shmem_get_folio_gfp+0x5f0/0x1380 [ 47.782622][ T779] ? shmem_get_folio+0xc0/0xc0 [ 47.782649][ T779] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 47.782671][ T779] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 47.782692][ T779] ? inode_to_bdi+0x6d/0x100 [ 47.782712][ T779] shmem_write_begin+0xf4/0x270 [ 47.782740][ T779] generic_perform_write+0x32d/0x960 [ 47.782763][ T779] ? __cfi_generic_perform_write+0x10/0x10 [ 47.782785][ T779] ? down_write+0xe9/0x2a0 [ 47.782807][ T779] ? mnt_get_write_access_file+0x1af/0x3b0 [ 47.782826][ T779] ? mnt_put_write_access_file+0xc2/0x100 [ 47.782845][ T779] ? file_update_time+0x1ef/0x220 [ 47.782866][ T779] shmem_file_write_iter+0x105/0x130 [ 47.782885][ T779] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 47.782905][ T779] __kernel_write_iter+0x392/0x830 [ 47.782928][ T779] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 47.782948][ T779] ? __cfi___kernel_write_iter+0x10/0x10 [ 47.782970][ T779] ? get_dump_page+0x160/0x220 [ 47.782989][ T779] ? __asan_memset+0x39/0x50 [ 47.783010][ T779] ? iov_iter_bvec+0xc0/0x180 [ 47.783037][ T779] dump_user_range+0xb06/0xdf0 [ 47.783061][ T779] ? __cfi_dump_emit+0x10/0x10 [ 47.783083][ T779] ? __cfi_dump_user_range+0x10/0x10 [ 47.783105][ T779] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 47.783129][ T779] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 47.783154][ T779] elf_core_dump+0x2cd9/0x3810 [ 47.783183][ T779] ? __cfi_elf_core_dump+0x10/0x10 [ 47.783216][ T779] ? dump_interrupted+0xf0/0xf0 [ 47.783238][ T779] ? filp_open+0x182/0x1d0 [ 47.783256][ T779] ? 0xffffffffff600000 [ 47.783272][ T779] do_coredump+0x1bf7/0x2bd0 [ 47.783297][ T779] ? __cfi_do_coredump+0x10/0x10 [ 47.783317][ T779] ? asm_exc_page_fault+0x2b/0x30 [ 47.783351][ T779] ? __kasan_slab_free+0x6a/0x80 [ 47.783377][ T779] ? kmem_cache_free+0x1c1/0x4c0 [ 47.783400][ T779] get_signal+0x11fd/0x14f0 [ 47.783423][ T779] arch_do_signal_or_restart+0x96/0x720 [ 47.783448][ T779] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 47.783476][ T779] irqentry_exit_to_user_mode+0x4e/0xb0 [ 47.783500][ T779] irqentry_exit+0x16/0x60 [ 47.783526][ T779] exc_page_fault+0x66/0xc0 [ 47.783548][ T779] asm_exc_page_fault+0x2b/0x30 [ 47.783567][ T779] RIP: 0033:0xf136400c05 [ 47.783588][ T779] Code: Unable to access opcode bytes at 0xf136400bdb. [ 47.783598][ T779] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 47.783620][ T779] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 47.783635][ T779] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 47.783649][ T779] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 47.783663][ T779] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 47.783677][ T779] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 47.783693][ T779] [ 48.229902][ T779] memory: usage 303204kB, limit 307200kB, failcnt 44494 [ 48.292936][ T1152] kvm: pic: non byte write [ 48.308823][ T1160] binder: Bad value for 'max' [ 48.381858][ T779] memory+swap: usage 419156kB, limit 9007199254740988kB, failcnt 0 [ 48.389839][ T779] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.396832][ T779] Memory cgroup stats for /syz3: [ 48.396978][ T779] cache 303026176 [ 48.405960][ T779] rss 36864 [ 48.409477][ T779] rss_huge 0 [ 48.412783][ T779] shmem 302252032 [ 48.424235][ T779] mapped_file 761856 [ 48.428405][ T779] dirty 0 [ 48.431734][ T779] writeback 0 [ 48.436403][ T779] workingset_refault_anon 34 [ 48.441533][ T779] workingset_refault_file 30555 [ 48.559253][ T779] swap 126029824 [ 48.632086][ T779] swapcached 40960 [ 48.651326][ T779] pgpgin 217945 [ 48.654813][ T779] pgpgout 144345 [ 48.658396][ T779] pgfault 31274 [ 48.661915][ T779] pgmajfault 718 [ 48.665453][ T779] inactive_anon 273375232 [ 48.670165][ T779] active_anon 27623424 [ 48.674418][ T779] inactive_file 0 [ 48.678369][ T779] active_file 774144 [ 48.683780][ T779] unevictable 0 [ 48.687256][ T779] hierarchical_memory_limit 314572800 [ 48.692695][ T779] hierarchical_memsw_limit 9223372036854771712 [ 48.698937][ T779] total_cache 303026176 [ 48.703182][ T779] total_rss 36864 [ 48.706896][ T779] total_rss_huge 0 [ 48.710903][ T779] total_shmem 302252032 [ 48.715128][ T779] total_mapped_file 761856 [ 48.719544][ T779] total_dirty 0 [ 48.723042][ T779] total_writeback 0 [ 48.727025][ T779] total_workingset_refault_anon 34 [ 48.733695][ T779] total_workingset_refault_file 30555 [ 48.739958][ T779] total_swap 126029824 [ 48.744180][ T779] total_swapcached 40960 [ 48.748484][ T779] total_pgpgin 217945 [ 48.752662][ T779] total_pgpgout 144345 [ 48.756977][ T779] total_pgfault 31274 [ 48.761397][ T779] total_pgmajfault 718 [ 48.765615][ T779] total_inactive_anon 273375232 [ 48.770537][ T779] total_active_anon 27623424 [ 48.775274][ T779] total_inactive_file 0 [ 48.779509][ T779] total_active_file 774144 [ 48.784237][ T779] total_unevictable 0 [ 48.788302][ T779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=792,uid=0 [ 48.809900][ T36] audit: type=1400 audit(1751020781.208:312): avc: denied { create } for pid=1182 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.831060][ T779] Memory cgroup out of memory: Killed process 792 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:27948kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 48.853607][ T1185] rust_binder: Write failure EFAULT in pid:179 [ 48.980708][ T786] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 49.129945][ T786] CPU: 0 UID: 0 PID: 786 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 49.129990][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.130000][ T786] Call Trace: [ 49.130006][ T786] [ 49.130013][ T786] __dump_stack+0x21/0x30 [ 49.130039][ T786] dump_stack_lvl+0x10c/0x190 [ 49.130059][ T786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.130081][ T786] ? ___ratelimit+0x3f7/0x5a0 [ 49.130101][ T786] dump_stack+0x19/0x20 [ 49.130121][ T786] dump_header+0xd7/0x490 [ 49.130147][ T786] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 49.130168][ T786] oom_kill_process+0x4c0/0x7e0 [ 49.130186][ T786] ? sched_clock_cpu+0x75/0x400 [ 49.130206][ T786] out_of_memory+0x7ee/0xbd0 [ 49.130221][ T786] ? __cfi_out_of_memory+0x10/0x10 [ 49.130236][ T786] ? mutex_lock_killable+0x104/0x1c0 [ 49.130256][ T786] ? __cfi_mutex_lock_killable+0x10/0x10 [ 49.130278][ T786] mem_cgroup_out_of_memory+0x279/0x350 [ 49.130302][ T786] ? drain_obj_stock+0xed0/0xed0 [ 49.130325][ T786] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 49.130349][ T786] try_charge_memcg+0x8f7/0xde0 [ 49.130370][ T786] ? __cfi_try_charge_memcg+0x10/0x10 [ 49.130389][ T786] ? __alloc_pages_noprof+0x30d/0x6c0 [ 49.130408][ T786] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.130427][ T786] __mem_cgroup_charge+0xf6/0x410 [ 49.130446][ T786] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 49.130467][ T786] ? __switch_to_asm+0x3d/0x70 [ 49.130489][ T786] shmem_alloc_and_add_folio+0x86d/0x1050 [ 49.130516][ T786] ? put_swap_device+0x130/0x130 [ 49.130539][ T786] ? shmem_huge_global_enabled+0x2da/0x360 [ 49.130564][ T786] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 49.130589][ T786] shmem_get_folio_gfp+0x5f0/0x1380 [ 49.130617][ T786] ? shmem_get_folio+0xc0/0xc0 [ 49.130641][ T786] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 49.130662][ T786] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 49.130684][ T786] ? inode_to_bdi+0x6d/0x100 [ 49.130705][ T786] shmem_write_begin+0xf4/0x270 [ 49.130733][ T786] generic_perform_write+0x32d/0x960 [ 49.130756][ T786] ? __cfi_generic_perform_write+0x10/0x10 [ 49.130777][ T786] ? down_write+0xe9/0x2a0 [ 49.130800][ T786] ? mnt_get_write_access_file+0x1af/0x3b0 [ 49.130820][ T786] ? mnt_put_write_access_file+0xc2/0x100 [ 49.130839][ T786] ? file_update_time+0x1ef/0x220 [ 49.130859][ T786] shmem_file_write_iter+0x105/0x130 [ 49.130879][ T786] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 49.130898][ T786] __kernel_write_iter+0x392/0x830 [ 49.130921][ T786] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 49.130941][ T786] ? __cfi___kernel_write_iter+0x10/0x10 [ 49.130972][ T786] ? get_dump_page+0x160/0x220 [ 49.130991][ T786] ? __asan_memset+0x39/0x50 [ 49.131012][ T786] ? iov_iter_bvec+0xc0/0x180 [ 49.131038][ T786] dump_user_range+0xb06/0xdf0 [ 49.131062][ T786] ? __cfi_dump_emit+0x10/0x10 [ 49.131084][ T786] ? __cfi_dump_user_range+0x10/0x10 [ 49.131107][ T786] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 49.131131][ T786] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 49.131155][ T786] elf_core_dump+0x2cd9/0x3810 [ 49.131185][ T786] ? __cfi_elf_core_dump+0x10/0x10 [ 49.131217][ T786] ? dump_interrupted+0xf0/0xf0 [ 49.131238][ T786] ? filp_open+0x182/0x1d0 [ 49.131256][ T786] ? 0xffffffffff600000 [ 49.131272][ T786] do_coredump+0x1bf7/0x2bd0 [ 49.131296][ T786] ? __cfi_do_coredump+0x10/0x10 [ 49.131318][ T786] ? asm_exc_page_fault+0x2b/0x30 [ 49.131344][ T786] ? __kasan_slab_free+0x6a/0x80 [ 49.131370][ T786] ? kmem_cache_free+0x1c1/0x4c0 [ 49.131393][ T786] get_signal+0x11fd/0x14f0 [ 49.131416][ T786] arch_do_signal_or_restart+0x96/0x720 [ 49.131441][ T786] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 49.131468][ T786] irqentry_exit_to_user_mode+0x4e/0xb0 [ 49.131493][ T786] irqentry_exit+0x16/0x60 [ 49.131515][ T786] exc_page_fault+0x66/0xc0 [ 49.131537][ T786] asm_exc_page_fault+0x2b/0x30 [ 49.131556][ T786] RIP: 0033:0xf136400c05 [ 49.131575][ T786] Code: Unable to access opcode bytes at 0xf136400bdb. [ 49.131585][ T786] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 49.131603][ T786] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 49.131616][ T786] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 49.131628][ T786] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 49.131641][ T786] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 49.131654][ T786] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 49.131670][ T786] [ 49.131678][ T786] memory: usage 303176kB, limit 307200kB, failcnt 45878 [ 49.799909][ T786] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 49.809155][ T36] audit: type=1400 audit(1751020782.208:313): avc: denied { read } for pid=1195 comm="syz.4.268" path="socket:[10592]" dev="sockfs" ino=10592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.809646][ T1198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.840758][ T1198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.878735][ T786] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 49.911984][ T786] Memory cgroup stats for /syz3: [ 49.912132][ T786] cache 314458112 [ 49.950831][ T786] rss 77824 [ 49.963682][ T786] rss_huge 0 [ 49.975624][ T786] shmem 314454016 [ 49.992240][ T786] mapped_file 0 [ 50.008070][ T786] dirty 0 [ 50.046019][ T786] writeback 4096 [ 50.049679][ T786] workingset_refault_anon 42 [ 50.054705][ T786] workingset_refault_file 30916 [ 50.073156][ T36] audit: type=1400 audit(1751020782.478:314): avc: denied { read } for pid=1127 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.079887][ T786] swap 127930368 [ 50.130659][ T786] swapcached 65536 [ 50.134428][ T786] pgpgin 226382 [ 50.137883][ T786] pgpgout 150093 [ 50.149890][ T786] pgfault 32952 [ 50.153383][ T786] pgmajfault 741 [ 50.156939][ T786] inactive_anon 295936000 [ 50.179895][ T786] active_anon 18370560 [ 50.184040][ T786] inactive_file 0 [ 50.187673][ T786] active_file 4096 [ 50.199891][ T786] unevictable 0 [ 50.203379][ T786] hierarchical_memory_limit 314572800 [ 50.208745][ T786] hierarchical_memsw_limit 9223372036854771712 [ 50.249890][ T786] total_cache 314458112 [ 50.254079][ T786] total_rss 77824 [ 50.257711][ T786] total_rss_huge 0 [ 50.279902][ T786] total_shmem 314454016 [ 50.284088][ T786] total_mapped_file 0 [ 50.288063][ T786] total_dirty 0 [ 50.300333][ T786] total_writeback 4096 [ 50.304425][ T786] total_workingset_refault_anon 42 [ 50.309527][ T786] total_workingset_refault_file 30916 [ 50.315106][ T786] total_swap 127930368 [ 50.319168][ T786] total_swapcached 65536 [ 50.323441][ T786] total_pgpgin 226382 [ 50.327422][ T786] total_pgpgout 150093 [ 50.331512][ T786] total_pgfault 32952 [ 50.335482][ T786] total_pgmajfault 741 [ 50.339540][ T786] total_inactive_anon 295936000 [ 50.344409][ T786] total_active_anon 18370560 [ 50.348993][ T786] total_inactive_file 0 [ 50.353168][ T786] total_active_file 4096 [ 50.357405][ T786] total_unevictable 0 [ 50.361420][ T786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=775,uid=0 [ 50.376341][ T786] Memory cgroup out of memory: Killed process 775 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:32104kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 50.550990][ T795] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 50.570079][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.637628][ T1204] rust_binder: Error while translating object. [ 50.637695][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.649636][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 50.759927][ T795] CPU: 1 UID: 0 PID: 795 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 50.759964][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.759977][ T795] Call Trace: [ 50.759983][ T795] [ 50.759992][ T795] __dump_stack+0x21/0x30 [ 50.760019][ T795] dump_stack_lvl+0x10c/0x190 [ 50.760041][ T795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.760062][ T795] ? ___ratelimit+0x3f7/0x5a0 [ 50.760081][ T795] dump_stack+0x19/0x20 [ 50.760102][ T795] dump_header+0xd7/0x490 [ 50.760129][ T795] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 50.760149][ T795] oom_kill_process+0x4c0/0x7e0 [ 50.760168][ T795] ? sched_clock_cpu+0x75/0x400 [ 50.760190][ T795] out_of_memory+0x7ee/0xbd0 [ 50.760207][ T795] ? __cfi_out_of_memory+0x10/0x10 [ 50.760224][ T795] ? mutex_lock_killable+0x104/0x1c0 [ 50.760247][ T795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 50.760271][ T795] mem_cgroup_out_of_memory+0x279/0x350 [ 50.760296][ T795] ? drain_obj_stock+0xed0/0xed0 [ 50.760320][ T795] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 50.760344][ T795] try_charge_memcg+0x8f7/0xde0 [ 50.760365][ T795] ? __cfi_try_charge_memcg+0x10/0x10 [ 50.760385][ T795] ? __alloc_pages_noprof+0x30d/0x6c0 [ 50.760406][ T795] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 50.760424][ T795] ? __folio_batch_add_and_move+0x2ab/0x370 [ 50.760443][ T795] __mem_cgroup_charge+0xf6/0x410 [ 50.760465][ T795] ? __kasan_check_write+0x18/0x20 [ 50.760487][ T795] ? _raw_spin_lock+0x8c/0x120 [ 50.760513][ T795] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 50.760537][ T795] shmem_alloc_and_add_folio+0x86d/0x1050 [ 50.760566][ T795] ? put_swap_device+0x130/0x130 [ 50.760593][ T795] ? shmem_huge_global_enabled+0x2da/0x360 [ 50.760619][ T795] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 50.760644][ T795] ? __kasan_check_write+0x18/0x20 [ 50.760666][ T795] ? _raw_spin_lock+0x8c/0x120 [ 50.760692][ T795] shmem_get_folio_gfp+0x5f0/0x1380 [ 50.760720][ T795] ? shmem_get_folio+0xc0/0xc0 [ 50.760744][ T795] ? follow_page_pte+0xa5c/0xb90 [ 50.760763][ T795] ? inode_to_bdi+0x6d/0x100 [ 50.760784][ T795] shmem_write_begin+0xf4/0x270 [ 50.760811][ T795] generic_perform_write+0x32d/0x960 [ 50.760842][ T795] ? __cfi_generic_perform_write+0x10/0x10 [ 50.760864][ T795] ? down_write+0xe9/0x2a0 [ 50.760887][ T795] ? file_update_time+0xa3/0x220 [ 50.760906][ T795] shmem_file_write_iter+0x105/0x130 [ 50.760926][ T795] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 50.760946][ T795] __kernel_write_iter+0x392/0x830 [ 50.760969][ T795] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 50.760989][ T795] ? __cfi___kernel_write_iter+0x10/0x10 [ 50.761011][ T795] ? get_dump_page+0x160/0x220 [ 50.761029][ T795] ? __asan_memset+0x39/0x50 [ 50.761051][ T795] ? iov_iter_bvec+0xc0/0x180 [ 50.761077][ T795] dump_user_range+0xb06/0xdf0 [ 50.761101][ T795] ? __cfi_dump_emit+0x10/0x10 [ 50.761122][ T795] ? __cfi_dump_user_range+0x10/0x10 [ 50.761145][ T795] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 50.761169][ T795] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 50.761194][ T795] elf_core_dump+0x2cd9/0x3810 [ 50.761224][ T795] ? __cfi_elf_core_dump+0x10/0x10 [ 50.761256][ T795] ? dump_interrupted+0xf0/0xf0 [ 50.761278][ T795] ? filp_open+0x182/0x1d0 [ 50.761296][ T795] ? 0xffffffffff600000 [ 50.761312][ T795] do_coredump+0x1bf7/0x2bd0 [ 50.761336][ T795] ? __cfi_do_coredump+0x10/0x10 [ 50.761357][ T795] ? asm_exc_page_fault+0x2b/0x30 [ 50.761382][ T795] ? __kasan_slab_free+0x6a/0x80 [ 50.761404][ T795] ? kmem_cache_free+0x1c1/0x4c0 [ 50.761428][ T795] get_signal+0x11fd/0x14f0 [ 50.761449][ T795] arch_do_signal_or_restart+0x96/0x720 [ 50.761473][ T795] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 50.761501][ T795] irqentry_exit_to_user_mode+0x4e/0xb0 [ 50.761523][ T795] irqentry_exit+0x16/0x60 [ 50.761542][ T795] exc_page_fault+0x66/0xc0 [ 50.761564][ T795] asm_exc_page_fault+0x2b/0x30 [ 50.761583][ T795] RIP: 0033:0xf136400c05 [ 50.761603][ T795] Code: Unable to access opcode bytes at 0xf136400bdb. [ 50.761613][ T795] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 50.761630][ T795] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 50.761644][ T795] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 50.761658][ T795] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 50.761672][ T795] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 50.761685][ T795] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 50.761701][ T795] [ 50.761743][ T795] memory: usage 306484kB, limit 307200kB, failcnt 47203 [ 51.179957][ T36] audit: type=1400 audit(1751020783.558:315): avc: denied { ioctl } for pid=1208 comm="syz.1.273" path="socket:[10104]" dev="sockfs" ino=10104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.185577][ T795] memory+swap: usage 430532kB, limit 9007199254740988kB, failcnt 0 [ 51.200508][ T1213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.206467][ T795] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 51.222063][ T36] audit: type=1400 audit(1751020783.558:316): avc: denied { setopt } for pid=1208 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.226932][ T795] Memory cgroup stats for [ 51.258879][ T36] audit: type=1400 audit(1751020783.558:317): avc: denied { getopt } for pid=1208 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 51.320408][ T795] /syz3: [ 51.320544][ T795] cache 314494976 [ 51.327075][ T795] rss 77824 [ 51.330234][ T795] rss_huge 0 [ 51.333624][ T795] shmem 314490880 [ 51.337482][ T795] mapped_file 0 [ 51.342678][ T795] dirty 0 [ 51.346613][ T795] writeback 0 [ 51.350099][ T795] workingset_refault_anon 42 [ 51.354745][ T795] workingset_refault_file 30921 [ 51.359725][ T795] swap 127967232 [ 51.363580][ T795] swapcached 28672 [ 51.367453][ T795] pgpgin 234435 [ 51.371177][ T795] pgpgout 158146 [ 51.374871][ T795] pgfault 33447 [ 51.378369][ T795] pgmajfault 742 [ 51.379954][ T1221] input: syz0 as /devices/virtual/input/input11 [ 51.383319][ T795] inactive_anon 152346624 [ 51.396267][ T795] active_anon 161959936 [ 51.401235][ T795] inactive_file 0 [ 51.404879][ T795] active_file 4096 [ 51.408812][ T795] unevictable 0 [ 51.413220][ T795] hierarchical_memory_limit 314572800 [ 51.418770][ T795] hierarchical_memsw_limit 9223372036854771712 [ 51.425584][ T795] total_cache 314494976 [ 51.430090][ T795] total_rss 77824 [ 51.433735][ T795] total_rss_huge 0 [ 51.437681][ T795] total_shmem 314490880 [ 51.442369][ T795] total_mapped_file 0 [ 51.446444][ T795] total_dirty 0 [ 51.450164][ T795] total_writeback 0 [ 51.451858][ T1229] __nla_validate_parse: 5 callbacks suppressed [ 51.451875][ T1229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 51.453978][ T795] total_workingset_refault_anon 42 [ 51.453988][ T795] total_workingset_refault_file 30921 [ 51.453995][ T795] total_swap 127967232 [ 51.454002][ T795] total_swapcached 28672 [ 51.454010][ T795] total_pgpgin 234435 [ 51.491877][ T795] total_pgpgout 158146 [ 51.496035][ T795] total_pgfault 33447 [ 51.500070][ T795] total_pgmajfault 742 [ 51.504168][ T795] total_inactive_anon 152346624 [ 51.509011][ T795] total_active_anon 161959936 [ 51.513706][ T795] total_inactive_file 0 [ 51.517849][ T795] total_active_file 4096 [ 51.522137][ T795] total_unevictable 0 [ 51.526155][ T795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=778,uid=0 [ 51.540912][ T795] Memory cgroup out of memory: Killed process 778 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:27656kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 51.581243][ T1197] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 51.601306][ T1197] CPU: 1 UID: 0 PID: 1197 Comm: syz-executor Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 51.601343][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.601355][ T1197] Call Trace: [ 51.601365][ T1197] [ 51.601373][ T1197] __dump_stack+0x21/0x30 [ 51.601401][ T1197] dump_stack_lvl+0x10c/0x190 [ 51.601423][ T1197] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.601446][ T1197] ? ___ratelimit+0x3f7/0x5a0 [ 51.601468][ T1197] dump_stack+0x19/0x20 [ 51.601489][ T1197] dump_header+0xd7/0x490 [ 51.601516][ T1197] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 51.601537][ T1197] oom_kill_process+0x4c0/0x7e0 [ 51.601555][ T1197] ? sched_clock_cpu+0x75/0x400 [ 51.601579][ T1197] out_of_memory+0x7ee/0xbd0 [ 51.601596][ T1197] ? __cfi_out_of_memory+0x10/0x10 [ 51.601614][ T1197] ? mutex_lock_killable+0x104/0x1c0 [ 51.601637][ T1197] ? __cfi_mutex_lock_killable+0x10/0x10 [ 51.601662][ T1197] mem_cgroup_out_of_memory+0x279/0x350 [ 51.601688][ T1197] ? drain_obj_stock+0xed0/0xed0 [ 51.601713][ T1197] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 51.601738][ T1197] try_charge_memcg+0x8f7/0xde0 [ 51.601759][ T1197] ? percpu_counter_add_batch+0xfc/0x1b0 [ 51.601791][ T1197] ? __cfi_try_charge_memcg+0x10/0x10 [ 51.601812][ T1197] ? __alloc_pages_noprof+0x30d/0x6c0 [ 51.601832][ T1197] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 51.601854][ T1197] __mem_cgroup_charge+0xf6/0x410 [ 51.601877][ T1197] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 51.601900][ T1197] ? __cfi_filemap_map_pages+0x10/0x10 [ 51.601921][ T1197] ? cgroup_rstat_updated+0x132/0x7f0 [ 51.601945][ T1197] folio_prealloc+0x67/0x240 [ 51.601973][ T1197] do_wp_page+0x1c54/0x3270 [ 51.601998][ T1197] ? __cfi_filemap_map_pages+0x10/0x10 [ 51.602021][ T1197] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 51.602042][ T1197] ? folio_put+0x90/0x90 [ 51.602066][ T1197] ? __cfi__raw_spin_lock+0x10/0x10 [ 51.602093][ T1197] ? __pte_offset_map+0x1b0/0x230 [ 51.602116][ T1197] ? pte_offset_map_rw_nolock+0xba/0x110 [ 51.602139][ T1197] handle_mm_fault+0xff7/0x1b90 [ 51.602167][ T1197] ? __cfi_handle_mm_fault+0x10/0x10 [ 51.602193][ T1197] ? lock_vma_under_rcu+0x49d/0x530 [ 51.602224][ T1197] do_user_addr_fault+0x96c/0x1200 [ 51.602251][ T1197] exc_page_fault+0x59/0xc0 [ 51.602274][ T1197] asm_exc_page_fault+0x2b/0x30 [ 51.602294][ T1197] RIP: 0033:0x7f391eb84e40 [ 51.602311][ T1197] Code: 75 d8 4c 89 e7 e8 60 f7 fb ff 48 8b 80 88 00 00 00 48 c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 eb b8 0f 1f 84 00 00 00 00 00 <48> 83 05 38 79 d6 00 04 48 8b 05 39 88 d6 00 66 0f ef c0 48 c7 05 [ 51.602328][ T1197] RSP: 002b:00007ffd37d0b7a0 EFLAGS: 00010246 [ 51.602347][ T1197] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f391eb851cd [ 51.602361][ T1197] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 000055555b28f7e0 [ 51.602375][ T1197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 51.602387][ T1197] R10: 000055555b28f7d0 R11: 0000000000000246 R12: 0000000000000000 [ 51.602400][ T1197] R13: 00000000000927c0 R14: 000000000000c08d R15: 