last executing test programs: 6.031200834s ago: executing program 3 (id=747): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x1, 0xffff1000, 0x1000, &(0x7f0000ffa000/0x1000)=nil}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 5.964699685s ago: executing program 3 (id=749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000a40)="48b808000000000000000f23c80f21f8350c0080000f23f848b800000000008000000f23c80f21f8350c00b0000f23f88fa970913b66b8a8000f00d065420f070f5c6fd1b805000000b9a72800000f01c1470f01c9d166be0f84383a159b", 0x5e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000100), &(0x7f0000000140), 0x1, 0x1) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/14], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "da485ff43e2ec0e8", "44fd4e05c2c7f513e348a05e98238ffa1bd21c0a71aa8668e385972f8f4937fa", "bdcacdd7", "c6b486ef68f49fde"}, 0x38) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@sg0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000a40)="48b808000000000000000f23c80f21f8350c0080000f23f848b800000000008000000f23c80f21f8350c00b0000f23f88fa970913b66b8a8000f00d065420f070f5c6fd1b805000000b9a72800000f01c1470f01c9d166be0f84383a159b", 0x5e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) (async) fsetxattr$security_evm(r4, &(0x7f0000000100), &(0x7f0000000140), 0x1, 0x1) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/14], 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "da485ff43e2ec0e8", "44fd4e05c2c7f513e348a05e98238ffa1bd21c0a71aa8668e385972f8f4937fa", "bdcacdd7", "c6b486ef68f49fde"}, 0x38) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000000c0)=@sg0, 0x0, 0x0) (async) 5.135146257s ago: executing program 1 (id=755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB='3\x00\x00\x00\x00\x00\x00 '], 0x8) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1e, @mcast2, 0xf}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) 5.077702648s ago: executing program 1 (id=756): r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x40) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x3e8ba02e2a2fbdf4, 0x6}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df7"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r11 = geteuid() quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, r11, &(0x7f0000000200)={0x3, 0x1, 0x9, 0x3, 0x310, 0x4, 0x2, 0xffff}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) 4.874630901s ago: executing program 1 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe(&(0x7f0000000400)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) read(r2, &(0x7f0000000080)=""/1, 0x1) fdatasync(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2004c404}, 0x20000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r0], 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4.384090407s ago: executing program 3 (id=764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2001404e8c4b94"], 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x400000200000000, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x3, 0x0, 0x3, 0x9, 0x100000000000, 0x7fffffff], 0x8080000}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r7 = socket(0x1e, 0x4, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x103002, 0x107) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002300), 0x808000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c752c000000000000000000000000000000009c63abe669543a13b63ed5841e07aab0f3522f6d91fd4be4f1114a971696650bef27a0a1c88e3b06a36271cd640d09187d984a524d87e8af257373375d70ca04c80c5ded5dacc34cfb6f13561480812b834499a1570be4614ee8a874f8ffae7134f3f461addbee0173a22e31133477016abad5138839c6dac48342260806f028d73281e7063ed0c9a7fe2383beff727270152807e51985c99d0d71c77566817200"/192]) (async, rerun: 32) sendmsg$tipc(r7, &(0x7f00000001c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3.070754986s ago: executing program 1 (id=767): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@nullb, r2, &(0x7f0000000080)={0x60000000, 0x6, 0x1, 0x1}) 3.068687356s ago: executing program 2 (id=768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) 3.068075766s ago: executing program 1 (id=769): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f00000001c0)={&(0x7f0000001080)="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", 0x134}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_usb_connect$cdc_ncm(0x3, 0xec, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x2, 0x1, 0x0, 0xd0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ae2a95"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x68, 0x9}, {0x6, 0x24, 0x1a, 0x31}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0x7, 0xd, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x751}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x2, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xb3}, @mdlm_detail={0x39, 0x24, 0x13, 0x7, "713a2f3bfecb19c65dcd9c6e7228f3ef3096edbbebf2450bb2bf9174c9f00a888f392c9bc7b7a30d0acca8be9a90affef983731e32"}, @mdlm={0x15, 0x24, 0x12, 0x11}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xe7, 0xff, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf8, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xe, 0x81, 0x0, 0x40, 0x1}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x2, 0x4, 0x4, 0xd0}]}, 0x6, [{0xda, &(0x7f0000000300)=@string={0xda, 0x3, "c241385df6df1189c1a86891d13ccaed76661ce55ef94061ca05e72ad5a32b92137254aac38ab27e5d4feb06ba21e5c8090c24498193d6c086b710fd5ce7ab0a520592e269d42800281ed5335ece2c17e9f9a9b574c04011bbba9a600f0b7a5eed19f28ab8abbf5d8784f0c75bb36d8c68f7f2430105a1226cabe3814d351c797ae4b779ab298d241b1ef6c736a4bf0e03443daae0663ed42c31d13f002639aaa499ce9371528feee805e97a10669e7602f9c004dd17f3e1eed80b3a98c4e887ec3bf19b49efe46716649e511f94351e39acd98a603f3b73"}}, {0x2d, &(0x7f0000000100)=@string={0x2d, 0x3, "f6479b88ceb4bade8fdf4bc6bb92e3bb79da81c16f218e7cf9fd4d3cc2eeb7c629a60ea0edd9e2204ce83a"}}, {0x97, &(0x7f0000000400)=@string={0x97, 0x3, "4e915be85972d00b20751359df80a6ae035f58fd3a939578eb610199c2ea27e87439507618cb3300bb4957cf459022cef31a374cf801749aaab9faf93d7f2da43865110c41eb671a7fa1ab1742601a806d746f21031cc7bcfb2f1589258f079bf592de01ca89d554df3931467589b03d805216a2a536dce665c973c303153ba6b928ab4c4356f1a8e727593de27cc364a417e702f2"}}, {0x9b, &(0x7f00000004c0)=@string={0x9b, 0x3, "311937e491d075ef2ab52d2808bf0c1a4792f50fb622cf012e2600f34478fc490e7a3fab28def904a0053d1c6b48679b8ba3c3e8dfce82580112be4d898b91b8efb5fa248ee4d2e503ede41291c03147fa9dcfad213289b995f63d5d6f59df96ce85e37e33cd22d7f89caab53c4437ac9b175a31e6945d15107ffda2a348e31dd74a9fd81bfadf35c3d5a6efab619ea7c43aba0b10b0d62315"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x83c}}]}) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz0\x00', {0x4, 0x8000, 0x6, 0xfffb}, 0x44, [0x7, 0x4, 0x126, 0x7, 0x0, 0x9, 0x5, 0x0, 0xfffff800, 0x8, 0x6, 0x6, 0x5, 0x2, 0x1d7b, 0x80, 0x5, 0xc, 0x3, 0x7, 0x0, 0x9, 0x4, 0x8, 0xff, 0x40, 0x4, 0x5, 0x5, 0x44, 0x1, 0x1, 0x10, 0x26, 0xb, 0x0, 0xffff, 0x1, 0x401, 0xece3, 0x75, 0xfffffff8, 0xffff, 0x4, 0x101, 0x1000, 0x2, 0x68, 0xbf, 0xa5f7, 0x90d2, 0x5, 0x1, 0xfffffffe, 0x2, 0x8, 0x1, 0x7, 0x3, 0xfff, 0x9, 0xffffffff, 0xb], [0xfffffffe, 0xb61, 0x1, 0x3a7b, 0x3, 0x80000000, 0x2, 0x1, 0x11b, 0x2, 0x0, 0xa5, 0xe, 0x6, 0x4, 0x5, 0x1, 0xf78e, 0x800, 0x3ff, 0x0, 0x0, 0x0, 0x3, 0x7f, 0xe2c, 0x4, 0x7, 0xad3c67d0, 0x1, 0x7, 0x4, 0x6, 0x6, 0xf3d, 0x3, 0x7, 0x7, 0x8, 0x3, 0x5, 0x7, 0x8c, 0xc608c03, 0x3, 0x0, 0x7, 0x2, 0xff, 0x4, 0x7, 0x7, 0x3, 0x200, 0x400006, 0x4, 0x21bd, 0x6, 0xa8a9, 0x0, 0xfff, 0x1, 0x1, 0x1], [0x10, 0x1, 0x7, 0x6, 0x8000, 0x0, 0x5, 0x6, 0x4, 0x7, 0xf, 0xe, 0x43, 0x10000, 0x9, 0x8, 0x455, 0xfff, 0xa, 0x9, 0x2, 0x8, 0x3, 0x2, 0x8, 0x4, 0x8, 0x7ff, 0x400, 0x9, 0xd, 0x0, 0x5, 0x401, 0x0, 0x10, 0x1, 0x475, 0x3, 0xfffffffd, 0x4, 0x800, 0x5, 0x5b, 0xfffffffd, 0x7fffffff, 0x5, 0x2ab5, 0x7, 0x9, 0x7, 0x3, 0xa, 0x0, 0x4, 0x8000, 0x4, 0x3, 0x2, 0x1c, 0x4, 0x9, 0x8, 0x7], [0x6, 0x0, 0xb, 0x1, 0x465, 0x80, 0x4, 0x6000000, 0x4300, 0x400, 0x8, 0x7, 0xffffff7f, 0x200, 0x1, 0x1, 0x8, 0x7, 0x26d, 0x81, 0x9, 0x800, 0xffff, 0x1, 0xff, 0x5, 0x14, 0x0, 0x8000, 0x3b8e4c61, 0x8000, 0x8, 0xfffffff8, 0x0, 0x7, 0x0, 0x6, 0x2, 0x0, 0x5, 0x5, 0x1, 0x4, 0xc58, 0x7f, 0x9, 0x6, 0xfffffffa, 0x800, 0x100, 0x401, 0x906, 0x5, 0x103, 0x7ff, 0xf7, 0x1, 0x1, 0x2, 0xc, 0x8, 0x8, 0x80, 0x3]}, 0x45c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2ba52ebd7000fddbdf251b000000060021"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202c0, 0x0) 2.960604298s ago: executing program 2 (id=770): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) clock_gettime(0x9e77661b8e7af6c7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) 2.856265609s ago: executing program 2 (id=771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.582954503s ago: executing program 2 (id=776): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x7}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 2.503147154s ago: executing program 3 (id=778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x10}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010300000a24"], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010300000a24"], 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2.182190029s ago: executing program 0 (id=783): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xc02c3, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'binder0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x69, 0x2, {0x4, 0x0, 0x7}}, 0x14) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)=0x0) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close_range(r2, r2, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x10, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}, {@max_read={'max_read', 0x3d, 0x5}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) setuid(r4) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r9, &(0x7f0000002780)='autogroup\x00') ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000027c0)={0x2, {0x2, 0x6, 0x2, 0x11, 0x2, 0xf}}) sendmsg$key(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002800)={0x2, 0x18, 0x4, 0x3, 0x18, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x2, 0x9, 0x8, 0x5, 0xd}, @sadb_lifetime={0x4, 0x2, 0x6, 0x9, 0x3, 0x6}, @sadb_lifetime={0x4, 0x4, 0x3, 0x6, 0x96c, 0xece8}, @sadb_x_sec_ctx={0x9, 0x18, 0x7, 0x65, 0x3c, "1543a13b606c7a69e08f612638e5269abf00b0f0f20df8fc04ada6d9a8fd1894e75669c6788e97215ffed3d4b846f3d0f7118d2363e075adc6c79ca2"}, @sadb_x_nat_t_type={0x1, 0x14, 0x99}]}, 0xc0}}, 0x851) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000002940)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000029c0)={'wg2\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000002b00)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a00)={0xac, 0x13, 0x100, 0x70bd2b, 0x25dfdbfb, {0xf72d0b9680ed5307, 0x5, 0x5, 0xa4, {0x4e24, 0x4e21, [0x0, 0x2, 0xba, 0x4], [0x5, 0x6, 0x7, 0x5], r11, [0xc, 0x8000]}, 0x2, 0xfffffffb}, [@INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "1f973d7d38916c749c13901949daf1817c023c745836ad60e3bff73742eff70441205817746689eac35bfe696a8f4cf803016929012fa00fac18e8d548ecc4b5ff4be2594cd13ce8a2ed8da513abf3bf57d9807076ea26a1f8f719"}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c010}, 0x1) write(r0, &(0x7f0000002b40)="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", 0x1000) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003b40), 0x2, 0x0) read$FUSE(r12, &(0x7f0000003b80)={0x2020}, 0x2020) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000005bc0)={@multicast1, @remote, @loopback}, 0xc) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) read$FUSE(r12, &(0x7f0000005c00)={0x2020}, 0x2020) 2.181500259s ago: executing program 0 (id=784): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300091000000000000000feffffff05000500000000000a004e22000000fffc000000000000000000000000000001f9060000635d91a405000600000000000a004e2200000081fc020000000400000000000000000001ff03000000000000020001000000000000000000000000000200130000"], 0x80}, 0x1, 0x7}, 0x10010000) 1.683620576s ago: executing program 0 (id=785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004840)={{0x0, 0x0, 0x6d, {0x5000, 0x5000, 0x2}}, "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", "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"}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0xfffffffd}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) select(0x40, &(0x7f0000000200)={0xcd0, 0x4, 0xffffffff80000000, 0x6, 0xb, 0x8, 0x6a18, 0x3}, &(0x7f0000000240)={0x1, 0x3, 0x100000000, 0x8000000000000000, 0xa, 0x37f, 0x4}, &(0x7f0000000280)={0xb1, 0xa, 0x8, 0x3, 0x4, 0x5, 0xfffffffffffffff9, 0x4}, &(0x7f00000002c0)) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x10, r4, 0x7dfff000) pselect6(0x40, &(0x7f0000000080)={0x9, 0x7fffffffffffffff, 0xb, 0x0, 0x8, 0x2, 0x5, 0xb}, &(0x7f00000000c0)={0x1, 0x9, 0x8, 0x8, 0x1, 0x541c, 0x4, 0x3}, &(0x7f0000000100)={0x5, 0x1, 0x3, 0x10f9b964, 0xf, 0x8, 0x7}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000000)={0x36, 0x6, 0x0, {0x2, 0x2, 0xd, 0x0, '/dev/rnullb0\x00'}}, 0x36) 1.561005337s ago: executing program 0 (id=786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x4, 0x4) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0xdf8, 0x16) (async, rerun: 64) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.498343629s ago: executing program 0 (id=787): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x20f3a, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000040)) tee(r2, r6, 0xf3a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@nfs_export_on}]}) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0xff) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 894.222537ms ago: executing program 2 (id=788): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$inet(0xa, 0x801, 0x6) listen(r3, 0x48) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, 0x0) bind$packet(r2, &(0x7f0000000240)={0x11, 0x4, r5, 0x1, 0x1, 0x6, @local}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/d\xc0\xa1\xe5\x86v,w$\xb1\xe7\xfa\x85 (\x87\x02\x14oev/udmabufE', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000000)={0x0, 0xc19, 0x0, 0x0, 0x8, "7f12ddc1517600"}) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb, "cb4672ac02132ca6"}) ioctl$TIOCGPTPEER(r7, 0x5441, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 708.07953ms ago: executing program 2 (id=789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000300)) 651.94522ms ago: executing program 3 (id=790): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x3, 0x7], 0x7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x3, 0x7], 0x7}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') (async) 649.54839ms ago: executing program 0 (id=791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e000000010902"], 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r3, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8001, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r6, &(0x7f0000000a40)='?', 0x1, 0x24048895, &(0x7f0000000240)={0xc9, 0x8100, r7, 0x1, 0x28, 0x6, @local}, 0x14) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 208.237396ms ago: executing program 3 (id=792): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r5]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r6]) mmap(&(0x7f00006f9000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r0, 0xe15f5000) 0s ago: executing program 1 (id=793): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300091000000000000000feffffff05000500000000000a004e22000000fffc000000000000000000000000000001f9060000635d91a405000600000000000a004e2200000081fc020000000b00000000000000000001ff03000000000000020001000000000000000000000000000200130000"], 0x80}, 0x1, 0x7}, 0x10010000) kernel console output (not intermixed with test programs): type 0x0c [ 57.454187][ T305] usb 2-1: USB disconnect, device number 14 [ 57.517196][ T1741] can0: slcan on ptm1. [ 57.527417][ T36] audit: type=1400 audit(1750740155.420:317): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.535160][ T1743] rust_binder: Write failure EFAULT in pid:399 [ 57.563054][ T36] audit: type=1400 audit(1750740155.420:318): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.608801][ T36] audit: type=1400 audit(1750740155.420:319): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.640410][ T36] audit: type=1400 audit(1750740155.420:320): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.668175][ T36] audit: type=1400 audit(1750740155.420:321): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2054 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.694730][ T36] audit: type=1400 audit(1750740155.500:322): avc: denied { read } for pid=1750 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.724202][ T36] audit: type=1400 audit(1750740155.500:323): avc: denied { open } for pid=1750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.749442][ T36] audit: type=1400 audit(1750740155.500:324): avc: denied { getattr } for pid=1750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.777511][ T1741] can0 (unregistered): slcan off ptm1. [ 57.797941][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.862158][ T1748] binder: Bad value for 'max' [ 58.070428][ T306] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 58.108134][ T1785] /dev/rnullb0: Can't lookup blockdev [ 58.210422][ T306] usb 2-1: device descriptor read/64, error -71 [ 58.460416][ T306] usb 2-1: device descriptor read/64, error -71 [ 58.525499][ T1800] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.536190][ T1800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.536220][ T1800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:407 [ 58.710496][ T306] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 58.800451][ T305] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 58.860567][ T306] usb 2-1: device descriptor read/64, error -71 [ 58.960477][ T305] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.004840][ T1805] /dev/rnullb0: Can't lookup blockdev [ 59.090421][ T305] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 59.110436][ T306] usb 2-1: device descriptor read/64, error -71 [ 59.220560][ T306] usb usb2-port1: attempt power cycle [ 59.240412][ T305] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.246066][ T305] usb usb4-port1: attempt power cycle [ 59.560443][ T306] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 59.581846][ T306] usb 2-1: device descriptor read/8, error -71 [ 59.590505][ T305] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 59.610808][ T305] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.711634][ T306] usb 2-1: device descriptor read/8, error -71 [ 59.740457][ T305] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 59.760977][ T305] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.767364][ T305] usb usb4-port1: unable to enumerate USB device [ 59.854255][ T1827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.456'. [ 59.864259][ T1827] overlayfs: failed to clone upperpath [ 59.950561][ T306] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 59.971638][ T306] usb 2-1: device descriptor read/8, error -71 [ 60.053434][ T1850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=1850 comm=syz.2.465 [ 60.110826][ T306] usb 2-1: device descriptor read/8, error -71 [ 60.220652][ T306] usb usb2-port1: unable to enumerate USB device [ 61.076782][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 61.076803][ T36] audit: type=1326 audit(1750740158.970:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.0.478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe96c18e929 code=0x0 [ 61.124496][ T36] audit: type=1400 audit(1750740159.020:335): avc: denied { name_bind } for pid=1889 comm="syz.2.479" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.230419][ T305] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 61.360430][ T305] usb 2-1: device descriptor read/64, error -71 [ 61.600416][ T305] usb 2-1: device descriptor read/64, error -71 [ 61.619963][ T1895] SELinux: security_context_str_to_sid () failed with errno=-22 [ 61.682122][ T1900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.682159][ T1900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:416 [ 61.805031][ T1903] overlay: filesystem on ./bus not supported as upperdir [ 61.840406][ T305] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 61.990563][ T305] usb 2-1: device descriptor read/64, error -71 [ 62.041822][ T36] audit: type=1400 audit(1750740159.940:336): avc: denied { create } for pid=1919 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.270541][ T305] usb 2-1: device descriptor read/64, error -71 [ 62.381415][ T305] usb usb2-port1: attempt power cycle [ 62.740516][ T305] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 62.772112][ T305] usb 2-1: device descriptor read/8, error -71 [ 62.877845][ T36] audit: type=1400 audit(1750740160.770:337): avc: denied { create } for pid=1942 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 62.901856][ T305] usb 2-1: device descriptor read/8, error -71 [ 62.936620][ T36] audit: type=1400 audit(1750740160.830:338): avc: denied { create } for pid=1942 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 63.206080][ T305] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.231520][ T305] usb 2-1: device descriptor read/8, error -71 [ 63.304151][ T36] audit: type=1400 audit(1750740161.200:339): avc: denied { connect } for pid=1951 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.361548][ T305] usb 2-1: device descriptor read/8, error -71 [ 63.473091][ T305] usb usb2-port1: unable to enumerate USB device [ 63.496633][ T36] audit: type=1400 audit(1750740161.390:340): avc: denied { accept } for pid=1970 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.642429][ T36] audit: type=1400 audit(1750740161.530:341): avc: denied { connect } for pid=1975 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.671875][ T36] audit: type=1400 audit(1750740161.530:342): avc: denied { write } for pid=1975 comm="syz.2.511" path="socket:[14465]" dev="sockfs" ino=14465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.730450][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 63.780985][ T1984] batadv_slave_0: entered promiscuous mode [ 63.787904][ T1984] batadv_slave_0: left promiscuous mode [ 63.880433][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 63.887133][ T31] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 63.896106][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.906432][ T31] usb 4-1: config 0 has no interface number 0 [ 63.917029][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 63.926637][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.935270][ T31] usb 4-1: Product: syz [ 63.939514][ T31] usb 4-1: Manufacturer: syz [ 63.944371][ T31] usb 4-1: SerialNumber: syz [ 63.949907][ T31] usb 4-1: config 0 descriptor?? [ 63.979044][ T1992] overlayfs: failed to clone upperpath [ 64.040830][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.040865][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.047617][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.054556][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.061262][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.067939][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.075238][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.082124][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.088575][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.096291][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.104283][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.111063][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.117684][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.124267][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.131026][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.137741][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.144326][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.151215][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.157846][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.164377][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.164873][ T31] usb 4-1: USB disconnect, device number 22 [ 64.171094][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.187180][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.194224][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.201329][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.208172][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.215338][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.222228][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.229052][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.236195][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.243257][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.249726][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.256303][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.262766][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.269290][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.276651][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.283497][ T305] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.290500][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.297985][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.304537][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.311683][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.318459][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.325627][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.332115][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.338530][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.344970][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.351408][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.357818][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.364255][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.370700][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.377209][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.383668][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.390103][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.396879][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.404236][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.411513][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.418520][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.425072][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.431605][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.438334][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.445060][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.451705][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.458233][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.464901][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.471542][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 64.483249][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.483277][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.484412][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.490087][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.497002][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.525152][ T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 64.534241][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.543001][ T305] usb 2-1: config 0 descriptor?? [ 64.549261][ T305] hub 2-1:0.0: USB hub found [ 64.576090][ T2003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=2003 comm=syz.2.522 [ 64.628250][ T2009] bridge0: port 3(syz_tun) entered blocking state [ 64.635119][ T2009] bridge0: port 3(syz_tun) entered disabled state [ 64.642457][ T2009] syz_tun: entered allmulticast mode [ 64.648739][ T2009] syz_tun: entered promiscuous mode [ 64.654291][ T2009] bridge0: port 3(syz_tun) entered blocking state [ 64.660948][ T2009] bridge0: port 3(syz_tun) entered forwarding state [ 64.669574][ T2009] overlayfs: failed to resolve './file1': -2 [ 64.749215][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.771455][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.788549][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.799265][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.808029][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.816920][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.825228][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.833890][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.842146][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.851045][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.865684][ T305] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 64.952356][ T305] usbhid 2-1:0.0: can't add hid device: -71 [ 64.959654][ T305] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 64.991209][ T305] usb 2-1: USB disconnect, device number 23 [ 65.033244][ T2036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.679597][ T36] audit: type=1400 audit(1750740163.570:343): avc: denied { accept } for pid=2043 comm="syz.2.539" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.010459][ T306] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 66.160428][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 66.166813][ T306] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 66.175029][ T306] usb 4-1: config 0 has no interface number 0 [ 66.183865][ T306] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 66.193059][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.203076][ T306] usb 4-1: Product: syz [ 66.207277][ T306] usb 4-1: Manufacturer: syz [ 66.212233][ T306] usb 4-1: SerialNumber: syz [ 66.217601][ T306] usb 4-1: config 0 descriptor?? [ 66.224450][ T306] smsc95xx v2.0.0 [ 66.300275][ T2072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 67.026720][ T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 67.047195][ T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.061077][ T306] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 67.077618][ T306] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 67.089792][ T306] usb 4-1: USB disconnect, device number 23 [ 67.211596][ T2096] cgroup: fork rejected by pids controller in /syz2 [ 68.050234][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 68.050253][ T36] audit: type=1400 audit(1750740165.940:348): avc: denied { ioctl } for pid=2164 comm="syz.0.575" path="socket:[15625]" dev="sockfs" ino=15625 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.273141][ T2184] rust_binder: Error in use_page_slow: ESRCH [ 68.273183][ T2184] rust_binder: use_range failure ESRCH [ 68.279387][ T2184] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 68.285171][ T2184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.295955][ T2184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:445 [ 68.554174][ T2214] fuse: Bad value for 'fd' [ 68.970475][ T306] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 69.101730][ T2240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.108038][ T2240] rust_binder: Error in use_page_slow: ESRCH [ 69.120488][ T2240] rust_binder: use_range failure ESRCH [ 69.126605][ T2240] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 69.153568][ T2240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.162759][ T36] audit: type=1400 audit(1750740167.050:349): avc: denied { append } for pid=2239 comm="syz.1.601" name="pfkey" dev="proc" ino=4026532457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.210649][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 69.215896][ T2240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:302 [ 69.216967][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.237296][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.252610][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.262038][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.272304][ T2245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.281334][ T306] usb 4-1: config 0 descriptor?? [ 69.296518][ T306] hub 4-1:0.0: USB hub found [ 69.495854][ T2231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 69.506270][ T2230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 69.530720][ T306] hub 4-1:0.0: 1 port detected [ 69.554081][ T2231] binder: Bad value for 'stats' [ 69.561197][ T2270] process 'syz.0.612' launched './file1' with NULL argv: empty string added [ 69.580631][ T36] audit: type=1400 audit(1750740167.480:350): avc: denied { execute_no_trans } for pid=2268 comm="syz.0.612" path="/163/file1" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.611092][ T2271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.611557][ T2271] rust_binder: Error while translating object. [ 69.618070][ T2271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.624833][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.650991][ T2271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:314 [ 69.661580][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.847730][ T2278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.848061][ T2278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 69.860515][ T2278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:319 [ 70.086688][ T2287] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 70.113756][ T306] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 70.440499][ T465] usb 4-1: USB disconnect, device number 24 [ 70.631012][ T2099] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 70.689403][ T2099] CPU: 0 UID: 0 PID: 2099 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 70.689444][ T2099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.689463][ T2099] Call Trace: [ 70.689470][ T2099] [ 70.689479][ T2099] __dump_stack+0x21/0x30 [ 70.689510][ T2099] dump_stack_lvl+0x10c/0x190 [ 70.689535][ T2099] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.689560][ T2099] ? ___ratelimit+0x3f7/0x5a0 [ 70.689583][ T2099] dump_stack+0x19/0x20 [ 70.689606][ T2099] dump_header+0xd7/0x490 [ 70.689636][ T2099] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 70.689659][ T2099] oom_kill_process+0x4c0/0x7e0 [ 70.689679][ T2099] ? sched_clock_cpu+0x75/0x400 [ 70.689704][ T2099] out_of_memory+0x7ee/0xbd0 [ 70.689724][ T2099] ? __cfi_out_of_memory+0x10/0x10 [ 70.689743][ T2099] ? mutex_lock_killable+0x92/0x1c0 [ 70.689768][ T2099] ? __cfi_mutex_lock_killable+0x10/0x10 [ 70.689794][ T2099] mem_cgroup_out_of_memory+0x279/0x350 [ 70.689822][ T2099] ? drain_obj_stock+0xed0/0xed0 [ 70.689852][ T2099] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 70.689880][ T2099] try_charge_memcg+0x8f7/0xde0 [ 70.689904][ T2099] ? __cfi_try_charge_memcg+0x10/0x10 [ 70.689927][ T2099] ? __alloc_pages_noprof+0x30d/0x6c0 [ 70.689956][ T2099] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 70.689978][ T2099] ? __folio_batch_add_and_move+0x2ab/0x370 [ 70.690005][ T2099] __mem_cgroup_charge+0xf6/0x410 [ 70.690030][ T2099] ? __kasan_check_write+0x18/0x20 [ 70.690073][ T2099] ? _raw_spin_lock+0x8c/0x120 [ 70.690115][ T2099] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 70.690144][ T2099] shmem_alloc_and_add_folio+0x86d/0x1050 [ 70.690181][ T2099] ? put_swap_device+0x130/0x130 [ 70.690212][ T2099] ? shmem_huge_global_enabled+0x2da/0x360 [ 70.690244][ T2099] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 70.690274][ T2099] ? __kasan_check_write+0x18/0x20 [ 70.690301][ T2099] ? _raw_spin_lock+0x8c/0x120 [ 70.690332][ T2099] shmem_get_folio_gfp+0x5f0/0x1380 [ 70.690364][ T2099] ? shmem_get_folio+0xc0/0xc0 [ 70.690390][ T2099] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 70.690414][ T2099] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 70.690439][ T2099] ? inode_to_bdi+0x6d/0x100 [ 70.690463][ T2099] shmem_write_begin+0xf4/0x270 [ 70.690497][ T2099] generic_perform_write+0x32d/0x960 [ 70.690526][ T2099] ? __cfi_generic_perform_write+0x10/0x10 [ 70.690552][ T2099] ? down_write+0xe9/0x2a0 [ 70.690577][ T2099] ? mnt_get_write_access_file+0x1af/0x3b0 [ 70.690599][ T2099] ? mnt_put_write_access_file+0xc2/0x100 [ 70.690622][ T2099] ? file_update_time+0x1ef/0x220 [ 70.690646][ T2099] shmem_file_write_iter+0x105/0x130 [ 70.690670][ T2099] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 70.690693][ T2099] __kernel_write_iter+0x395/0x830 [ 70.690720][ T2099] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 70.690743][ T2099] ? __cfi___kernel_write_iter+0x10/0x10 [ 70.690770][ T2099] ? get_dump_page+0x160/0x220 [ 70.690791][ T2099] ? __asan_memset+0x39/0x50 [ 70.690815][ T2099] ? iov_iter_bvec+0xc0/0x180 [ 70.690847][ T2099] dump_user_range+0xb06/0xdf0 [ 70.690874][ T2099] ? __cfi_dump_emit+0x10/0x10 [ 70.690900][ T2099] ? __cfi_dump_user_range+0x10/0x10 [ 70.690926][ T2099] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 70.690953][ T2099] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 70.690981][ T2099] elf_core_dump+0x2cd9/0x3810 [ 70.691015][ T2099] ? __cfi_elf_core_dump+0x10/0x10 [ 70.691054][ T2099] ? dump_interrupted+0xf0/0xf0 [ 70.691079][ T2099] ? filp_open+0x182/0x1d0 [ 70.691108][ T2099] ? 0xffffffffff600000 [ 70.691139][ T2099] do_coredump+0x1bfa/0x2bd0 [ 70.691169][ T2099] ? __cfi_do_coredump+0x10/0x10 [ 70.691193][ T2099] ? asm_exc_page_fault+0x2b/0x30 [ 70.691223][ T2099] ? __kasan_slab_free+0x6a/0x80 [ 70.691254][ T2099] ? kmem_cache_free+0x1c1/0x4c0 [ 70.691283][ T2099] get_signal+0x11fd/0x14f0 [ 70.691309][ T2099] arch_do_signal_or_restart+0x96/0x720 [ 70.691341][ T2099] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 70.691373][ T2099] irqentry_exit_to_user_mode+0x4e/0xb0 [ 70.691401][ T2099] irqentry_exit+0x16/0x60 [ 70.691427][ T2099] exc_page_fault+0x66/0xc0 [ 70.691452][ T2099] asm_exc_page_fault+0x2b/0x30 [ 70.691473][ T2099] RIP: 0033:0x7f77bd98e931 [ 70.691492][ T2099] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 70.691510][ T2099] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 70.691529][ T2099] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 70.691545][ T2099] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 70.691559][ T2099] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 70.691572][ T2099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.691585][ T2099] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 70.691602][ T2099] [ 71.400264][ T2099] memory: usage 307200kB, limit 307200kB, failcnt 19489 [ 71.414814][ T2099] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 71.490252][ T2099] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 71.501756][ T2099] Memory cgroup stats for /syz2: [ 71.501907][ T2099] cache 314490880 [ 71.963491][ T2304] SELinux: security_context_str_to_sid () failed with errno=-22 [ 71.997138][ T2099] rss 53248 [ 72.000321][ T2099] rss_huge 0 [ 72.008446][ T2099] shmem 314478592 [ 72.034370][ T2099] mapped_file 12288 [ 72.057141][ T2099] dirty 4096 [ 72.074321][ T2099] writeback 0 [ 72.091531][ T2099] workingset_refault_anon 20 [ 72.118667][ T2099] workingset_refault_file 143 [ 72.138868][ T2099] swap 127942656 [ 72.153273][ T2099] swapcached 53248 [ 72.167248][ T2099] pgpgin 240873 [ 72.179402][ T2099] pgpgout 165606 [ 72.198503][ T2099] pgfault 62091 [ 72.214461][ T2099] pgmajfault 12 [ 72.234024][ T2099] inactive_anon 180113408 [ 72.248253][ T2099] active_anon 134447104 [ 72.264147][ T2099] inactive_file 12288 [ 72.279027][ T2099] active_file 0 [ 72.296593][ T2099] unevictable 0 [ 72.312929][ T2099] hierarchical_memory_limit 314572800 [ 72.335368][ T2099] hierarchical_memsw_limit 9223372036854771712 [ 72.380929][ T2099] total_cache 314490880 [ 72.396315][ T2099] total_rss 53248 [ 72.420547][ T2099] total_rss_huge 0 [ 72.424416][ T2099] total_shmem 314478592 [ 72.435031][ T2099] total_mapped_file 12288 [ 72.450135][ T2099] total_dirty 4096 [ 72.462844][ T2099] total_writeback 0 [ 72.470605][ T2099] total_workingset_refault_anon 20 [ 72.494653][ T2099] total_workingset_refault_file 143 [ 72.510225][ T2099] total_swap 127942656 [ 72.535236][ T2099] total_swapcached 53248 [ 72.545278][ T2099] total_pgpgin 240873 [ 72.556798][ T2099] total_pgpgout 165606 [ 72.576535][ T2099] total_pgfault 62091 [ 72.605437][ T2099] total_pgmajfault 12 [ 72.609722][ T2099] total_inactive_anon 180113408 [ 72.621836][ T2099] total_active_anon 134447104 [ 72.627079][ T2099] total_inactive_file 12288 [ 72.637267][ T2099] total_active_file 0 [ 72.641412][ T2099] total_unevictable 0 [ 72.646025][ T2099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2103,uid=0 [ 72.681375][ T2099] Memory cgroup out of memory: Killed process 2103 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 72.891034][ T465] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 72.915532][ T465] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.960380][ T36] audit: type=1400 audit(1750740170.830:351): avc: denied { append } for pid=2329 comm="syz.1.630" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.120494][ T2131] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 73.250344][ T2131] CPU: 0 UID: 0 PID: 2131 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 73.250381][ T2131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.250394][ T2131] Call Trace: [ 73.250402][ T2131] [ 73.250410][ T2131] __dump_stack+0x21/0x30 [ 73.250443][ T2131] dump_stack_lvl+0x10c/0x190 [ 73.250468][ T2131] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.250495][ T2131] ? ___ratelimit+0x3f7/0x5a0 [ 73.250519][ T2131] dump_stack+0x19/0x20 [ 73.250544][ T2131] dump_header+0xd7/0x490 [ 73.250575][ T2131] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 73.250599][ T2131] oom_kill_process+0x4c0/0x7e0 [ 73.250620][ T2131] ? sched_clock_cpu+0x75/0x400 [ 73.250647][ T2131] out_of_memory+0x7ee/0xbd0 [ 73.250668][ T2131] ? __cfi_out_of_memory+0x10/0x10 [ 73.250688][ T2131] ? mutex_lock_killable+0x104/0x1c0 [ 73.250715][ T2131] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.250743][ T2131] mem_cgroup_out_of_memory+0x279/0x350 [ 73.250773][ T2131] ? drain_obj_stock+0xed0/0xed0 [ 73.250803][ T2131] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 73.250833][ T2131] try_charge_memcg+0x8f7/0xde0 [ 73.250859][ T2131] ? __cfi_try_charge_memcg+0x10/0x10 [ 73.250883][ T2131] ? __alloc_pages_noprof+0x30d/0x6c0 [ 73.250907][ T2131] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.250940][ T2131] ? __folio_batch_add_and_move+0x2ab/0x370 [ 73.250964][ T2131] __mem_cgroup_charge+0xf6/0x410 [ 73.250991][ T2131] ? __kasan_check_read+0x15/0x20 [ 73.251017][ T2131] ? resched_curr+0xaa/0x430 [ 73.251044][ T2131] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 73.251070][ T2131] ? cgroup_rstat_updated+0x132/0x7f0 [ 73.251097][ T2131] ? __cfi_resched_curr+0x10/0x10 [ 73.251126][ T2131] shmem_alloc_and_add_folio+0x86d/0x1050 [ 73.251164][ T2131] ? put_swap_device+0x130/0x130 [ 73.251199][ T2131] ? shmem_huge_global_enabled+0x2da/0x360 [ 73.251231][ T2131] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 73.251264][ T2131] shmem_get_folio_gfp+0x5f0/0x1380 [ 73.251299][ T2131] ? shmem_get_folio+0xc0/0xc0 [ 73.251329][ T2131] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 73.251355][ T2131] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 73.251382][ T2131] ? __switch_to_asm+0x3d/0x70 [ 73.251411][ T2131] ? inode_to_bdi+0x6d/0x100 [ 73.251437][ T2131] shmem_write_begin+0xf4/0x270 [ 73.251471][ T2131] generic_perform_write+0x32d/0x960 [ 73.251500][ T2131] ? __cfi_generic_perform_write+0x10/0x10 [ 73.251526][ T2131] ? down_write+0xe9/0x2a0 [ 73.251551][ T2131] ? mnt_get_write_access_file+0x1af/0x3b0 [ 73.251575][ T2131] ? mnt_put_write_access_file+0xc2/0x100 [ 73.251598][ T2131] ? file_update_time+0x1ef/0x220 [ 73.251623][ T2131] shmem_file_write_iter+0x105/0x130 [ 73.251646][ T2131] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 73.251670][ T2131] __kernel_write_iter+0x395/0x830 [ 73.251699][ T2131] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 73.251725][ T2131] ? __cfi___kernel_write_iter+0x10/0x10 [ 73.251755][ T2131] ? __asan_memset+0x39/0x50 [ 73.251780][ T2131] ? iov_iter_bvec+0xc0/0x180 [ 73.251812][ T2131] dump_user_range+0xb06/0xdf0 [ 73.251842][ T2131] ? __cfi_dump_emit+0x10/0x10 [ 73.251870][ T2131] ? __cfi_dump_user_range+0x10/0x10 [ 73.251898][ T2131] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 73.251933][ T2131] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 73.251964][ T2131] elf_core_dump+0x2cd9/0x3810 [ 73.252001][ T2131] ? __cfi_elf_core_dump+0x10/0x10 [ 73.252043][ T2131] ? dump_interrupted+0xf0/0xf0 [ 73.252069][ T2131] ? filp_open+0x182/0x1d0 [ 73.252091][ T2131] ? 