last executing test programs: 53.147543183s ago: executing program 1 (id=6): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0xe6a) 53.128477913s ago: executing program 1 (id=8): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket(0x9, 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = getuid() r5 = getgid() lchown(&(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, r7) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}], [{@uid_gt={'uid>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'root'}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vlan0\x00'}}]}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0088a8", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0001968a0000000000000000000300000705000100e80000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) getpeername$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) 53.112036384s ago: executing program 1 (id=9): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20200) close_range(r0, 0xffffffffffffffff, 0x0) 53.059545574s ago: executing program 1 (id=11): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x91) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[]) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x2c, 0x0, 0x0, 0xfffff030}, {0x6, 0x0, 0xbf, 0x6}]}, 0x10) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r6, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c00)=""/75, 0xfc38}], 0x1}, 0x9}], 0x3, 0x7ffeedc0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) 53.040565054s ago: executing program 1 (id=12): timer_create(0x3, &(0x7f0000000000)={0x0, 0x34, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2010402, &(0x7f00000002c0)={[{@xino_off}, {@xino_auto}, {@verity_off}, {@nfs_export_off}, {@redirect_dir_on}, {@uuid_on}, {@verity_off}, {@uuid_auto}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '=^$&'}}, {@smackfshat}, {@hash}, {@dont_measure}, {@euid_eq={'euid', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@measure}, {@dont_hash}]}) timer_getoverrun(r0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000440)) timer_settime(r0, 0x1, &(0x7f0000000480)={{}, {0x0, 0x989680}}, &(0x7f00000004c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000500)={@empty, @dev}, &(0x7f0000000540)=0xc) openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x1a9440, 0x0) getrandom(&(0x7f00000005c0)=""/58, 0x3a, 0x1) timer_settime(r0, 0x1, &(0x7f0000000600)={{0x77359400}}, &(0x7f0000000640)) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f00000006c0)=0x9) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000700)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) llistxattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=""/154, 0x9a) r7 = openat$cgroup_ro(r6, &(0x7f0000000840)='devices.list\x00', 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000980)={&(0x7f0000000880), 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x6, 0x605, 0x3ff, {}, {0x0, 0xea60}, {0x3, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x20, 0x1, 0x0, 0x0, "ba33f96da912ab774ea668e5e5aadf69c60c024e344b34832abc2903ddc07d10522a336af49e79db52043145a19af95f46b6beccaa86a04fe2cf0d44ef2ffbff"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r9 = openat(r8, &(0x7f0000000a40)='./file0\x00', 0x200, 0x14c) close(r8) unlinkat(r7, &(0x7f0000000a80)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000b00)={r10, r11+60000000}, &(0x7f0000000b40)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000b80)={0x6, r9, 'id0\x00'}) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000c00)={r1, @broadcast, @loopback}, 0xc) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000c40)={'hsr0\x00', 0x7}) syz_fuse_handle_req(r8, &(0x7f0000000c80)="4ecd17155cf465dcc59d339f31e92448ad232163fee51c28a31b1c35740a723125894db01cf6edf9c0a35c235aa8e2e2c15d2076f5485dd1f89ff283a801a1831bfb3fc1208454e4bfb77a9ba2b811e534c949b457dab0834cef51aa756341593fd3cfc5915d8a2533b6ea8a593313f763baf8063e9f52ec2cd136e3054a5c34f3fa2f3cdbbe7450fa1c64c86e9838d22d9f79b7e28a60817513fcefbbf0cb32364814ec4693d97e60b9415e517153f04e26eead376fbd67a0aef683467645e50e1f87b334f64511829f5e76c12ac8595cdcb2a75b79d1fd71a9ba1b6678661cea8b99687ae998f14fede3c73873d5988ccb50b966ea19650fe183bf402789c6c450edf0e4ba571dde92bd59f6a8a13ee8227118905a708f9794df12c32a42cf0fbd9757175fcd2b60c17a78b7dc1270729f561c3babc5be66219904f30cc3cfc57e8c76f7290bc316bc07b7244b85a5480c1f23b08374bc9c00e32133dfd83787598103e750485996f866a051dd4926031e3d96d194abbe71683a15478237f1b7e1ca4b30720a478ba5ac89e7378ffdcfec5a75f39a8b1ed69a6c47977bdd2702289f64afa9e6e294ce01bb89ca4faa475c8d3f321bcb0f87b0c716153ae523ff2ee21bfc8962c4bf2f3b8fb2402c85526fe3f12bf33835955951a80c5213ef1e8a3eb34ff4712b257f0dff5e5b8f7f65241c1ae76abd929a76739a25412a7ae994e52097ea9452d70ea9d4bf8f12a1af6fb3adde9605834858d5161d7d355cc3b6f2ece1f3068fd5bf29d07106237eb6ed78def12c617079a90f1ad3fa93f108605c73273fb36fe8c0445b59f3d1e0377bd4eec49e2041405075dd8f1f62d4725f227c1815603a59d0a0140b5827855ba9bd7fe90379eb75b22ddbaac40e6fb051cf598cbf8d6c62cd8b94bd2965f84fd857bf938e4302e67d29548a89bbabf90ead7afa477e4ad650360fffa96111f04bdcf63f602c33d1e679761fca238e7e17211e9dbc41fec6713b204a293149ddf83421bb4e758e95f61240da0e741f8082abbeb0a0433352f921bf414425408e9741213daf76e63f226fc8f02a8ec5c77a1163adc0e81e4bdbd4c50b783279a1d7421c9054513401cd91f04b047420c03723e8a424a78822a6ce9741e5d69139765d4d66b2f1773890db8f48d7220e0a5056f2c8891db05d5d71478ea99320bd581ac25d40a5c2516b7f8582e3b99631256bb9a91cbcfed3fdaa6c85305d4af7e477b2d688a4f8cf39e3633f4d273643f201d4dfb72ed9adef2be5b8bc35800e066e0a04517ef38efbd27ea080f82a77dc4e4fe99f5159bfee344d9f0f2e03b718325efe6e041a4bb97269eed8e0e96b724fc44787bac22b3886cb5468f127adbbadf3b2487bb267008682a2821be92ba8436593c6960034417ff977690c430cdaf89e583cbf1acdbe40b83a1e6c27682efbf1ca24920ab540ddf99340d5d62255b9437f79d06fcf12f2eafff19c32a784f33ea6f21811633c5d4430788ac790a3294fdbdc593de1734fdbea54d4f41b782aad41d7de17f7459039ebd7568732276b3d5c851cb726d1f79789b8247cb5a379b1adf1927cd0fa403f1495846905e4d24a4fae9f0557a914c7eaba8d2100e9d159a6dd177ab7f809546962ccde24bbd1f2004027a883bd0afee04bae3de16a7a954ab7c166b4d2562c72726130a54cca13ee09e092aa35cbc46c01e4a162d9954a735fa95debebce7ec1165e3c9228f238c8c0732f755913318f62d8a1787c143ab33fb4dd80f29444ab077b6bc18368d7f3d7c97c7d5d96098332150552ba55f2e6d687956b04ce40619c305c7245253b51f65763f12eb7fdc3b7ce53ed44735600c07796e10a333c13313b792adba5af8d1b81ae07767d3753a4980a493b62d9f01f0fab360232901f0f95638b5d99685db7be1d3a660e8064799d1e01438a19fd45a36792fb96020fbb32c653f7bf0905fe26944a62ea8c4388b645a029cc766ef636c2ab264056adc04cc6975e37370c9755500a9288522b8c71d62e7aae997b1df18505f50598a7736c6b95fb2dd7d5f07913d23357d90f2c08925511057330aa08b49054a151f5ca4cdc86da8c6cd318587897ce4f0dcbe84da12e93fdd1f0f79a201fa03ecceec4e3e6a8e787198c313343d9527135c5a432f24710d251764431896ab2ab3619b135cc1e84185361eaf1d24fde6ebd1842859ccfc20a6cc20bb9829c78f90b66b5de7b0f9b38269f7b73df97688cd5bf2f1a66216e413975231cb5f08670f5a05fe8a5e441daba16b03add6a77ba6daf8b36fe92874e638cefc2735d175fa2c0394fbf73bb870992cdb4727a84e696f4acedd94a463566fb1e0f89d1a7a71a04ce4f46e8ca79a853c7331835fb012aaa82b4673fc20b780eeaaf4c969acc732a8214a3fd99b70b1f97d41756fc8c8e51cbf0210e0eacdac9686c4a0d12726b6f93950e77285b5522d0af605da51c8b0c83ec4dc657343249ea931070a122b97097c6715d0086fd12189f1ede299e1f189c02c450227cd1d04d98e715307ee4a826d4d73e1123c15b57d7dbbe36761737fe5398a6b3cf8cb30a48dcbe1e5c2fd3767e17c5c1fad22d363a2edbb0a9896e3e5757f824d5eb665459f3d22cac38dd3a9adce98a4534103f9f9a12868ff328b5643a5f3a34c1919d45a5e138b71c09dfe8a943b7c2a05ae353b3a2151523598f8d3d03e71287c90a64967dadc1fac72f2518b5eff6c2827ccc17ff4edefabf9cd899824aa469c863736a1a688c213a3fe640c4d82a6930cd07e9b3a41b30ecc7a015e787b2b550c2ff6713edff9c4a83914318ce17b2d8f0fcb6acf89eb6f425d83638449fc94b59925b869efbca4c584984abfd8e40ca9e3b9ea3f9f34e45e16df5eb0b99011b039da413e3c24692840897bf7efa51c149606a1b6d098e10b0b92ae84484536b630b673060876ce284dada72321fa2a50b82dfaa0d2b27182018adabc292eac9c7565acf1a7c984e5124003e7f3d611d9a973246446171dc0f2ce1ecbbdbbc7941c80a4cbdbca9a55d8282bf788d95ac826f95844ff5d05f8f7cb86b4d2385ac1366ef2b9b217bd8380b9cd93c0db2033ce9fbfe0a838029e2954786f6286be59e32bd9d70437f59a741bddb5c05ba190240dde2d5d63bad703e78c8133cb658f24165011247dc6a3c8714d16e91448305357aecf983f348385cdc8a4e3413d1e879cd5e5413a284446bc100b1edf2907f71c85788c8a54d01c08946b7769d2b7aebd1386f6c1dd059856b8fa317b899f01bf4a19f72131283a517a66c58c4ba2e936e7c8ed97822a5be31524399a7231bc4690c4dec93efced1a031a665698c391bf381ccc69cbfdf9175ad31c0a50369e635836e39943550167522ba510eafb681ad62c5280998b1e76bf2107c3613501d8640c3d5f4a7f8f629368e0441a0f45f2eb3e07fc947dea64179662051bbe74242a0d5258fb9309003c1af2774065c30bb27ab4261bac3bf7ed1cc2a39ab853845442d636b35bee2a1f70f1e96575fa822169af1df1b961a812f8ab3969aaca6e37b1636a16bf77a8bfbe3f65a4ee79cb328aef34b226e5011cb8110b6909eff791c3c4ed23f5cdded0ca41bb55503ea8b30e3a902e5334185617020a66b32639e7554a059e5716f6df24259687b99582fe2a13cbd97a4c6bee6be1f31b4b6e540661b45cd9efbdcf675f20de500b5774a07071738ec39527c9dc0e73007c7d7bfed741b0c7e2dd57d814733dba8a00ef91945b4cc183de7d6f31d0c135710209d1b6c5338ba51dbd0af7763e89a1fb74de7c72fb87881d2695c5530aa4c23d4093cdf0898e95f8c52040b51ea191241115d1c6d73e1de30cf83fe11450e9e8f76ff891d1f71e7a4ac3aad88a47a738f850200d708c9b841a11985a5ca19c6f42c720c6a516e974e85cf531060aa009cd17f9c920fd9779453c70996f99738e39abdac2f1d2eb8b6d708f4ecf555c25b9de960bca87a811ab94a125e35b796e1cc60061e567323ab09989d267899ac9865b1bc300a966c8540dc8387dc6eb1134428669484f5f380510c1bd2f0192e84439579bdc91209bcdca862e49d65717dcfd3d0ad6439acc29934145e12aaf298102e5992eb650498642098ffcdccc495af998b59c64fbe558e424ce2c642eb7e9d2bf4e575de79832e13491e86045e88c39ad35b1f874a220410c1bfbde3681755d6037bc8787bd53a84c4b05453ff47c57f97b1a2c3f753538ad40cc0fb904cf23c2793b5d0585397bcb7e39cf597facf49d8f57e00c0e1772f1ec645bf78f5a80cf2d5b13015d8c7ebf0a4cb47ec433ca7a42b4b3f6a7a5502ef7e9c56c8f30a45000deae0ed3788a4332e977b8e089fcb4dcbf1675c2211c969a9b5945fb9f76752e639ec8da5db944c34c1253f90147ce75e9c0210f88124d2ded5c40a643cf31cb1b7f346054cd31cd2628e19a8a080e34cfd26f0f7c980c3173aa14ffdaeb27cd392987b31240954bac9450e910e64cfb3775cd4718ba679017b6724f37850d549f06a167d3b4c627d967d272ce5b871c28370ba70f820202e1f3c7ca990cbb20c4758d9c6c0c4f7f1c685ba2704caf10ff9f54ef85681b8a059f561f8600a3363cae0abcd477096e864d01c2d675f8f604d07ac28030f1fa07dbbace5e19778906e00d3293dcd5fc9136894813187148bbe11bc68ddd33ddabdde88fda05915170c297039fe5413358c3be53ff394621f7ed2859971352cd7a90b0a130ba0a25595aaa8fd3c966e33c27c898c2c03d1a455d13b13752ea5acdfc2c11110b00ef738139663bf8bbacb760ea7a421e82239df6fa91d0d41bf122725eab792013d8cc67f40a942dbdff8cfd1831c5db5d1d347b64485cac230cd5476de7342cb95d949e4e2154d0f2d566f2c7b691bdee55a3ee4eb6889561f5397c5026bc15f763ad48d2d97185b05be9390ba4b7c60781746f41a73fad423099bb91eca565e5cdd75fe8eb218ef81866c1d8b1192ec64fab38935391093535d2a504fba595c44053fc68adb3c4c2da6a5dc44707fb5f39817b822d739ff8c1dac7c7fea583502dd0439e6f6eda184912dbc264d7c370bb8db047dc3c3d361d4311c87d87b1b2718f0d7251d552919c9cc4005da5ce3962156558b202d5a5db4f33a7131981ed983d46ba902ff65d271f4cb05feb8b5dc5a36a28eec66af0957213e01b2ea22f50d1acda631c2416f578db52d8983dfcc2ff422a25272ab85948d2f8a7a83b09c0ac0d45c1f1917f6f1f29307f2ef292931db5add643a1fee031a7990b75c388f9c4d84ea373ba62881e1b16da3eca5ab7461c585f618dc734060e38e69fef8330bafc1253f7c4f8fec4fa94a2c2f2511d43a496f1a5992f0fced9110036167355565ca0671867210e9db527d3572ca1ec875fa3783fc5d7a4ce22185d43c32c13af0f17fe29c30f153a267a484b44a44fcd252323c78a542dd868fb58658b09bd59886d1c4345abbc6a54d4aef370b7b741f9c00282c74c996857926e771d5740421297ec9ed8d24701c87bca3b8ada9989491d387d53c3f904f7cc9a657cecce983a6dc8c407ae49693077ef5464d4174dfa0661867ee18186398c9382a263462d99c20dee9e1df471116bbb67e5554f1dbfbe8d14dbfc4d5b3b4a517a2fe20614572be9cf0f4eb6412c11eb29f7f726f0cf7a2f878fbb950a7cc6800a42a3272f3a26ec7d2f7d44211e4ffeb1ecfcb7bc2f347f001ac1ce3632d1d8cf8c4ff5bb91c5fbd2a87e8602868fa2ce147c2743950328fc7a5c5a7afddbd3e94e905f356a3914fde011c0edd9d6d0135b449082f0b657ab6bf3a8c0cc032fae21127b9fa61054b2cf92baffb11a04773bcab4f5ecebfe15887b8e516f507a44b7c10bb3baa783c745a1b6f72c9eaa69c656d8cbd4301b8c87aaad0ec9c7115d8bb8aadd27a87c02959cd6d4d75ca46de6286a8ed016a9f5fa24e15b21bdff9106d65314c04bdbb4180b8e5596972261cc0478bb764bd4d394695d282824854d558d8285d85fde7372030b8a1b8b25ecc7f585704d35e244bf94c0ca3147309d4958c8d3cb3296539e7534605d556ecdf7159269595f4e173578c62719c5f839cbada8b4f1e126107f79d0f776a200db622f6dbb5968199dd188b02d9b91f576571e410f924876e36f027a7581d81aae4405d67b8db9aa92c51427df16b066bfa69bff9c9554ae1c945ac8a3657ed6120f4e561036a7c5edd1cf618410b1402afa9121019653f455468719338932a7a6f694486b5722d749aefa7fd90f89e26d85ea05e7e3c259ee8b9cd4c389021255f1db75d0004b600666b3754fd02fc22f779381e2ebfc69efa1a68f463fd0a17058ce285ce4c2dea300b173d5e7f50e4fc91c568b4362eaada5db7b2593f2600017ff06cba310cd22377b07f356a5f092c9968dcfee0609f9f308fdf142109b956160a6c2da3cb90545200b6dfcf0d801214d332c3b574dec2529f9d782d52ddd8f0acb58738ef6020cbcd51c31c81c30bd7843b4e7333718ec87d9dc4f86cbfd7d7e0f0079c1c0069ef40ce73c11d25d416b3510927a36ca100945361f157253ac6e481ed10454b8ee62910b854e4e526204f9f7e6227a6e6c67d1f813b38f649711d4b614bf406eb19102071f5d2bf63745d9a2947c20c76b7fd849bfef9d3da2266cf6ae3b6dc5d2346da0c6a8b033786d7b2bf054fe3f9921b32669d4a70dfa2c997eceda01e25b2007fe96aa1559315471e304689a1444b7a8a074825ed49691d82abb6eef624852ea44fcb54ffbb8c2cc2e642f1362cf1e4fef5ffb13d6cb24156dd6880bf42ee4542faf41b1927bc485670ea5e0d100c37591f51f52a41599f8a978003ae2557252220c1812736b019093b841f278050836f09757b4e42632e880fac987f6bdad420b13801415463641da4300156e7bd3646a3c9adfd962d3d48e7fe0817c42d6306efc074f3df145234a000714c432cf5a07ad8619a071cfb0535fffc04be72c957d8a0939d672d821770e9ba2af612c1693ef2a0b700c1db1676c3f0ee5db834eef0a169f33c9a1c3024b4c580210aae7d31faccacf81de8db1c3b642d00efaa5c3d7ba0fa19f2b3e2fc2b33f4879746381313e511bfd89bfd915dba2491ec490b82a56efd4be9c89bbfd154d7b0f1d2663470f1b41c73ea2dc69d4258a16346e201f122a8b7a5d16f15a3077adaaae2a840050b20a6094116a39ed58f19284a96d87036f1bb06c154c1c52bde0bdc0a7e6146c183a6261dd33a4857439e31cfb9d9697fa7e7ab3f2d686f4c37affabae842baf257585fd092c06fc055a8e7741515b14abf12696001fe5bdccb6a64cadc33429e4ce48ccad96c90609118117db9bdfc9b6c728b58497969718acc3b0f8d4f45606a75481e89b38de9241936e0342a5c1874ceb313e53d1a3091eff20b95e048c6a4b9201c0941690053664b1a66d115dff2cc48bc663e44e14af37d0e2c987671e96c373d142ef1321e0e97b7b72ee6d249851d73c544536930db8e71e4097b784920b2b8327f76adb2faf6ccded1c074283bf426a93216803beabd95ad7f4b62024a803cbe5db6c22d2ddb2acb13e25a9f36ee27715c2d401adb94b251dffd5e7f5bd8896d0aafbb50633a80594ab6467d0fd3e803152c7e8335832fc5b88aa6ec5a29011c96e92f8e25f53db5dd5ed41914a0b6407d1f7dd161e04194670bdb8b19b2f4f782010901228f86ea9db56ad4fdfd95065d8bb7e1e29c80872f384bddd0a11467f611e8dc64a15cc1c65187b5ceda66c2b9b4e3d1e1507c84fed859aea20bfbfae34631f5be52f8fb56543ba6b90c54bc09b3b6447f5cec953e33b0e70ec84df2663a489fbdbcd4e7cc2c14d917ee4eaefde81c2930cf01f6aacf9dd20b6133e9883542c7e90f7d6186736fb4e43ce2dce744f6cfbca874fdd99d6c6c4523cf43e49643802b9519d3281f457bf4fd6238ea91aa49c473143edef9f31977d2ebb8cf1751d10624a034f74efbaa692474493e5f866c4235a1b5c93b6a62f1fa01afa1578420e77c6531b7da325d912b9916c09d630a39089e7dbae87f7b2355b659df52ae96faac7619049dfd9792db06b6bcade015de2c0ee7315f3811fa1ad1d04eb4cf5512b15559f0aee032880fce7dd7434997d71f8a9f7cb8a9df149e6c26327a0a8bb85565923549986c18020dfa56c0119b59892f2c3ef4a1203283e5c04c6a45ce55fc16a991d9a023736712c75bd7c415dbcd4a242d2c968a223677013be70c366011042c52c2446b861e467103b9c632baf5a55ea94d1729d500452446e8975d1ad70f4613b88f39b5018a0d87c5e137fd3ac1b24a9a09b1b33212902a1cafb9e17c2b4324b1427836ea97300c39482c607709a9b06f971c5c2257f4bfec1181630e1472763e63a55717a333c621936fdd7c29e57c19dd7ddecdeaf6cc82cb90e563d3b25f1587b6694bc713871f6c892bacfd5517621d596f1c48116678fd434f5e86589e77dd48e5e31ee7fccd3805d842770de4969a3a5c892c656607d16f8d14d567fd51d2bd7fcadfe946b04c6b6bf9e9cc9d11d5b11e0dfa8ffb5fc2342ae074cce1a8c99f1ec889434c044b276bd58345e2dcb670c487cf09d943b329b6378e1175b4e2656488f931b61eb8ee86dd950304ac71e67782182ab735ae8584b2f0fbb2e5f4d03529bd4fd7fc2c17ba066c4d79c4a09e0103f3f048d0659ef4d2228ede5e7421a001e010794646e089e272d512c1844dda6ad420654e01313cded8901d20247b583fff3f38b6bbce2ad70bed0fe2aba8c9265b88ca09a2bf04f7505204c295d17b4006d48777cb8f04faa2b2ab532eff885403972ad8f072aecbe1f4a3130c877de4658770ede43f79f014509308dace42e693c03e81ed1f813e732ee817f42b66f5a0ed03c9110b772b928f507dccf5133524be3cf4474617e213ee6a9ba8678d25c4b63cdb75a06139c8a62b19b9c4baef98d8f71c5a5ed9c02f73f4c20f3f809304a64c22db8b4941d60bc91e93f604d1af2cabc0aa7143eb6fcb4c9d188ae9847c6feac9d0080fb3de2ef0540627541bea0ab91ccb8113d1b0fe2619e7130514ca4fc80ce5406b3ff64fbb75e8975817031bf7867ca6f28d0ec498562d0a6c21dbd8da2b80bb27e23c82dd354afa7c9e634527d014d5a53a1d1fa69e1c60aa5334e24dab41a0fac6aa9aec0e7448038ed130f13731ad0b2f3dc663eecb65ea208410d0730551e9b87592643b2f69a9d4d92573816f474e8e638a8ef7ae32e6e61959e2d2f1cb9cab23f047c695d2f950eb6d6fce5af76f4bdef2a4d8333540da48abdda87e72f215372a5188f41884d5362a2e3a1fc5ffe791661e08629ea7d8d695a5302132a150ce140a8ffd6bc9acf86aad1d9268a01ea8d45c9bdb12c1e4bbf5dcf72c166b2db80ddd214f3698e31477ceadfdfbe88380c0d7b9f324efde5e360e05433757971792dbdd89ab9bd51da3927c369c78fa506b039ddb4d1f5248ba3ab0740283879113700a3ca58c854b930d89b1056d18deef68d2067f233aee3a4253e7cfdb128796e3473d1e639e447db2b34a35721c5488f86130144ae49f4b763717ba8f7d054f88e83ca6cfbf41ea5fd2a5422fc24892b289b788a8a81311db2e4f991f5a7c726d399f7758416ee3638492f5c3ecfd28b3dc971013ff2473e53b5d5ff111fd8945d3d7bb8a44727384ce1b2d3ed40ada3e5e0f71fde95da617137a99b61337256ef8d7a4843b9815179250a371147eb72bfebb63606a9afb34bf29099432adf9522891ee48e5a2f7ea233e44f87e1b23a88589dc5b5c9a5053444d5f35b029acda907ead1488b6565268631df7860a0b55ea1c093ea07b69c66e077fdd4f06198a9793df1fcf7ef47ae421b8eef353ddb08895262908f4365cde91c0b94c47ce446ef95a9b0d44a7570ed5fba08c10adb0cb5a43322ded0c8a98f3b674696b0ffee1f8892c4dff97d1f3dd09489d419ea5b6f2a8c7ab971b15e08dcc246c4526c8fc8333260cee3be2f004f5d33c792311899a49cb8d24bc8fa4258cbc6d87ea3728259b9ee43016aa16e8698e2ed761771139c2dc0f5443e68a1f05e5b3666f156dc7b946d60fd028865ac827199dc61c1d2abe8a9e947ae8085eec4e9405c67dc0d0b4b44cd70aca8fb69855732552d1855ed1c9909180a06896305a2fa96cab9c9e0db19286c88b73094d46c61747b53c2f2686ea1d5b86749b046dc69a159b5256e6b6370b298758d7a79d862462b565aa54c3dac45aeca7fa8ce6a60030ffffbf2d0a3d80c3e459da7a433a0d1e883793e838f94453ac9a452c92b71eeb8b3977f6184fd17f89c0346cb1c4d56facd92f18db75073a4746f56091d9b0b2a9e25b7e2d133ea5a4c7e6fbe4025badf8ce7ca76e1446318ecabfe0075bd35d6a4ea7fde7100ad66fd9d998a810f67f4b673c6f7f3d2fa74dc2d178e6947e6049b4b809811df9b4158bcc4fc72d4619f9ccf570625ae8eaff78207922a48c0b00bb958300f982f8ff7afe21d94bbcb8a215d1e4b4d9bfbc4627eea7a952fc6b26a841e9163b04164fbc96d405640ae7cbba0e9bf70f399edb060cc0617eeb86408de0b3611f0035eed7170c19ec7ec61356b6b750503340e9b0626bda4b80768b4654f23a66d2af7e2aebf20b02c9a9b689db1b8aa48ed30732b80f2b6de6e7ae06e5a770ee4f97bc10b83db39dc373d6a843b69694b897ed904012bbb7de5f0640b94ee7596a821e68ffe354e5b7613b3e098587214a9a8436879f482bd19f1cf12817b5b2bc9e3f64c65f6c18098328c592d92bd51c946e63904d011420f46143f069bd7fd4019a2acb1915283324163b5c7fb418390f94a257f0bb0c530e157c001c7c5095cbda036df4b69cc79d949a05601124b5119c2407ba8e6035f3e1c7b070c9e4ef6ad32e917dd681b3747d5f6b1ef86b7feaa06fc17b876bd31f549274547206e0612436cf34d9ff4507a36b4b6b52f69ae83d4cc365a11eb2fb87e40b6b04275bfdcf9f48b7df009e51fcea181e82cce77318155b4522b46f744655978dad106d1a47117fffd642b59b23de2c6c918e4ad60b581425044eb35ec62d8efaeda2be3ff0c537de99df1993c4b0957c28acb4562919f5e58a5516b661fa6b13c307e42ef45fb0cbd9554959d7afd96110f9066939859159178b0494bd9fbbaa29fd54a555a3cf4112d684cdcd905cccdfc4b91c478f8b5df2c6dadc0671ba8993f3beddd67a9e3bf316ba4bdc92246e31c382249599e4754f89f931ec3c98ed701cfb24ea75bdafca84e0805b1e372faef98b3c2ca4a7771155e1fc283669ec3bf11f94756dbe89a8ce84ccec4a02d6af5af1e0da44b0f2d8660a45c338ef4c65d4ee9a633b6e9db05ed7541059c8bf44c4e4a125bd47f10adc6cc5fa3ed32e5a87e3362faee960aa2c9c3a2f55f18f9de7af482053d1e07ec2c8f52804928e8c92c339ad23652d118215c6b57ce5de4b20e2a7f0533111291956a5d919a3d0e3fb5b3381150c00e753fecc3f3c16f5b751dbec60ad6edc38c03cf860bd564a4f6090c279f1c344f6", 0x2000, &(0x7f0000003740)={&(0x7f0000002c80)={0x50, 0x0, 0x6, {0x7, 0x2b, 0xd, 0x2008, 0x291, 0x537, 0x4, 0x8000, 0x0, 0x0, 0x40, 0x65f8}}, &(0x7f0000002d00)={0x18, 0x0, 0x1, {0x3ff}}, &(0x7f0000002d40)={0x18, 0x0, 0x1ff, {0x2}}, &(0x7f0000002d80)={0x18, 0x0, 0x7, {0xe}}, &(0x7f0000002dc0)={0x18, 0x0, 0x7, {0xaf}}, &(0x7f0000002e00)={0x28, 0x0, 0x6, {{0x3, 0x1000, 0x2}}}, &(0x7f0000002e40)={0x60, 0x0, 0x2, {{0xea99, 0x40, 0x100000000, 0x7, 0x2, 0x82, 0x1, 0x233c0}}}, &(0x7f0000002ec0)={0x18, 0x0, 0x5, {0x300}}, &(0x7f0000002f00)={0x11, 0x0, 0x4, {'\x00'}}, &(0x7f0000002f40)={0x20, 0x0, 0x6, {0x0, 0x2}}, &(0x7f0000003040)={0x78, 0x0, 0x8000000000000, {0x10001, 0x6, 0x0, {0x3, 0xff, 0x800, 0x1, 0x0, 0xb8a1, 0xa1ee, 0xfff, 0x6931, 0x6000, 0x5, r2, 0x0, 0xe, 0x6}}}, &(0x7f0000003180)={0x90, 0x0, 0x5, {0x2, 0x2, 0x7fffffff, 0x9, 0x72507a49, 0x6, {0x5, 0xfffffffffffffbff, 0x5, 0x9, 0x4, 0xc, 0x21c0, 0x1, 0x7, 0x2000, 0x4, r2, 0x0, 0x9, 0x1}}}, &(0x7f0000003240)={0xa8, 0x0, 0x7fffffff, [{0x0, 0x7, 0x15, 0x80000000, '/proc/self/net/pfkey\x00'}, {0x0, 0x2, 0x5, 0x1, 'hsr0\x00'}, {0x2, 0x5, 0x3, 0x0, '-/{'}, {0x6, 0x6, 0xd, 0x7, '/dev/rnullb0\x00'}]}, &(0x7f0000003300)={0x10, 0x0, 0x600}, &(0x7f00000033c0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0xe, 0x5, 0x3, 0xa, {0x1, 0x5, 0x7f, 0xb, 0xffffffffffffffff, 0x7fffffffffffffff, 0x3, 0x8, 0x8001, 0xc000, 0xfffffed8, r2, 0x0, 0x10000, 0x8}}, {0x0, 0xb}}}, &(0x7f0000003480)={0x20, 0xffffffffffffffda, 0x9, {0x2, 0x4, 0xa568, 0xb}}, &(0x7f0000003600)={0x130, 0xfffffffffffffffe, 0xfffffffffffffffe, {0x9, 0x7fff, 0x0, '\x00', {0x10, 0x400, 0xd, 0x7, 0x0, 0xee00, 0x2000, '\x00', 0x3ff, 0x3, 0x0, 0xd, {0xfffffffffffffffb, 