00007ffd37d0b930 [ 51.602417][ T1197] [ 51.602473][ T1197] memory: usage 305688kB, limit 307200kB, failcnt 47682 [ 51.910938][ T1197] memory+swap: usage 422432kB, limit 9007199254740988kB, failcnt 0 [ 51.920880][ T1197] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 51.927815][ T1197] Memory cgroup stats for /syz3: [ 51.927956][ T1197] cache 306315264 [ 51.936586][ T1197] rss 65536 [ 51.939764][ T1197] rss_huge 0 [ 51.943032][ T1197] shmem 306311168 [ 51.946806][ T1197] mapped_file 0 [ 51.950352][ T1197] dirty 0 [ 51.953360][ T1197] writeback 0 [ 51.956694][ T1197] workingset_refault_anon 48 [ 51.961387][ T1197] workingset_refault_file 30953 [ 51.966317][ T1197] swap 127938560 [ 51.974095][ T1197] swapcached 57344 [ 51.981982][ T1197] pgpgin 237507 [ 51.989619][ T1197] pgpgout 163201 [ 51.997342][ T1197] pgfault 33571 [ 52.009890][ T1197] pgmajfault 749 [ 52.019727][ T1197] inactive_anon 126554112 [ 52.034432][ T1197] active_anon 179101696 [ 52.046827][ T1197] inactive_file 0 [ 52.055943][ T1197] active_file 4096 [ 52.069893][ T1197] unevictable 0 [ 52.083761][ T1197] hierarchical_memory_limit 314572800 [ 52.107664][ T1197] hierarchical_memsw_limit 9223372036854771712 [ 52.131039][ T1197] total_cache 306315264 [ 52.138100][ T1197] total_rss 65536 [ 52.141853][ T1197] total_rss_huge 0 [ 52.145671][ T1197] total_shmem 306311168 [ 52.149831][ T1197] total_mapped_file 0 [ 52.153854][ T1197] total_dirty 0 [ 52.157330][ T1197] total_writeback 0 [ 52.159919][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.161181][ T1197] total_workingset_refault_anon 48 [ 52.173736][ T1197] total_workingset_refault_file 30953 [ 52.179211][ T1197] total_swap 127938560 [ 52.183416][ T1197] total_swapcached 57344 [ 52.187661][ T1197] total_pgpgin 237507 [ 52.191709][ T1197] total_pgpgout 163201 [ 52.195850][ T1197] total_pgfault 33571 [ 52.199849][ T1197] total_pgmajfault 749 [ 52.203992][ T1197] total_inactive_anon 126554112 [ 52.208861][ T1197] total_active_anon 179101696 [ 52.213562][ T1197] total_inactive_file 0 [ 52.217734][ T1197] total_active_file 4096 [ 52.222000][ T1197] total_unevictable 0 [ 52.226009][ T1197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=793,uid=0 [ 52.240691][ T1197] Memory cgroup out of memory: Killed process 793 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:32544kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 52.329905][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 52.346326][ T9] usb 2-1: config 9 has an invalid interface number: 4 but max is 0 [ 52.353832][ T795] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 52.355438][ T9] usb 2-1: config 9 has no interface number 0 [ 52.376595][ T9] usb 2-1: config 9 interface 4 has no altsetting 0 [ 52.383647][ T795] CPU: 0 UID: 0 PID: 795 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 52.383679][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.383692][ T795] Call Trace: [ 52.383698][ T795] [ 52.383705][ T795] __dump_stack+0x21/0x30 [ 52.383736][ T795] dump_stack_lvl+0x10c/0x190 [ 52.383758][ T795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.383780][ T795] ? ___ratelimit+0x3f7/0x5a0 [ 52.383802][ T795] dump_stack+0x19/0x20 [ 52.383821][ T795] dump_header+0xd7/0x490 [ 52.383848][ T795] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 52.383868][ T795] oom_kill_process+0x4c0/0x7e0 [ 52.383886][ T795] ? sched_clock_cpu+0x75/0x400 [ 52.383908][ T795] out_of_memory+0x7ee/0xbd0 [ 52.383926][ T795] ? __cfi_out_of_memory+0x10/0x10 [ 52.383942][ T795] ? mutex_lock_killable+0x92/0x1c0 [ 52.383965][ T795] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.383989][ T795] mem_cgroup_out_of_memory+0x279/0x350 [ 52.384014][ T795] ? drain_obj_stock+0xed0/0xed0 [ 52.384040][ T795] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 52.384065][ T795] try_charge_memcg+0x8f7/0xde0 [ 52.384086][ T795] ? __cfi_try_charge_memcg+0x10/0x10 [ 52.384107][ T795] ? __alloc_pages_noprof+0x30d/0x6c0 [ 52.384128][ T795] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 52.384147][ T795] ? __folio_batch_add_and_move+0x2ab/0x370 [ 52.384167][ T795] __mem_cgroup_charge+0xf6/0x410 [ 52.384185][ T795] ? __kasan_check_write+0x18/0x20 [ 52.384207][ T795] ? _raw_spin_lock+0x8c/0x120 [ 52.384234][ T795] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 52.384258][ T795] shmem_alloc_and_add_folio+0x86d/0x1050 [ 52.384289][ T795] ? put_swap_device+0x130/0x130 [ 52.384317][ T795] ? shmem_huge_global_enabled+0x2da/0x360 [ 52.384349][ T795] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 52.384374][ T795] ? __kasan_check_write+0x18/0x20 [ 52.384396][ T795] ? _raw_spin_lock+0x8c/0x120 [ 52.384422][ T795] shmem_get_folio_gfp+0x5f0/0x1380 [ 52.384448][ T795] ? shmem_get_folio+0xc0/0xc0 [ 52.384472][ T795] ? follow_page_pte+0xa5c/0xb90 [ 52.384492][ T795] ? inode_to_bdi+0x6d/0x100 [ 52.384514][ T795] shmem_write_begin+0xf4/0x270 [ 52.384542][ T795] generic_perform_write+0x32d/0x960 [ 52.384566][ T795] ? __cfi_generic_perform_write+0x10/0x10 [ 52.384587][ T795] ? down_write+0xe9/0x2a0 [ 52.384618][ T795] ? file_update_time+0xa3/0x220 [ 52.384639][ T795] shmem_file_write_iter+0x105/0x130 [ 52.384659][ T795] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 52.384680][ T795] __kernel_write_iter+0x392/0x830 [ 52.384703][ T795] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 52.384724][ T795] ? __cfi___kernel_write_iter+0x10/0x10 [ 52.384747][ T795] ? get_dump_page+0x160/0x220 [ 52.384766][ T795] ? __asan_memset+0x39/0x50 [ 52.384787][ T795] ? iov_iter_bvec+0xc0/0x180 [ 52.384814][ T795] dump_user_range+0xb06/0xdf0 [ 52.384839][ T795] ? __cfi_dump_emit+0x10/0x10 [ 52.384860][ T795] ? __cfi_dump_user_range+0x10/0x10 [ 52.384884][ T795] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 52.384909][ T795] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 52.384935][ T795] elf_core_dump+0x2cd9/0x3810 [ 52.384965][ T795] ? __cfi_elf_core_dump+0x10/0x10 [ 52.384998][ T795] ? dump_interrupted+0xf0/0xf0 [ 52.385020][ T795] ? filp_open+0x182/0x1d0 [ 52.385039][ T795] ? 0xffffffffff600000 [ 52.385054][ T795] do_coredump+0x1bf7/0x2bd0 [ 52.385079][ T795] ? __cfi_do_coredump+0x10/0x10 [ 52.385101][ T795] ? asm_exc_page_fault+0x2b/0x30 [ 52.385129][ T795] ? __kasan_slab_free+0x6a/0x80 [ 52.385154][ T795] ? kmem_cache_free+0x1c1/0x4c0 [ 52.385179][ T795] get_signal+0x11fd/0x14f0 [ 52.385202][ T795] arch_do_signal_or_restart+0x96/0x720 [ 52.385228][ T795] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 52.385257][ T795] irqentry_exit_to_user_mode+0x4e/0xb0 [ 52.385281][ T795] irqentry_exit+0x16/0x60 [ 52.385304][ T795] exc_page_fault+0x66/0xc0 [ 52.385327][ T795] asm_exc_page_fault+0x2b/0x30 [ 52.385346][ T795] RIP: 0033:0xf136400c05 [ 52.385367][ T795] Code: Unable to access opcode bytes at 0xf136400bdb. [ 52.385377][ T795] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 52.385396][ T795] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 52.385411][ T795] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 52.385425][ T795] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 52.385439][ T795] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 52.385452][ T795] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 52.385467][ T795] [ 52.385512][ T795] memory: usage 304184kB, limit 307200kB, failcnt 48997 [ 52.609920][ T1205] Bluetooth: hci0: command 0x1003 tx timeout [ 52.610728][ T795] memory+swap: usage 432016kB, limit 9007199254740988kB, failcnt 0 [ 52.615217][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.620022][ T795] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 52.875992][ T795] Memory cgroup stats for /syz3: [ 52.876137][ T795] cache 314499072 [ 52.889664][ T1247] binder: Unknown parameter '18446744073709551615' [ 52.896272][ T795] rss 73728 [ 52.901916][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=40.fa [ 52.911197][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.916781][ T795] rss_huge 0 [ 52.919393][ T9] usb 2-1: Product: syz [ 52.930094][ T9] usb 2-1: Manufacturer: syz [ 52.932257][ T795] shmem 314494976 [ 52.934756][ T9] usb 2-1: SerialNumber: syz [ 52.944700][ T795] mapped_file 0 [ 52.949974][ T795] dirty 0 [ 52.955398][ T795] writeback 0 [ 52.958815][ T795] workingset_refault_anon 52 [ 52.963488][ T795] workingset_refault_file 32421 [ 52.968360][ T795] swap 127954944 [ 52.971677][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.974939][ T795] swapcached 32768 [ 52.981247][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.984455][ T795] pgpgin 251412 [ 52.992722][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 52.992736][ T36] audit: type=1400 audit(1751020785.398:328): avc: denied { append } for pid=1256 comm="syz.4.290" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.995210][ T795] pgpgout 175123 [ 53.027457][ T795] pgfault 33796 [ 53.031077][ T795] pgmajfault 775 [ 53.034631][ T795] inactive_anon 313552896 [ 53.038985][ T795] active_anon 1015808 [ 53.043083][ T795] inactive_file 0 [ 53.046727][ T795] active_file 4096 [ 53.050467][ T795] unevictable 0 [ 53.053932][ T795] hierarchical_memory_limit 314572800 [ 53.059292][ T795] hierarchical_memsw_limit 9223372036854771712 [ 53.065456][ T795] total_cache 314499072 [ 53.069609][ T795] total_rss 73728 [ 53.073256][ T795] total_rss_huge 0 [ 53.076977][ T795] total_shmem 314494976 [ 53.081160][ T795] total_mapped_file 0 [ 53.085138][ T795] total_dirty 0 [ 53.088582][ T795] total_writeback 0 [ 53.092457][ T795] total_workingset_refault_anon 52 [ 53.097573][ T795] total_workingset_refault_file 32421 [ 53.102959][ T795] total_swap 127954944 [ 53.107024][ T795] total_swapcached 32768 [ 53.111282][ T795] total_pgpgin 251412 [ 53.115262][ T795] total_pgpgout 175123 [ 53.119319][ T795] total_pgfault 33796 [ 53.123312][ T795] total_pgmajfault 775 [ 53.127376][ T795] total_inactive_anon 313552896 [ 53.132244][ T795] total_active_anon 1015808 [ 53.136749][ T795] total_inactive_file 0 [ 53.140928][ T795] total_active_file 4096 [ 53.145166][ T795] total_unevictable 0 [ 53.149146][ T795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=786,uid=0 [ 53.163864][ T795] Memory cgroup out of memory: Killed process 786 (syz.3.142) total-vm:90092kB, anon-rss:1076kB, file-rss:33080kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 53.199903][ T545] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 53.272858][ T771] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 53.299080][ T771] CPU: 0 UID: 0 PID: 771 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 53.299116][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.299128][ T771] Call Trace: [ 53.299135][ T771] [ 53.299142][ T771] __dump_stack+0x21/0x30 [ 53.299170][ T771] dump_stack_lvl+0x10c/0x190 [ 53.299195][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.299217][ T771] ? ___ratelimit+0x3f7/0x5a0 [ 53.299239][ T771] dump_stack+0x19/0x20 [ 53.299259][ T771] dump_header+0xd7/0x490 [ 53.299286][ T771] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 53.299307][ T771] oom_kill_process+0x4c0/0x7e0 [ 53.299325][ T771] ? sched_clock_cpu+0x75/0x400 [ 53.299348][ T771] out_of_memory+0x7ee/0xbd0 [ 53.299365][ T771] ? __cfi_out_of_memory+0x10/0x10 [ 53.299383][ T771] ? mutex_lock_killable+0x92/0x1c0 [ 53.299405][ T771] ? __cfi_mutex_lock_killable+0x10/0x10 [ 53.299428][ T771] mem_cgroup_out_of_memory+0x279/0x350 [ 53.299453][ T771] ? drain_obj_stock+0xed0/0xed0 [ 53.299478][ T771] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 53.299503][ T771] try_charge_memcg+0x8f7/0xde0 [ 53.299523][ T771] ? __cfi_try_charge_memcg+0x10/0x10 [ 53.299544][ T771] ? __alloc_pages_noprof+0x30d/0x6c0 [ 53.299564][ T771] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 53.299584][ T771] ? __folio_batch_add_and_move+0x2ab/0x370 [ 53.299603][ T771] __mem_cgroup_charge+0xf6/0x410 [ 53.299626][ T771] ? __kasan_check_write+0x18/0x20 [ 53.299648][ T771] ? _raw_spin_lock+0x8c/0x120 [ 53.299675][ T771] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 53.299699][ T771] shmem_alloc_and_add_folio+0x86d/0x1050 [ 53.299729][ T771] ? put_swap_device+0x130/0x130 [ 53.299756][ T771] ? shmem_huge_global_enabled+0x2da/0x360 [ 53.299790][ T771] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 53.299816][ T771] ? __kasan_check_write+0x18/0x20 [ 53.299838][ T771] ? _raw_spin_lock+0x8c/0x120 [ 53.299864][ T771] shmem_get_folio_gfp+0x5f0/0x1380 [ 53.299889][ T771] ? shmem_get_folio+0xc0/0xc0 [ 53.299913][ T771] ? follow_page_pte+0xa5c/0xb90 [ 53.299933][ T771] ? inode_to_bdi+0x6d/0x100 [ 53.299954][ T771] shmem_write_begin+0xf4/0x270 [ 53.299979][ T771] generic_perform_write+0x32d/0x960 [ 53.300000][ T771] ? __cfi_generic_perform_write+0x10/0x10 [ 53.300020][ T771] ? down_write+0xe9/0x2a0 [ 53.300040][ T771] ? file_update_time+0xa3/0x220 [ 53.300059][ T771] shmem_file_write_iter+0x105/0x130 [ 53.300076][ T771] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 53.300094][ T771] __kernel_write_iter+0x392/0x830 [ 53.300114][ T771] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 53.300133][ T771] ? __cfi___kernel_write_iter+0x10/0x10 [ 53.300153][ T771] ? get_dump_page+0x160/0x220 [ 53.300169][ T771] ? __asan_memset+0x39/0x50 [ 53.300188][ T771] ? iov_iter_bvec+0xc0/0x180 [ 53.300212][ T771] dump_user_range+0xb06/0xdf0 [ 53.300234][ T771] ? __cfi_dump_emit+0x10/0x10 [ 53.300253][ T771] ? __cfi_dump_user_range+0x10/0x10 [ 53.300274][ T771] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 53.300295][ T771] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 53.300317][ T771] elf_core_dump+0x2cd9/0x3810 [ 53.300352][ T771] ? __cfi_elf_core_dump+0x10/0x10 [ 53.300381][ T771] ? dump_interrupted+0xf0/0xf0 [ 53.300400][ T771] ? filp_open+0x182/0x1d0 [ 53.300417][ T771] ? 0xffffffffff600000 [ 53.300431][ T771] do_coredump+0x1bf7/0x2bd0 [ 53.300453][ T771] ? __cfi_do_coredump+0x10/0x10 [ 53.300471][ T771] ? asm_exc_page_fault+0x2b/0x30 [ 53.300496][ T771] ? __kasan_slab_free+0x6a/0x80 [ 53.300519][ T771] ? kmem_cache_free+0x1c1/0x4c0 [ 53.300541][ T771] get_signal+0x11fd/0x14f0 [ 53.300565][ T771] arch_do_signal_or_restart+0x96/0x720 [ 53.300591][ T771] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.300618][ T771] irqentry_exit_to_user_mode+0x4e/0xb0 [ 53.300642][ T771] irqentry_exit+0x16/0x60 [ 53.300665][ T771] exc_page_fault+0x66/0xc0 [ 53.300688][ T771] asm_exc_page_fault+0x2b/0x30 [ 53.300707][ T771] RIP: 0033:0xf136400c05 [ 53.300726][ T771] Code: Unable to access opcode bytes at 0xf136400bdb. [ 53.300736][ T771] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 53.300755][ T771] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 53.300776][ T771] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 53.300790][ T771] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 53.300804][ T771] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 53.300817][ T771] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 53.300833][ T771] [ 53.360319][ T545] usb 3-1: device descriptor read/64, error -71 [ 53.369802][ T771] memory: usage 297476kB, limit 307200kB, failcnt 51473 [ 53.604496][ T1267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.605255][ T771] memory+swap: usage 429616kB, limit 9007199254740988kB, failcnt 0 [ 53.619473][ T1267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.619975][ T771] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 53.624129][ T545] usb 3-1: device descriptor read/64, error -71 [ 53.636394][ T771] Memory cgroup stats for [ 53.702949][ T1268] __vm_enough_memory: 23 callbacks suppressed [ 53.702966][ T1268] __vm_enough_memory: pid: 1268, comm: syz.4.292, bytes: 70373039144960 not enough memory for the allocation [ 53.705806][ T771] /syz3 [ 53.737613][ T1272] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 53.745902][ T771] : [ 53.777116][ T1274] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.778519][ T771] cache 314322944 [ 53.786075][ T1274] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 53.793384][ T771] rss 69632 [ 53.799335][ T1274] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.803685][ T771] rss_huge 0 [ 53.809684][ T1274] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 53.821364][ T771] shmem 314318848 [ 53.881215][ T771] mapped_file 0 [ 53.884748][ T771] dirty 0 [ 53.887707][ T771] writeback 0 [ 53.891014][ T545] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 53.898578][ T771] workingset_refault_anon 54 [ 53.903220][ T771] workingset_refault_file 32437 [ 53.908093][ T771] swap 127606784 [ 53.911825][ T771] swapcached 212992 [ 53.915809][ T771] pgpgin 260148 [ 53.919441][ T771] pgpgout 183859 [ 53.923058][ T771] pgfault 33869 [ 53.926522][ T771] pgmajfault 778 [ 53.930090][ T771] inactive_anon 314105856 [ 53.934420][ T771] active_anon 462848 [ 53.938304][ T771] inactive_file 0 [ 53.942000][ T771] active_file 4096 [ 53.945743][ T771] unevictable 0 [ 53.949207][ T771] hierarchical_memory_limit 314572800 [ 53.954636][ T771] hierarchical_memsw_limit 9223372036854771712 [ 53.960862][ T771] total_cache 314322944 [ 53.965097][ T771] total_rss 69632 [ 53.968744][ T771] total_rss_huge 0 [ 53.974043][ T771] total_shmem 314318848 [ 53.983939][ T771] total_mapped_file 0 [ 53.988032][ T771] total_dirty 0 [ 53.991575][ T771] total_writeback 0 [ 53.996507][ T771] total_workingset_refault_anon 54 [ 54.001896][ T771] total_workingset_refault_file 32437 [ 54.007322][ T771] total_swap 127606784 [ 54.011672][ T771] total_swapcached 212992 [ 54.016028][ T771] total_pgpgin 260148 [ 54.020281][ T771] total_pgpgout 183859 [ 54.024370][ T771] total_pgfault 33869 [ 54.028366][ T771] total_pgmajfault 778 [ 54.029907][ T545] usb 3-1: device descriptor read/64, error -71 [ 54.032859][ T771] total_inactive_anon 314105856 [ 54.043790][ T771] total_active_anon 462848 [ 54.048226][ T771] total_inactive_file 0 [ 54.052502][ T771] total_active_file 4096 [ 54.056817][ T771] total_unevictable 0 [ 54.060917][ T771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=780,uid=0 [ 54.075655][ T771] Memory cgroup out of memory: Killed process 780 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:28796kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 54.127686][ T288] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 54.150028][ T288] CPU: 1 UID: 0 PID: 288 Comm: syz-executor Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 54.150064][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.150076][ T288] Call Trace: [ 54.150082][ T288] [ 54.150089][ T288] __dump_stack+0x21/0x30 [ 54.150117][ T288] dump_stack_lvl+0x10c/0x190 [ 54.150138][ T288] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.150160][ T288] ? ___ratelimit+0x3f7/0x5a0 [ 54.150182][ T288] dump_stack+0x19/0x20 [ 54.150202][ T288] dump_header+0xd7/0x490 [ 54.150229][ T288] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 54.150250][ T288] oom_kill_process+0x4c0/0x7e0 [ 54.150268][ T288] ? sched_clock_cpu+0x75/0x400 [ 54.150291][ T288] out_of_memory+0x7ee/0xbd0 [ 54.150308][ T288] ? __cfi_out_of_memory+0x10/0x10 [ 54.150325][ T288] ? mutex_lock_killable+0x92/0x1c0 [ 54.150345][ T288] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.150367][ T288] mem_cgroup_out_of_memory+0x279/0x350 [ 54.150390][ T288] ? drain_obj_stock+0xed0/0xed0 [ 54.150412][ T288] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 54.150433][ T288] try_charge_memcg+0x8f7/0xde0 [ 54.150452][ T288] ? __cfi_try_charge_memcg+0x10/0x10 [ 54.150469][ T288] ? xas_load+0x3a2/0x3d0 [ 54.150488][ T288] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 54.150511][ T288] __read_swap_cache_async+0x34a/0x690 [ 54.150538][ T288] swap_cluster_readahead+0x2f7/0x530 [ 54.150561][ T288] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 54.150586][ T288] swapin_readahead+0xf2/0x820 [ 54.150608][ T288] ? mutex_unlock+0x8b/0x240 [ 54.150626][ T288] ? __cfi_mutex_unlock+0x10/0x10 [ 54.150646][ T288] ? xt_data_to_user+0x127/0x150 [ 54.150671][ T288] ? __cfi_swapin_readahead+0x10/0x10 [ 54.150693][ T288] ? __filemap_get_folio+0x77c/0x7c0 [ 54.150710][ T288] ? do_ipt_get_ctl+0xebb/0x1180 [ 54.150730][ T288] ? get_swap_device+0x10f/0x290 [ 54.150753][ T288] do_swap_page+0x43c/0x42f0 [ 54.150781][ T288] ? __cfi_do_ipt_get_ctl+0x10/0x10 [ 54.150802][ T288] ? __cfi_do_swap_page+0x10/0x10 [ 54.150824][ T288] ? __kasan_check_write+0x18/0x20 [ 54.150843][ T288] ? mutex_unlock+0x8b/0x240 [ 54.150862][ T288] ? __cfi_default_wake_function+0x10/0x10 [ 54.150881][ T288] ? __pte_offset_map+0x1b0/0x230 [ 54.150902][ T288] ? pte_offset_map_rw_nolock+0xba/0x110 [ 54.150921][ T288] handle_mm_fault+0x1205/0x1b90 [ 54.150947][ T288] ? __cfi_handle_mm_fault+0x10/0x10 [ 54.150968][ T288] ? lock_vma_under_rcu+0x49d/0x530 [ 54.150994][ T288] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 54.151013][ T288] ? xfd_validate_state+0x68/0x150 [ 54.151034][ T288] do_user_addr_fault+0x96c/0x1200 [ 54.151057][ T288] exc_page_fault+0x59/0xc0 [ 54.151077][ T288] asm_exc_page_fault+0x2b/0x30 [ 54.151095][ T288] RIP: 0033:0x7f391eb55585 [ 54.151109][ T288] Code: f3 0f bc c9 0f b6 44 0f 60 0f b6 4c 0e 60 29 c8 e9 6e ff ff ff 48 8d 54 17 80 48 29 fe 48 83 e7 e0 48 83 ef 80 c5 fe 6f 0c 3e f5 74 0f c5 fe 6f 54 3e 20 c5 ed 74 57 20 c5 fe 6f 5c 3e 40 c5 [ 54.151124][ T288] RSP: 002b:00007ffd37d0b1a8 EFLAGS: 00010293 [ 54.151141][ T288] RAX: 0000000000000000 RBX: 00007ffd37d0b230 RCX: 0000000000000000 [ 54.151152][ T288] RDX: 00007f391ed820f8 RSI: 000000c418f89358 RDI: 00007f391ed82000 [ 54.151166][ T288] RBP: 0000000000000003 R08: 00007ffd37d0b1cc R09: 00007ffd37d0b5e7 [ 54.151179][ T288] R10: 00007ffd37d0b230 R11: 0000000000000216 R12: 00007f391ed81e40 [ 54.151191][ T288] R13: 00007ffd37d0b1cc R14: 0000000000000000 R15: 00007f391ed84000 [ 54.151206][ T288] [ 54.151246][ T288] memory: usage 307200kB, limit 307200kB, failcnt 52188 [ 54.502475][ T288] memory+swap: usage 419620kB, limit 9007199254740988kB, failcnt 0 [ 54.510412][ T288] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 54.517357][ T288] Memory cgroup stats for /syz3: [ 54.517500][ T288] cache 303161344 [ 54.526112][ T288] rss 69632 [ 54.529224][ T288] rss_huge 0 [ 54.532488][ T288] shmem 303161344 [ 54.536118][ T288] mapped_file 0 [ 54.539577][ T288] dirty 0 [ 54.542545][ T288] writeback 163840 [ 54.546258][ T288] workingset_refault_anon 55 [ 54.550873][ T288] workingset_refault_file 32453 [ 54.555717][ T288] swap 127746048 [ 54.559260][ T288] swapcached 249856 [ 54.563157][ T545] usb 3-1: device descriptor read/64, error -71 [ 54.569419][ T288] pgpgin 265126 [ 54.572928][ T288] pgpgout 191551 [ 54.583609][ T288] pgfault 34004 [ 54.596881][ T288] pgmajfault 780 [ 54.622441][ T288] inactive_anon 250871808 [ 54.639128][ T288] active_anon 51933184 [ 54.643616][ T288] inactive_file 0 [ 54.647251][ T288] active_file 0 [ 54.651781][ T288] unevictable 0 [ 54.659328][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.670625][ T545] usb usb3-port1: attempt power cycle [ 54.676715][ T288] hierarchical_memory_limit 314572800 [ 54.682500][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.689751][ T288] hierarchical_memsw_limit 9223372036854771712 [ 54.694194][ T36] audit: type=1400 audit(1751020787.098:329): avc: denied { mounton } for pid=1290 comm="syz.4.298" path="/72/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.696510][ T288] total_cache 303161344 [ 54.723403][ T288] total_rss 69632 [ 54.725023][ T36] audit: type=1400 audit(1751020787.128:330): avc: denied { mounton } for pid=1290 comm="syz.4.298" path="/72/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 54.728046][ T288] total_rss_huge 0 [ 54.752905][ T288] total_shmem 303161344 [ 54.757118][ T288] total_mapped_file 0 [ 54.761123][ T288] total_dirty 0 [ 54.764578][ T288] total_writeback 163840 [ 54.768803][ T288] total_workingset_refault_anon 55 [ 54.774143][ T288] total_workingset_refault_file 32453 [ 54.779761][ T288] total_swap 127746048 [ 54.784749][ T288] total_swapcached 249856 [ 54.789642][ T9] usb 2-1: NDI device with a latency value of 1 [ 54.794870][ T288] total_pgpgin 265126 [ 54.798665][ T9] ftdi_sio 2-1:9.4: FTDI USB Serial Device converter detected [ 54.800037][ T288] total_pgpgout 191551 [ 54.807919][ T9] ftdi_sio ttyUSB0: unknown device type: 0x40fa [ 54.812122][ T288] total_pgfault 34004 [ 54.821987][ T9] usb 2-1: USB disconnect, device number 7 [ 54.823586][ T288] total_pgmajfault 780 [ 54.831940][ T288] total_inactive_anon 250871808 [ 54.834900][ T9] ftdi_sio 2-1:9.4: device disconnected [ 54.836854][ T288] total_active_anon 51933184 [ 54.847270][ T288] total_inactive_file 0 [ 54.851657][ T288] total_active_file 0 [ 54.855768][ T288] total_unevictable 0 [ 54.859836][ T288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=787,uid=0 [ 54.874989][ T288] Memory cgroup out of memory: Killed process 787 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:28412kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 54.897821][ T790] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 54.907721][ T790] CPU: 1 UID: 0 PID: 790 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 54.907752][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.907764][ T790] Call Trace: [ 54.907770][ T790] [ 54.907778][ T790] __dump_stack+0x21/0x30 [ 54.907805][ T790] dump_stack_lvl+0x10c/0x190 [ 54.907827][ T790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.907848][ T790] ? ___ratelimit+0x3f7/0x5a0 [ 54.907870][ T790] dump_stack+0x19/0x20 [ 54.907890][ T790] dump_header+0xd7/0x490 [ 54.907918][ T790] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 54.907939][ T790] oom_kill_process+0x4c0/0x7e0 [ 54.907957][ T790] ? sched_clock_cpu+0x75/0x400 [ 54.907980][ T790] out_of_memory+0x7ee/0xbd0 [ 54.907997][ T790] ? __cfi_out_of_memory+0x10/0x10 [ 54.908014][ T790] ? mutex_lock_killable+0x104/0x1c0 [ 54.908037][ T790] ? __cfi_mutex_lock_killable+0x10/0x10 [ 54.908062][ T790] mem_cgroup_out_of_memory+0x279/0x350 [ 54.908087][ T790] ? drain_obj_stock+0xed0/0xed0 [ 54.908113][ T790] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 54.908137][ T790] try_charge_memcg+0x8f7/0xde0 [ 54.908158][ T790] ? __cfi_try_charge_memcg+0x10/0x10 [ 54.908178][ T790] ? __alloc_pages_noprof+0x30d/0x6c0 [ 54.908199][ T790] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 54.908218][ T790] ? __folio_batch_add_and_move+0x2ab/0x370 [ 54.908238][ T790] __mem_cgroup_charge+0xf6/0x410 [ 54.908261][ T790] ? __kasan_check_write+0x18/0x20 [ 54.908283][ T790] ? _raw_spin_lock+0x8c/0x120 [ 54.908310][ T790] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 54.908335][ T790] shmem_alloc_and_add_folio+0x86d/0x1050 [ 54.908366][ T790] ? put_swap_device+0x130/0x130 [ 54.908394][ T790] ? shmem_huge_global_enabled+0x2da/0x360 [ 54.908429][ T790] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 54.908456][ T790] ? __kasan_check_write+0x18/0x20 [ 54.908478][ T790] ? _raw_spin_lock+0x8c/0x120 [ 54.908505][ T790] shmem_get_folio_gfp+0x5f0/0x1380 [ 54.908535][ T790] ? shmem_get_folio+0xc0/0xc0 [ 54.908558][ T790] ? follow_page_pte+0xa5c/0xb90 [ 54.908577][ T790] ? inode_to_bdi+0x6d/0x100 [ 54.908600][ T790] shmem_write_begin+0xf4/0x270 [ 54.908627][ T790] generic_perform_write+0x32d/0x960 [ 54.908651][ T790] ? __cfi_generic_perform_write+0x10/0x10 [ 54.908672][ T790] ? down_write+0xe9/0x2a0 [ 54.908696][ T790] ? file_update_time+0xa3/0x220 [ 54.908716][ T790] shmem_file_write_iter+0x105/0x130 [ 54.908737][ T790] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.908757][ T790] __kernel_write_iter+0x392/0x830 [ 54.908781][ T790] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 54.908800][ T790] ? __cfi___kernel_write_iter+0x10/0x10 [ 54.908823][ T790] ? get_dump_page+0x160/0x220 [ 54.908841][ T790] ? __asan_memset+0x39/0x50 [ 54.908862][ T790] ? iov_iter_bvec+0xc0/0x180 [ 54.908889][ T790] dump_user_range+0xb06/0xdf0 [ 54.908913][ T790] ? __cfi_dump_emit+0x10/0x10 [ 54.908936][ T790] ? __cfi_dump_user_range+0x10/0x10 [ 54.908960][ T790] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 54.908985][ T790] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 54.909011][ T790] elf_core_dump+0x2cd9/0x3810 [ 54.909041][ T790] ? __cfi_elf_core_dump+0x10/0x10 [ 54.909074][ T790] ? dump_interrupted+0xf0/0xf0 [ 54.909096][ T790] ? filp_open+0x182/0x1d0 [ 54.909115][ T790] ? 0xffffffffff600000 [ 54.909130][ T790] do_coredump+0x1bf7/0x2bd0 [ 54.909156][ T790] ? __cfi_do_coredump+0x10/0x10 [ 54.909177][ T790] ? asm_exc_page_fault+0x2b/0x30 [ 54.909203][ T790] ? __kasan_slab_free+0x6a/0x80 [ 54.909229][ T790] ? kmem_cache_free+0x1c1/0x4c0 [ 54.909254][ T790] get_signal+0x11fd/0x14f0 [ 54.909277][ T790] arch_do_signal_or_restart+0x96/0x720 [ 54.909302][ T790] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.909330][ T790] irqentry_exit_to_user_mode+0x4e/0xb0 [ 54.909355][ T790] irqentry_exit+0x16/0x60 [ 54.909378][ T790] exc_page_fault+0x66/0xc0 [ 54.909406][ T790] asm_exc_page_fault+0x2b/0x30 [ 54.909425][ T790] RIP: 0033:0xf136400c05 [ 54.909444][ T790] Code: Unable to access opcode bytes at 0xf136400bdb. [ 54.909454][ T790] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 54.909473][ T790] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 54.909488][ T790] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 54.909502][ T790] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 54.909517][ T790] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 54.909531][ T790] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 54.909547][ T790] [ 54.931718][ T790] memory: usage 295140kB, limit 307200kB, failcnt 52381 [ 54.951051][ T36] audit: type=1400 audit(1751020787.358:331): avc: denied { bind } for pid=1300 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.953855][ T790] memory+swap: usage 411216kB, limit 9007199254740988kB, failcnt 0 [ 55.019965][ T545] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 55.024161][ T790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 55.050880][ T545] usb 3-1: device descriptor read/8, error -71 [ 55.056104][ T790] Memory cgroup stats for [ 55.211383][ T545] usb 3-1: device descriptor read/8, error -71 [ 55.214985][ T790] /syz3: [ 55.423339][ T790] cache 301731840 [ 55.430231][ T790] rss 77824 [ 55.437946][ T790] rss_huge 0 [ 55.441012][ T1324] binder: Bad value for 'stats' [ 55.441405][ T36] audit: type=1400 audit(1751020787.848:332): avc: denied { execute } for pid=1322 comm="syz.4.305" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.459432][ T790] shmem 301731840 [ 55.477743][ T36] audit: type=1400 audit(1751020787.848:333): avc: denied { execute_no_trans } for pid=1322 comm="syz.4.305" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.481561][ T790] mapped_file 0 [ 55.509511][ T1326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.514001][ T790] dirty 0 [ 55.519073][ T1326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.523200][ T790] writeback 0 [ 55.529930][ T545] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 55.533199][ T790] workingset_refault_anon 62 [ 55.543989][ T36] audit: type=1400 audit(1751020787.858:334): avc: denied { read write } for pid=1321 comm="syz.3.306" name="rnullb0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 55.551095][ T790] workingset_refault_file 32453 [ 55.572641][ T36] audit: type=1400 audit(1751020787.858:335): avc: denied { open } for pid=1321 comm="syz.3.306" path="/dev/rnullb0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 55.577904][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 55.603509][ T790] swap 118599680 [ 55.603763][ T36] audit: type=1400 audit(1751020787.878:336): avc: denied { map } for pid=1321 comm="syz.3.306" path="/dev/rnullb0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 55.612936][ T790] swapcached 188416 [ 55.616498][ T36] audit: type=1400 audit(1751020787.948:337): avc: denied { block_suspend } for pid=1327 comm="syz.3.308" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.643283][ T1326] rust_binder: Read failure Err(EFAULT) in pid:230 [ 55.647211][ T790] pgpgin 268077 [ 55.678420][ T790] pgpgout 194861 [ 55.682209][ T790] pgfault 34523 [ 55.685671][ T790] pgmajfault 785 [ 55.685890][ T545] usb 3-1: device descriptor read/8, error -71 [ 55.694542][ T790] inactive_anon 172023808 [ 55.699679][ T790] active_anon 129961984 [ 55.703863][ T790] inactive_file 0 [ 55.707536][ T790] active_file 0 [ 55.711018][ T790] unevictable 0 [ 55.714467][ T790] hierarchical_memory_limit 314572800 [ 55.719830][ T790] hierarchical_memsw_limit 9223372036854771712 [ 55.726006][ T790] total_cache 301731840 [ 55.730174][ T790] total_rss 77824 [ 55.733797][ T790] total_rss_huge 0 [ 55.737493][ T790] total_shmem 301731840 [ 55.741699][ T790] total_mapped_file 0 [ 55.745717][ T790] total_dirty 0 [ 55.749162][ T790] total_writeback 0 [ 55.753019][ T790] total_workingset_refault_anon 62 [ 55.758126][ T790] total_workingset_refault_file 32453 [ 55.764724][ T790] total_swap 118599680 [ 55.768884][ T790] total_swapcached 188416 [ 55.773272][ T790] total_pgpgin 268077 [ 55.777247][ T790] total_pgpgout 194861 [ 55.781373][ T790] total_pgfault 34523 [ 55.785359][ T790] total_pgmajfault 785 [ 55.789410][ T790] total_inactive_anon 172023808 [ 55.794313][ T790] total_active_anon 129961984 [ 55.798992][ T790] total_inactive_file 0 [ 55.803346][ T790] total_active_file 0 [ 55.807393][ T790] total_unevictable 0 [ 55.811444][ T790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=795,uid=0 [ 55.826164][ T790] Memory cgroup out of memory: Killed process 795 (syz.3.142) total-vm:90092kB, anon-rss:948kB, file-rss:37940kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 55.835759][ T545] usb 3-1: device descriptor read/8, error -71 [ 55.959012][ T774] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 55.969994][ T545] usb usb3-port1: unable to enumerate USB device [ 56.009892][ T774] CPU: 1 UID: 0 PID: 774 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 56.009924][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.009935][ T774] Call Trace: [ 56.009940][ T774] [ 56.009947][ T774] __dump_stack+0x21/0x30 [ 56.009976][ T774] dump_stack_lvl+0x10c/0x190 [ 56.009996][ T774] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.010015][ T774] ? ___ratelimit+0x3f7/0x5a0 [ 56.010036][ T774] dump_stack+0x19/0x20 [ 56.010055][ T774] dump_header+0xd7/0x490 [ 56.010082][ T774] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 56.010102][ T774] oom_kill_process+0x4c0/0x7e0 [ 56.010120][ T774] ? sched_clock_cpu+0x75/0x400 [ 56.010143][ T774] out_of_memory+0x7ee/0xbd0 [ 56.010160][ T774] ? __cfi_out_of_memory+0x10/0x10 [ 56.010177][ T774] ? mutex_lock_killable+0x104/0x1c0 [ 56.010200][ T774] ? __cfi_mutex_lock_killable+0x10/0x10 [ 56.010225][ T774] mem_cgroup_out_of_memory+0x279/0x350 [ 56.010249][ T774] ? drain_obj_stock+0xed0/0xed0 [ 56.010271][ T774] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 56.010296][ T774] try_charge_memcg+0x8f7/0xde0 [ 56.010316][ T774] ? __cfi_try_charge_memcg+0x10/0x10 [ 56.010336][ T774] ? __alloc_pages_noprof+0x30d/0x6c0 [ 56.010358][ T774] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 56.010378][ T774] ? __folio_batch_add_and_move+0x2ab/0x370 [ 56.010398][ T774] __mem_cgroup_charge+0xf6/0x410 [ 56.010420][ T774] ? __kasan_check_write+0x18/0x20 [ 56.010443][ T774] ? _raw_spin_lock+0x8c/0x120 [ 56.010469][ T774] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 56.010493][ T774] shmem_alloc_and_add_folio+0x86d/0x1050 [ 56.010525][ T774] ? put_swap_device+0x130/0x130 [ 56.010552][ T774] ? shmem_huge_global_enabled+0x2da/0x360 [ 56.010586][ T774] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 56.010612][ T774] ? __kasan_check_write+0x18/0x20 [ 56.010634][ T774] ? _raw_spin_lock+0x8c/0x120 [ 56.010662][ T774] shmem_get_folio_gfp+0x5f0/0x1380 [ 56.010691][ T774] ? shmem_get_folio+0xc0/0xc0 [ 56.010714][ T774] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 56.010736][ T774] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 56.010758][ T774] ? inode_to_bdi+0x6d/0x100 [ 56.010779][ T774] shmem_write_begin+0xf4/0x270 [ 56.010805][ T774] generic_perform_write+0x32d/0x960 [ 56.010827][ T774] ? __cfi_generic_perform_write+0x10/0x10 [ 56.010848][ T774] ? down_write+0xe9/0x2a0 [ 56.010871][ T774] ? mnt_get_write_access_file+0x1af/0x3b0 [ 56.010892][ T774] ? mnt_put_write_access_file+0xc2/0x100 [ 56.010912][ T774] ? file_update_time+0x1ef/0x220 [ 56.010932][ T774] shmem_file_write_iter+0x105/0x130 [ 56.010952][ T774] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 56.010973][ T774] __kernel_write_iter+0x392/0x830 [ 56.010996][ T774] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 56.011017][ T774] ? __cfi___kernel_write_iter+0x10/0x10 [ 56.011040][ T774] ? get_dump_page+0x160/0x220 [ 56.011059][ T774] ? __asan_memset+0x39/0x50 [ 56.011081][ T774] ? iov_iter_bvec+0xc0/0x180 [ 56.011107][ T774] dump_user_range+0xb06/0xdf0 [ 56.011132][ T774] ? __cfi_dump_emit+0x10/0x10 [ 56.011154][ T774] ? __cfi_dump_user_range+0x10/0x10 [ 56.011177][ T774] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 56.011202][ T774] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 56.011227][ T774] elf_core_dump+0x2cd9/0x3810 [ 56.011258][ T774] ? __cfi_elf_core_dump+0x10/0x10 [ 56.011291][ T774] ? dump_interrupted+0xf0/0xf0 [ 56.011313][ T774] ? filp_open+0x182/0x1d0 [ 56.011331][ T774] ? 