0xffffffffff600000 [ 73.252109][ T2131] do_coredump+0x1bfa/0x2bd0 [ 73.252141][ T2131] ? __cfi_do_coredump+0x10/0x10 [ 73.252166][ T2131] ? asm_exc_page_fault+0x2b/0x30 [ 73.252197][ T2131] ? __kasan_slab_free+0x6a/0x80 [ 73.252230][ T2131] ? kmem_cache_free+0x1c1/0x4c0 [ 73.252259][ T2131] get_signal+0x11fd/0x14f0 [ 73.252288][ T2131] arch_do_signal_or_restart+0x96/0x720 [ 73.252318][ T2131] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 73.252352][ T2131] irqentry_exit_to_user_mode+0x4e/0xb0 [ 73.252381][ T2131] irqentry_exit+0x16/0x60 [ 73.252407][ T2131] exc_page_fault+0x66/0xc0 [ 73.252434][ T2131] asm_exc_page_fault+0x2b/0x30 [ 73.252454][ T2131] RIP: 0033:0x7f77bd98e931 [ 73.252472][ T2131] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 73.252493][ T2131] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 73.252514][ T2131] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 73.252531][ T2131] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 73.252547][ T2131] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.252561][ T2131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 73.252575][ T2131] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 73.252595][ T2131] [ 73.783810][ T2354] netlink: 68 bytes leftover after parsing attributes in process `syz.3.639'. [ 73.839081][ T2344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.869907][ T2361] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 73.879924][ T2131] memory: usage 301752kB, limit 307200kB, failcnt 21485 [ 73.902912][ T2131] memory+swap: usage 421860kB, limit 9007199254740988kB, failcnt 0 [ 73.912158][ T2131] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 73.919228][ T2131] Memory cgroup stats for /syz2: [ 73.926171][ T2131] cache 311488512 [ 73.981582][ T2131] rss 32768 [ 73.985256][ T2131] rss_huge 0 [ 73.988943][ T2131] shmem 311488512 [ 73.993786][ T2131] mapped_file 0 [ 73.997483][ T2131] dirty 0 [ 74.001852][ T2131] writeback 4096 [ 74.005785][ T2131] workingset_refault_anon 22 [ 74.011536][ T2131] workingset_refault_file 143 [ 74.022051][ T2131] swap 121466880 [ 74.029972][ T2131] swapcached 49152 [ 74.048483][ T2131] pgpgin 246875 [ 74.056580][ T2131] pgpgout 172340 [ 74.060196][ T2131] pgfault 62473 [ 74.063947][ T2131] pgmajfault 14 [ 74.067476][ T2131] inactive_anon 164839424 [ 74.072088][ T2131] active_anon 146640896 [ 74.076897][ T2131] inactive_file 0 [ 74.081243][ T2131] active_file 0 [ 74.084860][ T2131] unevictable 0 [ 74.088409][ T2131] hierarchical_memory_limit 314572800 [ 74.094435][ T2131] hierarchical_memsw_limit 9223372036854771712 [ 74.101003][ T2131] total_cache 311488512 [ 74.105288][ T2131] total_rss 32768 [ 74.108930][ T2131] total_rss_huge 0 [ 74.112802][ T2131] total_shmem 311488512 [ 74.117058][ T2131] total_mapped_file 0 [ 74.121261][ T2131] total_dirty 0 [ 74.124743][ T2131] total_writeback 4096 [ 74.128940][ T2131] total_workingset_refault_anon 22 [ 74.134725][ T2131] total_workingset_refault_file 143 [ 74.140437][ T2131] total_swap 121466880 [ 74.144720][ T2131] total_swapcached 49152 [ 74.149575][ T2131] total_pgpgin 246875 [ 74.153880][ T2131] total_pgpgout 172340 [ 74.158139][ T2131] total_pgfault 62473 [ 74.162513][ T2131] total_pgmajfault 14 [ 74.166593][ T2131] total_inactive_anon 164839424 [ 74.171952][ T2131] total_active_anon 146640896 [ 74.176941][ T2131] total_inactive_file 0 [ 74.181328][ T2131] total_active_file 0 [ 74.185745][ T2131] total_unevictable 0 [ 74.190187][ T2131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2099,uid=0 [ 74.206218][ T2131] Memory cgroup out of memory: Killed process 2099 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:48512kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 74.280449][ T305] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 74.416174][ T2149] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 74.427188][ T2149] CPU: 0 UID: 0 PID: 2149 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 74.427228][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.427246][ T2149] Call Trace: [ 74.427254][ T2149] [ 74.427264][ T2149] __dump_stack+0x21/0x30 [ 74.427293][ T2149] dump_stack_lvl+0x10c/0x190 [ 74.427319][ T2149] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.427343][ T2149] ? ___ratelimit+0x3f7/0x5a0 [ 74.427364][ T2149] dump_stack+0x19/0x20 [ 74.427387][ T2149] dump_header+0xd7/0x490 [ 74.427417][ T2149] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 74.427441][ T2149] oom_kill_process+0x4c0/0x7e0 [ 74.427463][ T2149] ? sched_clock_cpu+0x75/0x400 [ 74.427495][ T2149] out_of_memory+0x7ee/0xbd0 [ 74.427515][ T2149] ? __cfi_out_of_memory+0x10/0x10 [ 74.427535][ T2149] ? mutex_lock_killable+0x104/0x1c0 [ 74.427560][ T2149] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.427591][ T2149] mem_cgroup_out_of_memory+0x279/0x350 [ 74.427621][ T2149] ? drain_obj_stock+0xed0/0xed0 [ 74.427647][ T2149] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 74.427672][ T2149] try_charge_memcg+0x8f7/0xde0 [ 74.427695][ T2149] ? __cfi_try_charge_memcg+0x10/0x10 [ 74.427716][ T2149] ? __alloc_pages_noprof+0x30d/0x6c0 [ 74.427738][ T2149] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.427759][ T2149] ? __folio_batch_add_and_move+0x2ab/0x370 [ 74.427781][ T2149] __mem_cgroup_charge+0xf6/0x410 [ 74.427813][ T2149] ? __kasan_check_write+0x18/0x20 [ 74.427849][ T2149] ? _raw_spin_lock+0x8c/0x120 [ 74.427879][ T2149] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 74.427908][ T2149] shmem_alloc_and_add_folio+0x86d/0x1050 [ 74.427951][ T2149] ? put_swap_device+0x130/0x130 [ 74.427985][ T2149] ? shmem_huge_global_enabled+0x2da/0x360 [ 74.428018][ T2149] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 74.428050][ T2149] ? __kasan_check_write+0x18/0x20 [ 74.428077][ T2149] ? _raw_spin_lock+0x8c/0x120 [ 74.428107][ T2149] shmem_get_folio_gfp+0x5f0/0x1380 [ 74.428142][ T2149] ? shmem_get_folio+0xc0/0xc0 [ 74.428176][ T2149] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 74.428202][ T2149] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 74.428227][ T2149] ? inode_to_bdi+0x6d/0x100 [ 74.428252][ T2149] shmem_write_begin+0xf4/0x270 [ 74.428286][ T2149] generic_perform_write+0x32d/0x960 [ 74.428314][ T2149] ? __cfi_generic_perform_write+0x10/0x10 [ 74.428340][ T2149] ? down_write+0xe9/0x2a0 [ 74.428366][ T2149] ? mnt_get_write_access_file+0x1af/0x3b0 [ 74.428389][ T2149] ? mnt_put_write_access_file+0xc2/0x100 [ 74.428412][ T2149] ? file_update_time+0x1ef/0x220 [ 74.428436][ T2149] shmem_file_write_iter+0x105/0x130 [ 74.428459][ T2149] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.428483][ T2149] __kernel_write_iter+0x395/0x830 [ 74.428512][ T2149] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.428536][ T2149] ? __cfi___kernel_write_iter+0x10/0x10 [ 74.428563][ T2149] ? get_dump_page+0x160/0x220 [ 74.428586][ T2149] ? __asan_memset+0x39/0x50 [ 74.428610][ T2149] ? iov_iter_bvec+0xc0/0x180 [ 74.428642][ T2149] dump_user_range+0xb06/0xdf0 [ 74.428672][ T2149] ? __cfi_dump_emit+0x10/0x10 [ 74.428699][ T2149] ? __cfi_dump_user_range+0x10/0x10 [ 74.428726][ T2149] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 74.428755][ T2149] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 74.428785][ T2149] elf_core_dump+0x2cd9/0x3810 [ 74.428828][ T2149] ? __cfi_elf_core_dump+0x10/0x10 [ 74.428868][ T2149] ? dump_interrupted+0xf0/0xf0 [ 74.428894][ T2149] ? filp_open+0x182/0x1d0 [ 74.428916][ T2149] ? 0xffffffffff600000 [ 74.428932][ T2149] do_coredump+0x1bfa/0x2bd0 [ 74.428960][ T2149] ? __cfi_do_coredump+0x10/0x10 [ 74.428985][ T2149] ? asm_exc_page_fault+0x2b/0x30 [ 74.429016][ T2149] ? __kasan_slab_free+0x6a/0x80 [ 74.429046][ T2149] ? kmem_cache_free+0x1c1/0x4c0 [ 74.429074][ T2149] get_signal+0x11fd/0x14f0 [ 74.429101][ T2149] arch_do_signal_or_restart+0x96/0x720 [ 74.429130][ T2149] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.429163][ T2149] irqentry_exit_to_user_mode+0x4e/0xb0 [ 74.429192][ T2149] irqentry_exit+0x16/0x60 [ 74.429218][ T2149] exc_page_fault+0x66/0xc0 [ 74.429243][ T2149] asm_exc_page_fault+0x2b/0x30 [ 74.429264][ T2149] RIP: 0033:0x7f77bd98e931 [ 74.429282][ T2149] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 74.429301][ T2149] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 74.429321][ T2149] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 74.429337][ T2149] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 74.429352][ T2149] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 74.429367][ T2149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.429381][ T2149] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 74.429400][ T2149] [ 74.429493][ T2149] memory: usage 307200kB, limit 307200kB, failcnt 24335 [ 74.440486][ T45] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 74.444652][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 74.493840][ T2149] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 74.519695][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.549408][ T2149] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 74.555102][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.559240][ T2149] Memory cgroup stats for [ 74.567836][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.572168][ T2149] /syz2 [ 74.576643][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.582506][ T2149] : [ 74.590714][ T305] usb 4-1: config 0 descriptor?? [ 74.598881][ T2149] cache 314470400 [ 74.602550][ T305] hub 4-1:0.0: USB hub found [ 74.611446][ T2149] rss 49152 [ 74.613279][ T2384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.651'. [ 74.619010][ T2149] rss_huge 0 [ 74.627037][ T2385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.651'. [ 74.634536][ T2149] shmem 314470400 [ 74.802404][ T305] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 74.804430][ T2149] mapped_file 0 [ 75.097233][ T2149] dirty 0 [ 75.100221][ T2149] writeback 0 [ 75.103562][ T2149] workingset_refault_anon 27 [ 75.108169][ T2149] workingset_refault_file 143 [ 75.112915][ T2149] swap 127942656 [ 75.116480][ T2149] swapcached 53248 [ 75.120222][ T2149] pgpgin 256273 [ 75.125325][ T2149] pgpgout 181006 [ 75.129621][ T2149] pgfault 63151 [ 75.133414][ T2149] pgmajfault 18 [ 75.137313][ T2149] inactive_anon 144035840 [ 75.141922][ T2149] active_anon 170536960 [ 75.146529][ T2149] inactive_file 0 [ 75.150456][ T2149] active_file 0 [ 75.155386][ T2149] unevictable 0 [ 75.158914][ T2149] hierarchical_memory_limit 314572800 [ 75.164418][ T2149] hierarchical_memsw_limit 9223372036854771712 [ 75.171583][ T2149] total_cache 314470400 [ 75.176033][ T2149] total_rss 49152 [ 75.179723][ T2149] total_rss_huge 0 [ 75.183614][ T2149] total_shmem 314470400 [ 75.187804][ T2149] total_mapped_file 0 [ 75.192870][ T2149] total_dirty 0 [ 75.196717][ T2149] total_writeback 0 [ 75.200803][ T2149] total_workingset_refault_anon 27 [ 75.206077][ T2149] total_workingset_refault_file 143 [ 75.212111][ T2149] total_swap 127942656 [ 75.216444][ T2149] total_swapcached 53248 [ 75.222830][ T2149] total_pgpgin 256273 [ 75.228228][ T2149] total_pgpgout 181006 [ 75.233889][ T2149] total_pgfault 63151 [ 75.238445][ T2149] total_pgmajfault 18 [ 75.243105][ T2149] total_inactive_anon 144035840 [ 75.248273][ T2149] total_active_anon 170536960 [ 75.256252][ T2149] total_inactive_file 0 [ 75.260677][ T2149] total_active_file 0 [ 75.264790][ T2149] total_unevictable 0 [ 75.281494][ T2149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2116,uid=0 [ 75.287482][ T2405] netlink: 'syz.1.657': attribute type 46 has an invalid length. [ 75.297974][ T2149] Memory cgroup out of memory: Killed process 2116 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:52224kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 75.321879][ T2376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.334667][ T2376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.424347][ T2405] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.452585][ T2411] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 75.465853][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 75.472343][ T305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 75.481513][ T2411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.483388][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.502820][ T36] audit: type=1400 audit(1750740173.400:352): avc: denied { create } for pid=2409 comm="syz.0.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 75.525948][ T2125] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 75.532145][ T305] usb 4-1: USB disconnect, device number 25 [ 75.536209][ T45] usb 2-1: no configurations [ 75.546448][ T45] usb 2-1: can't read configurations, error -22 [ 75.560965][ T2125] CPU: 1 UID: 0 PID: 2125 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 75.561004][ T2125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.561019][ T2125] Call Trace: [ 75.561028][ T2125] [ 75.561037][ T2125] __dump_stack+0x21/0x30 [ 75.561069][ T2125] dump_stack_lvl+0x10c/0x190 [ 75.561097][ T2125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.561123][ T2125] ? ___ratelimit+0x3f7/0x5a0 [ 75.561148][ T2125] dump_stack+0x19/0x20 [ 75.561173][ T2125] dump_header+0xd7/0x490 [ 75.561205][ T2125] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 75.561231][ T2125] oom_kill_process+0x4c0/0x7e0 [ 75.561252][ T2125] ? sched_clock_cpu+0x75/0x400 [ 75.561281][ T2125] out_of_memory+0x7ee/0xbd0 [ 75.561302][ T2125] ? __cfi_out_of_memory+0x10/0x10 [ 75.561323][ T2125] ? mutex_lock_killable+0x104/0x1c0 [ 75.561351][ T2125] ? __cfi_mutex_lock_killable+0x10/0x10 [ 75.561380][ T2125] mem_cgroup_out_of_memory+0x279/0x350 [ 75.561412][ T2125] ? drain_obj_stock+0xed0/0xed0 [ 75.561443][ T2125] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 75.561474][ T2125] try_charge_memcg+0x8f7/0xde0 [ 75.561501][ T2125] ? __cfi_try_charge_memcg+0x10/0x10 [ 75.561526][ T2125] ? __alloc_pages_noprof+0x30d/0x6c0 [ 75.561551][ T2125] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.561575][ T2125] ? __folio_batch_add_and_move+0x2ab/0x370 [ 75.561600][ T2125] __mem_cgroup_charge+0xf6/0x410 [ 75.561627][ T2125] ? __kasan_check_write+0x18/0x20 [ 75.561654][ T2125] ? _raw_spin_lock+0x8c/0x120 [ 75.561687][ T2125] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 75.561718][ T2125] shmem_alloc_and_add_folio+0x86d/0x1050 [ 75.561764][ T2125] ? put_swap_device+0x130/0x130 [ 75.561798][ T2125] ? shmem_huge_global_enabled+0x2da/0x360 [ 75.561832][ T2125] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 75.561864][ T2125] ? __kasan_check_write+0x18/0x20 [ 75.561890][ T2125] ? _raw_spin_lock+0x8c/0x120 [ 75.561923][ T2125] shmem_get_folio_gfp+0x5f0/0x1380 [ 75.561958][ T2125] ? shmem_get_folio+0xc0/0xc0 [ 75.561984][ T2125] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 75.562008][ T2125] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 75.562032][ T2125] ? inode_to_bdi+0x6d/0x100 [ 75.562054][ T2125] shmem_write_begin+0xf4/0x270 [ 75.562085][ T2125] generic_perform_write+0x32d/0x960 [ 75.562111][ T2125] ? __cfi_generic_perform_write+0x10/0x10 [ 75.562134][ T2125] ? down_write+0xe9/0x2a0 [ 75.562158][ T2125] ? mnt_get_write_access_file+0x1af/0x3b0 [ 75.562179][ T2125] ? mnt_put_write_access_file+0xc2/0x100 [ 75.562200][ T2125] ? file_update_time+0x1ef/0x220 [ 75.562221][ T2125] shmem_file_write_iter+0x105/0x130 [ 75.562243][ T2125] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.562265][ T2125] __kernel_write_iter+0x395/0x830 [ 75.562289][ T2125] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.562312][ T2125] ? __cfi___kernel_write_iter+0x10/0x10 [ 75.562336][ T2125] ? get_dump_page+0x160/0x220 [ 75.562357][ T2125] ? __asan_memset+0x39/0x50 [ 75.562379][ T2125] ? iov_iter_bvec+0xc0/0x180 [ 75.562408][ T2125] dump_user_range+0xb06/0xdf0 [ 75.562436][ T2125] ? __cfi_dump_emit+0x10/0x10 [ 75.562460][ T2125] ? __cfi_dump_user_range+0x10/0x10 [ 75.562485][ T2125] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 75.562513][ T2125] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 75.562540][ T2125] elf_core_dump+0x2cd9/0x3810 [ 75.562573][ T2125] ? __cfi_elf_core_dump+0x10/0x10 [ 75.562611][ T2125] ? dump_interrupted+0xf0/0xf0 [ 75.562635][ T2125] ? filp_open+0x182/0x1d0 [ 75.562655][ T2125] ? 