0xffffffff}, {0x9, 0x9}, {0x6, 0x734a}, {0x5, 0x1}, 0xffff87c4, 0x2, 0x9, 0x2425}}}}) 52.842557308s ago: executing program 1 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'virt_wifi0\x00', {0x2, 0x4e1e, @empty}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) ftruncate(r1, 0x3) 52.842279477s ago: executing program 32 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'virt_wifi0\x00', {0x2, 0x4e1e, @empty}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) ftruncate(r1, 0x3) 52.301359365s ago: executing program 4 (id=20): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x8f6eb000) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) 52.284224086s ago: executing program 4 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01a32f0000000000f200"/24]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f00000002c0)='./file0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ipvlan0\x00', 0x7101}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = open(&(0x7f0000000340)='./file1\x00', 0xf4001, 0xa0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) fallocate(0xffffffffffffffff, 0x7, 0xfea002, 0x2200402) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x7ffffffa) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x204, &(0x7f0000000380)={0x0}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="44ee000000000000000000"]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r5, 0x0) 52.179801947s ago: executing program 4 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = mmap$binder(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x70, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r1}, @enter_looper, @acquire_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x2, 0x2, 0x17}, @flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0xa, 0x0, 0x14}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}], 0x1000, 0x0, &(0x7f0000000480)="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"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@nfs_export_on}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 52.068129519s ago: executing program 4 (id=25): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0xe6a) 52.0275809s ago: executing program 33 (id=25): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0xe6a) 9.762059514s ago: executing program 5 (id=850): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) lseek(r0, 0x4, 0x0) write$P9_RLINK(r0, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x3839a000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) lseek(r2, 0xd4b3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0) (async) ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]}) fallocate(r1, 0xe, 0xee, 0x4) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) sendto$inet(r2, &(0x7f00000000c0)="b379f946d4fea87b8f52cd3baab3ffc311e31c2bdd5c1ed951ec2830ce5f", 0x1e, 0x20008011, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) (async) write$uinput_user_dev(r8, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) (async) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x2}) 9.632772496s ago: executing program 5 (id=853): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x0, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0xc5, 0x0, &(0x7f00000001c0)="b4fc638d9370c1c966e2aa583a562f05a6f4edef6d72f41fec2d714577dfc0a09d778a0f273e9f4aa91433963f1dbc07e8a980e457145fd6ec75e7ea0f2698a215b063b8a849447ae2e1b32532c895fdeff25976fb5ded3913dae164fd39eaba1d1ce7964a823c890ee72081246d0ed63bf7e4ac42cfe2dbf4465b6f0964a466406e377581a258df33d0154aeae748f6ad354d90d6b89845c8c4ddc400cc1931e48606419eac7ab709ebe3375859171e5e598253c34d2974a7d3eb020d454de0b4d31539ad"}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x4, 0x7, 0xa, 0xf}, {0xb, 0x0, 0x5, 0x1}]}) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x384a6e9805bc503f, r2, 0x9ce03000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x100}) (async) ptrace(0x8, 0x0) close_range(r0, r2, 0x0) (async) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r3, 0x2000005, 0x12, r2, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x2, 0x10010, r2, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0xac4) (async) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@flushsa={0x260, 0x1c, 0x0, 0x70bd2a, 0x25dfdbfe, {0x32}, [@tfcpad={0x8, 0x16, 0x9}, @sec_ctx={0xa1, 0x8, {0x9d, 0x8, 0x1, 0x6, 0x95, "a6b7623ba9d9ea0993dac637ddd779849b01393c8144043b7a61fd744ca91f2c3f66c5d2e0592d4eda2938c8d994d6931bda7e3c9ca11b2bcece92ccbf057d1d74b58275b4f7fa190c3ccf8a2f73fb530d8bcde73e55af12dab00c146381533dfd8b74767eb05786d9ee9cd2464e28ccd87eaa0a949fced2e5940b96d360bf58cc8936c44c8cd45d40220cbaf0f3d17a715e5b845d"}}, @lifetime_val={0x24, 0x9, {0xd, 0xfffffffff7c73451, 0x3ff, 0x2}}, @lastused={0xc, 0xf, 0x3}, @algo_crypt={0xa1, 0x2, {{'lrw(serpent)\x00'}, 0x2c8, "2e3df0e3333318a87197d7de6b233731c76237c8987edbf2d50fd1210741b1841c6aba44c42b5cda9db93e3efcea4118d37a66b6a351d3b4326b1606bcf66ebec7414f547f977d49b180599548c68b3d697d478565c09dc6a9"}}, @lastused={0xc, 0xf, 0x1ff}, @algo_crypt={0xbe, 0x2, {{'ctr(aes)\x00'}, 0x3b0, "5aef6d0df439db0c8dac9060000e88c5db366fd3735aba6cc41330e28bd9d07b3d63dba01e8711014f1937fdf99fd473dc82806c63e73a259ee385aab48720eab5dbad9f9390095b1cf15089fcd517f489e7c04e01903b7c4663bac9101d66b2b140e7351fe2aba9e0424b6c73eb8a619e780101b4ad"}}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x44084) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r3, 0x2000006, 0x50, r2, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000700)={0x3, 0x0, [{0xbe6, 0x0, 0x8001}, {0xbb2, 0x0, 0x9}, {0xa0d}]}) socket$key(0xf, 0x3, 0x2) (async) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@initdev}, {@empty}, {@multicast2}]}}) close(r0) (async) r6 = signalfd(r5, &(0x7f0000000800)={[0xd]}, 0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r6, 0x52800000) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x6c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x92194cf04285980, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/253, 0xfd, 0x0, 0x3a}, @fda={0x66646185, 0x8, 0x0, 0x1d}, @fda={0x66646185, 0x1, 0x1, 0x3e}}, &(0x7f00000009c0)={0x0, 0x28, 0x48}}, 0x40}, @dead_binder_done, @release={0x40046306, 0x3}, @dead_binder_done], 0x65, 0x0, &(0x7f0000000a80)="8bfdc3f6fd0883b99cd9409436e630bc62334b9bbea935b364fba46c737a47f92c8d6f30b451c48d47d717ac7dfb73a230b97c73f69948fc346de6e78f6dba617671ba2f624b3b447e6fe359a2f7228d7635be549c9026a800cac732317d7385a6fb501f2a"}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8019c12}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004810}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) rmdir(&(0x7f0000000cc0)='./file0\x00') 7.113879734s ago: executing program 5 (id=898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "ff"}, @main=@item_4={0x3, 0x0, 0x8, "e400"}]}}, 0x0}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) 4.262812167s ago: executing program 5 (id=945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x9, 0x9, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r2, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000002f40)=""/233, 0xe9}], 0x3}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x12040, 0x0) io_setup(0xa, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 3.560268677s ago: executing program 0 (id=953): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xfffffffffffffffb) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x52100, 0x0) (async) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) (async) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c76529718d2dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f0000000000000000", 0x29}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_TRIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc011}, 0x8000) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 3.133461954s ago: executing program 0 (id=961): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) ioctl$sock_netdev_private(r1, 0x89f9, &(0x7f0000000140)="bc931946fe97a3edbb441d30a37fa69cc877e51640ec9ce9ed6e48301c94fa9cb0ab5619f6d8f5ffcaf46bd5cf51f74db588789bde2181cab660deeac596298b84b1b0048e52fdc4b1d2f36f97884233ddc6e2c1e0d2e471a1514febc7b9e57fefcbe86581f2474d7c627fafd4b0885157549ebb9478e7f6b5f468566bb74eac4efd7844ac5a89340399a8cd4254f70b3afd87c359514e394c463765b31813125089a60dbd15dd2d9528153f579eb489a0a4672602a89c20db4418733a210414176dbab51e71") ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@md0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r8 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r7, 0x0, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, &(0x7f0000000500)) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1}) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000240)=0xc04b) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 3.133160374s ago: executing program 0 (id=962): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0xfd, 0x6, @remote}, 0x14) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000480)={'wg2\x00', @local}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r0, 0x0, 0x1400) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000080)) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.986955536s ago: executing program 0 (id=965): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x20a5acc0, 0x3ff, 0x1}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8001, 0x450000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000100)=""/215) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0x3, 0x280) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000280)={0xd64d, 0x7, 0xed, 0x5}) (async) r3 = dup2(r1, r1) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{0x7, 0x7, 0x0, 0x7}, 'syz1\x00', 0x4d}) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000340)={{0x8, 0x2, 0x1, 0x200}, 'syz0\x00', 0x4e}) (async) r4 = syz_open_dev$evdev(&(0x7f00000003c0), 0x7, 0x8000) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000400)=""/96) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x406080, 0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000004c0)=""/3) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x84080) (async) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ppoll(&(0x7f0000000540)=[{r6, 0x15}], 0x1, &(0x7f00000005c0)={r7, r8+10000000}, &(0x7f0000000600)={[0x4ecc]}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000740)={0x4, 0x0, &(0x7f0000000640)=[@exit_looper], 0x9f, 0x0, &(0x7f0000000680)="ff8cd1041adbe1510c750243f6c7ab43d6fab57827107f8be2dbff7ed25d9f31b3688eb779883befe5b8acf9f55f72277cc81fe0ff56a1857837f0411aa3d9d28b1c8c8709cb29f384e9933fd10d65edf30a91917f1fcf5724c4c8e6ab2035cc27926f6fc4bb7f97e6724742d4c39baad544c720892f6ed3068359f34d6601256470bfe2d09224c49282b582f50c9170e745c7549444d709a85b163c6fc28e"}) (async) flistxattr(r2, &(0x7f0000000780)=""/242, 0xf2) (async, rerun: 64) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000880)={0x6, 0x4, 0x101, 0x400}) (async, rerun: 64) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000008c0)=""/4096) pselect6(0x40, &(0x7f00000018c0)={0x3, 0x7ff, 0x7, 0xffffffffffffffff, 0x9, 0x9, 0x85cb, 0x6}, &(0x7f0000001900)={0x0, 0x100000001, 0x432, 0x40000, 0x8, 0x10000, 0x5, 0x6}, &(0x7f0000001940)={0x100, 0x2, 0x5, 0x9, 0xf, 0xffffffffffff8000, 0x6, 0x7}, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f0000001a00)={&(0x7f00000019c0)={[0x6]}, 0x8}) (async) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000001a40)={0xffffffff, 0x9, 0x9}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001a80)=0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r9, 0x8, &(0x7f0000001ac0)={[0x43]}) (async) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000001b00)={0x3, 0xffffffff, 0xa}) (async) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b40), 0x400000, 0x0) accept$inet6(r10, 0x0, &(0x7f0000001b80)) 2.958770086s ago: executing program 0 (id=966): mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10004, &(0x7f00000000c0)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}], [{@smackfsdef}, {@smackfstransmute={'smackfstransmute', 0x3d, '!.]:@@*'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@flag='sync'}]}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = geteuid() fchown(r0, r1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r0}, r2, 0x0, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x3, 0xff, {0x3c, 0x10, 0x7fffffff, 0x81, 0x1}, [0x9]}}, @name="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"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001200), 0x2002) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000001240)={0x4, r0, 'id1\x00'}) write(r0, &(0x7f00000012c0)="801d8552af575fafd988ed0e5b3aaa0189e643e57ebd74ac03fae6528848c93a0af0cc0a100e61c268a98e6169555ecf996725b11ffd922433b63819c720bbb44794ed07a68b740dabc4c86669ac078f27caf0b7e3fe4bb677d8e972d371db007dcf14d7a260d889c9fee843fd557d028e22b0a800791e5d28fe7f7b9c717a6af75e8c8422e02788b77638e7b35f656f0fcb652c4f37539002d61279fc5ce8284f2b", 0xa2) read$FUSE(r4, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x6, &(0x7f0000003400)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) newfstatat(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fsetxattr$system_posix_acl(r4, &(0x7f0000001380)='system.posix_acl_access\x00', &(0x7f0000003500)={{}, {0x1, 0x2}, [{0x2, 0x4, r1}, {0x2, 0x1, r1}, {0x2, 0x6, r1}], {0x4, 0x5}, [{0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x4, r8}], {}, {0x20, 0x5}}, 0x54, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000003580)=@sg0, r1, &(0x7f00000035c0)={0x4, 0x6, 0x9, 0x5, 0x9, 0x2, 0x6, 0xfffffffffffffffe, 0x101}) r9 = openat2(0xffffffffffffffff, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x10, 0x5}, 0x18) r10 = dup(r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r11 = add_key$keyring(&(0x7f00000037c0), &(0x7f0000003800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, 0xffffffffffffffff, r11) r12 = openat(0xffffffffffffff9c, &(0x7f0000003840)='./file0\x00', 0x2200, 0x4) getdents(r12, &(0x7f0000003880)=""/219, 0xdb) add_key$user(&(0x7f0000003980), &(0x7f00000039c0)={'syz', 0x3}, &(0x7f0000003a00)="06b5e11d70722d4e596051611f641f80977ac190a8bf81a30cfb704dac8e30c4ecec5ac6efb58824171c7682c2605e46d439d6bdc8a659f60bd523238213c4a41290a6f0e830427d5b2d5be34136b6e584e9d595f1a3aa07301435e9aed1872f5457966c57388ac2362a20fb7133c8398bef8c5137fcdaae17b039a160e5f155a24ae17f3f30cfd54a43752f5d2e7de6968a89b8aa283f80015da603fd6a3888b182ff3adc143163243a1cfa8a5ed7dfd4f5d9ba066a1fa0aba343f65bc2de283d8a2dbd8999fa5d3b8db7adf1eba6", 0xcf, r11) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000003b80)=@get={0x1, &(0x7f0000003b00)=""/74, 0x6}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000003bc0)={0x5, 0x0, [{0x328, 0x0, 0x8d7d}, {0x3a9, 0x0, 0x3}, {0xac7, 0x0, 0x2}, {0xd92, 0x0, 0x3}, {0xa30}]}) getsockopt(r12, 0x5, 0x1, &(0x7f0000003c40)=""/98, &(0x7f0000003cc0)=0x62) sendmsg$nl_netfilter(r9, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d40)={0x94, 0xe, 0x7, 0x401, 0x70bd25, 0x25dfdbfe, {0x95a864a0578c1bf5, 0x0, 0x5}, [@generic="f6c19757c52e6fac0ba3855e8b3d2ed3781bc7f3a38def8a9bd424fa29e77ca5217d4f9c4f1fc64aa408741af4522e7796c7f7acc515a7388a1b2c5b629f428462e7794ba1b45fe4decb14948a6eca04f0f0481c322f4adb4a0cf4e6f32fc6333b51e6b836bd5ac649f2a0bdbf56450dd230671896a78b44b4c93257a123f551"]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x4680, 0x0, 0x20}, 0x18) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000003f00)) setresuid(r5, r5, r5) 2.948595376s ago: executing program 0 (id=967): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0xffffffff}}, @code={0x1, 0x49, {"c4a27d19eac442c99224c4c4417156dc66ba4300b0ecee0f08b8010000000f01d90fc758082e0f01cac4a2c59d8d3e2f0000f36436440f07"}}, @cpuid={0x2, 0x18, {0x2, 0x9}}, @code={0x1, 0x68, {"470f07b805000000b90b0000000f01d9c4c1ff7074a6005348b800c4c9599960d55e0f23c00f21f835020006000f23f8c4c2790fad04000000f30f6f7ef3c4017be6b5000000003e67f30f5dd4c4826d40ebc4a17a6f21"}}, @cpuid={0x2, 0x18, {0x8}}, @cpuid={0x2, 0x18, {0x9, 0x514}}, @code={0x1, 0x68, {"8f88a4a2c8320f23f666baf80cb8d42b4988ef66bafc0cb8ea150000ef66b8e8000f00d0f3420f5987dc000000b9b70a00000f32f30f521066b8b0008ee8c482512e6df2c74424006e000000c74424021d4c0000ff2c24"}}, @cpuid={0x2, 0x18, {0x7, 0xfffffff2}}], 0x1a9}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b42173"], 0x0}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}}) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x741800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2d, 'net_prio'}, {0x3e, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'pids'}]}, 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000240)={r10, 0x1, r9, 0xfffffffa}) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c) ioctl$FICLONE(r1, 0x40049409, r1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r8, r11, 0x0) 2.73176983s ago: executing program 3 (id=968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c08, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xde, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x48a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xc, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x6, 0x1, 0x3, 0xff, 0x2}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xff, 0x0, 0x7ff, [0xd8]}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xd1, &(0x7f0000000380)=@string={0xd1, 0x3, "715cbd79a0e71e7025827b112c34902203873ebb43238cd331160a8698e4374d17f994f5bb598bb548115f0a099b265671698561d738754fcbf123119ebc7127c816c95c54342bb926d793e724f71166edeb48cda47b446ec6ac65619e9bb11d79ae335399e87dde1c58dbd5eb2cf56d4b9d54d593300a1e9abaa7dc864ff55c4e232b653c4240902b6cd05904ac10d550ae74456762713d83b2cf7667520b7c1f30e3c581f69e1ded73bac77c8a6ad62b294085c09b66c2b53ba651d92cb53517a051e959eb3ee323d1638544f17d"}}, {0xf8, &(0x7f0000000480)=@string={0xf8, 0x3, "16d475d4a27f25b8d558d518fc30d6279ad4692b048afab6b9a84e2ddf18739b8d3ea86c0237745fa6aca01bb318fa9c35daecbfb37221d8a0e2ef6915e7f48f30f2de515a345a3a496c382da95953412fe1328b03bac02553f2223a65fd264f77f5dc9e6a00bd6093c4dd7c12a77faa8ddc2dbc713b9b2f6e050d5bb624709c20514070f9025971518f879ceac5b22ee6d433a237c87578c0f0e6d3a714c8be08c270df3ef8459dc7ae20e08b8975e1265421bb1efa21e0beba6eb917b41b53197612754f96fdfa2651a49b07c6eca92e8b50930b4f80fd717dc472c0ec397d3f9cfa9bea63a412f187246dd357de5090cab3013c26"}}, {0xcb, &(0x7f0000000840)=@string={0xcb, 0x3, "66ffc39d848e51beb64f8d129e29dc3e846f0cbd3c9efb259c6d6edccf1dc0bc6eba0cdbaade333aa9fdcf5c33c96a6480995325df2b9f71a763163cc87dcb58a1ccae80fa305dddde30651ae2b28de3cf626c6eb370505dbd85149d3c26b49c709563a1f1856c5d7e56ec058ac0b54e4592811130f40744b48657d9acc0f1943b33d0de98780875343008a20f36affc7eb7749e11843fc265f3741486a6e2b28b232980f55272a864b9414e0d5cf83efecd3b0983189378b9f09d034e38ed04924911ea4c199ca4ec"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x98, 0x0, &(0x7f0000000e40)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000fc0)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000f00)=""/165, 0xa5, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/3, 0x3, 0x0, 0xe}}, &(0x7f0000000e00)={0x0, 0x18, 0x40}}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_usb_control_io$hid(r1, &(0x7f0000000d80)={0x24, &(0x7f0000001040)={0x40, 0x10, 0xed, {0xed, 0xe, "14e7882a69b02e939e4dc736bcc24299ff34dfa1252aa325918ec232153c12b481dd44b0c080ad82926e1979e933516b87a67b16696fff99953165846c29978f7c8183e5483ee044d75d28c3344bb102d8f5d4289c705043f88fc13492d1d5f57a7fd460751f61201630388ad512904fa4be8668f01c34025497240527584ec5c4250d247f88bda8b739945abe88a7529de7176134809f7b891ecb58a729c229430df9520271832ea99e502cfbb26304f8cbd72ed1ed0ebccf722ec2456a4e7dc37d5b6dcbdb0e908d5612879ced43f11292e3cc23f06a8e0349549d61f00720d202631506887f129014fe"}}, &(0x7f0000001140)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "5c09e8b1b1f2aa05e2b5a9efd3795c24bdf208ac81ce73b10b01c3520a705651ab3c14faaa03997c4f825032b104ccde232a5db968f40d8d47b175d97d4eeda1e7642e694fd0b955d2cf535d9b12712d0a2578d8b7e6c127b64ec93e41a0692838575a6860daa00627e1c63db7674b2145f68dad0e0bb252f38c7a2108c2e3a67cefa15ae85b44605cc1fdaa1fd2df29f0104ac22ee0b4960ca63ae338363b7c23c942ac931cfc0494b2f013b31f95efa6cb542bd39a47c822dbfe0e49cd41d590ef12c85665029fc9f64daf1fdac1bee9"}}, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x262}}}}, &(0x7f00000013c0)={0x2c, &(0x7f0000000dc0)={0x20, 0x1, 0xc, "bace630c7ca17b138095d6cf"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0x64}, &(0x7f00000012c0)={0x20, 0x1, 0xb5, "969e1bff536f9e76a7a55042586b2cc14364c3906a38d74a2b4667c14c59a1c42c4711579b07ee30c8a9a00941383e0d67cb83416c24a7f606f1ae193e73fd4da309a91e81ae6ff5e34189d252fefcb27819529f23417e0fc181c3188e6d3e54ef178200f9004b552598b2d8b13143e1b5be905d1b766483c1a062db95ded6cf753ae7dd713d67cf6c26b3322e794ac8722aa70cd0c5b8fea6af8beb7360d362bc75255f64226ee57bf3f19c24de3f57e30f91e01f"}, &(0x7f0000001380)={0x20, 0x3, 0x1, 0xb2}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80)={0x6, 0x0, [{0xeeee0000, 0x50, &(0x7f0000000780)=""/80}, {0xffff1000, 0x3f, &(0x7f00000006c0)=""/63}, {0xdddd0000, 0x3d, &(0x7f0000000940)=""/61}, {0x100000, 0x7a, &(0x7f0000000980)=""/122}, {0x100000, 0xe7, &(0x7f0000000a00)=""/231}, {0x100000, 0x80, &(0x7f0000000b00)=""/128}]}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c80)={'\x00', 0x9, 0xc95f, 0xfffffffd, 0x3, 0x9, 0x0}) sched_setscheduler(r3, 0x6, &(0x7f0000000d00)=0xfffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32=0x0, @ANYBLOB="0a002500000400018000"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.659321s ago: executing program 5 (id=970): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x80000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x80000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mkdir(0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=0x8) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 