0xffffffffff600000 [ 56.011347][ T774] do_coredump+0x1bf7/0x2bd0 [ 56.011372][ T774] ? __cfi_do_coredump+0x10/0x10 [ 56.011394][ T774] ? asm_exc_page_fault+0x2b/0x30 [ 56.011421][ T774] ? __kasan_slab_free+0x6a/0x80 [ 56.011447][ T774] ? kmem_cache_free+0x1c1/0x4c0 [ 56.011472][ T774] get_signal+0x11fd/0x14f0 [ 56.011496][ T774] arch_do_signal_or_restart+0x96/0x720 [ 56.011522][ T774] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.011550][ T774] irqentry_exit_to_user_mode+0x4e/0xb0 [ 56.011582][ T774] irqentry_exit+0x16/0x60 [ 56.011604][ T774] exc_page_fault+0x66/0xc0 [ 56.011627][ T774] asm_exc_page_fault+0x2b/0x30 [ 56.011646][ T774] RIP: 0033:0xf136400c05 [ 56.011667][ T774] Code: Unable to access opcode bytes at 0xf136400bdb. [ 56.011677][ T774] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 56.011695][ T774] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 56.011710][ T774] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 56.011724][ T774] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 56.011738][ T774] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 56.011752][ T774] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 56.011769][ T774] [ 56.017021][ T774] memory: usage 305724kB, limit 307200kB, failcnt 53232 [ 56.350697][ T1355] __vm_enough_memory: pid: 1355, comm: syz.4.315, bytes: 70373039144960 not enough memory for the allocation [ 56.351760][ T774] memory+swap: usage 423720kB, limit 9007199254740988kB, failcnt 0 [ 56.512432][ T774] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 56.519516][ T774] Memory cgroup stats for /syz3: [ 56.519659][ T774] cache 313724928 [ 56.528267][ T774] rss 208896 [ 56.531780][ T774] rss_huge 0 [ 56.535024][ T774] shmem 313126912 [ 56.538655][ T774] mapped_file 393216 [ 56.569185][ T774] dirty 0 [ 56.589371][ T774] writeback 0 [ 56.608136][ T774] workingset_refault_anon 93 [ 56.618196][ T774] workingset_refault_file 32615 [ 56.680588][ T774] swap 119721984 [ 56.685058][ T774] swapcached 245760 [ 56.711924][ T1365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.712591][ T774] pgpgin 285460 [ 56.723577][ T1364] rust_binder: Write failure EINVAL in pid:247 [ 56.807978][ T774] pgpgout 209239 [ 56.979930][ T774] pgfault 35561 [ 56.983428][ T774] pgmajfault 804 [ 57.112083][ T774] inactive_anon 103690240 [ 57.196353][ T1380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.225749][ T774] active_anon 209047552 [ 57.231365][ T1380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.320045][ T774] inactive_file 0 [ 57.344694][ T1390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 57.412598][ T774] active_file 598016 [ 57.489972][ T774] unevictable 0 [ 57.493963][ T774] hierarchical_memory_limit 314572800 [ 57.500157][ T774] hierarchical_memsw_limit 9223372036854771712 [ 57.506631][ T774] total_cache 313724928 [ 57.511070][ T774] total_rss 208896 [ 57.514837][ T774] total_rss_huge 0 [ 57.518609][ T774] total_shmem 313126912 [ 57.523021][ T774] total_mapped_file 393216 [ 57.527492][ T774] total_dirty 0 [ 57.531204][ T774] total_writeback 0 [ 57.535109][ T774] total_workingset_refault_anon 93 [ 57.540452][ T774] total_workingset_refault_file 32615 [ 57.546789][ T774] total_swap 119721984 [ 57.551306][ T774] total_swapcached 245760 [ 57.555683][ T774] total_pgpgin 285460 [ 57.560114][ T774] total_pgpgout 209239 [ 57.564238][ T774] total_pgfault 35561 [ 57.574788][ T774] total_pgmajfault 804 [ 57.587645][ T774] total_inactive_anon 103690240 [ 57.620652][ T774] total_active_anon 209047552 [ 57.644076][ T774] total_inactive_file 0 [ 57.659535][ T774] total_active_file 598016 [ 57.669953][ T774] total_unevictable 0 [ 57.674306][ T774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=781,uid=0 [ 57.689234][ T774] Memory cgroup out of memory: OOM victim 781 (syz.3.142) is already exiting. Skip killing the task [ 57.700135][ T785] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 57.709613][ T785] CPU: 0 UID: 0 PID: 785 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 57.709645][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.709658][ T785] Call Trace: [ 57.709664][ T785] [ 57.709672][ T785] __dump_stack+0x21/0x30 [ 57.709700][ T785] dump_stack_lvl+0x10c/0x190 [ 57.709721][ T785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.709741][ T785] ? ___ratelimit+0x3f7/0x5a0 [ 57.709763][ T785] dump_stack+0x19/0x20 [ 57.709783][ T785] dump_header+0xd7/0x490 [ 57.709810][ T785] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 57.709830][ T785] oom_kill_process+0x4c0/0x7e0 [ 57.709847][ T785] ? sched_clock_cpu+0x75/0x400 [ 57.709873][ T785] out_of_memory+0x7ee/0xbd0 [ 57.709887][ T785] ? __cfi_out_of_memory+0x10/0x10 [ 57.709904][ T785] ? mutex_lock_killable+0x104/0x1c0 [ 57.709926][ T785] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.709950][ T785] mem_cgroup_out_of_memory+0x279/0x350 [ 57.709975][ T785] ? drain_obj_stock+0xed0/0xed0 [ 57.710000][ T785] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 57.710024][ T785] try_charge_memcg+0x8f7/0xde0 [ 57.710044][ T785] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.710064][ T785] ? __alloc_pages_noprof+0x30d/0x6c0 [ 57.710085][ T785] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.710104][ T785] ? __folio_batch_add_and_move+0x2ab/0x370 [ 57.710132][ T785] __mem_cgroup_charge+0xf6/0x410 [ 57.710154][ T785] ? __kasan_check_write+0x18/0x20 [ 57.710176][ T785] ? _raw_spin_lock+0x8c/0x120 [ 57.710202][ T785] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.710226][ T785] shmem_alloc_and_add_folio+0x86d/0x1050 [ 57.710256][ T785] ? put_swap_device+0x130/0x130 [ 57.710282][ T785] ? shmem_huge_global_enabled+0x2da/0x360 [ 57.710308][ T785] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 57.710333][ T785] ? __kasan_check_write+0x18/0x20 [ 57.710352][ T785] ? _raw_spin_lock+0x8c/0x120 [ 57.710377][ T785] shmem_get_folio_gfp+0x5f0/0x1380 [ 57.710405][ T785] ? shmem_get_folio+0xc0/0xc0 [ 57.710429][ T785] ? follow_page_pte+0xa5c/0xb90 [ 57.710449][ T785] ? inode_to_bdi+0x6d/0x100 [ 57.710469][ T785] shmem_write_begin+0xf4/0x270 [ 57.710497][ T785] generic_perform_write+0x32d/0x960 [ 57.710522][ T785] ? __cfi_generic_perform_write+0x10/0x10 [ 57.710543][ T785] ? down_write+0xe9/0x2a0 [ 57.710566][ T785] ? file_update_time+0xa3/0x220 [ 57.710586][ T785] shmem_file_write_iter+0x105/0x130 [ 57.710606][ T785] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.710626][ T785] __kernel_write_iter+0x392/0x830 [ 57.710649][ T785] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.710669][ T785] ? __cfi___kernel_write_iter+0x10/0x10 [ 57.710691][ T785] ? get_dump_page+0x160/0x220 [ 57.710709][ T785] ? __asan_memset+0x39/0x50 [ 57.710730][ T785] ? iov_iter_bvec+0xc0/0x180 [ 57.710756][ T785] dump_user_range+0xb06/0xdf0 [ 57.710780][ T785] ? __cfi_dump_emit+0x10/0x10 [ 57.710802][ T785] ? __cfi_dump_user_range+0x10/0x10 [ 57.710824][ T785] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 57.710848][ T785] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.710872][ T785] elf_core_dump+0x2cd9/0x3810 [ 57.710901][ T785] ? __cfi_elf_core_dump+0x10/0x10 [ 57.710934][ T785] ? dump_interrupted+0xf0/0xf0 [ 57.710955][ T785] ? filp_open+0x182/0x1d0 [ 57.710974][ T785] ? 0xffffffffff600000 [ 57.710990][ T785] do_coredump+0x1bf7/0x2bd0 [ 57.711014][ T785] ? __cfi_do_coredump+0x10/0x10 [ 57.711034][ T785] ? asm_exc_page_fault+0x2b/0x30 [ 57.711061][ T785] ? __kasan_slab_free+0x6a/0x80 [ 57.711086][ T785] ? kmem_cache_free+0x1c1/0x4c0 [ 57.711109][ T785] get_signal+0x11fd/0x14f0 [ 57.711138][ T785] arch_do_signal_or_restart+0x96/0x720 [ 57.711163][ T785] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.711190][ T785] irqentry_exit_to_user_mode+0x4e/0xb0 [ 57.711214][ T785] irqentry_exit+0x16/0x60 [ 57.711236][ T785] exc_page_fault+0x66/0xc0 [ 57.711258][ T785] asm_exc_page_fault+0x2b/0x30 [ 57.711278][ T785] RIP: 0033:0xf136400c05 [ 57.711299][ T785] Code: Unable to access opcode bytes at 0xf136400bdb. [ 57.711308][ T785] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 57.711326][ T785] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 57.711341][ T785] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 57.711355][ T785] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 57.711368][ T785] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 57.711381][ T785] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 57.711397][ T785] [ 58.161665][ T785] memory: usage 307200kB, limit 307200kB, failcnt 57625 [ 58.168720][ T785] memory+swap: usage 432012kB, limit 9007199254740988kB, failcnt 0 [ 58.176678][ T785] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.183633][ T785] Memory cgroup stats for /syz3: [ 58.183778][ T785] cache 314257408 [ 58.196330][ T785] rss 233472 [ 58.199624][ T785] rss_huge 0 [ 58.203165][ T785] shmem 314253312 [ 58.206852][ T785] mapped_file 0 [ 58.210538][ T785] dirty 0 [ 58.213539][ T785] writeback 0 [ 58.216845][ T785] workingset_refault_anon 100 [ 58.222030][ T785] workingset_refault_file 34519 [ 58.239157][ T785] swap 127807488 [ 58.242921][ T785] swapcached 102400 [ 58.246723][ T785] pgpgin 298747 [ 58.259720][ T785] pgpgout 222458 [ 58.263480][ T785] pgfault 36243 [ 58.266975][ T785] pgmajfault 835 [ 58.271887][ T785] inactive_anon 61886464 [ 58.276182][ T785] active_anon 252682240 [ 58.280485][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 58.288549][ T785] inactive_file 0 [ 58.295289][ T785] active_file 4096 [ 58.299130][ T785] unevictable 0 [ 58.302826][ T785] hierarchical_memory_limit 314572800 [ 58.308194][ T785] hierarchical_memsw_limit 9223372036854771712 [ 58.324621][ T785] total_cache 314257408 [ 58.328814][ T785] total_rss 233472 [ 58.337288][ T785] total_rss_huge 0 [ 58.341235][ T785] total_shmem 314253312 [ 58.345398][ T785] total_mapped_file 0 [ 58.349467][ T785] total_dirty 0 [ 58.384038][ T785] total_writeback 0 [ 58.387871][ T785] total_workingset_refault_anon 100 [ 58.405175][ T785] total_workingset_refault_file 34519 [ 58.423468][ T785] total_swap 127807488 [ 58.435104][ T785] total_swapcached 102400 [ 58.440646][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 58.450333][ T45] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.466727][ T785] total_pgpgin 298747 [ 58.470989][ T785] total_pgpgout 222458 [ 58.478986][ T45] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.493880][ T785] total_pgfault 36243 [ 58.499920][ T785] total_pgmajfault 835 [ 58.507333][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 58.515176][ T785] total_inactive_anon 61886464 [ 58.529920][ T785] total_active_anon 252682240 [ 58.537239][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c08a, bcdDevice= 0.00 [ 58.549062][ T785] total_inactive_file 0 [ 58.554929][ T1407] rust_binder: Error while translating object. [ 58.554966][ T1407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 58.565357][ T785] total_active_file 4096 [ 58.579059][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.588064][ T1407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:263 [ 58.603921][ T785] total_unevictable 0 [ 58.631694][ T785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=785,uid=0 [ 58.660282][ T45] usb 2-1: config 0 descriptor?? [ 58.678095][ T785] Memory cgroup out of memory: Killed process 785 (syz.3.142) total-vm:90092kB, anon-rss:1076kB, file-rss:40172kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 58.813016][ T790] syz.3.142 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 58.944121][ T790] CPU: 1 UID: 0 PID: 790 Comm: syz.3.142 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 58.944160][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.944172][ T790] Call Trace: [ 58.944179][ T790] [ 58.944187][ T790] __dump_stack+0x21/0x30 [ 58.944213][ T790] dump_stack_lvl+0x10c/0x190 [ 58.944235][ T790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.944256][ T790] ? ___ratelimit+0x3f7/0x5a0 [ 58.944278][ T790] dump_stack+0x19/0x20 [ 58.944298][ T790] dump_header+0xd7/0x490 [ 58.944331][ T790] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 58.944352][ T790] oom_kill_process+0x4c0/0x7e0 [ 58.944369][ T790] ? sched_clock_cpu+0x75/0x400 [ 58.944392][ T790] out_of_memory+0x7ee/0xbd0 [ 58.944409][ T790] ? __cfi_out_of_memory+0x10/0x10 [ 58.944425][ T790] ? mutex_lock_killable+0x104/0x1c0 [ 58.944449][ T790] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.944472][ T790] mem_cgroup_out_of_memory+0x279/0x350 [ 58.944497][ T790] ? drain_obj_stock+0xed0/0xed0 [ 58.944522][ T790] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 58.944547][ T790] try_charge_memcg+0x8f7/0xde0 [ 58.944568][ T790] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.944589][ T790] ? __alloc_pages_noprof+0x30d/0x6c0 [ 58.944610][ T790] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.944629][ T790] ? __folio_batch_add_and_move+0x2ab/0x370 [ 58.944650][ T790] __mem_cgroup_charge+0xf6/0x410 [ 58.944672][ T790] ? __kasan_check_write+0x18/0x20 [ 58.944694][ T790] ? _raw_spin_lock+0x8c/0x120 [ 58.944721][ T790] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.944746][ T790] shmem_alloc_and_add_folio+0x86d/0x1050 [ 58.944777][ T790] ? put_swap_device+0x130/0x130 [ 58.944805][ T790] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.944832][ T790] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.944859][ T790] ? __kasan_check_write+0x18/0x20 [ 58.944881][ T790] ? _raw_spin_lock+0x8c/0x120 [ 58.944908][ T790] shmem_get_folio_gfp+0x5f0/0x1380 [ 58.944937][ T790] ? shmem_get_folio+0xc0/0xc0 [ 58.944961][ T790] ? follow_page_pte+0xa5c/0xb90 [ 58.944981][ T790] ? inode_to_bdi+0x6d/0x100 [ 58.945001][ T790] shmem_write_begin+0xf4/0x270 [ 58.945029][ T790] generic_perform_write+0x32d/0x960 [ 58.945053][ T790] ? __cfi_generic_perform_write+0x10/0x10 [ 58.945073][ T790] ? down_write+0xe9/0x2a0 [ 58.945097][ T790] ? file_update_time+0xa3/0x220 [ 58.945118][ T790] shmem_file_write_iter+0x105/0x130 [ 58.945138][ T790] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.945158][ T790] __kernel_write_iter+0x392/0x830 [ 58.945181][ T790] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.945201][ T790] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.945225][ T790] ? get_dump_page+0x160/0x220 [ 58.945244][ T790] ? __asan_memset+0x39/0x50 [ 58.945266][ T790] ? iov_iter_bvec+0xc0/0x180 [ 58.945292][ T790] dump_user_range+0xb06/0xdf0 [ 58.945324][ T790] ? __cfi_dump_emit+0x10/0x10 [ 58.945347][ T790] ? __cfi_dump_user_range+0x10/0x10 [ 58.945370][ T790] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 58.945395][ T790] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.945421][ T790] elf_core_dump+0x2cd9/0x3810 [ 58.945452][ T790] ? __cfi_elf_core_dump+0x10/0x10 [ 58.945486][ T790] ? dump_interrupted+0xf0/0xf0 [ 58.945507][ T790] ? filp_open+0x182/0x1d0 [ 58.945526][ T790] ? 0xffffffffff600000 [ 58.945543][ T790] do_coredump+0x1bf7/0x2bd0 [ 58.945568][ T790] ? __cfi_do_coredump+0x10/0x10 [ 58.945590][ T790] ? asm_exc_page_fault+0x2b/0x30 [ 58.945618][ T790] ? __kasan_slab_free+0x6a/0x80 [ 58.945644][ T790] ? kmem_cache_free+0x1c1/0x4c0 [ 58.945669][ T790] get_signal+0x11fd/0x14f0 [ 58.945691][ T790] arch_do_signal_or_restart+0x96/0x720 [ 58.945716][ T790] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.945743][ T790] irqentry_exit_to_user_mode+0x4e/0xb0 [ 58.945768][ T790] irqentry_exit+0x16/0x60 [ 58.945791][ T790] exc_page_fault+0x66/0xc0 [ 58.945813][ T790] asm_exc_page_fault+0x2b/0x30 [ 58.945832][ T790] RIP: 0033:0xf136400c05 [ 58.945851][ T790] Code: Unable to access opcode bytes at 0xf136400bdb. [ 58.945860][ T790] RSP: 002b:0000200000000008 EFLAGS: 00010217 [ 58.945879][ T790] RAX: 0000000000000000 RBX: 00007f391edb6080 RCX: 00007f391eb8e929 [ 58.945893][ T790] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000020000000 [ 58.945907][ T790] RBP: 00007f391ec10b39 R08: 00002000000003c0 R09: 00002000000003c0 [ 58.945921][ T790] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 58.945935][ T790] R13: 0000000000000001 R14: 00007f391edb6080 R15: 00007ffd37d0b518 [ 58.945952][ T790] [ 59.404250][ T45] logitech-hidpp-device 0003:046D:C08A.0006: item fetching failed at offset 6/7 [ 59.413564][ T45] logitech-hidpp-device 0003:046D:C08A.0006: hidpp_probe:parse failed [ 59.421790][ T45] logitech-hidpp-device 0003:046D:C08A.0006: probe with driver logitech-hidpp-device failed with error -22 [ 59.458544][ T1427] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 88) [ 59.458570][ T1427] rust_binder: Error while translating object. [ 59.469084][ T1427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.475383][ T1427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 59.551500][ T790] memory: usage 307200kB, limit 307200kB, failcnt 57833 [ 59.567834][ T790] memory+swap: usage 432008kB, limit 9007199254740988kB, failcnt 0 [ 59.576605][ T790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.583710][ T790] Memory cgroup stats for /syz3: [ 59.583862][ T790] cache 314167296 [ 59.592911][ T790] rss 233472 [ 59.596193][ T790] rss_huge 0 [ 59.613621][ T45] usb 2-1: USB disconnect, device number 8 [ 59.639396][ T790] shmem 314163200 [ 59.654185][ T790] mapped_file 0 [ 59.658847][ T790] dirty 0 [ 59.703399][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 59.703418][ T36] audit: type=1400 audit(1751020792.108:343): avc: denied { ioctl } for pid=1431 comm="syz.2.341" path="socket:[11398]" dev="sockfs" ino=11398 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.708913][ T790] writeback 57344 [ 59.764291][ T1436] cgroup: Unknown subsys name 'net_cls' [ 59.773484][ T1436] overlayfs: failed to resolve './file1': -2 [ 59.779989][ T790] workingset_refault_anon 103 [ 59.784734][ T790] workingset_refault_file 34564 [ 59.785726][ T1436] fuse: Bad value for 'user_id' [ 59.789576][ T790] swap 127803392 [ 59.789587][ T790] swapcached 192512 [ 59.789594][ T790] pgpgin 300412 [ 59.789601][ T790] pgpgout 224123 [ 59.800060][ T1436] fuse: Bad value for 'user_id' [ 59.801865][ T790] pgfault 36303 [ 59.817156][ T790] pgmajfault 838 [ 59.820979][ T790] inactive_anon 37584896 [ 59.825234][ T790] active_anon 276893696 [ 59.829778][ T790] inactive_file 0 [ 59.833445][ T790] active_file 4096 [ 59.837166][ T790] unevictable 0 [ 59.840683][ T790] hierarchical_memory_limit 314572800 [ 59.847418][ T790] hierarchical_memsw_limit 9223372036854771712 [ 59.855033][ T790] total_cache 314167296 [ 59.859203][ T790] total_rss 233472 [ 59.862947][ T790] total_rss_huge 0 [ 59.866708][ T790] total_shmem 314163200 [ 59.870893][ T790] total_mapped_file 0 [ 59.874869][ T790] total_dirty 0 [ 59.878373][ T790] total_writeback 57344 [ 59.882598][ T790] total_workingset_refault_anon 103 [ 59.882990][ T1439] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 59.887785][ T790] total_workingset_refault_file 34564 [ 59.887796][ T790] total_swap 127803392 [ 59.887803][ T790] total_swapcached 192512 [ 59.887809][ T790] total_pgpgin 300412 [ 59.887815][ T790] total_pgpgout 224123 [ 59.887822][ T790] total_pgfault 36303 [ 59.887828][ T790] total_pgmajfault 838 [ 59.907803][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 59.909643][ T790] total_inactive_anon 37584896 [ 59.930383][ T1443] fuse: Bad value for 'fd' [ 59.965546][ T790] total_active_anon 276893696 [ 59.975817][ T790] total_inactive_file 0 [ 59.981181][ T790] total_active_file 4096 [ 59.987152][ T790] total_unevictable 0 [ 59.993343][ T790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.142,pid=788,uid=0 [ 60.008198][ T790] Memory cgroup out of memory: Killed process 788 (syz.3.142) total-vm:90092kB, anon-rss:1076kB, file-rss:39976kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 60.172110][ T1467] kvm: pic: non byte write [ 60.317749][ T1476] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30074 sclass=netlink_xfrm_socket pid=1476 comm=syz.3.354 [ 60.376853][ T1477] overlayfs: failed to clone upperpath [ 60.418924][ T1476] overlayfs: failed to clone upperpath [ 60.602090][ T36] audit: type=1400 audit(1751020793.008:344): avc: denied { write } for pid=1478 comm="syz.4.355" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.635149][ T36] audit: type=1400 audit(1751020793.008:345): avc: denied { open } for pid=1478 comm="syz.4.355" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.818929][ T1486] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 60.828855][ T1486] kvm: pic: non byte read [ 60.833578][ T1486] kvm: pic: level sensitive irq not supported [ 60.833659][ T1486] kvm: pic: non byte read [ 60.844498][ T1486] kvm: pic: level sensitive irq not supported [ 60.844553][ T1486] kvm: pic: non byte read [ 60.855326][ T1486] kvm: pic: level sensitive irq not supported [ 60.855390][ T1486] kvm: pic: non byte read [ 61.015430][ T36] audit: type=1400 audit(1751020793.418:346): avc: denied { execute } for pid=1496 comm="syz.3.361" path="/dev/rnullb0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 61.052173][ T36] audit: type=1400 audit(1751020793.458:347): avc: denied { map } for pid=1494 comm="syz.1.360" path="/proc/233/net/raw6" dev="proc" ino=4026532441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.101802][ T36] audit: type=1326 audit(1751020793.508:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1494 comm="syz.1.360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92d098e929 code=0x0 [ 61.188548][ T36] audit: type=1400 audit(1751020793.588:349): avc: denied { search } for pid=1510 comm="syz.3.366" name="/" dev="configfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.211447][ T36] audit: type=1400 audit(1751020793.588:350): avc: denied { write } for pid=1510 comm="syz.3.366" name="/" dev="configfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.258325][ T1514] rust_binder: Error while translating object. [ 61.258352][ T1514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 61.264583][ T1514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:301 [ 61.361696][ T36] audit: type=1400 audit(1751020793.768:351): avc: denied { write } for pid=1503 comm="syz.2.364" name="fib_triestat" dev="proc" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.911516][ T1533] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 62.095400][ T1539] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.159044][ T1541] mmap: syz.2.378 (1541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.179968][ T479] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 62.209948][ T36] audit: type=1400 audit(1751020794.608:352): avc: denied { execmem } for pid=1538 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.251772][ T1549] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 62.262902][ T1551] overlayfs: missing 'lowerdir' [ 62.349916][ T479] usb 2-1: Invalid ep0 maxpacket: 9 [ 62.380771][ T1572] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 62.380795][ T1572] rust_binder: Error while translating object. [ 62.391401][ T1572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.397692][ T1572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 62.426724][ T1576] rust_binder: Write failure EINVAL in pid:321 [ 62.438711][ T1576] rust_binder: Write failure EFAULT in pid:321 [ 62.466233][ T1579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.481363][ T1579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.490031][ T479] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 62.491787][ T1579] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 62.497568][ T1579] rust_binder: Error while translating object. [ 62.505428][ T1581] fuse: Unknown parameter 'rootmode00000000000J@Û˜Îð˜ÉŸ0' [ 62.506270][ T1579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.519781][ T1579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 62.642982][ T479] usb 2-1: Invalid ep0 maxpacket: 9 [ 62.657522][ T479] usb usb2-port1: attempt power cycle [ 62.999941][ T479] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 63.030281][ T479] usb 2-1: Invalid ep0 maxpacket: 9 [ 63.092773][ T1612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 63.146555][ T1614] rust_binder: Error in use_page_slow: ESRCH [ 63.146580][ T1614] rust_binder: use_range failure ESRCH [ 63.153008][ T1614] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 63.158772][ T1614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.168070][ T1614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:331 [ 63.177486][ T479] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 63.230270][ T479] usb 2-1: Invalid ep0 maxpacket: 9 [ 63.235634][ T1620] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 63.235634][ T1620] attempt to subtract with overflow [ 63.245867][ T479] usb usb2-port1: unable to enumerate USB device [ 63.257436][ T1620] ------------[ cut here ]------------ [ 63.262951][ T1620] kernel BUG at rust/helpers/bug.c:7! [ 63.268854][ T1620] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 63.275815][ T1620] CPU: 1 UID: 0 PID: 1620 Comm: syz.4.409 Not tainted 6.12.30-syzkaller-g111ee63e22d9 #0 349e0f6c9d5f7339ded262975e405e8258d762c4 [ 63.289189][ T1620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.299251][ T1620] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 63.304556][ T1620] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0a e7 9a 23 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 40 23 d3 af 90 90 90 90 90 90 90 90 90 [ 63.324192][ T1620] RSP: 0018:ffffc9000f795a90 EFLAGS: 00010246 [ 63.330253][ T1620] RAX: 0000000000000061 RBX: 1ffff92001ef2b54 RCX: 79bfa8c645f2b200 [ 63.338234][ T1620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 63.346196][ T1620] RBP: ffffc9000f795a90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 63.354169][ T1620] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 63.362127][ T1620] R13: dffffc0000000000 R14: ffffc9000f795ac0 R15: ffffc9000f795af0 [ 63.370085][ T1620] FS: 00007f76d18536c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 63.379088][ T1620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.385653][ T1620] CR2: 0000000000000000 CR3: 00000001324b4000 CR4: 00000000003526b0 [ 63.393609][ T1620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.401654][ T1620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.409617][ T1620] Call Trace: [ 63.412883][ T1620] [ 63.415796][ T1620] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 63.423242][ T1620] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 63.431208][ T1620] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 63.441433][ T1620] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 63.454966][ T1620] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 63.465538][ T1620] ? __kasan_check_write+0x18/0x20 [ 63.470638][ T1620] ? _raw_spin_lock+0x8c/0x120 [ 63.475386][ T1620] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.480568][ T1620] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 63.487753][ T1620] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 63.495636][ T1620] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 63.505603][ T1620] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 63.516175][ T1620] ? __asan_memcpy+0x5a/0x80 [ 63.520749][ T1620] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 63.530451][ T1620] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 63.540503][ T1620] ? __kasan_check_write+0x18/0x20 [ 63.545600][ T1620] ? _raw_spin_lock+0x8c/0x120 [ 63.550356][ T1620] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.555549][ T1620] ? __kasan_check_write+0x18/0x20 [ 63.560642][ T1620] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 63.570186][ T1620] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 63.580103][ T1620] ? is_bpf_text_address+0x17b/0x1a0 [ 63.585382][ T1620] ? kernel_text_address+0xa9/0xe0 [ 63.590476][ T1620] ? unwind_get_return_address+0x51/0x90 [ 63.596090][ T1620] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 63.602226][ T1620] ? arch_stack_walk+0x10b/0x170 [ 63.607151][ T1620] ? stack_depot_save_flags+0x38/0x800 [ 63.612600][ T1620] ? kasan_save_alloc_info+0x40/0x50 [ 63.617866][ T1620] ? kasan_save_track+0x4f/0x80 [ 63.622700][ T1620] ? kasan_save_track+0x3e/0x80 [ 63.627533][ T1620] ? kasan_save_alloc_info+0x40/0x50 [ 63.632807][ T1620] ? __kasan_kmalloc+0x96/0xb0 [ 63.637587][ T1620] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 63.644162][ T1620] ? krealloc_noprof+0x8d/0x130 [ 63.649000][ T1620] ? rust_helper_krealloc+0x33/0xd0 [ 63.654194][ T1620] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xb1/0x100 [ 63.663720][ T1620] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 63.674206][ T1620] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0 [ 63.683475][ T1620] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 63.692142][ T1620] ? __se_sys_ioctl+0x132/0x1b0 [ 63.697154][ T1620] ? __x64_sys_ioctl+0x7f/0xa0 [ 63.701901][ T1620] ? do_syscall_64+0x58/0xf0 [ 63.706470][ T1620] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.712526][ T1620] ? __kasan_kmalloc+0x96/0xb0 [ 63.717282][ T1620] ? kasan_save_alloc_info+0x40/0x50 [ 63.722551][ T1620] ? __kasan_kmalloc+0x96/0xb0 [ 63.727300][ T1620] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 63.733872][ T1620] ? __kasan_check_write+0x18/0x20 [ 63.738967][ T1620] ? _raw_spin_lock+0x8c/0x120 [ 63.743717][ T1620] ? __cfi__raw_spin_lock+0x10/0x10 [ 63.748910][ T1620] ? resched_curr+0x113/0x430 [ 63.753595][ T1620] ? cgroup_rstat_updated+0x132/0x7f0 [ 63.758955][ T1620] ? __cfi_resched_curr+0x10/0x10 [ 63.763978][ T1620] ? _raw_spin_unlock+0x45/0x60 [ 63.768812][ T1620] ? rust_helper_spin_unlock+0x19/0x30 [ 63.774265][ T1620] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 63.784760][ T1620] ? update_cfs_group+0x260/0x260 [ 63.789773][ T1620] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 63.800516][ T1620] ? xfd_validate_state+0x68/0x150 [ 63.805615][ T1620] ? save_fpregs_to_fpstate+0x196/0x230 [ 63.811144][ T1620] ? __kasan_check_write+0x18/0x20 [ 63.816246][ T1620] ? __switch_to+0xc7b/0x1310 [ 63.820904][ T1620] ? pick_next_task_fair+0x870/0x900 [ 63.826170][ T1620] ? _raw_spin_lock+0x8c/0x120 [ 63.830919][ T1620] ? _raw_spin_unlock+0x45/0x60 [ 63.835750][ T1620] ? finish_task_switch+0x13a/0x780 [ 63.840929][ T1620] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 63.850025][ T1620] ? avc_has_extended_perms+0x7c7/0xdd0 [ 63.855552][ T1620] ? __asan_memcpy+0x5a/0x80 [ 63.860123][ T1620] ? avc_has_extended_perms+0x921/0xdd0 [ 63.865652][ T1620] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 63.875189][ T1620] ? do_vfs_ioctl+0xeda/0x1e30 [ 63.879940][ T1620] ? preempt_schedule_common+0x2d/0x60 [ 63.885379][ T1620] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 63.890995][ T1620] ? __cfi_preempt_schedule+0x10/0x10 [ 63.896348][ T1620] ? preempt_schedule_thunk+0x1a/0x40 [ 63.901723][ T1620] ? try_to_wake_up+0xe17/0x1aa0 [ 63.906647][ T1620] ? ioctl_has_perm+0x384/0x4d0 [ 63.911495][ T1620] ? has_cap_mac_admin+0xd0/0xd0 [ 63.916419][ T1620] ? futex_wake+0x63a/0x900 [ 63.920903][ T1620] ? __cfi_futex_wake+0x10/0x10 [ 63.925735][ T1620] ? selinux_file_ioctl+0x6e0/0x1360 [ 63.931008][ T1620] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 63.936547][ T1620] ? do_futex+0x356/0x500 [ 63.940863][ T1620] ? __cfi_do_futex+0x10/0x10 [ 63.945526][ T1620] ? __fget_files+0x2c5/0x340 [ 63.950189][ T1620] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 63.958675][ T1620] ? __se_sys_ioctl+0x114/0x1b0 [ 63.963516][ T1620] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 63.972613][ T1620] __se_sys_ioctl+0x132/0x1b0 [ 63.977288][ T1620] __x64_sys_ioctl+0x7f/0xa0 [ 63.981869][ T1620] x64_sys_call+0x1878/0x2ee0 [ 63.986534][ T1620] do_syscall_64+0x58/0xf0 [ 63.990931][ T1620] ? clear_bhb_loop+0x50/0xa0 [ 63.995594][ T1620] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.001471][ T1620] RIP: 0033:0x7f76d098e929 [ 64.006020][ T1620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.025610][ T1620] RSP: 002b:00007f76d1853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.034705][ T1620] RAX: ffffffffffffffda RBX: 00007f76d0bb6080 RCX: 00007f76d098e929 [ 64.042660][ T1620] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000005 [ 64.050613][ T1620] RBP: 00007f76d0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.058568][ T1620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.066522][ T1620] R13: 0000000000000000 R14: 00007f76d0bb6080 R15: 00007fff56dc4ce8 [ 64.074483][ T1620] [ 64.077494][ T1620] Modules linked in: [ 64.081838][ T1620] ---[ end trace 0000000000000000 ]--- [ 64.087678][ T1620] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 64.093009][ T1620] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0a e7 9a 23 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 40 23 d3 af 90 90 90 90 90 90 90 90 90 [ 64.112663][ T1620] RSP: 0018:ffffc9000f795a90 EFLAGS: 00010246 [ 64.118725][ T1620] RAX: 0000000000000061 RBX: 1ffff92001ef2b54 RCX: 79bfa8c645f2b200 [ 64.126722][ T1620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 64.134719][ T1620] RBP: ffffc9000f795a90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 64.142710][ T1620] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 64.150716][ T1620] R13: dffffc0000000000 R14: ffffc9000f795ac0 R15: ffffc9000f795af0 [ 64.158683][ T1620] FS: 00007f76d18536c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.167663][ T1620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.174378][ T1620] CR2: 0000000000000000 CR3: 00000001324b4000 CR4: 00000000003526b0 [ 64.182386][ T1620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.190382][ T1620] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.198343][ T1620] Kernel panic - not syncing: Fatal exception [ 64.204645][ T1620] Kernel Offset: disabled [ 64.208963][ T1620] Rebooting in 86400 seconds..