0xffffffffff600000 [ 75.562673][ T2125] do_coredump+0x1bfa/0x2bd0 [ 75.562701][ T2125] ? __cfi_do_coredump+0x10/0x10 [ 75.562724][ T2125] ? asm_exc_page_fault+0x2b/0x30 [ 75.562759][ T2125] ? __kasan_slab_free+0x6a/0x80 [ 75.562788][ T2125] ? kmem_cache_free+0x1c1/0x4c0 [ 75.562814][ T2125] get_signal+0x11fd/0x14f0 [ 75.562839][ T2125] arch_do_signal_or_restart+0x96/0x720 [ 75.562868][ T2125] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 75.562899][ T2125] irqentry_exit_to_user_mode+0x4e/0xb0 [ 75.562924][ T2125] irqentry_exit+0x16/0x60 [ 75.562949][ T2125] exc_page_fault+0x66/0xc0 [ 75.562971][ T2125] asm_exc_page_fault+0x2b/0x30 [ 75.562991][ T2125] RIP: 0033:0x7f77bd98e931 [ 75.563020][ T2125] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 75.563038][ T2125] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 75.563056][ T2125] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 75.563071][ T2125] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 75.563084][ T2125] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.563097][ T2125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.563109][ T2125] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 75.563126][ T2125] [ 75.563133][ T2125] memory: usage 307200kB, limit 307200kB, failcnt 25585 [ 76.066169][ T2125] memory+swap: usage 414148kB, limit 9007199254740988kB, failcnt 0 [ 76.074771][ T2125] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.081981][ T2125] Memory cgroup stats for /syz2: [ 76.082132][ T2125] cache 295882752 [ 76.090865][ T2125] rss 77824 [ 76.093993][ T2125] rss_huge 0 [ 76.097298][ T2125] shmem 295751680 [ 76.101469][ T2125] mapped_file 61440 [ 76.105473][ T2125] dirty 0 [ 76.108564][ T2125] writeback 0 [ 76.112263][ T2125] workingset_refault_anon 28 [ 76.116864][ T2125] workingset_refault_file 175 [ 76.164835][ T2125] swap 127942656 [ 76.168455][ T2125] swapcached 53248 [ 76.173436][ T2430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.182767][ T2430] Invalid logical block size (18) [ 76.209927][ T2125] pgpgin 258282 [ 76.214015][ T2430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.214052][ T2430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 76.237865][ T2125] pgpgout 187552 [ 76.283177][ T2434] overlayfs: failed to clone lowerpath [ 76.309497][ T2125] pgfault 63192 [ 76.330408][ T305] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 76.331115][ T2125] pgmajfault 19 [ 76.411896][ T2440] rust_binder: Write failure EFAULT in pid:370 [ 76.440433][ T2125] inactive_anon 33529856 [ 76.449953][ T2443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.468755][ T2125] active_anon 261541888 [ 76.480067][ T2125] inactive_file 0 [ 76.488773][ T2125] active_file 131072 [ 76.493513][ T2125] unevictable 0 [ 76.497088][ T2125] hierarchical_memory_limit 314572800 [ 76.502664][ T2125] hierarchical_memsw_limit 9223372036854771712 [ 76.509890][ T2125] total_cache 295882752 [ 76.512008][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.520069][ T2125] total_rss 77824 [ 76.527401][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.530226][ T2125] total_rss_huge 0 [ 76.543561][ T2445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:373 [ 76.543646][ T2445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:373 [ 76.553766][ T305] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.560139][ T2125] total_shmem 295751680 [ 76.570422][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.573320][ T2125] total_mapped_file 61440 [ 76.577806][ T305] usb 4-1: config 0 descriptor?? [ 76.585365][ T2125] total_dirty 0 [ 76.598266][ T2125] total_writeback 0 [ 76.602311][ T2125] total_workingset_refault_anon 28 [ 76.607842][ T2125] total_workingset_refault_file 175 [ 76.613221][ T2125] total_swap 127942656 [ 76.617392][ T2125] total_swapcached 53248 [ 76.621681][ T2125] total_pgpgin 258282 [ 76.625742][ T2125] total_pgpgout 187552 [ 76.630014][ T2125] total_pgfault 63192 [ 76.634236][ T2125] total_pgmajfault 19 [ 76.638556][ T2125] total_inactive_anon 33529856 [ 76.643709][ T2125] total_active_anon 261541888 [ 76.649002][ T2125] total_inactive_file 0 [ 76.653429][ T2125] total_active_file 131072 [ 76.658357][ T2125] total_unevictable 0 [ 76.662745][ T2125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2100,uid=0 [ 76.679417][ T2125] Memory cgroup out of memory: Killed process 2100 (syz.2.560) total-vm:90092kB, anon-rss:1076kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 76.939197][ T36] audit: type=1400 audit(1750740174.830:353): avc: denied { map } for pid=2458 comm="syz.1.675" path="socket:[16617]" dev="sockfs" ino=16617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 77.032570][ T2465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.188144][ T2471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.196883][ T2471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.204074][ T305] usb 4-1: string descriptor 0 read error: -22 [ 77.228082][ T2122] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 77.304342][ T2122] CPU: 1 UID: 0 PID: 2122 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 77.304382][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.304395][ T2122] Call Trace: [ 77.304401][ T2122] [ 77.304410][ T2122] __dump_stack+0x21/0x30 [ 77.304440][ T2122] dump_stack_lvl+0x10c/0x190 [ 77.304463][ T2122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.304489][ T2122] ? ___ratelimit+0x3f7/0x5a0 [ 77.304512][ T2122] dump_stack+0x19/0x20 [ 77.304537][ T2122] dump_header+0xd7/0x490 [ 77.304567][ T2122] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 77.304590][ T2122] oom_kill_process+0x4c0/0x7e0 [ 77.304609][ T2122] ? sched_clock_cpu+0x75/0x400 [ 77.304635][ T2122] out_of_memory+0x7ee/0xbd0 [ 77.304653][ T2122] ? __cfi_out_of_memory+0x10/0x10 [ 77.304672][ T2122] ? mutex_lock_killable+0x92/0x1c0 [ 77.304698][ T2122] ? __cfi_mutex_lock_killable+0x10/0x10 [ 77.304723][ T2122] mem_cgroup_out_of_memory+0x279/0x350 [ 77.304752][ T2122] ? drain_obj_stock+0xed0/0xed0 [ 77.304783][ T2122] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 77.304812][ T2122] try_charge_memcg+0x8f7/0xde0 [ 77.304837][ T2122] ? __cfi_try_charge_memcg+0x10/0x10 [ 77.304861][ T2122] ? __alloc_pages_noprof+0x30d/0x6c0 [ 77.304884][ T2122] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.304909][ T2122] __mem_cgroup_charge+0xf6/0x410 [ 77.304936][ T2122] ? __schedule+0x1463/0x1f10 [ 77.304955][ T2122] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 77.304984][ T2122] shmem_alloc_and_add_folio+0x86d/0x1050 [ 77.305020][ T2122] ? put_swap_device+0x130/0x130 [ 77.305053][ T2122] ? shmem_huge_global_enabled+0x2da/0x360 [ 77.305086][ T2122] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 77.305116][ T2122] ? __kasan_check_write+0x18/0x20 [ 77.305141][ T2122] ? _raw_spin_lock+0x8c/0x120 [ 77.305171][ T2122] shmem_get_folio_gfp+0x5f0/0x1380 [ 77.305211][ T2122] ? shmem_get_folio+0xc0/0xc0 [ 77.305239][ T2122] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 77.305264][ T2122] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 77.305288][ T2122] ? inode_to_bdi+0x6d/0x100 [ 77.305312][ T2122] shmem_write_begin+0xf4/0x270 [ 77.305354][ T2122] generic_perform_write+0x32d/0x960 [ 77.305382][ T2122] ? __cfi_generic_perform_write+0x10/0x10 [ 77.305407][ T2122] ? down_write+0xe9/0x2a0 [ 77.305431][ T2122] ? mnt_get_write_access_file+0x1af/0x3b0 [ 77.305454][ T2122] ? mnt_put_write_access_file+0xc2/0x100 [ 77.305475][ T2122] ? file_update_time+0x1ef/0x220 [ 77.305497][ T2122] shmem_file_write_iter+0x105/0x130 [ 77.305519][ T2122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 77.305541][ T2122] __kernel_write_iter+0x395/0x830 [ 77.305567][ T2122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 77.305590][ T2122] ? __cfi___kernel_write_iter+0x10/0x10 [ 77.305616][ T2122] ? get_dump_page+0x160/0x220 [ 77.305637][ T2122] ? __asan_memset+0x39/0x50 [ 77.305661][ T2122] ? iov_iter_bvec+0xc0/0x180 [ 77.305690][ T2122] dump_user_range+0xb06/0xdf0 [ 77.305718][ T2122] ? __cfi_dump_emit+0x10/0x10 [ 77.305745][ T2122] ? __cfi_dump_user_range+0x10/0x10 [ 77.305770][ T2122] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 77.305798][ T2122] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 77.305826][ T2122] elf_core_dump+0x2cd9/0x3810 [ 77.305861][ T2122] ? __cfi_elf_core_dump+0x10/0x10 [ 77.305902][ T2122] ? dump_interrupted+0xf0/0xf0 [ 77.305926][ T2122] ? filp_open+0x182/0x1d0 [ 77.305947][ T2122] ? 0xffffffffff600000 [ 77.305965][ T2122] do_coredump+0x1bfa/0x2bd0 [ 77.305994][ T2122] ? __cfi_do_coredump+0x10/0x10 [ 77.306018][ T2122] ? asm_exc_page_fault+0x2b/0x30 [ 77.306048][ T2122] ? __kasan_slab_free+0x6a/0x80 [ 77.306077][ T2122] ? kmem_cache_free+0x1c1/0x4c0 [ 77.306104][ T2122] get_signal+0x11fd/0x14f0 [ 77.306130][ T2122] arch_do_signal_or_restart+0x96/0x720 [ 77.306160][ T2122] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 77.306190][ T2122] irqentry_exit_to_user_mode+0x4e/0xb0 [ 77.306217][ T2122] irqentry_exit+0x16/0x60 [ 77.306242][ T2122] exc_page_fault+0x66/0xc0 [ 77.306267][ T2122] asm_exc_page_fault+0x2b/0x30 [ 77.306288][ T2122] RIP: 0033:0x7f77bd98e931 [ 77.306306][ T2122] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 77.306332][ T2122] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 77.306353][ T2122] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 77.306368][ T2122] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 77.306383][ T2122] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 77.306397][ T2122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.306410][ T2122] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 77.306428][ T2122] [ 77.404809][ T305] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 77.450095][ T2122] memory: usage 298068kB, limit 307200kB, failcnt 30056 [ 77.462428][ T2486] bridge0: port 3(veth0_vlan) entered blocking state [ 77.463615][ T2122] memory+swap: usage 414308kB, limit 9007199254740988kB, failcnt 0 [ 77.469454][ T2486] bridge0: port 3(veth0_vlan) entered disabled state [ 77.474703][ T2122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 77.474724][ T2122] Memory cgroup stats for /syz2 [ 77.490650][ T2486] veth0_vlan: entered allmulticast mode [ 77.544104][ T2122] : [ 77.557549][ T2486] bridge0: port 3(veth0_vlan) entered blocking state [ 77.635622][ T2428] rust_binder: Write failure EINVAL in pid:514 [ 77.641360][ T2486] bridge0: port 3(veth0_vlan) entered forwarding state [ 77.665842][ T2122] cache 306016256 [ 77.887852][ T305] usb 4-1: USB disconnect, device number 26 [ 77.912508][ T2122] rss 225280 [ 77.948740][ T2122] rss_huge 0 [ 77.971993][ T2122] shmem 305819648 [ 77.975738][ T2122] mapped_file 65536 [ 77.980008][ T2122] dirty 4096 [ 78.010439][ T2122] writeback 126976 [ 78.014431][ T2122] workingset_refault_anon 30 [ 78.019272][ T2122] workingset_refault_file 239 [ 78.082879][ T2122] swap 123703296 [ 78.086501][ T2122] swapcached 200704 [ 78.114698][ T2504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.114805][ T2122] pgpgin 269181 [ 78.125847][ T2122] pgpgout 195888 [ 78.125957][ T2504] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 78.129655][ T2122] pgfault 63706 [ 78.129662][ T2504] rust_binder: Error while translating object. [ 78.129730][ T2504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.138738][ T2122] pgmajfault 24 [ 78.157673][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 78.171608][ T2122] inactive_anon 215429120 [ 78.189362][ T2122] active_anon 90312704 [ 78.193810][ T2122] inactive_file 0 [ 78.197907][ T2122] active_file 196608 [ 78.202407][ T2122] unevictable 0 [ 78.205972][ T2122] hierarchical_memory_limit 314572800 [ 78.211707][ T2122] hierarchical_memsw_limit 9223372036854771712 [ 78.222554][ T2122] total_cache 306016256 [ 78.227372][ T2122] total_rss 225280 [ 78.249023][ T2122] total_rss_huge 0 [ 78.253231][ T2122] total_shmem 305819648 [ 78.259060][ T2122] total_mapped_file 65536 [ 78.264923][ T2122] total_dirty 4096 [ 78.270532][ T2122] total_writeback 126976 [ 78.280556][ T2122] total_workingset_refault_anon 30 [ 78.294513][ T2122] total_workingset_refault_file 239 [ 78.307989][ T2122] total_swap 123703296 [ 78.320387][ T2122] total_swapcached 200704 [ 78.326389][ T2122] total_pgpgin 269181 [ 78.333652][ T2122] total_pgpgout 195888 [ 78.338226][ T2122] total_pgfault 63706 [ 78.344047][ T2122] total_pgmajfault 24 [ 78.348157][ T2122] total_inactive_anon 215429120 [ 78.368359][ T2122] total_active_anon 90312704 [ 78.380389][ T2122] total_inactive_file 0 [ 78.384702][ T2122] total_active_file 196608 [ 78.401381][ T2122] total_unevictable 0 [ 78.405565][ T2122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2145,uid=0 [ 78.427071][ T2122] Memory cgroup out of memory: Killed process 2145 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 78.454194][ T36] audit: type=1400 audit(1750740176.350:354): avc: denied { create } for pid=2529 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.565190][ T2150] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 78.654519][ T2150] CPU: 1 UID: 0 PID: 2150 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 78.654561][ T2150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.654575][ T2150] Call Trace: [ 78.654583][ T2150] [ 78.654591][ T2150] __dump_stack+0x21/0x30 [ 78.654623][ T2150] dump_stack_lvl+0x10c/0x190 [ 78.654649][ T2150] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.654673][ T2150] ? ___ratelimit+0x3f7/0x5a0 [ 78.654697][ T2150] dump_stack+0x19/0x20 [ 78.654722][ T2150] dump_header+0xd7/0x490 [ 78.654753][ T2150] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 78.654776][ T2150] oom_kill_process+0x4c0/0x7e0 [ 78.654796][ T2150] ? sched_clock_cpu+0x75/0x400 [ 78.654821][ T2150] out_of_memory+0x7ee/0xbd0 [ 78.654841][ T2150] ? __cfi_out_of_memory+0x10/0x10 [ 78.654861][ T2150] ? mutex_lock_killable+0x104/0x1c0 [ 78.654887][ T2150] ? __cfi_mutex_lock_killable+0x10/0x10 [ 78.654914][ T2150] mem_cgroup_out_of_memory+0x279/0x350 [ 78.654944][ T2150] ? drain_obj_stock+0xed0/0xed0 [ 78.654973][ T2150] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 78.655001][ T2150] try_charge_memcg+0x8f7/0xde0 [ 78.655026][ T2150] ? __cfi_try_charge_memcg+0x10/0x10 [ 78.655051][ T2150] ? __alloc_pages_noprof+0x30d/0x6c0 [ 78.655074][ T2150] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 78.655097][ T2150] ? __folio_batch_add_and_move+0x2ab/0x370 [ 78.655119][ T2150] __mem_cgroup_charge+0xf6/0x410 [ 78.655145][ T2150] ? __kasan_check_write+0x18/0x20 [ 78.655169][ T2150] ? _raw_spin_lock+0x8c/0x120 [ 78.655199][ T2150] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 78.655236][ T2150] shmem_alloc_and_add_folio+0x86d/0x1050 [ 78.655273][ T2150] ? put_swap_device+0x130/0x130 [ 78.655305][ T2150] ? shmem_huge_global_enabled+0x2da/0x360 [ 78.655336][ T2150] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 78.655367][ T2150] ? __kasan_check_write+0x18/0x20 [ 78.655392][ T2150] ? _raw_spin_lock+0x8c/0x120 [ 78.655423][ T2150] shmem_get_folio_gfp+0x5f0/0x1380 [ 78.655456][ T2150] ? shmem_get_folio+0xc0/0xc0 [ 78.655485][ T2150] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 78.655510][ T2150] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 78.655535][ T2150] ? inode_to_bdi+0x6d/0x100 [ 78.655560][ T2150] shmem_write_begin+0xf4/0x270 [ 78.655593][ T2150] generic_perform_write+0x32d/0x960 [ 78.655622][ T2150] ? __cfi_generic_perform_write+0x10/0x10 [ 78.655647][ T2150] ? down_write+0xe9/0x2a0 [ 78.655673][ T2150] ? mnt_get_write_access_file+0x1af/0x3b0 [ 78.655695][ T2150] ? mnt_put_write_access_file+0xc2/0x100 [ 78.655718][ T2150] ? file_update_time+0x1ef/0x220 [ 78.655742][ T2150] shmem_file_write_iter+0x105/0x130 [ 78.655766][ T2150] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 78.655789][ T2150] __kernel_write_iter+0x395/0x830 [ 78.655817][ T2150] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 78.655840][ T2150] ? __cfi___kernel_write_iter+0x10/0x10 [ 78.655867][ T2150] ? get_dump_page+0x160/0x220 [ 78.655889][ T2150] ? __asan_memset+0x39/0x50 [ 78.655913][ T2150] ? iov_iter_bvec+0xc0/0x180 [ 78.655943][ T2150] dump_user_range+0xb06/0xdf0 [ 78.655972][ T2150] ? __cfi_dump_emit+0x10/0x10 [ 78.655998][ T2150] ? __cfi_dump_user_range+0x10/0x10 [ 78.656024][ T2150] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 78.656052][ T2150] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 78.656081][ T2150] elf_core_dump+0x2cd9/0x3810 [ 78.656139][ T2150] ? __cfi_elf_core_dump+0x10/0x10 [ 78.656180][ T2150] ? dump_interrupted+0xf0/0xf0 [ 78.656210][ T2150] ? filp_open+0x182/0x1d0 [ 78.656233][ T2150] ? 