2.190025848s ago: executing program 3 (id=974): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) dup(r1) mount$binderfs(0x0, 0x0, 0x0, 0x840024, &(0x7f0000000240)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030312c73746103003d676c6f62436c2c73746174733d676c6f626130303030303030303030303030303030303030303030332c6d61783d303030303030303030303030303030303030303030313a2c73696c656e742c726f6f74636f6e74657874000000000000"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="19bc024d564b0000000000000000b916b35703d9a87d47a8632ed27ec5d01695a03ea7302df893ebb6cefc5062f0cbcf649f36dafe3c8ef355c5e69eb0ad5957821bea45b80f9de55fa94651641992836bee2a31cb8d1dcb78dbb22b21306e2bf1d0c0ae59d7d5739dbd8b608dd9b2b516a464013c5f90dcf21fd4b4c356f8e58a165fb9ca0f2066921d9dcf9982e007793fd6cdd4a0395555a3bf1e5d5b8ed8"]) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x8, 0x40, 0x0, 0x1a3a1f37, 0x5e, 0xa, 0x3, 0x0, 0x1, 0x0, 0x31, 0x0, 0x9, 0xffff, 0x4, 0x2, 0x3, 0xe, '\x00', 0x9, 0x7}) 2.133501898s ago: executing program 3 (id=975): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x2, 0x1, 0x5, 0x10, 0x3}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$cgroup_pid(r2, &(0x7f0000000000)=r1, 0x12) 2.04394645s ago: executing program 3 (id=976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0xfffffff9, {{0x2, 0x4e23, @private=0xa010100}}}, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000097000/0x3000)=nil, 0x3000, 0x64) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1.678803795s ago: executing program 2 (id=986): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) get_robust_list(r0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) get_robust_list(r1, &(0x7f00000022c0)=&(0x7f0000002280)={&(0x7f0000002240)}, &(0x7f0000002300)=0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x583240, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x5) rename(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='./file0\x00') set_robust_list(&(0x7f0000002500)={&(0x7f0000002440)={&(0x7f0000002400)}, 0x9, &(0x7f00000024c0)={&(0x7f0000002480)}}, 0x18) ioctl$KDDISABIO(r2, 0x4b37) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002840)={0x0, &(0x7f0000002540)=[@uexit={0x0, 0x18, 0x80}, @uexit={0x0, 0x18, 0x78}, @code={0x1, 0x73, {"48b86e000000000000000f23d00f21f8351000000a0f23f866ba2000b886000000ef460f00d936450f01cfc74424006f3c0000c744240202800000c7442406000000000f011424b9760b00000f320faf63edc441be5c29c46149e3cd3e420f72f1b2"}}, @code={0x1, 0x78, {"66baf80cb85448bb88ef66bafc0cedf20f100ec4427917546605410fc7adaf800bacc744240056dccce4c744240200780000c7442406000000000f01142426642667660fc25f32a00f792d22688cb8c4c1f96ba41113e3000066b83b000f00d8b9a30300000f32"}}, @uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x71, {"f2400f232848b8aefa3339967ea9250f23d80f21f835000000200f23f80f01c56fb9800000c00f3235000800000f3066baf80cb85a421688ef66bafc0c66b80ed266ef450f01f8c4629547e3b9800000c00f3235004000000f30c4c2a5a975c6"}}, @cpuid={0x2, 0x18, {0x10, 0xa7c2}}, @uexit={0x0, 0x18, 0xbfbb}, @cpuid={0x2, 0x18, {0x1, 0xb9}}, @cpuid={0x2, 0x18, {0xbcd1, 0x1}}, @cpuid={0x2, 0x18, {0xc, 0x4}}, @cpuid={0x2, 0x18, {0x2, 0x9}}, @code={0x1, 0x56, {"f6cd01460f01cab9fa020000b87b000000ba000000000f302ef3410f09360f78586c36f2aec7442400d4000000c744240203000000ff2c2466ba400066ed3e0f01df0fc71f"}}, @uexit={0x0, 0x18, 0xb2}], 0x2d2}) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000002880)={{r2}, "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"}) set_robust_list(&(0x7f0000003980)={&(0x7f00000038c0)={&(0x7f0000003880)}, 0x8, &(0x7f0000003940)={&(0x7f0000003900)}}, 0x18) ioctl$TIOCNXCL(r2, 0x540d) pipe(&(0x7f00000039c0)={0xffffffffffffffff, 0xffffffffffffffff}) set_robust_list(&(0x7f0000003b00)={&(0x7f0000003a40)={&(0x7f0000003a00)}, 0x9, &(0x7f0000003ac0)={&(0x7f0000003a80)}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003b80)={0x2, &(0x7f0000003b40)=[{0x8, 0x6, 0x8, 0xb7}, {0x9, 0x40, 0x9, 0x3}]}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000003bc0)) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000003c00)={0x10002, 0x0, [0x9, 0x8, 0x8da, 0x8, 0x2, 0x3, 0x80, 0x22e]}) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000003c80)={r2}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000003cc0)) set_robust_list(&(0x7f0000003d80)={0x0, 0x9, &(0x7f0000003d40)={&(0x7f0000003d00)}}, 0x18) listen(r4, 0x5) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000003dc0)={0x0, 0x2, 0x1, [0x7, 0x7, 0x4, 0x8, 0x800], [0xb75, 0x7ac4, 0x7, 0x9, 0x4, 0x8, 0x6, 0xd, 0x2, 0x1, 0x200, 0x6, 0x2, 0xff72, 0x0, 0x7fffffff, 0x3, 0x4, 0x9738, 0xa, 0x400, 0x2, 0xe4ab, 0xfffffffffffffff7, 0x7, 0x3000000000000, 0x73c, 0x4, 0x9, 0x8, 0x9d59, 0x9, 0x2, 0xf8, 0x3, 0x0, 0x40, 0x8d, 0x6, 0x80000000, 0xccbe, 0x0, 0x6b80, 0x49, 0x0, 0x4, 0x4, 0xf, 0x3, 0x100000000, 0x800, 0x1, 0x7c8, 0x8, 0x8, 0x3, 0x9, 0x7f, 0x752e, 0x6, 0xd, 0x0, 0x9, 0x8000000000000000, 0xfffffffffffffffe, 0x3, 0x7fff, 0x80000000, 0xfff0, 0x2, 0xfffffffffffffbff, 0x99, 0x5, 0x40, 0xe3ec, 0x1, 0x5, 0x9, 0x2, 0x7, 0x9, 0x4, 0x2, 0x0, 0xffff, 0x8000, 0x3, 0x7, 0x4000000000000000, 0x41, 0xa, 0xaead, 0x5, 0x4, 0x7, 0x1079, 0x4908, 0x1, 0x1, 0x100, 0x5, 0x9, 0x7, 0x1d, 0x3ff, 0xee, 0x6, 0x4, 0x4, 0x400, 0x1ff, 0x1ff, 0xf587, 0x6, 0x456, 0x304, 0x6, 0x7fffffff, 0x1, 0x7, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000004200)={0x0, "7669adef3197860abb72d70edee86365"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000005200)={0x18, 0x4, {0x8, @struct={0x9, 0x48}, 0x0, 0x9, 0x4c1, 0xf, 0x4, 0x401, 0x13, @struct={0x368, 0xf1}, 0x8, 0xc, [0x7482, 0x3, 0xc598, 0xfffffffffffffffc, 0xffffffffffffffff, 0x525]}, {0x7, @struct={0xfffffcb9, 0x81}, r8, 0x3, 0x2, 0x0, 0x1, 0x9, 0x14, @usage=0xa, 0xfff, 0x6, [0x7, 0x7fff, 0x6, 0xfffffffffffffff5, 0x5]}, {0xffffffffffff79c7, @struct={0x7e6, 0x1}, r9, 0x80, 0x8000000000000000, 0x1ff, 0x8, 0x1000, 0x0, @usage=0xff, 0x80000001, 0x9, [0x7fffffffffffffff, 0xfffffffffffffffe, 0x6b79, 0x1, 0x7ff, 0x700000000000000]}, {0x7, 0x8, 0x2}}) set_robust_list(&(0x7f0000005680)={&(0x7f0000005640)={&(0x7f0000005600)}, 0x3a7}, 0x18) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f00000056c0)={0x90000004}) syz_clone(0x5100, &(0x7f0000005700)="def806db0830055ff8f2b2ea680bc138f487df3afdd7903fc54cb52a5e60a5a572b92f0483e93b75cb6dadbcbe428da9b99930e9919a8bd8aa52991d7143227297b02046ce588e1f97f3e96a39afd7ce99b5d4792ab3362837757e49cb35e69c1f37ab8d35daf3ff20c53544f53688eed9a5672ea28e031f41c08738b4a64109fd673993a0cbc698891effd3851df4f763b89c4ae7ded8ac863a15b66fd3decebcbe338e522d52440808a8fc195243868a3119c6828f0093146a1d972682a22deb36aa5379b36e087930439d1ab403a5bd9a9338935c57339431d48989b05db8484549258a2aa36238ac70266683a52cadf533f32f522e578a654624", 0xfc, &(0x7f0000005800), &(0x7f0000005840), &(0x7f0000005880)="45db0cab250cb4e0ba1ff43a5c9ef1e2e6fbd13e195ec439c22b728e1a496b4f7d04d88e0246d24949a95d26b80430d09389de96f851527e3daccaddda15cbcbfed74591fba8cfb93d75b5f47798a067dd741015f82b617117ac56934b8253358f6a") 1.578327767s ago: executing program 2 (id=987): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x8}, {r0, 0x88}], 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) (async) ppoll(&(0x7f0000000240)=[{r0, 0x8}, {r0, 0x88}], 0x2, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) (async) 1.315908631s ago: executing program 2 (id=988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}], [], 0x6b}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x4, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 1.149741503s ago: executing program 3 (id=989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)='\x00'/15, 0xffffffffffffff88, 0x4002045, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r6, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 905.455597ms ago: executing program 2 (id=990): ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000004c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1ebf4bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c37", 0xaf, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0x0, 0xc9100120, 0x0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0xab, 0x0, &(0x7f00000002c0)="94e3cab590f97726d932b0f23c226dbda5994e168f7388959162238b2c328b21291c100a994ae15c563f3563eee39780b09a153af9036df642df88543011265059b82cb5521bbfbacd50368cc4e6537a44689f8a1e0599f2625d1225e0fd9ce13ba71e35caf1251ebd4cfd148bcc22e3872388706ddb5d7457b59f8fc5b5c3c7ff075b0b1ae2f7081d66ba5f193fd194b82f83befebf4551366cad39b02d9e2f61ca170512711c515d02b8"}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xa400000000000000) (async) sched_setscheduler(r3, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) 332.763246ms ago: executing program 2 (id=991): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x103000a, 0x100, 0xfffc, 0x81, 0x0, 0x0, 0x0, 0x80, 0x5c3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0xffffffffffffffd1, 0x0, {0x9, 0x0, 0x0, {0x3, 0x7, 0x5, 0x7, 0x6bf5, 0xffffffffffffffff, 0xa, 0x10, 0x8004, 0xa000, 0x180000, r2, 0x0, 0x2a9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x0, 0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x81007702, 0x0) 332.236935ms ago: executing program 2 (id=992): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000001c0)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xfe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @multicast2}}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7500) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140), 0x800004, &(0x7f0000000480)={[{@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './bus'}}, {@favordynmods}, {@noprefix}, {}, {@xattr}, {@subsystem='devices'}, {}], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@subj_role={'subj_role', 0x3d, 'f^$#!.-##+\xb8&T'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r3}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x61, 0x66, 0x38, 0x36, 0x64, 0x37], 0x2d, [0x62, 0x35, 0x30, 0x34], 0x2d, [0x33, 0x63, 0x39, 0x35], 0x2d, [0x62, 0x65, 0x37, 0x37], 0x2d, [0x33, 0x38, 0x31, 0x39, 0x37, 0x34, 0x36, 0x63]}}}]}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f00000005c0)=""/211, 0xd3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r8) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xfe, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x4840, &(0x7f0000002400)={0x2, 0x4e20, @multicast2}, 0x10) mknodat$loop(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x8000, 0x1) read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x1854) 16.79982ms ago: executing program 5 (id=993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) close_range(r5, r5, 0x2) fstatfs(r6, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000200)=[{r7, 0x20c}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x4000, 0x10, 0x3, 0x12, 0x3, 0x2, 0x1, 0xce, 0xfb, 0x40}, {0xd000, 0x2000, 0xc, 0x3, 0x7, 0x6, 0x4, 0x8, 0x20, 0xf, 0x0, 0x81}, {0x1000, 0x10000, 0x8, 0x10, 0x8, 0x3, 0xc, 0xf, 0x81, 0x4, 0x8, 0xa8}, {0x100000, 0xd000, 0xb, 0x9, 0x4, 0x3, 0x7, 0x4, 0x67, 0x4, 0x6, 0x8}, {0x100000, 0x5000, 0xa, 0xa5, 0x0, 0x4, 0xa, 0x3, 0x29}, {0x3000, 0x10000, 0xf, 0x5, 0x30, 0xc, 0xf, 0xc5, 0x0, 0x6b, 0x1b, 0x1}, {0xf000, 0x10000, 0xb, 0x3, 0x3, 0x3, 0x3, 0x7, 0x6, 0x2, 0x3, 0xa}, {0x2, 0x10f000, 0x10, 0x2, 0x4, 0x14, 0x2, 0x56, 0x23, 0x3, 0xf7, 0x5}, {0x100000, 0x401}, {0x4000, 0x1477}, 0x90000010, 0x0, 0x3000, 0x4002, 0x1, 0x901, 0x0, [0x7, 0x9, 0x5]}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=994): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r2, 0x29, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, r1, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x19}, @loopback, 0x1, 0x8, [@local, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}, @local, @remote, @private=0xa010100, @multicast2]}, 0x30) close_range(r0, 0xffffffffffffffff, 0x6) r3 = memfd_secret(0x80000) close_range(r3, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): ystem_u:object_r:device_t tclass=chr_file permissive=1 [ 32.473771][ T36] audit: type=1400 audit(1750535636.440:221): avc: denied { write } for pid=597 comm="syz.2.95" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.546227][ T36] audit: type=1400 audit(1750535636.520:222): avc: denied { validate_trans } for pid=601 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.546427][ T602] __vm_enough_memory: pid: 602, comm: syz.2.96, bytes: 144115188075855872 not enough memory for the allocation [ 32.594495][ T309] usb 6-1: Using ep0 maxpacket: 8 [ 32.600727][ T605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.601497][ T604] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 32.602132][ T309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.626890][ T309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.638395][ T309] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.647987][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.656491][ T309] usb 6-1: Product: syz [ 32.660759][ T309] usb 6-1: Manufacturer: syz [ 32.665533][ T309] usb 6-1: SerialNumber: syz [ 32.686292][ T607] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 32.782558][ T609] rust_binder: Error while translating object. [ 32.782599][ T609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.789162][ T609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 32.857381][ T36] audit: type=1400 audit(1750535636.830:223): avc: denied { mount } for pid=610 comm="syz.2.100" name="/" dev="ramfs" ino=7241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.903172][ T583] SELinux: failed to load policy [ 32.916752][ T611] incfs: Backing dir is not set, filesystem can't be mounted. [ 32.925529][ T611] incfs: mount failed -2 [ 33.007236][ T309] usb 6-1: 0:2 : does not exist [ 33.016222][ T309] usb 6-1: USB disconnect, device number 3 [ 33.061487][ T619] syzkaller0: entered promiscuous mode [ 33.067554][ T619] syzkaller0: entered allmulticast mode [ 33.126308][ T621] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 33.126332][ T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 33.134423][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:90 [ 33.144979][ T622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.178091][ T628] rust_binder: Error while translating object. [ 33.187345][ T628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.197671][ T628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:97 [ 33.304314][ T642] overlayfs: failed to clone upperpath [ 33.320570][ T642] netlink: 'syz.2.111': attribute type 15 has an invalid length. [ 33.330857][ T649] rust_binder: Error while translating object. [ 33.330902][ T649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.337709][ T649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:80 [ 33.449406][ T654] usb usb8: usbfs: process 654 (syz.3.115) did not claim interface 0 before use [ 33.533019][ T657] input: syz1 as /devices/virtual/input/input7 [ 33.539455][ T657] input: failed to attach handler leds to device input7, error: -6 [ 33.551829][ T657] rust_binder: Error while translating object. [ 33.551866][ T657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.558559][ T657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 33.633833][ T661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.118'. [ 33.888512][ T678] syz.2.124 uses obsolete (PF_INET,SOCK_PACKET) [ 34.213507][ T692] overlayfs: failed to clone upperpath [ 34.266854][ T694] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure [ 35.084575][ T776] bpf: Bad value for 'gid' [ 35.344161][ T778] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 35.352333][ T778] rust_binder: Write failure EINVAL in pid:100 [ 35.371775][ T778] rust_binder: Error in use_page_slow: ESRCH [ 35.371801][ T778] rust_binder: use_range failure ESRCH [ 35.379734][ T778] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 35.386654][ T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.396755][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 35.413565][ T784] binder: Bad value for 'stats' [ 35.438712][ T786] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 35.589637][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.626331][ T805] overlayfs: failed to clone upperpath [ 35.733496][ T821] overlayfs: failed to resolve './file0': -2 [ 35.774976][ T380] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 35.944548][ T380] usb 6-1: Using ep0 maxpacket: 16 [ 35.953866][ T380] usb 6-1: config 7 has an invalid interface number: 149 but max is 1 [ 35.962889][ T380] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 35.974837][ T380] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 35.984147][ T380] usb 6-1: config 7 has no interface number 0 [ 35.991198][ T380] usb 6-1: config 7 interface 149 altsetting 255 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 36.011396][ T380] usb 6-1: config 7 interface 149 altsetting 255 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 36.022947][ T380] usb 6-1: config 7 interface 149 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 36.037939][ T380] usb 6-1: config 7 interface 149 has no altsetting 0 [ 36.048985][ T380] usb 6-1: New USB device found, idVendor=0af0, idProduct=7251, bcdDevice= 2.a3 [ 36.059514][ T380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.068575][ T380] usb 6-1: Product: о [ 36.073364][ T380] usb 6-1: Manufacturer: à°¸ [ 36.078835][ T380] usb 6-1: SerialNumber: áˆï¦¯ç’žç£­ë°›æ¶¯ä„žé¶—ꞟ৊燉å¡é±á¹ê…‘ꚳ斈ç‘賙抂ꀮ파闇콃쩗窬ᴙ衚킱㡫覦ã妕값ã¯ï¨©ë« Ì‰ì„¬æµºå¬˜ê›Œ×“Ⰷ敕닸䔑蟕◂夬鉩꺤⮀煩攞έ蟂譡۹佢蘛篗棚 [ 36.503492][ T380] usb 6-1: USB disconnect, device number 4 [ 36.621201][ T847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.183'. [ 36.665756][ T856] capability: warning: `syz.0.187' uses 32-bit capabilities (legacy support in use) [ 37.098612][ T883] binder: Bad value for 'max' [ 37.116496][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 37.116513][ T36] audit: type=1400 audit(1750535897.093:258): avc: denied { read write } for pid=884 comm="syz.5.198" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.157996][ T36] audit: type=1400 audit(1750535897.093:259): avc: denied { open } for pid=884 comm="syz.5.198" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.183846][ T36] audit: type=1400 audit(1750535897.093:260): avc: denied { read } for pid=884 comm="syz.5.198" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.209623][ T36] audit: type=1400 audit(1750535897.093:261): avc: denied { open } for pid=884 comm="syz.5.198" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.236706][ T36] audit: type=1400 audit(1750535897.093:262): avc: denied { ioctl } for pid=884 comm="syz.5.198" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.263194][ T36] audit: type=1400 audit(1750535897.183:263): avc: denied { mounton } for pid=889 comm="syz.5.199" path="/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.285972][ T36] audit: type=1400 audit(1750535897.183:264): avc: denied { create } for pid=889 comm="syz.5.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.306926][ T36] audit: type=1400 audit(1750535897.183:265): avc: denied { sys_admin } for pid=889 comm="syz.5.199" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.317688][ T894] fuse: Bad value for 'group_id' [ 37.329384][ T36] audit: type=1400 audit(1750535897.213:266): avc: denied { unmount } for pid=889 comm="syz.5.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.329414][ T36] audit: type=1400 audit(1750535897.263:267): avc: denied { create } for pid=893 comm="syz.5.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.335005][ T894] fuse: Bad value for 'group_id' [ 37.634546][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.641460][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 37.712196][ T935] rust_binder: Failed copying remainder into alloc: EFAULT [ 37.712213][ T935] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 37.719893][ T935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.729885][ T935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:111 [ 37.833610][ T944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 38.205784][ T977] syz.2.231(977): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 38.227968][ T979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 38.227968][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 38.345914][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 38.431889][ T1026] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 38.542410][ T1049] overlayfs: failed to clone upperpath [ 38.849981][ T1064] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.850002][ T1064] rust_binder: Read failure Err(EFAULT) in pid:118 [ 39.026233][ T1071] overlayfs: failed to resolve './file1/file0': -2 [ 39.075537][ T1080] cgroup: subsys name conflicts with all [ 39.526672][ T381] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.698611][ T1121] overlayfs: failed to clone upperpath [ 40.115040][ T1194] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 40.201509][ T1203] fuse: Unknown parameter 'ÿÿ00000000000000000000010' [ 40.250508][ T1211] fuse: Bad value for 'group_id' [ 40.257887][ T1211] fuse: Bad value for 'group_id' [ 41.275112][ T1278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1278 comm=syz.5.342 [ 41.323102][ T1297] syz.2.348 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.342921][ T1304] tipc: Started in network mode [ 41.348333][ T1304] tipc: Node identity , cluster identity 4711 [ 41.355380][ T1304] tipc: Failed to set node id, please configure manually [ 41.363302][ T1304] tipc: Enabling of bearer rejected, failed to enable media [ 41.554499][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.554515][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 41.654789][ T1317] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 41.663937][ T1318] overlay: Unknown parameter 'mounts' [ 41.744947][ T1323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 41.795821][ T1327] overlayfs: failed to get inode (-116) [ 41.811439][ T1327] overlayfs: failed to get inode (-116) [ 41.917981][ T1338] netlink: 'syz.5.363': attribute type 3 has an invalid length. [ 42.246177][ T1356] rust_binder: Write failure EINVAL in pid:164 [ 42.268436][ T36] kauditd_printk_skb: 152 callbacks suppressed [ 42.268454][ T36] audit: type=1400 audit(1750535902.243:420): avc: denied { map } for pid=1362 comm="syz.3.371" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.362509][ T36] audit: type=1400 audit(1750535902.333:421): avc: denied { name_bind } for pid=1369 comm="syz.2.374" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 42.441532][ T1379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.442226][ T36] audit: type=1400 audit(1750535902.413:422): avc: denied { setopt } for pid=1378 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.538274][ T36] audit: type=1326 audit(1750535902.513:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.5.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f673ff8e929 code=0x0 [ 42.724591][ T380] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 42.875656][ T380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 42.885946][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.900536][ T380] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.911611][ T380] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.926358][ T380] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 42.935960][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.946395][ T380] usb 4-1: config 0 descriptor?? [ 42.952231][ T36] audit: type=1326 audit(1750535902.923:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 42.978772][ T36] audit: type=1326 audit(1750535902.923:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 43.004840][ T36] audit: type=1326 audit(1750535902.923:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 43.029710][ T36] audit: type=1326 audit(1750535902.923:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 43.380701][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.382371][ T1417] 9pnet_fd: Insufficient options for proto=fd [ 43.387997][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.404966][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.412156][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.419563][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.426844][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.434295][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.441504][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.449110][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.456191][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.464622][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.471799][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.479103][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.486043][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.493017][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.500045][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.507017][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.513974][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.521177][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.528110][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.535968][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.543544][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.550487][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.557508][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.564589][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.571541][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.578545][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.585691][ T1384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.586160][ T1384] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 43.592675][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.613422][ T36] audit: type=1400 audit(1750535903.573:428): avc: denied { create } for pid=1426 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 43.634019][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.640966][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.648063][ T36] audit: type=1400 audit(1750535903.573:429): avc: denied { connect } for pid=1426 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.667587][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.674835][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.681850][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.689402][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.696604][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.703590][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.710748][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.717843][ T380] apple 0003:05AC:0245.0001: unknown main item tag 0x0 [ 43.731407][ T380] apple 0003:05AC:0245.0001: hidraw0: USB HID v0.0b Device [HID 05ac:0245] on usb-dummy_hcd.3-1/input0 [ 43.755489][ T380] usb 4-1: USB disconnect, device number 4 [ 43.820988][ T1448] fido_id[1448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 44.122485][ T1470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.133492][ T1470] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 44.165436][ T1472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.175149][ T1472] incfs: Error accessing: ./file0. [ 44.187295][ T1472] incfs: mount failed -20 [ 44.193635][ T1472] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 44.193731][ T1472] rust_binder: Write failure EINVAL in pid:183 [ 44.291576][ T1495] overlayfs: failed to clone lowerpath [ 44.337277][ T1499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.337816][ T1499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.346402][ T1499] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.654532][ T380] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.815790][ T380] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 44.824321][ T380] usb 4-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 44.834589][ T380] usb 4-1: config 0 has no interface number 0 [ 44.842548][ T380] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 44.851690][ T380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.859746][ T380] usb 4-1: Product: syz [ 44.864002][ T380] usb 4-1: Manufacturer: syz [ 44.868626][ T380] usb 4-1: SerialNumber: syz [ 44.873743][ T380] usb 4-1: config 0 descriptor?? [ 45.131913][ T1515] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 45.408216][ T1564] proc: Unknown parameter 'tmpfs' [ 45.552420][ T1573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1573 comm=syz.0.446 [ 46.076018][ T1598] netlink: 'syz.2.455': attribute type 4 has an invalid length. [ 46.089801][ T1599] netlink: 'syz.2.455': attribute type 4 has an invalid length. [ 46.419028][ T1677] overlayfs: failed to clone upperpath [ 46.469326][ T1694] bpf: Bad value for 'uid' [ 47.064315][ T1728] overlayfs: failed to clone upperpath [ 47.340087][ T380] usb 4-1: Found UVC 0.00 device syz (056d:0000) [ 47.354822][ T380] usb 4-1: No valid video chain found. [ 47.366266][ T380] usb 4-1: USB disconnect, device number 5 [ 47.367320][ T1730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.382302][ T1730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.383188][ T1731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.384284][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 47.384300][ T36] audit: type=1400 audit(1750535907.353:488): avc: denied { read } for pid=1729 comm="syz.3.492" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.404066][ T1730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.496504][ T36] audit: type=1400 audit(1750535907.463:489): avc: denied { getopt } for pid=1752 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.558311][ T36] audit: type=1400 audit(1750535907.533:490): avc: denied { getopt } for pid=1765 comm="syz.2.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.603510][ T1773] netlink: 104 bytes leftover after parsing attributes in process `syz.0.510'. [ 47.627203][ T1777] netlink: 116 bytes leftover after parsing attributes in process `syz.2.511'. [ 47.804573][ T380] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 47.934574][ T380] usb 4-1: device descriptor read/64, error -71 [ 48.086926][ T36] audit: type=1400 audit(1750535908.063:491): avc: denied { ioctl } for pid=1806 comm="syz.5.521" path="socket:[10880]" dev="sockfs" ino=10880 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.154311][ T1820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.525'. [ 48.174532][ T380] usb 4-1: device descriptor read/64, error -71 [ 48.249071][ T1836] netlink: 312 bytes leftover after parsing attributes in process `syz.5.530'. [ 48.259130][ T36] audit: type=1400 audit(1750535908.233:492): avc: denied { setopt } for pid=1835 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.362190][ T1840] bridge0: port 3(bond_slave_1) entered blocking state [ 48.369129][ T1840] bridge0: port 3(bond_slave_1) entered disabled state [ 48.376207][ T1840] bond_slave_1: entered allmulticast mode [ 48.382354][ T1840] bond_slave_1: entered promiscuous mode [ 48.414541][ T380] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 48.425645][ T1842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.533'. [ 48.444138][ T1846] overlayfs: failed to clone upperpath [ 48.458554][ T1848] fuse: Bad value for 'user_id' [ 48.463631][ T1848] fuse: Bad value for 'user_id' [ 48.471158][ T36] audit: type=1326 audit(1750535908.443:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1847 comm="syz.5.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f673ff8e929 code=0x0 [ 48.554592][ T380] usb 4-1: device descriptor read/64, error -71 [ 48.702825][ T1851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3655 sclass=netlink_route_socket pid=1851 comm=syz.2.536 [ 48.772647][ T1864] netlink: 5 bytes leftover after parsing attributes in process `syz.2.541'. [ 48.794548][ T380] usb 4-1: device descriptor read/64, error -71 [ 48.895313][ T1867] tipc: Started in network mode [ 48.900460][ T1867] tipc: Node identity 7f000001, cluster identity 4711 [ 48.907870][ T380] usb usb4-port1: attempt power cycle [ 48.915019][ T1867] tipc: Enabling of bearer rejected, failed to enable media [ 49.244545][ T380] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 49.265710][ T380] usb 4-1: device descriptor read/8, error -71 [ 49.395975][ T380] usb 4-1: device descriptor read/8, error -71 [ 49.625903][ T36] audit: type=1326 audit(1750535909.603:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1865 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7fc00000 [ 49.651229][ T380] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 49.675716][ T380] usb 4-1: device descriptor read/8, error -71 [ 49.819571][ T380] usb 4-1: device descriptor read/8, error -71 [ 49.934807][ T380] usb usb4-port1: unable to enumerate USB device [ 49.945130][ T36] audit: type=1400 audit(1750535909.923:495): avc: denied { bind } for pid=1904 comm="syz.5.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.988326][ T36] audit: type=1400 audit(1750535909.963:496): avc: denied { create } for pid=1908 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 50.567544][ T1925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.580662][ T1929] fuse: Unknown parameter 'rootm00000' [ 50.630179][ T1936] netlink: 'syz.2.568': attribute type 12 has an invalid length. [ 50.782960][ T36] audit: type=1326 audit(1750535910.753:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1939 comm="syz.5.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ff8e929 code=0x7ffc0000 [ 50.860116][ T1952] overlayfs: failed to clone upperpath [ 50.944567][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.094594][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 51.101497][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 51.110079][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 51.120575][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.130895][ T45] usb 4-1: config 0 descriptor?? [ 51.201739][ T1970] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 51.540326][ T45] hid (null): bogus close delimiter [ 51.546571][ T45] hid (null): global environment stack underflow [ 51.553144][ T45] hid (null): unknown global tag 0xff [ 51.569828][ T45] hid (null): invalid report_size 41201 [ 51.576406][ T45] hid (null): unknown global tag 0xe [ 51.582509][ T45] hid (null): unknown global tag 0xe [ 51.588625][ T45] hid (null): bogus close delimiter [ 51.739815][ T1934] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 51.765963][ T2020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2020 comm=syz.2.599 [ 51.787022][ T2020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=2020 comm=syz.2.599 [ 51.800184][ T2020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=2020 comm=syz.2.599 [ 52.328726][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 52.385532][ T2078] overlayfs: failed to clone upperpath [ 52.412650][ T2088] tipc: Started in network mode [ 52.417611][ T2088] tipc: Node identity 06000000000000006068, cluster identity 4711 [ 52.428495][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 52.428510][ T36] audit: type=1400 audit(1750535912.403:517): avc: denied { create } for pid=2085 comm="syz.5.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.533676][ T36] audit: type=1400 audit(1750535912.503:518): avc: denied { map } for pid=2095 comm="syz.5.623" path="socket:[11533]" dev="sockfs" ino=11533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 52.534882][ T2096] overlayfs: failed to clone upperpath [ 53.013005][ T2109] bridge0: port 3(bond_slave_1) entered blocking state [ 53.020523][ T2109] bridge0: port 3(bond_slave_1) entered disabled state [ 53.028201][ T2109] bond_slave_1: entered allmulticast mode [ 53.034747][ T2109] bond_slave_1: entered promiscuous mode [ 53.096668][ T2111] cgroup: fork rejected by pids controller in /syz2 [ 53.153465][ T2157] overlayfs: failed to clone upperpath [ 53.181941][ T36] audit: type=1400 audit(1750535913.153:519): avc: denied { map } for pid=2164 comm="syz.2.637" path="socket:[11254]" dev="sockfs" ino=11254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.208368][ T36] audit: type=1400 audit(1750535913.153:520): avc: denied { name_bind } for pid=2167 comm="syz.2.638" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 53.239265][ T36] audit: type=1326 audit(1750535913.153:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2169 comm="syz.2.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x0 [ 53.571068][ T10] usb 4-1: USB disconnect, device number 10 [ 53.586331][ T36] audit: type=1400 audit(1750535913.563:522): avc: denied { shutdown } for pid=2171 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.586511][ T2172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.617234][ T2172] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 53.643583][ T2178] fuse: Unknown parameter '0x0000000000000003ÿÿ' [ 53.662946][ T2176] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 53.798494][ T2187] binder: Unknown parameter 'ÿÿÿÿ' [ 53.814250][ T36] audit: type=1400 audit(1750535913.783:523): avc: denied { setopt } for pid=2188 comm="syz.3.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.814250][ T2190] rust_binder: Write failure EFAULT in pid:225 [ 53.846319][ T2193] process 'syz.3.648' launched './file1' with NULL argv: empty string added [ 53.862991][ T36] audit: type=1400 audit(1750535913.833:524): avc: denied { execute_no_trans } for pid=2192 comm="syz.3.648" path="/72/file1" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.886675][ T2193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 53.888182][ T2193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:229 [ 53.907381][ T36] audit: type=1400 audit(1750535913.883:525): avc: denied { getopt } for pid=2194 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.053643][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.053672][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.144371][ T36] audit: type=1400 audit(1750535914.113:526): avc: denied { read } for pid=2210 comm="syz.3.654" laddr=172.20.20.10 lport=9 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.223587][ T2217] random: crng reseeded on system resumption [ 54.271744][ T2220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 54.604552][ T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 54.756116][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.768086][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.778618][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 54.787769][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.797388][ T10] usb 4-1: config 0 descriptor?? [ 55.167915][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.177158][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.186584][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.195980][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.206351][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.215668][ T10] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 55.226993][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.236644][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.246443][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.256205][ T2240] netlink: 268 bytes leftover after parsing attributes in process `syz.0.665'. [ 55.411344][ T2227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.644325][ T2275] bridge0: port 3(ip6gretap0) entered blocking state [ 56.657734][ T2275] bridge0: port 3(ip6gretap0) entered disabled state [ 56.664648][ T2275] ip6gretap0: entered allmulticast mode [ 56.670636][ T2275] ip6gretap0: entered promiscuous mode [ 56.676335][ T2275] bridge0: port 3(ip6gretap0) entered blocking state [ 56.683382][ T2275] bridge0: port 3(ip6gretap0) entered forwarding state [ 57.406550][ T10] usb 4-1: USB disconnect, device number 11 [ 57.455231][ T2310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.498009][ T2310] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 57.519016][ T2314] binder: Unknown parameter '' [ 57.561714][ T2316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.562092][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 57.562106][ T36] audit: type=1400 audit(1750535917.533:539): avc: denied { read write } for pid=2315 comm="syz.3.693" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.598578][ T36] audit: type=1400 audit(1750535917.573:540): avc: denied { open } for pid=2315 comm="syz.3.693" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.659635][ T36] audit: type=1400 audit(1750535917.633:541): avc: denied { ioctl } for pid=2315 comm="syz.3.693" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.770858][ T36] audit: type=1400 audit(1750535917.743:542): avc: denied { map } for pid=2321 comm="syz.3.696" path="socket:[12724]" dev="sockfs" ino=12724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.832216][ T2327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.884088][ T2328] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 58.550923][ T36] audit: type=1400 audit(1750535918.523:543): avc: denied { accept } for pid=2338 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.579923][ T36] audit: type=1400 audit(1750535918.523:544): avc: denied { read } for pid=2338 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.677862][ T2359] mmap: syz.0.718 (2359): VmData 29470720 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 58.841471][ T2388] overlayfs: failed to resolve './file2': -2 [ 58.924529][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 59.084530][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 59.091496][ T10] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 59.100248][ T10] usb 4-1: config 4 has no interface number 0 [ 59.106499][ T10] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 59.116668][ T10] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 59.126882][ T10] usb 4-1: config 4 interface 15 has no altsetting 0 [ 59.134861][ T10] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 59.143976][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.152019][ T10] usb 4-1: Product: syz [ 59.156288][ T10] usb 4-1: Manufacturer: syz [ 59.160890][ T10] usb 4-1: SerialNumber: syz [ 59.166728][ T2360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.173923][ T2360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.383832][ T2360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.392564][ T2360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.255951][ T2428] overlayfs: failed to clone upperpath [ 60.325457][ T36] audit: type=1400 audit(1750535920.303:545): avc: denied { setopt } for pid=2429 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.345329][ T2431] overlayfs: failed to resolve './file0': -2 [ 60.403642][ T36] audit: type=1400 audit(1750535920.373:546): avc: denied { create } for pid=2440 comm="syz.2.