0xffffffffff600000 [ 78.656251][ T2150] do_coredump+0x1bfa/0x2bd0 [ 78.656281][ T2150] ? __cfi_do_coredump+0x10/0x10 [ 78.656306][ T2150] ? asm_exc_page_fault+0x2b/0x30 [ 78.656336][ T2150] ? __kasan_slab_free+0x6a/0x80 [ 78.656366][ T2150] ? kmem_cache_free+0x1c1/0x4c0 [ 78.656395][ T2150] get_signal+0x11fd/0x14f0 [ 78.656421][ T2150] arch_do_signal_or_restart+0x96/0x720 [ 78.656450][ T2150] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 78.656484][ T2150] irqentry_exit_to_user_mode+0x4e/0xb0 [ 78.656512][ T2150] irqentry_exit+0x16/0x60 [ 78.656537][ T2150] exc_page_fault+0x66/0xc0 [ 78.656562][ T2150] asm_exc_page_fault+0x2b/0x30 [ 78.656583][ T2150] RIP: 0033:0x7f77bd98e931 [ 78.656600][ T2150] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 78.656621][ T2150] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 78.656640][ T2150] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 78.656656][ T2150] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 78.656671][ T2150] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 78.656685][ T2150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 78.656699][ T2150] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 78.656718][ T2150] [ 78.656727][ T2150] memory: usage 306592kB, limit 307200kB, failcnt 30856 [ 78.750432][ T36] audit: type=1400 audit(1750740176.640:355): avc: denied { execute } for pid=2540 comm="syz.1.703" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.754560][ T2150] memory+swap: usage 428552kB, limit 9007199254740988kB, failcnt 0 [ 78.932078][ T36] audit: type=1326 audit(1750740177.831:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2540 comm="syz.1.703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ab318e929 code=0x0 [ 78.937178][ T2150] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 79.223578][ T45] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 79.232314][ T2150] Memory cgroup stats for /syz2: [ 79.232539][ T2150] cache 314224640 [ 79.242598][ T2150] rss 217088 [ 79.246087][ T2150] rss_huge 0 [ 79.249597][ T2150] shmem 314159104 [ 79.253292][ T2150] mapped_file 61440 [ 79.257382][ T2150] dirty 0 [ 79.263095][ T2150] writeback 0 [ 79.267234][ T2150] workingset_refault_anon 33 [ 79.272510][ T2150] workingset_refault_file 271 [ 79.277496][ T2150] swap 127729664 [ 79.281283][ T2150] swapcached 28672 [ 79.285640][ T2150] pgpgin 288509 [ 79.289171][ T36] audit: type=1400 audit(1750740178.181:357): avc: denied { mounton } for pid=2559 comm="syz.0.711" path="/file1/file0" dev="ramfs" ino=16769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 79.289260][ T2150] pgpgout 213271 [ 79.316132][ T2150] pgfault 64608 [ 79.319639][ T2150] pgmajfault 29 [ 79.324683][ T2150] inactive_anon 181809152 [ 79.329557][ T2150] active_anon 132501504 [ 79.334242][ T2150] inactive_file 0 [ 79.338103][ T2150] active_file 65536 [ 79.344107][ T2150] unevictable 0 [ 79.354442][ T2150] hierarchical_memory_limit 314572800 [ 79.360649][ T2150] hierarchical_memsw_limit 9223372036854771712 [ 79.367137][ T2150] total_cache 314224640 [ 79.371681][ T45] usb 4-1: device descriptor read/64, error -71 [ 79.378307][ T2150] total_rss 217088 [ 79.382141][ T2150] total_rss_huge 0 [ 79.386055][ T2150] total_shmem 314159104 [ 79.390494][ T2150] total_mapped_file 61440 [ 79.395107][ T2150] total_dirty 0 [ 79.398583][ T2150] total_writeback 0 [ 79.402739][ T2150] total_workingset_refault_anon 33 [ 79.416938][ T2150] total_workingset_refault_file 271 [ 79.422446][ T2150] total_swap 127729664 [ 79.428805][ T2150] total_swapcached 28672 [ 79.433477][ T2150] total_pgpgin 288509 [ 79.437733][ T2150] total_pgpgout 213271 [ 79.442067][ T2150] total_pgfault 64608 [ 79.446333][ T2150] total_pgmajfault 29 [ 79.451324][ T2150] total_inactive_anon 181809152 [ 79.456572][ T2150] total_active_anon 132501504 [ 79.462385][ T2150] total_inactive_file 0 [ 79.466590][ T2150] total_active_file 65536 [ 79.471329][ T2150] total_unevictable 0 [ 79.475453][ T2150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2149,uid=0 [ 79.490596][ T2150] Memory cgroup out of memory: Killed process 2149 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 79.581334][ T2122] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 79.630415][ T45] usb 4-1: device descriptor read/64, error -71 [ 79.658163][ T2122] CPU: 0 UID: 0 PID: 2122 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 79.658203][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.658217][ T2122] Call Trace: [ 79.658225][ T2122] [ 79.658234][ T2122] __dump_stack+0x21/0x30 [ 79.658266][ T2122] dump_stack_lvl+0x10c/0x190 [ 79.658292][ T2122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.658317][ T2122] ? ___ratelimit+0x3f7/0x5a0 [ 79.658342][ T2122] dump_stack+0x19/0x20 [ 79.658367][ T2122] dump_header+0xd7/0x490 [ 79.658399][ T2122] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 79.658422][ T2122] oom_kill_process+0x4c0/0x7e0 [ 79.658442][ T2122] ? sched_clock_cpu+0x75/0x400 [ 79.658469][ T2122] out_of_memory+0x7ee/0xbd0 [ 79.658488][ T2122] ? __cfi_out_of_memory+0x10/0x10 [ 79.658508][ T2122] ? mutex_lock_killable+0x92/0x1c0 [ 79.658533][ T2122] ? __cfi_mutex_lock_killable+0x10/0x10 [ 79.658560][ T2122] mem_cgroup_out_of_memory+0x279/0x350 [ 79.658589][ T2122] ? drain_obj_stock+0xed0/0xed0 [ 79.658620][ T2122] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 79.658649][ T2122] try_charge_memcg+0x8f7/0xde0 [ 79.658675][ T2122] ? __cfi_try_charge_memcg+0x10/0x10 [ 79.658699][ T2122] ? __alloc_pages_noprof+0x30d/0x6c0 [ 79.658722][ T2122] ? folio_add_new_anon_rmap+0x475/0x910 [ 79.658755][ T2122] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 79.658780][ T2122] __mem_cgroup_charge+0xf6/0x410 [ 79.658806][ T2122] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 79.658835][ T2122] shmem_alloc_and_add_folio+0x86d/0x1050 [ 79.658869][ T2122] ? put_swap_device+0x130/0x130 [ 79.658901][ T2122] ? shmem_huge_global_enabled+0x2da/0x360 [ 79.658935][ T2122] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 79.658965][ T2122] ? __kasan_check_write+0x18/0x20 [ 79.658990][ T2122] ? _raw_spin_lock+0x8c/0x120 [ 79.659021][ T2122] shmem_get_folio_gfp+0x5f0/0x1380 [ 79.659054][ T2122] ? shmem_get_folio+0xc0/0xc0 [ 79.659085][ T2122] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 79.659109][ T2122] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 79.659143][ T2122] ? inode_to_bdi+0x6d/0x100 [ 79.659167][ T2122] shmem_write_begin+0xf4/0x270 [ 79.659202][ T2122] generic_perform_write+0x32d/0x960 [ 79.659231][ T2122] ? __cfi_generic_perform_write+0x10/0x10 [ 79.659256][ T2122] ? down_write+0xe9/0x2a0 [ 79.659281][ T2122] ? mnt_get_write_access_file+0x1af/0x3b0 [ 79.659305][ T2122] ? mnt_put_write_access_file+0xc2/0x100 [ 79.659327][ T2122] ? file_update_time+0x1ef/0x220 [ 79.659351][ T2122] shmem_file_write_iter+0x105/0x130 [ 79.659378][ T2122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 79.659401][ T2122] __kernel_write_iter+0x395/0x830 [ 79.659428][ T2122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 79.659452][ T2122] ? __cfi___kernel_write_iter+0x10/0x10 [ 79.659481][ T2122] ? __asan_memset+0x39/0x50 [ 79.659506][ T2122] ? iov_iter_bvec+0xc0/0x180 [ 79.659536][ T2122] dump_user_range+0xb06/0xdf0 [ 79.659565][ T2122] ? __cfi_dump_emit+0x10/0x10 [ 79.659591][ T2122] ? __cfi_dump_user_range+0x10/0x10 [ 79.659618][ T2122] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 79.659647][ T2122] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 79.659677][ T2122] elf_core_dump+0x2cd9/0x3810 [ 79.659714][ T2122] ? __cfi_elf_core_dump+0x10/0x10 [ 79.659754][ T2122] ? dump_interrupted+0xf0/0xf0 [ 79.659778][ T2122] ? filp_open+0x182/0x1d0 [ 79.659800][ T2122] ? 0xffffffffff600000 [ 79.659818][ T2122] do_coredump+0x1bfa/0x2bd0 [ 79.659848][ T2122] ? __cfi_do_coredump+0x10/0x10 [ 79.659893][ T2122] ? asm_exc_page_fault+0x2b/0x30 [ 79.659924][ T2122] ? __kasan_slab_free+0x6a/0x80 [ 79.659955][ T2122] ? kmem_cache_free+0x1c1/0x4c0 [ 79.659984][ T2122] get_signal+0x11fd/0x14f0 [ 79.660011][ T2122] arch_do_signal_or_restart+0x96/0x720 [ 79.660042][ T2122] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 79.660074][ T2122] irqentry_exit_to_user_mode+0x4e/0xb0 [ 79.660103][ T2122] irqentry_exit+0x16/0x60 [ 79.660141][ T2122] exc_page_fault+0x66/0xc0 [ 79.660167][ T2122] asm_exc_page_fault+0x2b/0x30 [ 79.660188][ T2122] RIP: 0033:0x7f77bd98e931 [ 79.660207][ T2122] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 79.660226][ T2122] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 79.660247][ T2122] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 79.660262][ T2122] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 79.660290][ T2122] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 79.660305][ T2122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 79.660317][ T2122] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 79.660335][ T2122] [ 79.660344][ T2122] memory: usage 306648kB, limit 307200kB, failcnt 31715 [ 79.870463][ T45] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 80.020469][ T45] usb 4-1: device descriptor read/64, error -71 [ 80.021783][ T2122] memory+swap: usage 425556kB, limit 9007199254740988kB, failcnt 0 [ 80.089488][ T2581] overlayfs: failed to resolve './file1': -2 [ 80.179298][ T2122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 80.210322][ T2122] Memory cgroup stats for /syz2: [ 80.210714][ T2122] cache 311930880 [ 80.219441][ T2122] rss 229376 [ 80.230101][ T2122] rss_huge 0 [ 80.259685][ T2122] shmem 311869440 [ 80.268074][ T2122] mapped_file 61440 [ 80.272117][ T2122] dirty 0 [ 80.275603][ T2122] writeback 0 [ 80.280549][ T2122] workingset_refault_anon 36 [ 80.285221][ T2122] workingset_refault_file 287 [ 80.290023][ T2122] swap 127799296 [ 80.293622][ T2122] swapcached 188416 [ 80.297516][ T2122] pgpgin 298974 [ 80.307786][ T2122] pgpgout 224256 [ 80.310526][ T45] usb 4-1: device descriptor read/64, error -71 [ 80.312280][ T2122] pgfault 65061 [ 80.323332][ T2122] pgmajfault 33 [ 80.326844][ T2122] inactive_anon 128921600 [ 80.331282][ T2122] active_anon 183283712 [ 80.335633][ T2122] inactive_file 0 [ 80.339385][ T2122] active_file 61440 [ 80.343281][ T2122] unevictable 0 [ 80.369662][ T2122] hierarchical_memory_limit 314572800 [ 80.375618][ T2122] hierarchical_memsw_limit 9223372036854771712 [ 80.381964][ T2122] total_cache 311930880 [ 80.386276][ T2122] total_rss 229376 [ 80.390109][ T2122] total_rss_huge 0 [ 80.394603][ T2122] total_shmem 311869440 [ 80.398837][ T2122] total_mapped_file 61440 [ 80.403635][ T2122] total_dirty 0 [ 80.409367][ T2122] total_writeback 0 [ 80.413921][ T2122] total_workingset_refault_anon 36 [ 80.419236][ T2122] total_workingset_refault_file 287 [ 80.421968][ T2600] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 80.424986][ T45] usb usb4-port1: attempt power cycle [ 80.439236][ T2122] total_swap 127799296 [ 80.443414][ T2122] total_swapcached 188416 [ 80.447761][ T2122] total_pgpgin 298974 [ 80.452211][ T2122] total_pgpgout 224256 [ 80.456493][ T2122] total_pgfault 65061 [ 80.457281][ T36] audit: type=1400 audit(1750740179.351:358): avc: denied { create } for pid=2601 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 80.460522][ T2122] total_pgmajfault 33 [ 80.460533][ T2122] total_inactive_anon 128921600 [ 80.490332][ T2122] total_active_anon 183283712 [ 80.495423][ T2122] total_inactive_file 0 [ 80.499862][ T2122] total_active_file 61440 [ 80.504299][ T2122] total_unevictable 0 [ 80.508968][ T2122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2122,uid=0 [ 80.525686][ T2122] Memory cgroup out of memory: Killed process 2122 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 80.790439][ T45] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 80.812052][ T2141] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 80.841441][ T45] usb 4-1: device descriptor read/8, error -71 [ 80.914725][ T36] audit: type=1326 audit(1750740179.801:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.1.