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.704920][ T2360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.714400][ T2360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.724470][ T2360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.735277][ T2360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.945985][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 60.966366][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 60.979076][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 60.992551][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 61.006910][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 61.017822][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 61.030031][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 61.041499][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.056713][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.078875][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.094765][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.105998][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 61.124531][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.129852][ T36] audit: type=1326 audit(1750535921.103:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ff8e929 code=0x7ffc0000 [ 61.136240][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 61.168234][ T36] audit: type=1326 audit(1750535921.133:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.5.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673ff8e929 code=0x7ffc0000 [ 61.200587][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 61.221816][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 61.233157][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 61.244692][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 61.256247][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 61.268850][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 61.290618][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.307773][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.327880][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.351743][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 61.374504][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.395614][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.418014][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 61.440353][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 61.463323][ T10] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 61.489231][ T10] ax88179_178a 4-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter, 12:19:72:99:e7:2f [ 61.520925][ T10] usb 4-1: USB disconnect, device number 12 [ 61.534880][ T10] ax88179_178a 4-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter [ 61.927733][ T2516] SELinux: policydb magic number 0xf97c0010 does not match expected magic number 0xf97cff8c [ 61.938173][ T2516] SELinux: failed to load policy [ 61.952395][ T2516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.983110][ T2531] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 62.009869][ T2537] input: syz0 as /devices/virtual/input/input10 [ 62.072573][ T2541] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 62.090568][ T2543] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 62.184981][ T2557] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 62.185004][ T2557] rust_binder: Error while translating object. [ 62.196210][ T2557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.202659][ T2557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 62.230466][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.265364][ T2571] rust_binder: Write failure EFAULT in pid:329 [ 62.338532][ T2573] can: request_module (can-proto-0) failed. [ 62.490815][ T2575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.491022][ T2575] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 62.516789][ T2594] netlink: 'syz.3.780': attribute type 11 has an invalid length. [ 62.533048][ T2594] __nla_validate_parse: 58 callbacks suppressed [ 62.533060][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 62.549923][ T2594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.550556][ T2594] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 62.565958][ T2596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 62.575451][ T2597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.595097][ T2597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.603750][ T2597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.612972][ T2597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.621337][ T2597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.631265][ T2597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.641340][ T2597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.650965][ T2597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.659812][ T2597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.669334][ T2597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.814504][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 62.984495][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 62.997112][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 63.006492][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.016474][ T10] usb 4-1: Product: syz [ 63.020758][ T10] usb 4-1: Manufacturer: syz [ 63.034519][ T10] usb 4-1: SerialNumber: syz [ 63.040489][ T10] usb 4-1: config 0 descriptor?? [ 63.047089][ T10] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 63.055566][ T10] usb 4-1: Detected FT232H [ 63.085462][ T2604] cgroup: fork rejected by pids controller in /syz5 [ 63.257402][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 63.266947][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 63.277203][ T10] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 63.295333][ T10] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.306094][ T10] usb 4-1: USB disconnect, device number 13 [ 63.315254][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.325936][ T10] ftdi_sio 4-1:0.0: device disconnected [ 63.536666][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 63.536727][ T36] audit: type=1400 audit(1750535923.513:584): avc: denied { write } for pid=2643 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.633997][ T2666] netlink: 220 bytes leftover after parsing attributes in process `syz.0.791'. [ 63.670595][ T2670] Zero length message leads to an empty skb [ 63.829843][ T2679] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.838690][ T2679] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.861348][ T2683] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 63.869813][ T2683] netlink: 'syz.3.799': attribute type 21 has an invalid length. [ 63.877949][ T2683] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.799'. [ 64.055611][ T2691] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 64.055685][ T2691] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.074765][ T2691] rust_binder: Read failure Err(EFAULT) in pid:360 [ 64.136139][ T2695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.267097][ T36] audit: type=1326 audit(1750535924.243:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 64.340222][ T36] audit: type=1326 audit(1750535924.243:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 64.394525][ T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 64.414640][ T36] audit: type=1326 audit(1750535924.243:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 64.486691][ T36] audit: type=1326 audit(1750535924.243:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 64.540819][ T36] audit: type=1326 audit(1750535924.243:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686b98e929 code=0x7ffc0000 [ 64.595188][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 64.621637][ T2735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2735 comm=syz.2.818 [ 64.645063][ T2735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2735 comm=syz.2.818 [ 64.696750][ T36] audit: type=1400 audit(1750535924.673:590): avc: denied { shutdown } for pid=2736 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.744498][ T10] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 64.904508][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 64.910324][ T10] usb usb4-port1: attempt power cycle [ 65.254538][ T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 65.284904][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 65.414503][ T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 65.444864][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 65.462770][ T10] usb usb4-port1: unable to enumerate USB device [ 66.049105][ T36] audit: type=1400 audit(1750535926.023:591): avc: denied { bind } for pid=2794 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.080120][ T36] audit: type=1400 audit(1750535926.023:592): avc: denied { relabelfrom } for pid=2794 comm="syz.0.839" name="" dev="pipefs" ino=14555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 66.114058][ T36] audit: type=1401 audit(1750535926.023:593): op=setxattr invalid_context="/dev/kvm" [ 66.933984][ T2819] overlayfs: failed to clone upperpath [ 67.203538][ T2829] kvm: kvm [2828]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 67.213916][ T2830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.266902][ T2617] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 67.414180][ T2617] CPU: 1 UID: 0 PID: 2617 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 67.414219][ T2617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.414235][ T2617] Call Trace: [ 67.414243][ T2617] [ 67.414252][ T2617] __dump_stack+0x21/0x30 [ 67.414279][ T2617] dump_stack_lvl+0x10c/0x190 [ 67.414298][ T2617] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.414317][ T2617] ? ___ratelimit+0x3f7/0x5a0 [ 67.414342][ T2617] dump_stack+0x19/0x20 [ 67.414360][ T2617] dump_header+0xd7/0x490 [ 67.414381][ T2617] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 67.414396][ T2617] oom_kill_process+0x4c0/0x7e0 [ 67.414416][ T2617] ? sched_clock_cpu+0x75/0x400 [ 67.414432][ T2617] out_of_memory+0x7ee/0xbd0 [ 67.414454][ T2617] ? __cfi_out_of_memory+0x10/0x10 [ 67.414471][ T2617] ? mutex_lock_killable+0x92/0x1c0 [ 67.414486][ T2617] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.414500][ T2617] mem_cgroup_out_of_memory+0x279/0x350 [ 67.414518][ T2617] ? drain_obj_stock+0xed0/0xed0 [ 67.414534][ T2617] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 67.414551][ T2617] try_charge_memcg+0x8f7/0xde0 [ 67.414565][ T2617] ? set_pte_range+0x441/0x660 [ 67.414585][ T2617] ? __cfi_try_charge_memcg+0x10/0x10 [ 67.414602][ T2617] ? __alloc_pages_noprof+0x30d/0x6c0 [ 67.414619][ T2617] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.414636][ T2617] __mem_cgroup_charge+0xf6/0x410 [ 67.414651][ T2617] ? __cfi_folio_unlock+0x10/0x10 [ 67.414669][ T2617] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.414683][ T2617] shmem_alloc_and_add_folio+0x86d/0x1050 [ 67.414706][ T2617] ? put_swap_device+0x130/0x130 [ 67.414728][ T2617] ? shmem_huge_global_enabled+0x2da/0x360 [ 67.414750][ T2617] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 67.414771][ T2617] ? __kasan_check_write+0x18/0x20 [ 67.414789][ T2617] ? _raw_spin_lock+0x8c/0x120 [ 67.414809][ T2617] shmem_get_folio_gfp+0x5f0/0x1380 [ 67.414832][ T2617] ? shmem_get_folio+0xc0/0xc0 [ 67.414852][ T2617] ? follow_page_pte+0xa5c/0xb90 [ 67.414868][ T2617] ? inode_to_bdi+0x6d/0x100 [ 67.414921][ T2617] shmem_write_begin+0xf4/0x270 [ 67.414944][ T2617] generic_perform_write+0x32d/0x960 [ 67.414964][ T2617] ? __cfi_generic_perform_write+0x10/0x10 [ 67.414982][ T2617] ? down_write+0xe9/0x2a0 [ 67.415000][ T2617] ? file_update_time+0xa3/0x220 [ 67.415018][ T2617] shmem_file_write_iter+0x105/0x130 [ 67.415034][ T2617] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 67.415051][ T2617] __kernel_write_iter+0x392/0x830 [ 67.415071][ T2617] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 67.415089][ T2617] ? __cfi___kernel_write_iter+0x10/0x10 [ 67.415108][ T2617] ? get_dump_page+0x160/0x220 [ 67.415131][ T2617] ? __asan_memset+0x39/0x50 [ 67.415160][ T2617] ? iov_iter_bvec+0xc0/0x180 [ 67.415182][ T2617] dump_user_range+0xb06/0xdf0 [ 67.415202][ T2617] ? __cfi_dump_emit+0x10/0x10 [ 67.415220][ T2617] ? __cfi_dump_user_range+0x10/0x10 [ 67.415239][ T2617] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 67.415260][ T2617] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 67.415281][ T2617] elf_core_dump+0x2cd9/0x3810 [ 67.415307][ T2617] ? __cfi_elf_core_dump+0x10/0x10 [ 67.415333][ T2617] ? dump_interrupted+0xf0/0xf0 [ 67.415350][ T2617] ? filp_open+0x182/0x1d0 [ 67.415366][ T2617] ? 0xffffffffff600000 [ 67.415387][ T2617] do_coredump+0x1bf7/0x2bd0 [ 67.415407][ T2617] ? __cfi_do_coredump+0x10/0x10 [ 67.415424][ T2617] ? asm_exc_page_fault+0x2b/0x30 [ 67.415452][ T2617] ? __kasan_slab_free+0x6a/0x80 [ 67.415474][ T2617] ? kmem_cache_free+0x1c1/0x4c0 [ 67.415494][ T2617] get_signal+0x11fd/0x14f0 [ 67.415516][ T2617] arch_do_signal_or_restart+0x96/0x720 [ 67.415543][ T2617] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 67.415567][ T2617] irqentry_exit_to_user_mode+0x4e/0xb0 [ 67.415587][ T2617] irqentry_exit+0x16/0x60 [ 67.415604][ T2617] exc_page_fault+0x66/0xc0 [ 67.415621][ T2617] asm_exc_page_fault+0x2b/0x30 [ 67.415639][ T2617] RIP: 0033:0x7f673ff8e931 [ 67.415653][ T2617] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 67.415666][ T2617] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 67.415681][ T2617] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 67.415692][ T2617] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 67.415702][ T2617] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 67.415711][ T2617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 67.415721][ T2617] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 67.415733][ T2617] [ 67.895091][ T2617] memory: usage 307200kB, limit 307200kB, failcnt 28594 [ 67.902281][ T2617] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 67.910440][ T2617] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 67.917535][ T2617] Memory cgroup stats for /syz5: [ 67.917772][ T2617] cache 312356864 [ 67.927840][ T2617] rss 118784 [ 67.931187][ T2617] rss_huge 0 [ 67.934654][ T2617] shmem 312324096 [ 67.939173][ T2617] mapped_file 0 [ 67.943004][ T2617] dirty 0 [ 67.946587][ T2617] writeback 0 [ 67.950669][ T2855] binder: Bad value for 'stats' [ 67.956765][ T2617] workingset_refault_anon 16 [ 67.963096][ T2617] workingset_refault_file 8060 [ 67.974896][ T2617] swap 127995904 [ 67.978483][ T2617] swapcached 0 [ 67.981859][ T2617] pgpgin 214244 [ 67.988014][ T2617] pgpgout 137955 [ 67.992073][ T2617] pgfault 59971 [ 67.995758][ T2617] pgmajfault 241 [ 67.999510][ T2617] inactive_anon 286928896 [ 68.008094][ T2617] active_anon 27611136 [ 68.012999][ T2617] inactive_file 0 [ 68.019948][ T2617] active_file 32768 [ 68.031248][ T2617] unevictable 0 [ 68.038598][ T2617] hierarchical_memory_limit 314572800 [ 68.046051][ T2617] hierarchical_memsw_limit 9223372036854771712 [ 68.053492][ T2617] total_cache 312356864 [ 68.059428][ T2617] total_rss 118784 [ 68.063453][ T2617] total_rss_huge 0 [ 68.065475][ T2877] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 68.067522][ T2617] total_shmem 312324096 [ 68.085711][ T2617] total_mapped_file 0 [ 68.086928][ T2877] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 68.089906][ T2617] total_dirty 0 [ 68.089918][ T2617] total_writeback 0 [ 68.089924][ T2617] total_workingset_refault_anon 16 [ 68.089929][ T2617] total_workingset_refault_file 8060 [ 68.089935][ T2617] total_swap 127995904 [ 68.089941][ T2617] total_swapcached 0 [ 68.125485][ T2617] total_pgpgin 214244 [ 68.129480][ T2617] total_pgpgout 137955 [ 68.133553][ T2617] total_pgfault 59971 [ 68.137728][ T2617] total_pgmajfault 241 [ 68.142088][ T2617] total_inactive_anon 286928896 [ 68.147023][ T2617] total_active_anon 27611136 [ 68.151717][ T2617] total_inactive_file 0 [ 68.156041][ T2617] total_active_file 32768 [ 68.160662][ T2617] total_unevictable 0 [ 68.161231][ T2893] fuse: Unknown parameter '00000000000000000003' [ 68.165175][ T2617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2625,uid=0 [ 68.174891][ T2893] netlink: 'syz.0.871': attribute type 12 has an invalid length. [ 68.187294][ T2617] Memory cgroup out of memory: Killed process 2625 (syz.5.783) total-vm:89960kB, anon-rss:1024kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 68.331336][ T2906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.331446][ T2906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 68.340142][ T2609] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 68.589798][ T2931] netlink: 'syz.0.884': attribute type 3 has an invalid length. [ 68.612337][ T2609] CPU: 1 UID: 0 PID: 2609 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 68.612373][ T2609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.612384][ T2609] Call Trace: [ 68.612390][ T2609] [ 68.612397][ T2609] __dump_stack+0x21/0x30 [ 68.612421][ T2609] dump_stack_lvl+0x10c/0x190 [ 68.612439][ T2609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.612458][ T2609] ? ___ratelimit+0x3f7/0x5a0 [ 68.612481][ T2609] dump_stack+0x19/0x20 [ 68.612498][ T2609] dump_header+0xd7/0x490 [ 68.612519][ T2609] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 68.612536][ T2609] oom_kill_process+0x4c0/0x7e0 [ 68.612566][ T2609] ? sched_clock_cpu+0x75/0x400 [ 68.612584][ T2609] out_of_memory+0x7ee/0xbd0 [ 68.612606][ T2609] ? __cfi_out_of_memory+0x10/0x10 [ 68.612627][ T2609] ? mutex_lock_killable+0x104/0x1c0 [ 68.612643][ T2609] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.612660][ T2609] mem_cgroup_out_of_memory+0x279/0x350 [ 68.612680][ T2609] ? drain_obj_stock+0xed0/0xed0 [ 68.612700][ T2609] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 68.612720][ T2609] try_charge_memcg+0x8f7/0xde0 [ 68.612737][ T2609] ? set_pte_range+0x441/0x660 [ 68.612758][ T2609] ? __cfi_try_charge_memcg+0x10/0x10 [ 68.612775][ T2609] ? __alloc_pages_noprof+0x30d/0x6c0 [ 68.612792][ T2609] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 68.612808][ T2609] __mem_cgroup_charge+0xf6/0x410 [ 68.612898][ T2609] ? __cfi_folio_unlock+0x10/0x10 [ 68.612951][ T2609] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 68.613000][ T2609] shmem_alloc_and_add_folio+0x86d/0x1050 [ 68.613026][ T2609] ? put_swap_device+0x130/0x130 [ 68.613048][ T2609] ? shmem_huge_global_enabled+0x2da/0x360 [ 68.613070][ T2609] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 68.613091][ T2609] ? __kasan_check_write+0x18/0x20 [ 68.613110][ T2609] ? _raw_spin_lock+0x8c/0x120 [ 68.613132][ T2609] shmem_get_folio_gfp+0x5f0/0x1380 [ 68.613152][ T2609] ? shmem_get_folio+0xc0/0xc0 [ 68.613171][ T2609] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 68.613190][ T2609] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 68.613209][ T2609] ? inode_to_bdi+0x6d/0x100 [ 68.613226][ T2609] shmem_write_begin+0xf4/0x270 [ 68.613246][ T2609] generic_perform_write+0x32d/0x960 [ 68.613265][ T2609] ? __cfi_generic_perform_write+0x10/0x10 [ 68.613283][ T2609] ? down_write+0xe9/0x2a0 [ 68.613300][ T2609] ? mnt_get_write_access_file+0x1af/0x3b0 [ 68.613327][ T2609] ? mnt_put_write_access_file+0xc2/0x100 [ 68.613343][ T2609] ? file_update_time+0x1ef/0x220 [ 68.613360][ T2609] shmem_file_write_iter+0x105/0x130 [ 68.613382][ T2609] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 68.613400][ T2609] __kernel_write_iter+0x392/0x830 [ 68.613419][ T2609] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 68.613433][ T2609] ? __cfi___kernel_write_iter+0x10/0x10 [ 68.613453][ T2609] ? get_dump_page+0x160/0x220 [ 68.613480][ T2609] ? __asan_memset+0x39/0x50 [ 68.613498][ T2609] ? iov_iter_bvec+0xc0/0x180 [ 68.613520][ T2609] dump_user_range+0xb06/0xdf0 [ 68.613542][ T2609] ? __cfi_dump_emit+0x10/0x10 [ 68.613561][ T2609] ? __cfi_dump_user_range+0x10/0x10 [ 68.613581][ T2609] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 68.613650][ T2609] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 68.613672][ T2609] elf_core_dump+0x2cd9/0x3810 [ 68.613696][ T2609] ? __cfi_elf_core_dump+0x10/0x10 [ 68.613721][ T2609] ? dump_interrupted+0xf0/0xf0 [ 68.613737][ T2609] ? filp_open+0x182/0x1d0 [ 68.613751][ T2609] ? 0xffffffffff600000 [ 68.613765][ T2609] do_coredump+0x1bf7/0x2bd0 [ 68.613786][ T2609] ? __cfi_do_coredump+0x10/0x10 [ 68.613803][ T2609] ? asm_exc_page_fault+0x2b/0x30 [ 68.613831][ T2609] ? __kasan_slab_free+0x6a/0x80 [ 68.613852][ T2609] ? kmem_cache_free+0x1c1/0x4c0 [ 68.613873][ T2609] get_signal+0x11fd/0x14f0 [ 68.613891][ T2609] arch_do_signal_or_restart+0x96/0x720 [ 68.613913][ T2609] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 68.613937][ T2609] irqentry_exit_to_user_mode+0x4e/0xb0 [ 68.613954][ T2609] irqentry_exit+0x16/0x60 [ 68.613971][ T2609] exc_page_fault+0x66/0xc0 [ 68.613988][ T2609] asm_exc_page_fault+0x2b/0x30 [ 68.614009][ T2609] RIP: 0033:0x7f673ff8e931 [ 68.614025][ T2609] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 68.614040][ T2609] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 68.614056][ T2609] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 68.614069][ T2609] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 68.614080][ T2609] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 68.614091][ T2609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 68.614102][ T2609] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 68.614116][ T2609] [ 69.109576][ T2609] memory: usage 307200kB, limit 307200kB, failcnt 29855 [ 69.117098][ T2609] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 69.125930][ T2609] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 69.133282][ T2609] Memory cgroup stats for /syz5: [ 69.133416][ T2609] cache 312299520 [ 69.142182][ T2609] rss 118784 [ 69.145563][ T2609] rss_huge 0 [ 69.148774][ T2609] shmem 306954240 [ 69.152785][ T2609] mapped_file 5222400 [ 69.157381][ T2609] dirty 0 [ 69.160410][ T2609] writeback 0 [ 69.163806][ T2609] workingset_refault_anon 16 [ 69.168879][ T2609] workingset_refault_file 11355 [ 69.173730][ T2609] swap 127975424 [ 69.177620][ T2609] swapcached 0 [ 69.181215][ T2609] pgpgin 220830 [ 69.184916][ T2609] pgpgout 144541 [ 69.188693][ T2609] pgfault 60300 [ 69.192184][ T2609] pgmajfault 259 [ 69.195976][ T2609] inactive_anon 24715264 [ 69.200285][ T2609] active_anon 283377664 [ 69.204612][ T2609] inactive_file 4227072 [ 69.208759][ T2609] active_file 139264 [ 69.212716][ T2609] unevictable 0 [ 69.216438][ T2609] hierarchical_memory_limit 314572800 [ 69.222159][ T2609] hierarchical_memsw_limit 9223372036854771712 [ 69.228569][ T2609] total_cache 312299520 [ 69.232905][ T2609] total_rss 118784 [ 69.236777][ T2609] total_rss_huge 0 [ 69.242942][ T2609] total_shmem 306954240 [ 69.292972][ T2609] total_mapped_file 5222400 [ 69.366880][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 69.366897][ T36] audit: type=1400 audit(1750535929.343:699): avc: denied { ioctl } for pid=2944 comm="syz.3.888" path="socket:[15541]" dev="sockfs" ino=15541 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.490556][ T2609] total_dirty 0 [ 69.589450][ T2609] total_writeback 0 [ 69.594504][ T2609] total_workingset_refault_anon 16 [ 69.599817][ T2609] total_workingset_refault_file 11355 [ 69.638237][ T2969] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 69.638276][ T2969] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.665007][ T2969] rust_binder: Read failure Err(EFAULT) in pid:412 [ 69.673283][ T2609] total_swap 127975424 [ 69.731597][ T2609] total_swapcached 0 [ 69.753904][ T2989] rust_binder: Write failure EFAULT in pid:417 [ 69.791115][ T2609] total_pgpgin 220830 [ 69.815945][ T2609] total_pgpgout 144541 [ 69.820154][ T2609] total_pgfault 60300 [ 69.846276][ T2609] total_pgmajfault 259 [ 69.860406][ T2609] total_inactive_anon 24715264 [ 69.875989][ T2609] total_active_anon 283377664 [ 69.880744][ T2609] total_inactive_file 4227072 [ 69.894656][ T2609] total_active_file 139264 [ 69.899406][ T2609] total_unevictable 0 [ 69.903578][ T2609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2622,uid=0 [ 69.919578][ T3000] tipc: Started in network mode [ 69.925417][ T3000] tipc: Node identity ee73e35531f8, cluster identity 4711 [ 69.932762][ T2609] Memory cgroup out of memory: Killed process 2622 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:21848kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:0 [ 69.955779][ T3000] tipc: Enabled bearer , priority 0 [ 69.965745][ T3001] tipc: Resetting bearer [ 69.988336][ T2606] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 69.996591][ T3001] tipc: Disabling bearer [ 70.081925][ T2606] CPU: 1 UID: 0 PID: 2606 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 70.081956][ T2606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.081966][ T2606] Call Trace: [ 70.081972][ T2606] [ 70.081978][ T2606] __dump_stack+0x21/0x30 [ 70.082002][ T2606] dump_stack_lvl+0x10c/0x190 [ 70.082022][ T2606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.082040][ T2606] ? ___ratelimit+0x3f7/0x5a0 [ 70.082061][ T2606] dump_stack+0x19/0x20 [ 70.082077][ T2606] dump_header+0xd7/0x490 [ 70.082099][ T2606] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 70.082116][ T2606] oom_kill_process+0x4c0/0x7e0 [ 70.082138][ T2606] ? sched_clock_cpu+0x75/0x400 [ 70.082157][ T2606] out_of_memory+0x7ee/0xbd0 [ 70.082184][ T2606] ? __cfi_out_of_memory+0x10/0x10 [ 70.082204][ T2606] ? mutex_lock_killable+0x104/0x1c0 [ 70.082221][ T2606] ? __cfi_mutex_lock_killable+0x10/0x10 [ 70.082239][ T2606] mem_cgroup_out_of_memory+0x279/0x350 [ 70.082259][ T2606] ? drain_obj_stock+0xed0/0xed0 [ 70.082280][ T2606] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 70.082299][ T2606] try_charge_memcg+0x8f7/0xde0 [ 70.082316][ T2606] ? set_pte_range+0x441/0x660 [ 70.082336][ T2606] ? __cfi_try_charge_memcg+0x10/0x10 [ 70.082353][ T2606] ? __alloc_pages_noprof+0x30d/0x6c0 [ 70.082369][ T2606] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 70.082386][ T2606] __mem_cgroup_charge+0xf6/0x410 [ 70.082412][ T2606] ? __cfi_folio_unlock+0x10/0x10 [ 70.082435][ T2606] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 70.082454][ T2606] shmem_alloc_and_add_folio+0x86d/0x1050 [ 70.082479][ T2606] ? put_swap_device+0x130/0x130 [ 70.082500][ T2606] ? shmem_huge_global_enabled+0x2da/0x360 [ 70.082521][ T2606] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 70.082542][ T2606] ? __kasan_check_write+0x18/0x20 [ 70.082559][ T2606] ? _raw_spin_lock+0x8c/0x120 [ 70.082574][ T2606] shmem_get_folio_gfp+0x5f0/0x1380 [ 70.082595][ T2606] ? shmem_get_folio+0xc0/0xc0 [ 70.082618][ T2606] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 70.082635][ T2606] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 70.082652][ T2606] ? inode_to_bdi+0x6d/0x100 [ 70.082669][ T2606] shmem_write_begin+0xf4/0x270 [ 70.082691][ T2606] generic_perform_write+0x32d/0x960 [ 70.082710][ T2606] ? __cfi_generic_perform_write+0x10/0x10 [ 70.082727][ T2606] ? down_write+0xe9/0x2a0 [ 70.082741][ T2606] ? mnt_get_write_access_file+0x1af/0x3b0 [ 70.082764][ T2606] ? mnt_put_write_access_file+0xc2/0x100 [ 70.082780][ T2606] ? file_update_time+0x1ef/0x220 [ 70.082797][ T2606] shmem_file_write_iter+0x105/0x130 [ 70.082813][ T2606] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 70.082830][ T2606] __kernel_write_iter+0x392/0x830 [ 70.082848][ T2606] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 70.082865][ T2606] ? __cfi___kernel_write_iter+0x10/0x10 [ 70.082882][ T2606] ? get_dump_page+0x160/0x220 [ 70.082905][ T2606] ? __asan_memset+0x39/0x50 [ 70.082923][ T2606] ? iov_iter_bvec+0xc0/0x180 [ 70.082943][ T2606] dump_user_range+0xb06/0xdf0 [ 70.082963][ T2606] ? __cfi_dump_emit+0x10/0x10 [ 70.082981][ T2606] ? __cfi_dump_user_range+0x10/0x10 [ 70.082999][ T2606] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 70.083019][ T2606] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 70.083039][ T2606] elf_core_dump+0x2cd9/0x3810 [ 70.083061][ T2606] ? __cfi_elf_core_dump+0x10/0x10 [ 70.083087][ T2606] ? dump_interrupted+0xf0/0xf0 [ 70.083104][ T2606] ? filp_open+0x182/0x1d0 [ 70.083119][ T2606] ? 0xffffffffff600000 [ 70.083133][ T2606] do_coredump+0x1bf7/0x2bd0 [ 70.083153][ T2606] ? __cfi_do_coredump+0x10/0x10 [ 70.083169][ T2606] ? asm_exc_page_fault+0x2b/0x30 [ 70.083194][ T2606] ? __kasan_slab_free+0x6a/0x80 [ 70.083214][ T2606] ? kmem_cache_free+0x1c1/0x4c0 [ 70.083234][ T2606] get_signal+0x11fd/0x14f0 [ 70.083253][ T2606] arch_do_signal_or_restart+0x96/0x720 [ 70.083275][ T2606] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 70.083296][ T2606] ? __kasan_check_write+0x18/0x20 [ 70.083310][ T2606] irqentry_exit_to_user_mode+0x4e/0xb0 [ 70.083329][ T2606] irqentry_exit+0x16/0x60 [ 70.083345][ T2606] exc_page_fault+0x66/0xc0 [ 70.083361][ T2606] asm_exc_page_fault+0x2b/0x30 [ 70.083381][ T2606] RIP: 0033:0x7f673ff8e931 [ 70.083395][ T2606] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 70.083417][ T2606] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 70.083434][ T2606] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 70.083447][ T2606] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 70.083458][ T2606] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 70.083470][ T2606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.083481][ T2606] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 70.083495][ T2606] [ 70.083503][ T2606] memory: usage 301488kB, limit 307200kB, failcnt 31731 [ 70.385957][ T2606] memory+swap: usage 421712kB, limit 9007199254740988kB, failcnt 0 [ 70.592177][ T2606] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 70.595602][ T3015] mmap: syz.2.903 (3015) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.599884][ T2606] Memory cgroup stats for /syz5: [ 70.612354][ T2606] cache 312340480 [ 70.621550][ T2606] rss 73728 [ 70.624805][ T2606] rss_huge 0 [ 70.624824][ T36] audit: type=1400 audit(1750535930.603:700): avc: denied { listen } for pid=3016 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.629415][ T36] audit: type=1400 audit(1750535930.603:701): avc: denied { accept } for pid=3016 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.675016][ T2606] shmem 312311808 [ 70.680571][ T2606] mapped_file 0 [ 70.684429][ T2606] dirty 0 [ 70.684510][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 70.687745][ T2606] writeback 0 [ 70.698403][ T2606] workingset_refault_anon 30 [ 70.703151][ T2606] workingset_refault_file 12338 [ 70.709538][ T2606] swap 127901696 [ 70.713419][ T2606] swapcached 94208 [ 70.718682][ T2606] pgpgin 231070 [ 70.723261][ T2606] pgpgout 154781 [ 70.727172][ T2606] pgfault 61023 [ 70.731034][ T2606] pgmajfault 310 [ 70.734887][ T2606] inactive_anon 265531392 [ 70.740772][ T2606] active_anon 49012736 [ 70.746638][ T2606] inactive_file 28672 [ 70.751067][ T2606] active_file 0 [ 70.755852][ T2606] unevictable 0 [ 70.759711][ T2606] hierarchical_memory_limit 314572800 [ 70.765680][ T2606] hierarchical_memsw_limit 9223372036854771712 [ 70.774172][ T2606] total_cache 312340480 [ 70.778847][ T2606] total_rss 73728 [ 70.782523][ T2606] total_rss_huge 0 [ 70.782699][ T3042] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 70.786485][ T2606] total_shmem 312311808 [ 70.786497][ T2606] total_mapped_file 0 [ 70.805153][ T2606] total_dirty 0 [ 70.808643][ T2606] total_writeback 0 [ 70.812655][ T2606] total_workingset_refault_anon 30 [ 70.817915][ T2606] total_workingset_refault_file 12338 [ 70.830838][ T2606] total_swap 127901696 [ 70.835318][ T2606] total_swapcached 94208 [ 70.839560][ T2606] total_pgpgin 231070 [ 70.843736][ T2606] total_pgpgout 154781 [ 70.848235][ T2606] total_pgfault 61023 [ 70.852310][ T2606] total_pgmajfault 310 [ 70.856625][ T2606] total_inactive_anon 265531392 [ 70.856856][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.866727][ T2606] total_active_anon 49012736 [ 70.874506][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.876049][ T2606] total_inactive_file 28672 [ 70.891047][ T3041] overlayfs: failed to clone upperpath [ 70.895698][ T2606] total_active_file 0 [ 70.900682][ T10] usb 4-1: Product: syz [ 70.902912][ T2606] total_unevictable 0 [ 70.910326][ T2606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2630,uid=0 [ 70.914641][ T10] usb 4-1: Manufacturer: syz [ 70.926954][ T2606] Memory cgroup out of memory: Killed process 2630 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:24780kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 70.940025][ T10] usb 4-1: SerialNumber: syz [ 71.031715][ T2618] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 71.090141][ T2618] CPU: 0 UID: 0 PID: 2618 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 71.090175][ T2618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.090186][ T2618] Call Trace: [ 71.090195][ T2618] [ 71.090203][ T2618] __dump_stack+0x21/0x30 [ 71.090228][ T2618] dump_stack_lvl+0x10c/0x190 [ 71.090245][ T2618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.090263][ T2618] ? ___ratelimit+0x3f7/0x5a0 [ 71.090288][ T2618] dump_stack+0x19/0x20 [ 71.090305][ T2618] dump_header+0xd7/0x490 [ 71.090327][ T2618] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 71.090345][ T2618] oom_kill_process+0x4c0/0x7e0 [ 71.090373][ T2618] ? sched_clock_cpu+0x75/0x400 [ 71.090400][ T2618] out_of_memory+0x7ee/0xbd0 [ 71.090423][ T2618] ? __cfi_out_of_memory+0x10/0x10 [ 71.090444][ T2618] ? mutex_lock_killable+0x104/0x1c0 [ 71.090462][ T2618] ? __cfi_mutex_lock_killable+0x10/0x10 [ 71.090480][ T2618] mem_cgroup_out_of_memory+0x279/0x350 [ 71.090501][ T2618] ? drain_obj_stock+0xed0/0xed0 [ 71.090522][ T2618] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 71.090542][ T2618] try_charge_memcg+0x8f7/0xde0 [ 71.090559][ T2618] ? set_pte_range+0x441/0x660 [ 71.090580][ T2618] ? __cfi_try_charge_memcg+0x10/0x10 [ 71.090597][ T2618] ? __alloc_pages_noprof+0x30d/0x6c0 [ 71.090614][ T2618] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 71.090631][ T2618] __mem_cgroup_charge+0xf6/0x410 [ 71.090650][ T2618] ? __cfi_folio_unlock+0x10/0x10 [ 71.090672][ T2618] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 71.090692][ T2618] shmem_alloc_and_add_folio+0x86d/0x1050 [ 71.090717][ T2618] ? put_swap_device+0x130/0x130 [ 71.090738][ T2618] ? shmem_huge_global_enabled+0x2da/0x360 [ 71.090760][ T2618] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 71.090781][ T2618] ? __kasan_check_write+0x18/0x20 [ 71.090799][ T2618] ? _raw_spin_lock+0x8c/0x120 [ 71.090819][ T2618] shmem_get_folio_gfp+0x5f0/0x1380 [ 71.090842][ T2618] ? shmem_get_folio+0xc0/0xc0 [ 71.090860][ T2618] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 71.090878][ T2618] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 71.090895][ T2618] ? inode_to_bdi+0x6d/0x100 [ 71.090912][ T2618] shmem_write_begin+0xf4/0x270 [ 71.090935][ T2618] generic_perform_write+0x32d/0x960 [ 71.090955][ T2618] ? __cfi_generic_perform_write+0x10/0x10 [ 71.090972][ T2618] ? down_write+0xe9/0x2a0 [ 71.090989][ T2618] ? mnt_get_write_access_file+0x1af/0x3b0 [ 71.091013][ T2618] ? mnt_put_write_access_file+0xc2/0x100 [ 71.091029][ T2618] ? file_update_time+0x1ef/0x220 [ 71.091045][ T2618] shmem_file_write_iter+0x105/0x130 [ 71.091062][ T2618] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 71.091079][ T2618] __kernel_write_iter+0x392/0x830 [ 71.091098][ T2618] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 71.091115][ T2618] ? __cfi___kernel_write_iter+0x10/0x10 [ 71.091134][ T2618] ? get_dump_page+0x160/0x220 [ 71.091157][ T2618] ? __asan_memset+0x39/0x50 [ 71.091175][ T2618] ? iov_iter_bvec+0xc0/0x180 [ 71.091195][ T2618] dump_user_range+0xb06/0xdf0 [ 71.091216][ T2618] ? __cfi_dump_emit+0x10/0x10 [ 71.091234][ T2618] ? __cfi_dump_user_range+0x10/0x10 [ 71.091253][ T2618] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 71.091273][ T2618] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 71.091294][ T2618] elf_core_dump+0x2cd9/0x3810 [ 71.091319][ T2618] ? __cfi_elf_core_dump+0x10/0x10 [ 71.091345][ T2618] ? dump_interrupted+0xf0/0xf0 [ 71.091363][ T2618] ? filp_open+0x182/0x1d0 [ 71.091384][ T2618] ? 0xffffffffff600000 [ 71.091398][ T2618] do_coredump+0x1bf7/0x2bd0 [ 71.091419][ T2618] ? __cfi_do_coredump+0x10/0x10 [ 71.091436][ T2618] ? asm_exc_page_fault+0x2b/0x30 [ 71.091463][ T2618] ? __kasan_slab_free+0x6a/0x80 [ 71.091484][ T2618] ? kmem_cache_free+0x1c1/0x4c0 [ 71.091503][ T2618] get_signal+0x11fd/0x14f0 [ 71.091524][ T2618] arch_do_signal_or_restart+0x96/0x720 [ 71.091546][ T2618] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 71.091569][ T2618] irqentry_exit_to_user_mode+0x4e/0xb0 [ 71.091588][ T2618] irqentry_exit+0x16/0x60 [ 71.091604][ T2618] exc_page_fault+0x66/0xc0 [ 71.091621][ T2618] asm_exc_page_fault+0x2b/0x30 [ 71.091726][ T2618] RIP: 0033:0x7f673ff8e931 [ 71.091743][ T2618] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 71.091756][ T2618] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 71.091772][ T2618] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 71.091784][ T2618] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 71.091807][ T2618] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 71.091819][ T2618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 71.091828][ T2618] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 71.091843][ T2618] [ 71.091870][ T2618] memory: usage 307200kB, limit 307200kB, failcnt 33297 [ 71.596161][ T2618] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 71.604476][ T2618] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 71.611879][ T2618] Memory cgroup stats for /syz5: [ 71.612009][ T2618] cache 312377344 [ 71.620883][ T2618] rss 73728 [ 71.624636][ T2618] rss_huge 0 [ 71.628042][ T2618] shmem 312373248 [ 71.631869][ T2618] mapped_file 0 [ 71.635658][ T2618] dirty 0 [ 71.638596][ T2618] writeback 0 [ 71.641864][ T2618] workingset_refault_anon 30 [ 71.646527][ T2618] workingset_refault_file 12428 [ 71.651469][ T2618] swap 127938560 [ 71.655046][ T2618] swapcached 57344 [ 71.658781][ T2618] pgpgin 235407 [ 71.662277][ T2618] pgpgout 159118 [ 71.665874][ T2618] pgfault 61314 [ 71.669696][ T2618] pgmajfault 320 [ 71.673433][ T2618] inactive_anon 249061376 [ 71.677807][ T2618] active_anon 65507328 [ 71.682009][ T2618] inactive_file 0 [ 71.686059][ T2618] active_file 4096 [ 71.689974][ T2618] unevictable 0 [ 71.693535][ T2618] hierarchical_memory_limit 314572800 [ 71.699588][ T2618] hierarchical_memsw_limit 9223372036854771712 [ 71.706459][ T2618] total_cache 312377344 [ 71.710924][ T2618] total_rss 73728 [ 71.714749][ T2618] total_rss_huge 0 [ 71.718719][ T2618] total_shmem 312373248 [ 71.723508][ T2618] total_mapped_file 0 [ 71.727761][ T2618] total_dirty 0 [ 71.731443][ T2618] total_writeback 0 [ 71.735299][ T2618] total_workingset_refault_anon 30 [ 71.740966][ T2618] total_workingset_refault_file 12428 [ 71.746759][ T2618] total_swap 127938560 [ 71.750939][ T2618] total_swapcached 57344 [ 71.755307][ T2618] total_pgpgin 235407 [ 71.759432][ T2618] total_pgpgout 159118 [ 71.763676][ T2618] total_pgfault 61314 [ 71.767922][ T2618] total_pgmajfault 320 [ 71.772094][ T2618] total_inactive_anon 249061376 [ 71.777077][ T2618] total_active_anon 65507328 [ 71.781828][ T2618] total_inactive_file 0 [ 71.786019][ T2618] total_active_file 4096 [ 71.790290][ T2618] total_unevictable 0 [ 71.793442][ T36] audit: type=1326 audit(1750535931.763:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 71.794285][ T2618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2627,uid=0 [ 71.829722][ T36] audit: type=1326 audit(1750535931.763:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 71.834436][ T2618] Memory cgroup out of memory: Killed process 2627 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:34536kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 71.860478][ T36] audit: type=1326 audit(1750535931.793:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 71.901523][ T36] audit: type=1326 audit(1750535931.793:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 71.926927][ T36] audit: type=1326 audit(1750535931.793:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 71.974494][ T36] audit: type=1326 audit(1750535931.793:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 72.007377][ T36] audit: type=1326 audit(1750535931.793:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3092 comm="syz.0.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36dbd8e929 code=0x7ffc0000 [ 72.048564][ T2607] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 72.140811][ T2607] CPU: 0 UID: 0 PID: 2607 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 72.140846][ T2607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.140857][ T2607] Call Trace: [ 72.140862][ T2607] [ 72.140873][ T2607] __dump_stack+0x21/0x30 [ 72.140898][ T2607] dump_stack_lvl+0x10c/0x190 [ 72.140916][ T2607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.140935][ T2607] ? ___ratelimit+0x3f7/0x5a0 [ 72.140959][ T2607] dump_stack+0x19/0x20 [ 72.140976][ T2607] dump_header+0xd7/0x490 [ 72.140998][ T2607] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 72.141015][ T2607] oom_kill_process+0x4c0/0x7e0 [ 72.141038][ T2607] ? sched_clock_cpu+0x75/0x400 [ 72.141080][ T2607] out_of_memory+0x7ee/0xbd0 [ 72.141102][ T2607] ? __cfi_out_of_memory+0x10/0x10 [ 72.141123][ T2607] ? mutex_lock_killable+0x104/0x1c0 [ 72.141140][ T2607] ? __cfi_mutex_lock_killable+0x10/0x10 [ 72.141158][ T2607] mem_cgroup_out_of_memory+0x279/0x350 [ 72.141179][ T2607] ? drain_obj_stock+0xed0/0xed0 [ 72.141199][ T2607] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 72.141219][ T2607] try_charge_memcg+0x8f7/0xde0 [ 72.141242][ T2607] ? __cfi_try_charge_memcg+0x10/0x10 [ 72.141259][ T2607] ? __alloc_pages_noprof+0x30d/0x6c0 [ 72.141277][ T2607] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 72.141293][ T2607] ? __folio_batch_add_and_move+0x2ab/0x370 [ 72.141317][ T2607] __mem_cgroup_charge+0xf6/0x410 [ 72.141336][ T2607] ? __kasan_check_write+0x18/0x20 [ 72.141354][ T2607] ? _raw_spin_lock+0x8c/0x120 [ 72.141373][ T2607] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 72.141393][ T2607] shmem_alloc_and_add_folio+0x86d/0x1050 [ 72.141418][ T2607] ? put_swap_device+0x130/0x130 [ 72.141439][ T2607] ? shmem_huge_global_enabled+0x2da/0x360 [ 72.141461][ T2607] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 72.141482][ T2607] ? __kasan_check_write+0x18/0x20 [ 72.141500][ T2607] ? _raw_spin_lock+0x8c/0x120 [ 72.141520][ T2607] shmem_get_folio_gfp+0x5f0/0x1380 [ 72.141543][ T2607] ? shmem_get_folio+0xc0/0xc0 [ 72.141562][ T2607] ? follow_page_pte+0xa5c/0xb90 [ 72.141576][ T2607] ? inode_to_bdi+0x6d/0x100 [ 72.141590][ T2607] shmem_write_begin+0xf4/0x270 [ 72.141607][ T2607] generic_perform_write+0x32d/0x960 [ 72.141623][ T2607] ? __cfi_generic_perform_write+0x10/0x10 [ 72.141636][ T2607] ? down_write+0xe9/0x2a0 [ 72.141649][ T2607] ? file_update_time+0xa3/0x220 [ 72.141662][ T2607] shmem_file_write_iter+0x105/0x130 [ 72.141675][ T2607] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 72.141687][ T2607] __kernel_write_iter+0x392/0x830 [ 72.141702][ T2607] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 72.141714][ T2607] ? __cfi___kernel_write_iter+0x10/0x10 [ 72.141729][ T2607] ? get_dump_page+0x160/0x220 [ 72.141747][ T2607] ? __asan_memset+0x39/0x50 [ 72.141760][ T2607] ? iov_iter_bvec+0xc0/0x180 [ 72.141777][ T2607] dump_user_range+0xb06/0xdf0 [ 72.141792][ T2607] ? __cfi_dump_emit+0x10/0x10 [ 72.141806][ T2607] ? __cfi_dump_user_range+0x10/0x10 [ 72.141821][ T2607] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 72.141837][ T2607] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 72.141853][ T2607] elf_core_dump+0x2cd9/0x3810 [ 72.141872][ T2607] ? __cfi_elf_core_dump+0x10/0x10 [ 72.141893][ T2607] ? dump_interrupted+0xf0/0xf0 [ 72.141906][ T2607] ? filp_open+0x182/0x1d0 [ 72.141918][ T2607] ? 0xffffffffff600000 [ 72.141928][ T2607] do_coredump+0x1bf7/0x2bd0 [ 72.141944][ T2607] ? __cfi_do_coredump+0x10/0x10 [ 72.141957][ T2607] ? asm_exc_page_fault+0x2b/0x30 [ 72.141979][ T2607] ? __kasan_slab_free+0x6a/0x80 [ 72.141996][ T2607] ? kmem_cache_free+0x1c1/0x4c0 [ 72.142012][ T2607] get_signal+0x11fd/0x14f0 [ 72.142027][ T2607] arch_do_signal_or_restart+0x96/0x720 [ 72.142044][ T2607] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 72.142063][ T2607] irqentry_exit_to_user_mode+0x4e/0xb0 [ 72.142077][ T2607] irqentry_exit+0x16/0x60 [ 72.142090][ T2607] exc_page_fault+0x66/0xc0 [ 72.142103][ T2607] asm_exc_page_fault+0x2b/0x30 [ 72.142119][ T2607] RIP: 0033:0x7f673ff8e931 [ 72.142130][ T2607] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 72.142141][ T2607] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 72.142154][ T2607] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 72.142164][ T2607] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 72.142173][ T2607] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 72.142182][ T2607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 72.142190][ T2607] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 72.142201][ T2607] [ 72.142221][ T2607] memory: usage 307140kB, limit 307200kB, failcnt 34832 [ 72.621184][ T10] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 72.624561][ T2607] memory+swap: usage 431992kB, limit 9007199254740988kB, failcnt 0 [ 72.628449][ T10] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 72.644689][ T10] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 72.648747][ T2607] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 72.667032][ T2607] Memory cgroup stats for /syz5: [ 72.667182][ T2607] cache 312225792 [ 72.681962][ T2607] rss 221184 [ 72.685427][ T2607] rss_huge 0 [ 72.688985][ T2607] shmem 312217600 [ 72.693103][ T2607] mapped_file 0 [ 72.696855][ T2607] dirty 0 [ 72.699929][ T2607] writeback 0 [ 72.703229][ T2607] workingset_refault_anon 30 [ 72.709031][ T2607] workingset_refault_file 12560 [ 72.714138][ T2607] swap 127938560 [ 72.718516][ T2607] swapcached 57344 [ 72.722250][ T2607] pgpgin 243922 [ 72.726094][ T2607] pgpgout 167633 [ 72.729648][ T2607] pgfault 62022 [ 72.733286][ T2607] pgmajfault 334 [ 72.737689][ T2607] inactive_anon 179703808 [ 72.742028][ T2607] active_anon 134860800 [ 72.746447][ T2607] inactive_file 8192 [ 72.750680][ T2607] active_file 0 [ 72.754233][ T2607] unevictable 0 [ 72.758361][ T2607] hierarchical_memory_limit 314572800 [ 72.763930][ T2607] hierarchical_memsw_limit 9223372036854771712 [ 72.770360][ T2607] total_cache 312225792 [ 72.774881][ T2607] total_rss 221184 [ 72.778610][ T2607] total_rss_huge 0 [ 72.782320][ T2607] total_shmem 312217600 [ 72.786951][ T2607] total_mapped_file 0 [ 72.790943][ T2607] total_dirty 0 [ 72.794399][ T2607] total_writeback 0 [ 72.798331][ T2607] total_workingset_refault_anon 30 [ 72.803439][ T2607] total_workingset_refault_file 12560 [ 72.808954][ T2607] total_swap 127938560 [ 72.813017][ T2607] total_swapcached 57344 [ 72.817321][ T2607] total_pgpgin 243922 [ 72.821375][ T2607] total_pgpgout 167633 [ 72.825577][ T2607] total_pgfault 62022 [ 72.829603][ T2607] total_pgmajfault 334 [ 72.833704][ T2607] total_inactive_anon 179703808 [ 72.838614][ T2607] total_active_anon 134860800 [ 72.843294][ T2607] total_inactive_file 8192 [ 72.847731][ T2607] total_active_file 0 [ 72.851819][ T2607] total_unevictable 0 [ 72.855835][ T2607] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2621,uid=0 [ 72.870596][ T2607] Memory cgroup out of memory: Killed process 2621 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:30968kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 72.923635][ T10] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 72.955339][ T10] usb 4-1: USB disconnect, device number 18 [ 72.961668][ T10] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 73.233496][ T2632] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 73.284911][ T3173] overlayfs: failed to clone upperpath [ 73.324676][ T2632] CPU: 1 UID: 0 PID: 2632 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 73.324708][ T2632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.324719][ T2632] Call Trace: [ 73.324725][ T2632] [ 73.324732][ T2632] __dump_stack+0x21/0x30 [ 73.324756][ T2632] dump_stack_lvl+0x10c/0x190 [ 73.324774][ T2632] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.324792][ T2632] ? ___ratelimit+0x3f7/0x5a0 [ 73.324816][ T2632] dump_stack+0x19/0x20 [ 73.324832][ T2632] dump_header+0xd7/0x490 [ 73.324853][ T2632] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 73.324869][ T2632] oom_kill_process+0x4c0/0x7e0 [ 73.324890][ T2632] ? sched_clock_cpu+0x75/0x400 [ 73.324909][ T2632] out_of_memory+0x7ee/0xbd0 [ 73.324931][ T2632] ? __cfi_out_of_memory+0x10/0x10 [ 73.324952][ T2632] ? mutex_lock_killable+0x92/0x1c0 [ 73.324968][ T2632] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.324985][ T2632] mem_cgroup_out_of_memory+0x279/0x350 [ 73.325004][ T2632] ? drain_obj_stock+0xed0/0xed0 [ 73.325024][ T2632] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 73.325044][ T2632] try_charge_memcg+0x8f7/0xde0 [ 73.325060][ T2632] ? __cfi_try_charge_memcg+0x10/0x10 [ 73.325077][ T2632] ? __alloc_pages_noprof+0x30d/0x6c0 [ 73.325094][ T2632] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.325108][ T2632] ? __folio_batch_add_and_move+0x2ab/0x370 [ 73.325141][ T2632] __mem_cgroup_charge+0xf6/0x410 [ 73.325159][ T2632] ? __kasan_check_write+0x18/0x20 [ 73.325178][ T2632] ? _raw_spin_lock+0x8c/0x120 [ 73.325196][ T2632] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 73.325215][ T2632] shmem_alloc_and_add_folio+0x86d/0x1050 [ 73.325235][ T2632] ? put_swap_device+0x130/0x130 [ 73.325252][ T2632] ? shmem_huge_global_enabled+0x2da/0x360 [ 73.325271][ T2632] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 73.325289][ T2632] ? __kasan_check_write+0x18/0x20 [ 73.325305][ T2632] ? _raw_spin_lock+0x8c/0x120 [ 73.325325][ T2632] shmem_get_folio_gfp+0x5f0/0x1380 [ 73.325348][ T2632] ? shmem_get_folio+0xc0/0xc0 [ 73.325366][ T2632] ? follow_page_pte+0xa5c/0xb90 [ 73.325383][ T2632] ? inode_to_bdi+0x6d/0x100 [ 73.325401][ T2632] shmem_write_begin+0xf4/0x270 [ 73.325423][ T2632] generic_perform_write+0x32d/0x960 [ 73.325443][ T2632] ? __cfi_generic_perform_write+0x10/0x10 [ 73.325461][ T2632] ? down_write+0xe9/0x2a0 [ 73.325479][ T2632] ? file_update_time+0xa3/0x220 [ 73.325496][ T2632] shmem_file_write_iter+0x105/0x130 [ 73.325512][ T2632] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 73.325528][ T2632] __kernel_write_iter+0x392/0x830 [ 73.325547][ T2632] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 73.325565][ T2632] ? __cfi___kernel_write_iter+0x10/0x10 [ 73.325583][ T2632] ? get_dump_page+0x160/0x220 [ 73.325607][ T2632] ? __asan_memset+0x39/0x50 [ 73.325625][ T2632] ? iov_iter_bvec+0xc0/0x180 [ 73.325647][ T2632] dump_user_range+0xb06/0xdf0 [ 73.325668][ T2632] ? __cfi_dump_emit+0x10/0x10 [ 73.325686][ T2632] ? __cfi_dump_user_range+0x10/0x10 [ 73.325705][ T2632] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 73.325726][ T2632] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 73.325747][ T2632] elf_core_dump+0x2cd9/0x3810 [ 73.325772][ T2632] ? __cfi_elf_core_dump+0x10/0x10 [ 73.325799][ T2632] ? dump_interrupted+0xf0/0xf0 [ 73.325816][ T2632] ? filp_open+0x182/0x1d0 [ 73.325832][ T2632] ? 0xffffffffff600000 [ 73.325846][ T2632] do_coredump+0x1bf7/0x2bd0 [ 73.325866][ T2632] ? __cfi_do_coredump+0x10/0x10 [ 73.325883][ T2632] ? asm_exc_page_fault+0x2b/0x30 [ 73.325912][ T2632] ? __kasan_slab_free+0x6a/0x80 [ 73.325934][ T2632] ? kmem_cache_free+0x1c1/0x4c0 [ 73.325953][ T2632] get_signal+0x11fd/0x14f0 [ 73.325973][ T2632] arch_do_signal_or_restart+0x96/0x720 [ 73.325995][ T2632] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.326019][ T2632] irqentry_exit_to_user_mode+0x4e/0xb0 [ 73.326037][ T2632] irqentry_exit+0x16/0x60 [ 73.326053][ T2632] exc_page_fault+0x66/0xc0 [ 73.326070][ T2632] asm_exc_page_fault+0x2b/0x30 [ 73.326091][ T2632] RIP: 0033:0x7f673ff8e931 [ 73.326105][ T2632] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 73.326126][ T2632] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 73.326143][ T2632] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 73.326156][ T2632] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 73.326168][ T2632] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.326179][ T2632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 73.326190][ T2632] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 73.326205][ T2632] [ 73.333788][ T2632] memory: usage 300720kB, limit 307200kB, failcnt 37970 [ 73.708795][ T3207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 73.711864][ T2632] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 73.768864][ T3214] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.775584][ T2632] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 73.782368][ T3214] SELinux: failed to load policy [ 73.789686][ T2632] Memory cgroup stats for [ 73.814136][ T3214] syzkaller0: entered promiscuous mode [ 73.834499][ T2632] /syz5 [ 73.845958][ T3214] syzkaller0: entered allmulticast mode [ 73.846465][ T2632] : [ 73.867724][ T2632] cache 312033280 [ 73.873858][ T2632] rss 229376 [ 73.877396][ T2632] rss_huge 0 [ 73.877537][ T3214] rust_binder: Error while translating object. [ 73.880594][ T2632] shmem 312025088 [ 73.880605][ T2632] mapped_file 0 [ 73.880610][ T2632] dirty 0 [ 73.880615][ T2632] writeback 0 [ 73.880620][ T2632] workingset_refault_anon 32 [ 73.880625][ T2632] workingset_refault_file 12576 [ 73.880631][ T2632] swap 127934464 [ 73.880636][ T2632] swapcached 61440 [ 73.880642][ T2632] pgpgin 250919 [ 73.880647][ T2632] pgpgout 174675 [ 73.887696][ T3214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 73.890628][ T2632] pgfault 62185 [ 73.890642][ T2632] pgmajfault 337 [ 73.890647][ T2632] inactive_anon 137990144 [ 73.890652][ T2632] active_anon 176369664 [ 73.890657][ T2632] inactive_file 8192 [ 73.890663][ T2632] active_file 0 [ 73.890669][ T2632] unevictable 0 [ 73.894279][ T3214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:450 [ 73.897408][ T2632] hierarchical_memory_limit 314572800 [ 73.977582][ T2632] hierarchical_memsw_limit 9223372036854771712 [ 73.984928][ T2632] total_cache 312033280 [ 73.989370][ T2632] total_rss 229376 [ 73.993356][ T2632] total_rss_huge 0 [ 73.997351][ T2632] total_shmem 312025088 [ 74.001783][ T2632] total_mapped_file 0 [ 74.006162][ T2632] total_dirty 0 [ 74.009740][ T2632] total_writeback 0 [ 74.013572][ T2632] total_workingset_refault_anon 32 [ 74.018774][ T2632] total_workingset_refault_file 12576 [ 74.024197][ T2632] total_swap 127934464 [ 74.028249][ T2632] total_swapcached 61440 [ 74.032470][ T2632] total_pgpgin 250919 [ 74.036496][ T2632] total_pgpgout 174675 [ 74.040548][ T2632] total_pgfault 62185 [ 74.044505][ T2632] total_pgmajfault 337 [ 74.048613][ T2632] total_inactive_anon 137990144 [ 74.053481][ T2632] total_active_anon 176369664 [ 74.058175][ T2632] total_inactive_file 8192 [ 74.062620][ T2632] total_active_file 0 [ 74.066712][ T2632] total_unevictable 0 [ 74.070686][ T2632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2609,uid=0 [ 74.085445][ T2632] Memory cgroup out of memory: Killed process 2609 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:28604kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 74.124465][ T3231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 74.125773][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 74.208184][ T2632] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 74.242008][ T2632] CPU: 0 UID: 0 PID: 2632 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 74.242043][ T2632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.242054][ T2632] Call Trace: [ 74.242059][ T2632] [ 74.242066][ T2632] __dump_stack+0x21/0x30 [ 74.242090][ T2632] dump_stack_lvl+0x10c/0x190 [ 74.242108][ T2632] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.242127][ T2632] ? ___ratelimit+0x3f7/0x5a0 [ 74.242151][ T2632] dump_stack+0x19/0x20 [ 74.242168][ T2632] dump_header+0xd7/0x490 [ 74.242188][ T2632] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 74.242204][ T2632] oom_kill_process+0x4c0/0x7e0 [ 74.242226][ T2632] ? sched_clock_cpu+0x75/0x400 [ 74.242245][ T2632] out_of_memory+0x7ee/0xbd0 [ 74.242267][ T2632] ? __cfi_out_of_memory+0x10/0x10 [ 74.242296][ T2632] ? mutex_lock_killable+0x104/0x1c0 [ 74.242314][ T2632] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.242332][ T2632] mem_cgroup_out_of_memory+0x279/0x350 [ 74.242351][ T2632] ? drain_obj_stock+0xed0/0xed0 [ 74.242370][ T2632] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 74.242390][ T2632] try_charge_memcg+0x8f7/0xde0 [ 74.242408][ T2632] ? __cfi_try_charge_memcg+0x10/0x10 [ 74.242425][ T2632] ? __alloc_pages_noprof+0x30d/0x6c0 [ 74.242442][ T2632] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.242458][ T2632] ? __folio_batch_add_and_move+0x2ab/0x370 [ 74.242496][ T2632] __mem_cgroup_charge+0xf6/0x410 [ 74.242514][ T2632] ? __kasan_check_write+0x18/0x20 [ 74.242533][ T2632] ? _raw_spin_lock+0x8c/0x120 [ 74.242553][ T2632] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 74.242573][ T2632] shmem_alloc_and_add_folio+0x86d/0x1050 [ 74.242598][ T2632] ? put_swap_device+0x130/0x130 [ 74.242619][ T2632] ? shmem_huge_global_enabled+0x2da/0x360 [ 74.242641][ T2632] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 74.242662][ T2632] ? __kasan_check_write+0x18/0x20 [ 74.242680][ T2632] ? _raw_spin_lock+0x8c/0x120 [ 74.242700][ T2632] shmem_get_folio_gfp+0x5f0/0x1380 [ 74.242722][ T2632] ? shmem_get_folio+0xc0/0xc0 [ 74.242742][ T2632] ? follow_page_pte+0xa5c/0xb90 [ 74.242758][ T2632] ? inode_to_bdi+0x6d/0x100 [ 74.242776][ T2632] shmem_write_begin+0xf4/0x270 [ 74.242799][ T2632] generic_perform_write+0x32d/0x960 [ 74.242819][ T2632] ? __cfi_generic_perform_write+0x10/0x10 [ 74.242836][ T2632] ? down_write+0xe9/0x2a0 [ 74.242854][ T2632] ? file_update_time+0xa3/0x220 [ 74.242871][ T2632] shmem_file_write_iter+0x105/0x130 [ 74.242886][ T2632] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.242902][ T2632] __kernel_write_iter+0x392/0x830 [ 74.242920][ T2632] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.242936][ T2632] ? __cfi___kernel_write_iter+0x10/0x10 [ 74.242955][ T2632] ? get_dump_page+0x160/0x220 [ 74.242979][ T2632] ? __asan_memset+0x39/0x50 [ 74.242996][ T2632] ? iov_iter_bvec+0xc0/0x180 [ 74.243017][ T2632] dump_user_range+0xb06/0xdf0 [ 74.243035][ T2632] ? __cfi_dump_emit+0x10/0x10 [ 74.243053][ T2632] ? __cfi_dump_user_range+0x10/0x10 [ 74.243071][ T2632] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 74.243091][ T2632] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 74.243109][ T2632] elf_core_dump+0x2cd9/0x3810 [ 74.243129][ T2632] ? __cfi_elf_core_dump+0x10/0x10 [ 74.243150][ T2632] ? dump_interrupted+0xf0/0xf0 [ 74.243165][ T2632] ? filp_open+0x182/0x1d0 [ 74.243178][ T2632] ? 0xffffffffff600000 [ 74.243189][ T2632] do_coredump+0x1bf7/0x2bd0 [ 74.243205][ T2632] ? __cfi_do_coredump+0x10/0x10 [ 74.243219][ T2632] ? asm_exc_page_fault+0x2b/0x30 [ 74.243245][ T2632] ? __kasan_slab_free+0x6a/0x80 [ 74.243265][ T2632] ? kmem_cache_free+0x1c1/0x4c0 [ 74.243294][ T2632] get_signal+0x11fd/0x14f0 [ 74.243314][ T2632] arch_do_signal_or_restart+0x96/0x720 [ 74.243336][ T2632] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.243358][ T2632] irqentry_exit_to_user_mode+0x4e/0xb0 [ 74.243377][ T2632] irqentry_exit+0x16/0x60 [ 74.243394][ T2632] exc_page_fault+0x66/0xc0 [ 74.243411][ T2632] asm_exc_page_fault+0x2b/0x30 [ 74.243432][ T2632] RIP: 0033:0x7f673ff8e931 [ 74.243446][ T2632] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 74.243461][ T2632] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 74.243478][ T2632] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 74.243491][ T2632] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 74.243503][ T2632] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.243514][ T2632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.243525][ T2632] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 74.243540][ T2632] [ 74.244906][ T2632] memory: usage 306704kB, limit 307200kB, failcnt 39740 [ 74.339794][ T3243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3243 comm=syz.2.973 [ 74.348750][ T2632] memory+swap: usage 412248kB, limit 9007199254740988kB, failcnt 0 [ 74.714261][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 74.714277][ T36] audit: type=1400 audit(1750535934.610:714): avc: granted { setsecparam } for pid=3245 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.720811][ T2632] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 74.723808][ T3246] binder: Unknown parameter 'sta' [ 74.730967][ T2632] Memory cgroup stats for /syz5: [ 74.789457][ T2632] cache 294084608 [ 74.798600][ T2632] rss 81920 [ 74.801848][ T2632] rss_huge 0 [ 74.805267][ T2632] shmem 294084608 [ 74.809758][ T2632] mapped_file 0 [ 74.813765][ T2632] dirty 0 [ 74.816828][ T2632] writeback 0 [ 74.820111][ T2632] workingset_refault_anon 33 [ 74.824792][ T2632] workingset_refault_file 12576 [ 74.829678][ T2632] swap 125841408 [ 74.833219][ T2632] swapcached 65536 [ 74.837189][ T2632] pgpgin 254917 [ 74.840661][ T2632] pgpgout 183089 [ 74.844207][ T2632] pgfault 62460 [ 74.847695][ T2632] pgmajfault 338 [ 74.851324][ T2632] inactive_anon 119238656 [ 74.855650][ T2632] active_anon 177061888 [ 74.859844][ T2632] inactive_file 0 [ 74.863562][ T2632] active_file 0 [ 74.867017][ T2632] unevictable 0 [ 74.870520][ T2632] hierarchical_memory_limit 314572800 [ 74.876114][ T2632] hierarchical_memsw_limit 9223372036854771712 [ 74.882396][ T2632] total_cache 294084608 [ 74.886554][ T2632] total_rss 81920 [ 74.890265][ T2632] total_rss_huge 0 [ 74.894081][ T2632] total_shmem 294084608 [ 74.898238][ T2632] total_mapped_file 0 [ 74.902379][ T2632] total_dirty 0 [ 74.906542][ T2632] total_writeback 0 [ 74.910369][ T2632] total_workingset_refault_anon 33 [ 74.915563][ T2632] total_workingset_refault_file 12576 [ 74.921137][ T2632] total_swap 125841408 [ 74.925435][ T2632] total_swapcached 65536 [ 74.930185][ T2632] total_pgpgin 254917 [ 74.935050][ T2632] total_pgpgout 183089 [ 74.939241][ T2632] total_pgfault 62460 [ 74.943345][ T2632] total_pgmajfault 338 [ 74.947771][ T2632] total_inactive_anon 119238656 [ 74.952814][ T2632] total_active_anon 177061888 [ 74.957686][ T2632] total_inactive_file 0 [ 74.962016][ T2632] total_active_file 0 [ 74.966590][ T2632] total_unevictable 0 [ 74.970792][ T2632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2618,uid=0 [ 74.986017][ T2632] Memory cgroup out of memory: Killed process 2618 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:32712kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 75.153636][ T2611] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 75.233159][ T2611] CPU: 1 UID: 0 PID: 2611 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 75.233194][ T2611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.233205][ T2611] Call Trace: [ 75.233240][ T2611] [ 75.233247][ T2611] __dump_stack+0x21/0x30 [ 75.233272][ T2611] dump_stack_lvl+0x10c/0x190 [ 75.233291][ T2611] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.233310][ T2611] ? ___ratelimit+0x3f7/0x5a0 [ 75.233343][ T2611] dump_stack+0x19/0x20 [ 75.233360][ T2611] dump_header+0xd7/0x490 [ 75.233382][ T2611] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 75.233399][ T2611] oom_kill_process+0x4c0/0x7e0 [ 75.233422][ T2611] ? sched_clock_cpu+0x75/0x400 [ 75.233441][ T2611] out_of_memory+0x7ee/0xbd0 [ 75.233463][ T2611] ? __cfi_out_of_memory+0x10/0x10 [ 75.233484][ T2611] ? mutex_lock_killable+0x104/0x1c0 [ 75.233501][ T2611] ? __cfi_mutex_lock_killable+0x10/0x10 [ 75.233519][ T2611] mem_cgroup_out_of_memory+0x279/0x350 [ 75.233540][ T2611] ? drain_obj_stock+0xed0/0xed0 [ 75.233560][ T2611] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 75.233580][ T2611] try_charge_memcg+0x8f7/0xde0 [ 75.233598][ T2611] ? __cfi_try_charge_memcg+0x10/0x10 [ 75.233615][ T2611] ? __alloc_pages_noprof+0x30d/0x6c0 [ 75.233633][ T2611] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.233649][ T2611] ? __folio_batch_add_and_move+0x2ab/0x370 [ 75.233673][ T2611] __mem_cgroup_charge+0xf6/0x410 [ 75.233691][ T2611] ? __kasan_check_write+0x18/0x20 [ 75.233709][ T2611] ? _raw_spin_lock+0x8c/0x120 [ 75.233729][ T2611] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 75.233748][ T2611] shmem_alloc_and_add_folio+0x86d/0x1050 [ 75.233772][ T2611] ? put_swap_device+0x130/0x130 [ 75.233794][ T2611] ? shmem_huge_global_enabled+0x2da/0x360 [ 75.233816][ T2611] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 75.233837][ T2611] ? __kasan_check_write+0x18/0x20 [ 75.233854][ T2611] ? _raw_spin_lock+0x8c/0x120 [ 75.233874][ T2611] shmem_get_folio_gfp+0x5f0/0x1380 [ 75.233897][ T2611] ? shmem_get_folio+0xc0/0xc0 [ 75.233916][ T2611] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 75.233934][ T2611] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 75.233951][ T2611] ? inode_to_bdi+0x6d/0x100 [ 75.233967][ T2611] shmem_write_begin+0xf4/0x270 [ 75.233990][ T2611] generic_perform_write+0x32d/0x960 [ 75.234008][ T2611] ? __cfi_generic_perform_write+0x10/0x10 [ 75.234026][ T2611] ? down_write+0xe9/0x2a0 [ 75.234044][ T2611] ? mnt_get_write_access_file+0x1af/0x3b0 [ 75.234068][ T2611] ? mnt_put_write_access_file+0xc2/0x100 [ 75.234084][ T2611] ? file_update_time+0x1ef/0x220 [ 75.234100][ T2611] shmem_file_write_iter+0x105/0x130 [ 75.234117][ T2611] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.234133][ T2611] __kernel_write_iter+0x392/0x830 [ 75.234152][ T2611] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.234169][ T2611] ? __cfi___kernel_write_iter+0x10/0x10 [ 75.234190][ T2611] ? get_dump_page+0x160/0x220 [ 75.234218][ T2611] ? __asan_memset+0x39/0x50 [ 75.234236][ T2611] ? iov_iter_bvec+0xc0/0x180 [ 75.234257][ T2611] dump_user_range+0xb06/0xdf0 [ 75.234278][ T2611] ? __cfi_dump_emit+0x10/0x10 [ 75.234296][ T2611] ? __cfi_dump_user_range+0x10/0x10 [ 75.234315][ T2611] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 75.234335][ T2611] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 75.234355][ T2611] elf_core_dump+0x2cd9/0x3810 [ 75.234380][ T2611] ? __cfi_elf_core_dump+0x10/0x10 [ 75.234406][ T2611] ? dump_interrupted+0xf0/0xf0 [ 75.234423][ T2611] ? filp_open+0x182/0x1d0 [ 75.234438][ T2611] ? 0xffffffffff600000 [ 75.234452][ T2611] do_coredump+0x1bf7/0x2bd0 [ 75.234473][ T2611] ? __cfi_do_coredump+0x10/0x10 [ 75.234490][ T2611] ? asm_exc_page_fault+0x2b/0x30 [ 75.234518][ T2611] ? __kasan_slab_free+0x6a/0x80 [ 75.234539][ T2611] ? kmem_cache_free+0x1c1/0x4c0 [ 75.234558][ T2611] get_signal+0x11fd/0x14f0 [ 75.234577][ T2611] arch_do_signal_or_restart+0x96/0x720 [ 75.234598][ T2611] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 75.234621][ T2611] irqentry_exit_to_user_mode+0x4e/0xb0 [ 75.234639][ T2611] irqentry_exit+0x16/0x60 [ 75.234656][ T2611] exc_page_fault+0x66/0xc0 [ 75.234672][ T2611] asm_exc_page_fault+0x2b/0x30 [ 75.234693][ T2611] RIP: 0033:0x7f673ff8e931 [ 75.234708][ T2611] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 75.234722][ T2611] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 75.234738][ T2611] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 75.234751][ T2611] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 75.234762][ T2611] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.234774][ T2611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.234784][ T2611] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 75.234799][ T2611] [ 75.295423][ T2611] memory: usage 302060kB, limit 307200kB, failcnt 41573 [ 75.756619][ T2611] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 75.764951][ T2611] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 75.772732][ T2611] Memory cgroup stats for /syz5: [ 75.772855][ T2611] cache 312295424 [ 75.782475][ T2611] rss 94208 [ 75.785705][ T2611] rss_huge 0 [ 75.788941][ T2611] shmem 312295424 [ 75.792682][ T2611] mapped_file 0 [ 75.796251][ T2611] dirty 0 [ 75.799271][ T2611] writeback 0 [ 75.802639][ T2611] workingset_refault_anon 37 [ 75.803034][ T36] audit: type=1400 audit(1750535935.630:715): avc: denied { read } for pid=3288 comm="syz.3.989" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.807399][ T2611] workingset_refault_file 12612 [ 75.807409][ T2611] swap 127918080 [ 75.807415][ T2611] swapcached 65536 [ 75.807420][ T2611] pgpgin 272699 [ 75.807425][ T2611] pgpgout 196422 [ 75.807430][ T2611] pgfault 63380 [ 75.807435][ T2611] pgmajfault 349 [ 75.807441][ T2611] inactive_anon 109297664 [ 75.832267][ T3290] rust_binder: Error while translating object. [ 75.836141][ T2611] active_anon 205201408 [ 75.839864][ T3290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 75.844187][ T2611] inactive_file 0 [ 75.847808][ T3290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:462 [ 75.851438][ T36] audit: type=1400 audit(1750535935.658:716): avc: denied { open } for pid=3288 comm="syz.3.989" path="/151/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.854815][ T2611] active_file 0 [ 75.858568][ T36] audit: type=1400 audit(1750535935.658:717): avc: denied { ioctl } for pid=3288 comm="syz.3.989" path="/151/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.863204][ T2611] unevictable 0 [ 75.870555][ T36] audit: type=1400 audit(1750535935.658:718): avc: denied { read write } for pid=3288 comm="syz.3.989" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.878281][ T2611] hierarchical_memory_limit 314572800 [ 75.884604][ T36] audit: type=1400 audit(1750535935.658:719): avc: denied { open } for pid=3288 comm="syz.3.989" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.888454][ T2611] hierarchical_memsw_limit 9223372036854771712 [ 76.013954][ T2611] total_cache 312295424 [ 76.018329][ T2611] total_rss 94208 [ 76.022050][ T2611] total_rss_huge 0 [ 76.026046][ T2611] total_shmem 312295424 [ 76.030400][ T2611] total_mapped_file 0 [ 76.034440][ T2611] total_dirty 0 [ 76.038084][ T2611] total_writeback 0 [ 76.042045][ T2611] total_workingset_refault_anon 37 [ 76.047758][ T2611] total_workingset_refault_file 12612 [ 76.053611][ T2611] total_swap 127918080 [ 76.058473][ T2611] total_swapcached 65536 [ 76.062829][ T2611] total_pgpgin 272699 [ 76.066979][ T2611] total_pgpgout 196422 [ 76.071301][ T2611] total_pgfault 63380 [ 76.076900][ T2611] total_pgmajfault 349 [ 76.081062][ T2611] total_inactive_anon 109297664 [ 76.085926][ T2611] total_active_anon 205201408 [ 76.091062][ T2611] total_inactive_file 0 [ 76.095577][ T2611] total_active_file 0 [ 76.099875][ T2611] total_unevictable 0 [ 76.104305][ T2611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2632,uid=0 [ 76.120148][ T2611] Memory cgroup out of memory: Killed process 2632 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:39732kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 76.269984][ T2617] syz.5.783 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 76.297031][ T2617] CPU: 1 UID: 0 PID: 2617 Comm: syz.5.783 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 76.297066][ T2617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.297084][ T2617] Call Trace: [ 76.297090][ T2617] [ 76.297098][ T2617] __dump_stack+0x21/0x30 [ 76.297130][ T2617] dump_stack_lvl+0x10c/0x190 [ 76.297149][ T2617] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.297167][ T2617] ? ___ratelimit+0x3f7/0x5a0 [ 76.297190][ T2617] dump_stack+0x19/0x20 [ 76.297207][ T2617] dump_header+0xd7/0x490 [ 76.297229][ T2617] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 76.297246][ T2617] oom_kill_process+0x4c0/0x7e0 [ 76.297268][ T2617] ? sched_clock_cpu+0x75/0x400 [ 76.297287][ T2617] out_of_memory+0x7ee/0xbd0 [ 76.297308][ T2617] ? __cfi_out_of_memory+0x10/0x10 [ 76.297330][ T2617] ? mutex_lock_killable+0x92/0x1c0 [ 76.297346][ T2617] ? __cfi_mutex_lock_killable+0x10/0x10 [ 76.297364][ T2617] mem_cgroup_out_of_memory+0x279/0x350 [ 76.297384][ T2617] ? drain_obj_stock+0xed0/0xed0 [ 76.297404][ T2617] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 76.297423][ T2617] try_charge_memcg+0x8f7/0xde0 [ 76.297440][ T2617] ? cgroup_rstat_updated+0x132/0x7f0 [ 76.297459][ T2617] ? __cfi_try_charge_memcg+0x10/0x10 [ 76.297475][ T2617] ? __alloc_pages_noprof+0x30d/0x6c0 [ 76.297491][ T2617] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 76.297511][ T2617] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.297528][ T2617] __mem_cgroup_charge+0xf6/0x410 [ 76.297546][ T2617] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 76.297563][ T2617] ? update_curr+0x60d/0xc60 [ 76.297584][ T2617] shmem_alloc_and_add_folio+0x86d/0x1050 [ 76.297609][ T2617] ? put_swap_device+0x130/0x130 [ 76.297631][ T2617] ? shmem_huge_global_enabled+0x2da/0x360 [ 76.297652][ T2617] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 76.297673][ T2617] ? __switch_to_asm+0x3d/0x70 [ 76.297693][ T2617] shmem_get_folio_gfp+0x5f0/0x1380 [ 76.297716][ T2617] ? shmem_get_folio+0xc0/0xc0 [ 76.297734][ T2617] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 76.297751][ T2617] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 76.297769][ T2617] ? inode_to_bdi+0x6d/0x100 [ 76.297786][ T2617] shmem_write_begin+0xf4/0x270 [ 76.297808][ T2617] generic_perform_write+0x32d/0x960 [ 76.297827][ T2617] ? __cfi_generic_perform_write+0x10/0x10 [ 76.297844][ T2617] ? down_write+0x159/0x2a0 [ 76.297860][ T2617] ? mnt_get_write_access_file+0x1af/0x3b0 [ 76.297883][ T2617] ? mnt_put_write_access_file+0xc2/0x100 [ 76.297899][ T2617] ? file_update_time+0x1ef/0x220 [ 76.297915][ T2617] shmem_file_write_iter+0x105/0x130 [ 76.297932][ T2617] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 76.297948][ T2617] __kernel_write_iter+0x392/0x830 [ 76.297966][ T2617] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 76.297982][ T2617] ? __cfi___kernel_write_iter+0x10/0x10 [ 76.298000][ T2617] ? get_dump_page+0x160/0x220 [ 76.298023][ T2617] ? __asan_memset+0x39/0x50 [ 76.298040][ T2617] ? iov_iter_bvec+0xc0/0x180 [ 76.298066][ T2617] dump_user_range+0xb06/0xdf0 [ 76.298086][ T2617] ? __cfi_dump_emit+0x10/0x10 [ 76.298103][ T2617] ? __cfi_dump_user_range+0x10/0x10 [ 76.298128][ T2617] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 76.298148][ T2617] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 76.298169][ T2617] elf_core_dump+0x2cd9/0x3810 [ 76.298194][ T2617] ? __cfi_elf_core_dump+0x10/0x10 [ 76.298219][ T2617] ? dump_interrupted+0xf0/0xf0 [ 76.298236][ T2617] ? filp_open+0x182/0x1d0 [ 76.298251][ T2617] ? 0xffffffffff600000 [ 76.298264][ T2617] do_coredump+0x1bf7/0x2bd0 [ 76.298284][ T2617] ? __cfi_do_coredump+0x10/0x10 [ 76.298301][ T2617] ? asm_exc_page_fault+0x2b/0x30 [ 76.298327][ T2617] ? __kasan_slab_free+0x6a/0x80 [ 76.298348][ T2617] ? kmem_cache_free+0x1c1/0x4c0 [ 76.298368][ T2617] get_signal+0x11fd/0x14f0 [ 76.298387][ T2617] arch_do_signal_or_restart+0x96/0x720 [ 76.298408][ T2617] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 76.298430][ T2617] irqentry_exit_to_user_mode+0x4e/0xb0 [ 76.298449][ T2617] irqentry_exit+0x16/0x60 [ 76.298465][ T2617] exc_page_fault+0x66/0xc0 [ 76.298481][ T2617] asm_exc_page_fault+0x2b/0x30 [ 76.298501][ T2617] RIP: 0033:0x7f673ff8e931 [ 76.298515][ T2617] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 76.298530][ T2617] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 76.298546][ T2617] RAX: 0000000000000000 RBX: 00007f67401b5fa0 RCX: 00007f673ff8e929 [ 76.298558][ T2617] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 76.298569][ T2617] RBP: 00007f6740010b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.298580][ T2617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.298591][ T2617] R13: 0000000000000000 R14: 00007f67401b5fa0 R15: 00007fff20632538 [ 76.298605][ T2617] [ 76.299847][ T2617] memory: usage 303284kB, limit 307200kB, failcnt 44322 [ 76.358514][ T3295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.360082][ T2617] memory+swap: usage 426644kB, limit 9007199254740988kB, failcnt 0 [ 76.369579][ T3295] overlayfs: missing 'lowerdir' [ 76.370952][ T2617] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.517400][ T3302] overlayfs: failed to clone upperpath [ 76.520098][ T2617] Memory cgroup stats for [ 76.571878][ T36] audit: type=1400 audit(1750535936.350:720): avc: denied { name_bind } for pid=3301 comm="syz.2.992" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 76.621911][ T2617] /syz5: [ 76.871204][ T2617] cache 311918592 [ 76.883465][ T2617] rss 184320 [ 76.886811][ T2617] rss_huge 0 [ 76.890417][ T2617] shmem 311918592 [ 76.894262][ T2617] mapped_file 0 [ 76.898089][ T288] cgroup: fork rejected by pids controller in /syz3 [ 76.899590][ T2617] dirty 0 [ 76.908582][ T2617] writeback 0 [ 76.912405][ T2617] workingset_refault_anon 38 [ 76.929870][ T2617] workingset_refault_file 12628 [ 76.944492][ T2617] swap 127848448 [ 76.948078][ T2617] swapcached 143360 [ 76.951870][ T2617] pgpgin 278270 [ 76.958059][ T2617] pgpgout 202044 [ 76.962117][ T2617] pgfault 63522 [ 76.966945][ T2617] pgmajfault 351 [ 76.970511][ T2617] inactive_anon 160083968 [ 76.975031][ T2617] active_anon 154226688 [ 76.979508][ T2617] inactive_file 0 [ 76.983238][ T2617] active_file 0 [ 76.986886][ T2617] unevictable 0 [ 76.990394][ T2617] hierarchical_memory_limit 314572800 [ 76.996017][ T2617] hierarchical_memsw_limit 9223372036854771712 [ 77.002421][ T2617] total_cache 311918592 [ 77.006645][ T2617] total_rss 184320 [ 77.010500][ T2617] total_rss_huge 0 [ 77.014205][ T2617] total_shmem 311918592 [ 77.018666][ T2617] total_mapped_file 0 [ 77.022749][ T2617] total_dirty 0 [ 77.026253][ T2617] total_writeback 0 [ 77.030396][ T2617] total_workingset_refault_anon 38 [ 77.035708][ T2617] total_workingset_refault_file 12628 [ 77.041441][ T2617] total_swap 127848448 [ 77.046105][ T2617] total_swapcached 143360 [ 77.050564][ T2617] total_pgpgin 278270 [ 77.054589][ T2617] total_pgpgout 202044 [ 77.058788][ T2617] total_pgfault 63522 [ 77.062839][ T2617] total_pgmajfault 351 [ 77.067066][ T2617] total_inactive_anon 160083968 [ 77.072467][ T2617] total_active_anon 154226688 [ 77.077582][ T2617] total_inactive_file 0 [ 77.081990][ T2617] total_active_file 0 [ 77.086182][ T2617] total_unevictable 0 [ 77.090354][ T2617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.783,pid=2619,uid=0 [ 77.106286][ T2617] Memory cgroup out of memory: Killed process 2619 (syz.5.783) total-vm:89960kB, anon-rss:948kB, file-rss:35280kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 77.134386][ T308] ================================================================== [ 77.142919][ T308] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 77.149728][ T308] Write of size 8 at addr 0000000000000098 by task kworker/1:2/308 [ 77.157730][ T308] [ 77.160066][ T308] CPU: 1 UID: 0 PID: 308 Comm: kworker/1:2 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 77.160087][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.160098][ T308] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 77.160135][ T308] Call Trace: [ 77.160142][ T308] [ 77.160148][ T308] __dump_stack+0x21/0x30 [ 77.160165][ T308] dump_stack_lvl+0x10c/0x190 [ 77.160179][ T308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.160193][ T308] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 77.160217][ T308] print_report+0x3d/0x70 [ 77.160228][ T308] kasan_report+0x163/0x1a0 [ 77.160245][ T308] ? down_write+0x83/0x2a0 [ 77.160259][ T308] ? down_write+0x83/0x2a0 [ 77.160272][ T308] kasan_check_range+0x299/0x2a0 [ 77.160288][ T308] __kasan_check_write+0x18/0x20 [ 77.160302][ T308] down_write+0x83/0x2a0 [ 77.160314][ T308] ? __cfi_down_write+0x10/0x10 [ 77.160327][ T308] ? _raw_spin_lock+0x8c/0x120 [ 77.160342][ T308] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.160356][ T308] ? mutex_unlock+0x8b/0x240 [ 77.160368][ T308] ? __cfi_mutex_unlock+0x10/0x10 [ 77.160379][ T308] rust_binderfs_remove_file+0x6c/0x110 [ 77.160393][ T308] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 77.160414][ T308] ? update_curr_dl_se+0x10c/0xb20 [ 77.160430][ T308] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 77.160443][ T308] ? update_curr+0x60d/0xc60 [ 77.160459][ T308] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 77.160479][ T308] ? update_load_avg+0x506/0x19a0 [ 77.160490][ T308] ? detach_entity_load_avg+0x7b0/0x7b0 [ 77.160507][ T308] ? dequeue_entity+0xa9c/0x1750 [ 77.160521][ T308] ? tg_unthrottle_up+0x980/0x980 [ 77.160534][ T308] ? stack_trace_save+0x9d/0xe0 [ 77.160562][ T308] ? kvm_sched_clock_read+0x15/0x30 [ 77.160576][ T308] ? kvm_sched_clock_read+0x15/0x30 [ 77.160588][ T308] ? sched_clock_noinstr+0xd/0x30 [ 77.160600][ T308] ? sched_clock+0x44/0x60 [ 77.160612][ T308] ? sched_clock_cpu+0x75/0x400 [ 77.160626][ T308] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 77.160639][ T308] ? sched_clock+0x44/0x60 [ 77.160651][ T308] ? xfd_validate_state+0x68/0x150 [ 77.160665][ T308] ? save_fpregs_to_fpstate+0x196/0x230 [ 77.160683][ T308] ? __kasan_check_write+0x18/0x20 [ 77.160696][ T308] ? __switch_to+0xc7b/0x1310 [ 77.160710][ T308] ? psi_group_change+0xb44/0x1130 [ 77.160724][ T308] ? __cfi___switch_to+0x10/0x10 [ 77.160738][ T308] ? _raw_spin_unlock+0x45/0x60 [ 77.160753][ T308] ? __switch_to_asm+0x3d/0x70 [ 77.160773][ T308] ? __schedule+0x1463/0x1f10 [ 77.160790][ T308] ? kick_pool+0xad/0x550 [ 77.160808][ T308] process_scheduled_works+0x7d2/0x1020 [ 77.160826][ T308] worker_thread+0xc58/0x1250 [ 77.160841][ T308] ? try_to_wake_up+0xdd2/0x1aa0 [ 77.160858][ T308] ? schedule+0xc6/0x240 [ 77.160874][ T308] kthread+0x2c7/0x370 [ 77.160891][ T308] ? __cfi_worker_thread+0x10/0x10 [ 77.160906][ T308] ? __cfi_kthread+0x10/0x10 [ 77.160922][ T308] ret_from_fork+0x64/0xa0 [ 77.160935][ T308] ? __cfi_kthread+0x10/0x10 [ 77.160951][ T308] ret_from_fork_asm+0x1a/0x30 [ 77.160968][ T308] [ 77.160973][ T308] ================================================================== [ 77.510588][ T308] Disabling lock debugging due to kernel taint [ 77.517309][ T308] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 77.525653][ T308] #PF: supervisor write access in kernel mode [ 77.532072][ T308] #PF: error_code(0x0002) - not-present page [ 77.538047][ T308] PGD 800000010b388067 P4D 800000010b388067 PUD 0 [ 77.544734][ T308] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 77.550936][ T308] CPU: 1 UID: 0 PID: 308 Comm: kworker/1:2 Tainted: G B 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 77.566435][ T308] Tainted: [B]=BAD_PAGE [ 77.570586][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.581116][ T308] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 77.598784][ T308] RIP: 0010:down_write+0x9a/0x2a0 [ 77.604018][ T308] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 77.624349][ T308] RSP: 0018:ffffc9000b76f500 EFLAGS: 00010256 [ 77.630534][ T308] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 77.638792][ T308] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b76f520 [ 77.647317][ T308] RBP: ffffc9000b76f598 R08: ffffc9000b76f527 R09: 1ffff920016edea4 [ 77.655651][ T308] R10: dffffc0000000000 R11: fffff520016edea5 R12: dffffc0000000000 [ 77.663903][ T308] R13: 1ffff920016edea0 R14: ffffc9000b76f520 R15: 0000000000000000 [ 77.672349][ T308] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 77.681469][ T308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.688414][ T308] CR2: 0000000000000098 CR3: 000000011fd02000 CR4: 00000000003526b0 [ 77.697098][ T308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.705341][ T308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.713762][ T308] Call Trace: [ 77.717060][ T308] [ 77.720003][ T308] ? __cfi_down_write+0x10/0x10 [ 77.725205][ T308] ? _raw_spin_lock+0x8c/0x120 [ 77.730173][ T308] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.735391][ T308] ? mutex_unlock+0x8b/0x240 [ 77.739979][ T308] ? __cfi_mutex_unlock+0x10/0x10 [ 77.745001][ T308] rust_binderfs_remove_file+0x6c/0x110 [ 77.750552][ T308] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 77.763666][ T308] ? update_curr_dl_se+0x10c/0xb20 [ 77.769166][ T308] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 77.775335][ T308] ? update_curr+0x60d/0xc60 [ 77.780111][ T308] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 77.780451][ T36] audit: type=1400 audit(1750535937.482:721): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 77.793317][ T308] ? update_load_avg+0x506/0x19a0 [ 77.793348][ T308] ? detach_entity_load_avg+0x7b0/0x7b0 [ 77.793368][ T308] ? dequeue_entity+0xa9c/0x1750 [ 77.793386][ T308] ? tg_unthrottle_up+0x980/0x980 [ 77.827259][ T36] audit: type=1400 audit(1750535937.482:722): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.831296][ T308] ? stack_trace_save+0x9d/0xe0 [ 77.831323][ T308] ? kvm_sched_clock_read+0x15/0x30 [ 77.831341][ T308] ? kvm_sched_clock_read+0x15/0x30 [ 77.866489][ T36] audit: type=1400 audit(1750535937.482:723): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.868252][ T308] ? sched_clock_noinstr+0xd/0x30 [ 77.868276][ T308] ? sched_clock+0x44/0x60 [ 77.904288][ T308] ? sched_clock_cpu+0x75/0x400 [ 77.909294][ T308] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 77.915683][ T308] ? sched_clock+0x44/0x60 [ 77.920381][ T308] ? xfd_validate_state+0x68/0x150 [ 77.926100][ T308] ? save_fpregs_to_fpstate+0x196/0x230 [ 77.931814][ T308] ? __kasan_check_write+0x18/0x20 [ 77.936921][ T308] ? __switch_to+0xc7b/0x1310 [ 77.941672][ T308] ? psi_group_change+0xb44/0x1130 [ 77.946966][ T308] ? __cfi___switch_to+0x10/0x10 [ 77.951909][ T308] ? _raw_spin_unlock+0x45/0x60 [ 77.956746][ T308] ? __switch_to_asm+0x3d/0x70 [ 77.961499][ T308] ? __schedule+0x1463/0x1f10 [ 77.966177][ T308] ? kick_pool+0xad/0x550 [ 77.970529][ T308] process_scheduled_works+0x7d2/0x1020 [ 77.976090][ T308] worker_thread+0xc58/0x1250 [ 77.980857][ T308] ? try_to_wake_up+0xdd2/0x1aa0 [ 77.985903][ T308] ? schedule+0xc6/0x240 [ 77.990223][ T308] kthread+0x2c7/0x370 [ 77.994464][ T308] ? __cfi_worker_thread+0x10/0x10 [ 77.999829][ T308] ? __cfi_kthread+0x10/0x10 [ 78.004588][ T308] ret_from_fork+0x64/0xa0 [ 78.009080][ T308] ? __cfi_kthread+0x10/0x10 [ 78.014122][ T308] ret_from_fork_asm+0x1a/0x30 [ 78.019314][ T308] [ 78.022405][ T308] Modules linked in: [ 78.026567][ T308] CR2: 0000000000000098 [ 78.030731][ T308] ---[ end trace 0000000000000000 ]--- [ 78.036462][ T308] RIP: 0010:down_write+0x9a/0x2a0 [ 78.042755][ T308] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 78.064115][ T308] RSP: 0018:ffffc9000b76f500 EFLAGS: 00010256 [ 78.070468][ T308] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 78.079083][ T308] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b76f520 [ 78.088107][ T308] RBP: ffffc9000b76f598 R08: ffffc9000b76f527 R09: 1ffff920016edea4 [ 78.096786][ T308] R10: dffffc0000000000 R11: fffff520016edea5 R12: dffffc0000000000 [ 78.104779][ T308] R13: 1ffff920016edea0 R14: ffffc9000b76f520 R15: 0000000000000000 [ 78.113102][ T308] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 78.122195][ T308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.129082][ T308] CR2: 0000000000000098 CR3: 000000011fd02000 CR4: 00000000003526b0 [ 78.137411][ T308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.145849][ T308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.154266][ T308] Kernel panic - not syncing: Fatal exception [ 78.161075][ T308] Kernel Offset: disabled [ 78.165430][ T308] Rebooting in 86400 seconds..