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ab318e929 code=0x0 [ 80.971434][ T45] usb 4-1: device descriptor read/8, error -71 [ 80.990376][ T2141] CPU: 0 UID: 0 PID: 2141 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 80.990414][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.990428][ T2141] Call Trace: [ 80.990435][ T2141] [ 80.990444][ T2141] __dump_stack+0x21/0x30 [ 80.990474][ T2141] dump_stack_lvl+0x10c/0x190 [ 80.990499][ T2141] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.990524][ T2141] ? ___ratelimit+0x3f7/0x5a0 [ 80.990547][ T2141] dump_stack+0x19/0x20 [ 80.990570][ T2141] dump_header+0xd7/0x490 [ 80.990601][ T2141] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 80.990624][ T2141] oom_kill_process+0x4c0/0x7e0 [ 80.990643][ T2141] ? sched_clock_cpu+0x75/0x400 [ 80.990667][ T2141] out_of_memory+0x7ee/0xbd0 [ 80.990688][ T2141] ? __cfi_out_of_memory+0x10/0x10 [ 80.990707][ T2141] ? mutex_lock_killable+0x92/0x1c0 [ 80.990733][ T2141] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.990760][ T2141] mem_cgroup_out_of_memory+0x279/0x350 [ 80.990790][ T2141] ? drain_obj_stock+0xed0/0xed0 [ 80.990820][ T2141] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 80.990850][ T2141] try_charge_memcg+0x8f7/0xde0 [ 80.990875][ T2141] ? __cfi_try_charge_memcg+0x10/0x10 [ 80.990899][ T2141] ? __alloc_pages_noprof+0x30d/0x6c0 [ 80.990924][ T2141] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 80.990946][ T2141] ? __folio_batch_add_and_move+0x2ab/0x370 [ 80.990969][ T2141] __mem_cgroup_charge+0xf6/0x410 [ 80.990996][ T2141] ? __kasan_check_write+0x18/0x20 [ 80.991022][ T2141] ? _raw_spin_lock+0x8c/0x120 [ 80.991053][ T2141] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 80.991082][ T2141] shmem_alloc_and_add_folio+0x86d/0x1050 [ 80.991120][ T2141] ? put_swap_device+0x130/0x130 [ 80.991152][ T2141] ? shmem_huge_global_enabled+0x2da/0x360 [ 80.991184][ T2141] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 80.991216][ T2141] ? __kasan_check_write+0x18/0x20 [ 80.991248][ T2141] ? _raw_spin_lock+0x8c/0x120 [ 80.991280][ T2141] shmem_get_folio_gfp+0x5f0/0x1380 [ 80.991314][ T2141] ? shmem_get_folio+0xc0/0xc0 [ 80.991341][ T2141] ? follow_page_pte+0xa5c/0xb90 [ 80.991364][ T2141] ? inode_to_bdi+0x6d/0x100 [ 80.991389][ T2141] shmem_write_begin+0xf4/0x270 [ 80.991423][ T2141] generic_perform_write+0x32d/0x960 [ 80.991452][ T2141] ? __cfi_generic_perform_write+0x10/0x10 [ 80.991477][ T2141] ? down_write+0xe9/0x2a0 [ 80.991504][ T2141] ? file_update_time+0xa3/0x220 [ 80.991528][ T2141] shmem_file_write_iter+0x105/0x130 [ 80.991551][ T2141] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 80.991574][ T2141] __kernel_write_iter+0x395/0x830 [ 80.991602][ T2141] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 80.991626][ T2141] ? __cfi___kernel_write_iter+0x10/0x10 [ 80.991653][ T2141] ? get_dump_page+0x160/0x220 [ 80.991674][ T2141] ? __asan_memset+0x39/0x50 [ 80.991699][ T2141] ? iov_iter_bvec+0xc0/0x180 [ 80.991728][ T2141] dump_user_range+0xb06/0xdf0 [ 80.991757][ T2141] ? __cfi_dump_emit+0x10/0x10 [ 80.991782][ T2141] ? __cfi_dump_user_range+0x10/0x10 [ 80.991810][ T2141] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 80.991840][ T2141] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 80.991870][ T2141] elf_core_dump+0x2cd9/0x3810 [ 80.991906][ T2141] ? __cfi_elf_core_dump+0x10/0x10 [ 80.991945][ T2141] ? dump_interrupted+0xf0/0xf0 [ 80.991971][ T2141] ? filp_open+0x182/0x1d0 [ 80.991992][ T2141] ? 0xffffffffff600000 [ 80.992011][ T2141] do_coredump+0x1bfa/0x2bd0 [ 80.992041][ T2141] ? __cfi_do_coredump+0x10/0x10 [ 80.992066][ T2141] ? asm_exc_page_fault+0x2b/0x30 [ 80.992097][ T2141] ? __kasan_slab_free+0x6a/0x80 [ 80.992127][ T2141] ? kmem_cache_free+0x1c1/0x4c0 [ 80.992155][ T2141] get_signal+0x11fd/0x14f0 [ 80.992183][ T2141] arch_do_signal_or_restart+0x96/0x720 [ 80.992213][ T2141] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 80.992251][ T2141] irqentry_exit_to_user_mode+0x4e/0xb0 [ 80.992280][ T2141] irqentry_exit+0x16/0x60 [ 80.992306][ T2141] exc_page_fault+0x66/0xc0 [ 80.992331][ T2141] asm_exc_page_fault+0x2b/0x30 [ 80.992351][ T2141] RIP: 0033:0x7f77bd98e931 [ 80.992369][ T2141] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 80.992388][ T2141] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 80.992408][ T2141] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 80.992423][ T2141] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 80.992439][ T2141] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 80.992453][ T2141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 80.992466][ T2141] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 80.992485][ T2141] [ 80.992493][ T2141] memory: usage 307200kB, limit 307200kB, failcnt 33615 [ 81.210428][ T45] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 81.215383][ T2141] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 81.241476][ T45] usb 4-1: device descriptor read/8, error -71 [ 81.255902][ T2141] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.395353][ T45] usb 4-1: device descriptor read/8, error -71 [ 81.399217][ T2141] Memory cgroup stats for [ 81.510553][ T45] usb usb4-port1: unable to enumerate USB device [ 81.514201][ T2141] /syz2: [ 81.532290][ T2141] cache 314486784 [ 81.547842][ T2635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.547876][ T2635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.550484][ T2141] rss 81920 [ 81.565340][ T2141] rss_huge 0 [ 81.568576][ T2141] shmem 314482688 [ 81.572324][ T2141] mapped_file 0 [ 81.592444][ T2141] dirty 0 [ 81.595622][ T2141] writeback 0 [ 81.600438][ T2141] workingset_refault_anon 37 [ 81.605343][ T2141] workingset_refault_file 1185 [ 81.610326][ T2141] swap 127975424 [ 81.647644][ T2648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.647680][ T2648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.650486][ T2141] swapcached 20480 [ 81.687548][ T36] audit: type=1400 audit(1750740180.571:360): avc: denied { map } for pid=2641 comm="syz.3.739" path="socket:[17529]" dev="sockfs" ino=17529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.687627][ T2141] pgpgin 311047 [ 81.715443][ T2141] pgpgout 235781 [ 81.744150][ T2141] pgfault 65613 [ 81.747937][ T2141] pgmajfault 42 [ 81.751656][ T2141] inactive_anon 67506176 [ 81.756331][ T2141] active_anon 246796288 [ 81.760572][ T2141] inactive_file 0 [ 81.766035][ T2141] active_file 4096 [ 81.770245][ T2141] unevictable 0 [ 81.774158][ T2141] hierarchical_memory_limit 314572800 [ 81.779665][ T2141] hierarchical_memsw_limit 9223372036854771712 [ 81.786509][ T2141] total_cache 314486784 [ 81.800564][ T2141] total_rss 81920 [ 81.806396][ T2141] total_rss_huge 0 [ 81.810245][ T2141] total_shmem 314482688 [ 81.814629][ T2141] total_mapped_file 0 [ 81.818639][ T2141] total_dirty 0 [ 81.824990][ T2141] total_writeback 0 [ 81.838446][ T2141] total_workingset_refault_anon 37 [ 81.845965][ T2141] total_workingset_refault_file 1185 [ 81.851520][ T2141] total_swap 127975424 [ 81.855721][ T2141] total_swapcached 20480 [ 81.862235][ T2141] total_pgpgin 311047 [ 81.866962][ T2141] total_pgpgout 235781 [ 81.871238][ T2141] total_pgfault 65613 [ 81.876057][ T2669] lo: entered promiscuous mode [ 81.877618][ T2141] total_pgmajfault 42 [ 81.886677][ T2141] total_inactive_anon 67506176 [ 81.892022][ T2141] total_active_anon 246796288 [ 81.897332][ T2141] total_inactive_file 0 [ 81.903943][ T2141] total_active_file 4096 [ 81.908667][ T2141] total_unevictable 0 [ 81.913742][ T2141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2119,uid=0 [ 81.915979][ T2668] lo: left promiscuous mode [ 81.931125][ T2141] Memory cgroup out of memory: Killed process 2119 (syz.2.560) total-vm:90092kB, anon-rss:948kB, file-rss:53756kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 82.107741][ T2124] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 82.152366][ T2687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.159250][ T2687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 82.162852][ T2124] CPU: 0 UID: 0 PID: 2124 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 82.162912][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.162940][ T2124] Call Trace: [ 82.162950][ T2124] [ 82.162961][ T2124] __dump_stack+0x21/0x30 [ 82.163002][ T2124] dump_stack_lvl+0x10c/0x190 [ 82.163045][ T2124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.163077][ T2124] ? ___ratelimit+0x3f7/0x5a0 [ 82.163106][ T2124] dump_stack+0x19/0x20 [ 82.163133][ T2124] dump_header+0xd7/0x490 [ 82.163171][ T2124] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 82.163201][ T2124] oom_kill_process+0x4c0/0x7e0 [ 82.163227][ T2124] ? sched_clock_cpu+0x75/0x400 [ 82.163258][ T2124] out_of_memory+0x7ee/0xbd0 [ 82.163282][ T2124] ? __cfi_out_of_memory+0x10/0x10 [ 82.163305][ T2124] ? mutex_lock_killable+0x104/0x1c0 [ 82.163336][ T2124] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.163368][ T2124] mem_cgroup_out_of_memory+0x279/0x350 [ 82.163405][ T2124] ? drain_obj_stock+0xed0/0xed0 [ 82.163439][ T2124] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 82.163474][ T2124] try_charge_memcg+0x8f7/0xde0 [ 82.163504][ T2124] ? __cfi_try_charge_memcg+0x10/0x10 [ 82.163532][ T2124] ? __alloc_pages_noprof+0x30d/0x6c0 [ 82.163561][ T2124] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.163589][ T2124] ? __folio_batch_add_and_move+0x2ab/0x370 [ 82.163617][ T2124] __mem_cgroup_charge+0xf6/0x410 [ 82.163650][ T2124] ? __kasan_check_write+0x18/0x20 [ 82.163681][ T2124] ? _raw_spin_lock+0x8c/0x120 [ 82.163719][ T2124] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 82.163752][ T2124] shmem_alloc_and_add_folio+0x86d/0x1050 [ 82.163795][ T2124] ? put_swap_device+0x130/0x130 [ 82.163833][ T2124] ? shmem_huge_global_enabled+0x2da/0x360 [ 82.163878][ T2124] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 82.163914][ T2124] ? __kasan_check_write+0x18/0x20 [ 82.163957][ T2124] ? _raw_spin_lock+0x8c/0x120 [ 82.163993][ T2124] shmem_get_folio_gfp+0x5f0/0x1380 [ 82.164034][ T2124] ? shmem_get_folio+0xc0/0xc0 [ 82.164067][ T2124] ? follow_page_pte+0xa5c/0xb90 [ 82.164095][ T2124] ? inode_to_bdi+0x6d/0x100 [ 82.164124][ T2124] shmem_write_begin+0xf4/0x270 [ 82.164164][ T2124] generic_perform_write+0x32d/0x960 [ 82.164198][ T2124] ? __cfi_generic_perform_write+0x10/0x10 [ 82.164227][ T2124] ? down_write+0xe9/0x2a0 [ 82.164259][ T2124] ? file_update_time+0xa3/0x220 [ 82.164289][ T2124] shmem_file_write_iter+0x105/0x130 [ 82.164317][ T2124] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 82.164345][ T2124] __kernel_write_iter+0x395/0x830 [ 82.164378][ T2124] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 82.164407][ T2124] ? __cfi___kernel_write_iter+0x10/0x10 [ 82.164440][ T2124] ? get_dump_page+0x160/0x220 [ 82.164467][ T2124] ? __asan_memset+0x39/0x50 [ 82.164496][ T2124] ? iov_iter_bvec+0xc0/0x180 [ 82.164535][ T2124] dump_user_range+0xb06/0xdf0 [ 82.164569][ T2124] ? __cfi_dump_emit+0x10/0x10 [ 82.164602][ T2124] ? __cfi_dump_user_range+0x10/0x10 [ 82.164633][ T2124] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 82.164667][ T2124] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 82.164696][ T2124] elf_core_dump+0x2cd9/0x3810 [ 82.164742][ T2124] ? __cfi_elf_core_dump+0x10/0x10 [ 82.164787][ T2124] ? dump_interrupted+0xf0/0xf0 [ 82.164817][ T2124] ? filp_open+0x182/0x1d0 [ 82.164844][ T2124] ? 0xffffffffff600000 [ 82.164865][ T2124] do_coredump+0x1bfa/0x2bd0 [ 82.164900][ T2124] ? __cfi_do_coredump+0x10/0x10 [ 82.164935][ T2124] ? asm_exc_page_fault+0x2b/0x30 [ 82.164972][ T2124] ? __kasan_slab_free+0x6a/0x80 [ 82.165031][ T2124] ? kmem_cache_free+0x1c1/0x4c0 [ 82.165064][ T2124] get_signal+0x11fd/0x14f0 [ 82.165096][ T2124] arch_do_signal_or_restart+0x96/0x720 [ 82.165134][ T2124] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 82.165173][ T2124] irqentry_exit_to_user_mode+0x4e/0xb0 [ 82.165208][ T2124] irqentry_exit+0x16/0x60 [ 82.165238][ T2124] exc_page_fault+0x66/0xc0 [ 82.165268][ T2124] asm_exc_page_fault+0x2b/0x30 [ 82.165291][ T2124] RIP: 0033:0x7f77bd98e931 [ 82.165314][ T2124] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 82.165337][ T2124] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 82.165364][ T2124] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 82.165383][ T2124] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 82.165402][ T2124] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 82.165420][ T2124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.165437][ T2124] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 82.165458][ T2124] [ 82.170387][ T2124] memory: usage 305924kB, limit 307200kB, failcnt 35074 [ 82.270819][ T2687] rust_binder: Write failure EFAULT in pid:458 [ 82.410404][ T305] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 82.587914][ T2124] memory+swap: usage 430208kB, limit 9007199254740988kB, failcnt 0 [ 82.770419][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 82.777489][ T305] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 82.800428][ T305] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.821347][ T2696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.826389][ T305] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 82.847100][ T2124] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 82.876736][ T305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.890479][ T305] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 82.893776][ T2698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.900188][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.900407][ T36] audit: type=1400 audit(1750740181.781:361): avc: denied { getopt } for pid=2697 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.950949][ T305] usb 4-1: config 0 descriptor?? [ 82.958135][ T2124] Memory cgroup stats for /syz2: [ 82.958379][ T2124] cache 303132672 [ 83.030480][ T2124] rss 77824 [ 83.060456][ T2124] rss_huge 0 [ 83.063752][ T2124] shmem 303132672 [ 83.067435][ T2124] mapped_file 0 [ 83.141664][ T2124] dirty 0 [ 83.170416][ T2124] writeback 4096 [ 83.174153][ T2124] workingset_refault_anon 37 [ 83.178796][ T2124] workingset_refault_file 1185 [ 83.220372][ T2124] swap 127946752 [ 83.289943][ T2124] swapcached 20480 [ 83.337847][ T2124] pgpgin 317882 [ 83.374372][ T2124] pgpgout 245358 [ 83.380408][ T307] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 83.414970][ T2124] pgfault 65875 [ 83.418517][ T2124] pgmajfault 42 [ 83.423618][ T2717] futex_wake_op: syz.0.762 tries to shift op by -1; fix this program [ 83.433405][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 83.439547][ T305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 83.462137][ T305] usb 4-1: USB disconnect, device number 31 [ 83.519771][ T2124] inactive_anon 234078208 [ 83.540197][ T2124] active_anon 69136384 [ 83.551689][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.559828][ T2124] inactive_file 0 [ 83.564644][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.581724][ T307] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.583209][ T2124] active_file 0 [ 83.591887][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.591916][ T307] usb 2-1: SerialNumber: syz [ 83.625500][ T2124] unevictable 0 [ 83.629031][ T2124] hierarchical_memory_limit 314572800 [ 83.634938][ T2124] hierarchical_memsw_limit 9223372036854771712 [ 83.641298][ T2124] total_cache 303132672 [ 83.645563][ T2124] total_rss 77824 [ 83.649208][ T2124] total_rss_huge 0 [ 83.653524][ T2124] total_shmem 303132672 [ 83.657791][ T2124] total_mapped_file 0 [ 83.662000][ T2124] total_dirty 0 [ 83.665475][ T2124] total_writeback 4096 [ 83.669630][ T2124] total_workingset_refault_anon 37 [ 83.675014][ T2124] total_workingset_refault_file 1185 [ 83.680508][ T2124] total_swap 127946752 [ 83.684598][ T2124] total_swapcached 20480 [ 83.688854][ T2124] total_pgpgin 317882 [ 83.693248][ T2124] total_pgpgout 245358 [ 83.697784][ T2124] total_pgfault 65875 [ 83.703347][ T2124] total_pgmajfault 42 [ 83.707357][ T2124] total_inactive_anon 234078208 [ 83.712646][ T2124] total_active_anon 69136384 [ 83.717740][ T2124] total_inactive_file 0 [ 83.722178][ T2124] total_active_file 0 [ 83.726174][ T2124] total_unevictable 0 [ 83.730297][ T2124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2102,uid=0 [ 83.747880][ T2124] Memory cgroup out of memory: Killed process 2102 (syz.2.560) total-vm:90092kB, anon-rss:1076kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 83.817433][ T307] usb 2-1: 0:2 : does not exist [ 83.827802][ T307] usb 2-1: USB disconnect, device number 26 [ 83.843616][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.869628][ T305] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 83.896715][ T2124] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 83.927913][ T2124] CPU: 1 UID: 0 PID: 2124 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 83.927956][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.927971][ T2124] Call Trace: [ 83.927979][ T2124] [ 83.927988][ T2124] __dump_stack+0x21/0x30 [ 83.928022][ T2124] dump_stack_lvl+0x10c/0x190 [ 83.928047][ T2124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.928086][ T2124] ? ___ratelimit+0x3f7/0x5a0 [ 83.928110][ T2124] dump_stack+0x19/0x20 [ 83.928134][ T2124] dump_header+0xd7/0x490 [ 83.928167][ T2124] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 83.928191][ T2124] oom_kill_process+0x4c0/0x7e0 [ 83.928213][ T2124] ? sched_clock_cpu+0x75/0x400 [ 83.928239][ T2124] out_of_memory+0x7ee/0xbd0 [ 83.928259][ T2124] ? __cfi_out_of_memory+0x10/0x10 [ 83.928280][ T2124] ? mutex_lock_killable+0x92/0x1c0 [ 83.928307][ T2124] ? __cfi_mutex_lock_killable+0x10/0x10 [ 83.928334][ T2124] mem_cgroup_out_of_memory+0x279/0x350 [ 83.928364][ T2124] ? drain_obj_stock+0xed0/0xed0 [ 83.928392][ T2124] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 83.928421][ T2124] try_charge_memcg+0x8f7/0xde0 [ 83.928445][ T2124] ? __cfi_try_charge_memcg+0x10/0x10 [ 83.928468][ T2124] ? __alloc_pages_noprof+0x30d/0x6c0 [ 83.928492][ T2124] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.928514][ T2124] ? __folio_batch_add_and_move+0x2ab/0x370 [ 83.928537][ T2124] __mem_cgroup_charge+0xf6/0x410 [ 83.928562][ T2124] ? __kasan_check_write+0x18/0x20 [ 83.928589][ T2124] ? _raw_spin_lock+0x8c/0x120 [ 83.928618][ T2124] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 83.928645][ T2124] shmem_alloc_and_add_folio+0x86d/0x1050 [ 83.928682][ T2124] ? put_swap_device+0x130/0x130 [ 83.928714][ T2124] ? shmem_huge_global_enabled+0x2da/0x360 [ 83.928753][ T2124] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 83.928783][ T2124] ? __kasan_check_write+0x18/0x20 [ 83.928807][ T2124] ? _raw_spin_lock+0x8c/0x120 [ 83.928837][ T2124] shmem_get_folio_gfp+0x5f0/0x1380 [ 83.928869][ T2124] ? shmem_get_folio+0xc0/0xc0 [ 83.928897][ T2124] ? follow_page_pte+0xa5c/0xb90 [ 83.928920][ T2124] ? inode_to_bdi+0x6d/0x100 [ 83.928946][ T2124] shmem_write_begin+0xf4/0x270 [ 83.928977][ T2124] generic_perform_write+0x32d/0x960 [ 83.929006][ T2124] ? __cfi_generic_perform_write+0x10/0x10 [ 83.929030][ T2124] ? down_write+0xe9/0x2a0 [ 83.929055][ T2124] ? file_update_time+0xa3/0x220 [ 83.929079][ T2124] shmem_file_write_iter+0x105/0x130 [ 83.929102][ T2124] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 83.929126][ T2124] __kernel_write_iter+0x395/0x830 [ 83.929153][ T2124] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 83.929176][ T2124] ? __cfi___kernel_write_iter+0x10/0x10 [ 83.929202][ T2124] ? get_dump_page+0x160/0x220 [ 83.929223][ T2124] ? __asan_memset+0x39/0x50 [ 83.929246][ T2124] ? iov_iter_bvec+0xc0/0x180 [ 83.929280][ T2124] dump_user_range+0xb06/0xdf0 [ 83.929308][ T2124] ? __cfi_dump_emit+0x10/0x10 [ 83.929334][ T2124] ? __cfi_dump_user_range+0x10/0x10 [ 83.929362][ T2124] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 83.929390][ T2124] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 83.929418][ T2124] elf_core_dump+0x2cd9/0x3810 [ 83.929453][ T2124] ? __cfi_elf_core_dump+0x10/0x10 [ 83.929491][ T2124] ? dump_interrupted+0xf0/0xf0 [ 83.929515][ T2124] ? filp_open+0x182/0x1d0 [ 83.929536][ T2124] ? 0xffffffffff600000 [ 83.929554][ T2124] do_coredump+0x1bfa/0x2bd0 [ 83.929582][ T2124] ? __cfi_do_coredump+0x10/0x10 [ 83.929607][ T2124] ? asm_exc_page_fault+0x2b/0x30 [ 83.929637][ T2124] ? __kasan_slab_free+0x6a/0x80 [ 83.929668][ T2124] ? kmem_cache_free+0x1c1/0x4c0 [ 83.929696][ T2124] get_signal+0x11fd/0x14f0 [ 83.929729][ T2124] arch_do_signal_or_restart+0x96/0x720 [ 83.929761][ T2124] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 83.929794][ T2124] irqentry_exit_to_user_mode+0x4e/0xb0 [ 83.929823][ T2124] irqentry_exit+0x16/0x60 [ 83.929848][ T2124] exc_page_fault+0x66/0xc0 [ 83.929872][ T2124] asm_exc_page_fault+0x2b/0x30 [ 83.929892][ T2124] RIP: 0033:0x7f77bd98e931 [ 83.929909][ T2124] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 83.929927][ T2124] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 83.929948][ T2124] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 83.929963][ T2124] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 83.929977][ T2124] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 83.929993][ T2124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 83.930006][ T2124] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 83.930025][ T2124] [ 83.930033][ T2124] memory: usage 298172kB, limit 307200kB, failcnt 36590 [ 84.031531][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.139324][ T2730] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 84.139717][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.312936][ T2124] memory+swap: usage 403232kB, limit 9007199254740988kB, failcnt 0 [ 84.315094][ T305] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 84.469266][ T2124] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 84.476298][ T2124] Memory cgroup stats for /syz2: [ 84.476437][ T2124] cache 292687872 [ 84.485862][ T2124] rss 237568 [ 84.489124][ T2124] rss_huge 0 [ 84.492486][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.501409][ T305] usb 4-1: config 0 descriptor?? [ 84.512115][ T2124] shmem 292687872 [ 84.515925][ T2124] mapped_file 0 [ 84.519595][ T2124] dirty 0 [ 84.522641][ T2124] writeback 196608 [ 84.526435][ T2124] workingset_refault_anon 41 [ 84.531087][ T2124] workingset_refault_file 2193 [ 84.535978][ T2124] swap 127766528 [ 84.539733][ T2124] swapcached 229376 [ 84.543639][ T2124] pgpgin 331131 [ 84.547311][ T2124] pgpgout 261097 [ 84.551065][ T2124] pgfault 66342 [ 84.554558][ T2124] pgmajfault 48 [ 84.558050][ T2124] inactive_anon 252870656 [ 84.562861][ T2124] active_anon 39677952 [ 84.567390][ T2124] inactive_file 0 [ 84.571190][ T2124] active_file 0 [ 84.575222][ T2124] unevictable 0 [ 84.579043][ T2124] hierarchical_memory_limit 314572800 [ 84.630550][ T2124] hierarchical_memsw_limit 9223372036854771712 [ 84.637077][ T2124] total_cache 292687872 [ 84.656416][ T2124] total_rss 237568 [ 84.690562][ T2124] total_rss_huge 0 [ 84.727947][ T2124] total_shmem 292687872 [ 84.742468][ T2124] total_mapped_file 0 [ 84.746713][ T2124] total_dirty 0 [ 84.750265][ T2124] total_writeback 196608 [ 84.835836][ T2124] total_workingset_refault_anon 41 [ 84.909493][ T305] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 84.919669][ T305] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 84.927150][ T2124] total_workingset_refault_file 2193 [ 84.932610][ T305] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 84.940169][ T305] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 84.950426][ T305] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 84.958117][ T2124] total_swap 127766528 [ 84.966767][ T305] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 85.000562][ T2124] total_swapcached 229376 [ 85.047347][ T2124] total_pgpgin 331131 [ 85.075986][ T2124] total_pgpgout 261097 [ 85.080126][ T2124] total_pgfault 66342 [ 85.108059][ T305] playstation 0003:054C:0DF2.0007: Invalid byte count transferred, expected 20 got 0 [ 85.130660][ T305] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 85.144540][ T305] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 85.154779][ T305] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 85.165282][ T305] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 85.176135][ T2124] total_pgmajfault 48 [ 85.220383][ T2124] total_inactive_anon 252870656 [ 85.268208][ T2124] total_active_anon 39677952 [ 85.270420][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 85.326597][ T2124] total_inactive_file 0 [ 85.364483][ T2124] total_active_file 0 [ 85.398494][ T2124] total_unevictable 0 [ 85.402741][ T2124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2125,uid=0 [ 85.422876][ T305] usb 4-1: USB disconnect, device number 32 [ 85.433168][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 85.451310][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 231, changing to 11 [ 85.464698][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 85.479375][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 85.511567][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.526965][ T2776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.536728][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.550401][ T9] usb 2-1: Product: 酎牙ௐ甠夓胟꺦弃ﵘ錺碕懫餁㥴癐쬘3䦻콗遅츢᫳䰷Ǹ驴릪狀缽ꐭ攸఑ᩧꅿឫ恂耚瑭Ⅿᰃ볇⿻褕輥鬇鋵Ǟ觊哕㧟䘱襵㶰劀ꈖ㚥쥥썳ᔃ꘻⢹䲫噃꣱⟧㵙糢擃ឤ˧ [ 85.570937][ T2776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.578666][ T9] usb 2-1: Manufacturer: 䟶袛듎왋銻믣솁Ⅿ粎ﷹ㱍욷꘩ꀎ⃢ [ 85.617541][ T9] usb 2-1: SerialNumber: ᤱ킑딪⠭뼈ᨌ鉇࿵⊶Ǐ☮硄䧼税ꬿӹ֠᰽䡫魧ꎋ컟墂ሁ䶾讉뢑뗯⓺ዤ삑䜱鷺귏㈡릉崽奯雟藎绣촳휢鳸떪䐼갷លㅚ铦ᕝ缐ꋽ䢣ᷣ䫗福㗟헃憫Ꞟ㫄஺뀐⏖ [ 85.651605][ T2783] overlayfs: failed to clone upperpath [ 85.662066][ T2124] Memory cgroup out of memory: OOM victim 2125 (syz.2.560) is already exiting. Skip killing the task [ 85.676414][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 85.691467][ T9] cdc_ncm 2-1:1.0: bind() failure [ 85.699195][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 85.704944][ T2146] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 85.708774][ T9] cdc_ncm 2-1:1.1: bind() failure [ 85.737439][ T2146] CPU: 0 UID: 0 PID: 2146 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 85.737478][ T2146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.737492][ T2146] Call Trace: [ 85.737499][ T2146] [ 85.737507][ T2146] __dump_stack+0x21/0x30 [ 85.737537][ T2146] dump_stack_lvl+0x10c/0x190 [ 85.737563][ T2146] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.737588][ T2146] ? ___ratelimit+0x3f7/0x5a0 [ 85.737612][ T2146] dump_stack+0x19/0x20 [ 85.737634][ T2146] dump_header+0xd7/0x490 [ 85.737666][ T2146] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 85.737691][ T2146] oom_kill_process+0x4c0/0x7e0 [ 85.737711][ T2146] ? sched_clock_cpu+0x75/0x400 [ 85.737737][ T2146] out_of_memory+0x7ee/0xbd0 [ 85.737757][ T2146] ? __cfi_out_of_memory+0x10/0x10 [ 85.737777][ T2146] ? mutex_lock_killable+0x104/0x1c0 [ 85.737801][ T2146] ? __cfi_mutex_lock_killable+0x10/0x10 [ 85.737838][ T2146] mem_cgroup_out_of_memory+0x279/0x350 [ 85.737871][ T2146] ? drain_obj_stock+0xed0/0xed0 [ 85.737902][ T2146] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 85.737933][ T2146] try_charge_memcg+0x8f7/0xde0 [ 85.737958][ T2146] ? __cfi_try_charge_memcg+0x10/0x10 [ 85.737983][ T2146] ? __alloc_pages_noprof+0x30d/0x6c0 [ 85.738008][ T2146] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 85.738031][ T2146] ? __folio_batch_add_and_move+0x2ab/0x370 [ 85.738055][ T2146] __mem_cgroup_charge+0xf6/0x410 [ 85.738081][ T2146] ? __kasan_check_write+0x18/0x20 [ 85.738108][ T2146] ? _raw_spin_lock+0x8c/0x120 [ 85.738140][ T2146] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 85.738169][ T2146] shmem_alloc_and_add_folio+0x86d/0x1050 [ 85.738206][ T2146] ? put_swap_device+0x130/0x130 [ 85.738239][ T2146] ? shmem_huge_global_enabled+0x2da/0x360 [ 85.738269][ T2146] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 85.738300][ T2146] ? __kasan_check_write+0x18/0x20 [ 85.738326][ T2146] ? _raw_spin_lock+0x8c/0x120 [ 85.738358][ T2146] shmem_get_folio_gfp+0x5f0/0x1380 [ 85.738390][ T2146] ? shmem_get_folio+0xc0/0xc0 [ 85.738418][ T2146] ? follow_page_pte+0xa5c/0xb90 [ 85.738440][ T2146] ? inode_to_bdi+0x6d/0x100 [ 85.738464][ T2146] shmem_write_begin+0xf4/0x270 [ 85.738498][ T2146] generic_perform_write+0x32d/0x960 [ 85.738526][ T2146] ? __cfi_generic_perform_write+0x10/0x10 [ 85.738550][ T2146] ? down_write+0xe9/0x2a0 [ 85.738576][ T2146] ? file_update_time+0xa3/0x220 [ 85.738599][ T2146] shmem_file_write_iter+0x105/0x130 [ 85.738621][ T2146] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 85.738645][ T2146] __kernel_write_iter+0x395/0x830 [ 85.738672][ T2146] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 85.738695][ T2146] ? __cfi___kernel_write_iter+0x10/0x10 [ 85.738723][ T2146] ? get_dump_page+0x160/0x220 [ 85.738745][ T2146] ? __asan_memset+0x39/0x50 [ 85.738771][ T2146] ? iov_iter_bvec+0xc0/0x180 [ 85.738802][ T2146] dump_user_range+0xb06/0xdf0 [ 85.738841][ T2146] ? __cfi_dump_emit+0x10/0x10 [ 85.738868][ T2146] ? __cfi_dump_user_range+0x10/0x10 [ 85.738895][ T2146] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 85.738926][ T2146] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 85.738956][ T2146] elf_core_dump+0x2cd9/0x3810 [ 85.738994][ T2146] ? __cfi_elf_core_dump+0x10/0x10 [ 85.739035][ T2146] ? dump_interrupted+0xf0/0xf0 [ 85.739060][ T2146] ? filp_open+0x182/0x1d0 [ 85.739082][ T2146] ? 0xffffffffff600000 [ 85.739100][ T2146] do_coredump+0x1bfa/0x2bd0 [ 85.739130][ T2146] ? __cfi_do_coredump+0x10/0x10 [ 85.739157][ T2146] ? asm_exc_page_fault+0x2b/0x30 [ 85.739189][ T2146] ? __kasan_slab_free+0x6a/0x80 [ 85.739220][ T2146] ? kmem_cache_free+0x1c1/0x4c0 [ 85.739250][ T2146] get_signal+0x11fd/0x14f0 [ 85.739277][ T2146] arch_do_signal_or_restart+0x96/0x720 [ 85.739306][ T2146] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 85.739362][ T2146] irqentry_exit_to_user_mode+0x4e/0xb0 [ 85.739392][ T2146] irqentry_exit+0x16/0x60 [ 85.739417][ T2146] exc_page_fault+0x66/0xc0 [ 85.739441][ T2146] asm_exc_page_fault+0x2b/0x30 [ 85.739463][ T2146] RIP: 0033:0x7f77bd98e931 [ 85.739482][ T2146] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 85.739501][ T2146] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 85.739523][ T2146] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 85.739539][ T2146] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 85.739555][ T2146] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.739569][ T2146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.739583][ T2146] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 85.739602][ T2146] [ 85.739611][ T2146] memory: usage 306588kB, limit 307200kB, failcnt 37511 [ 86.224387][ T2146] memory+swap: usage 431996kB, limit 9007199254740988kB, failcnt 0 [ 86.232623][ T2146] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 86.239566][ T2146] Memory cgroup stats for /syz2: [ 86.239671][ T2146] cache 314220544 [ 86.248280][ T2146] rss 172032 [ 86.251626][ T2146] rss_huge 0 [ 86.254841][ T2146] shmem 314216448 [ 86.258489][ T2146] mapped_file 0 [ 86.262280][ T2146] dirty 0 [ 86.265772][ T2146] writeback 0 [ 86.269083][ T2146] workingset_refault_anon 80 [ 86.273734][ T2146] workingset_refault_file 2948 [ 86.278528][ T2146] swap 127791104 [ 86.282334][ T2146] swapcached 204800 [ 86.286151][ T2146] pgpgin 355573 [ 86.289610][ T2146] pgpgout 280306 [ 86.290446][ T305] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 86.293224][ T2146] pgfault 67140 [ 86.304406][ T2146] pgmajfault 98 [ 86.307889][ T2146] inactive_anon 95834112 [ 86.312215][ T2146] active_anon 218734592 [ 86.316480][ T2146] inactive_file 0 [ 86.320138][ T2146] active_file 4096 [ 86.323949][ T2146] unevictable 0 [ 86.327525][ T2146] hierarchical_memory_limit 314572800 [ 86.332940][ T2146] hierarchical_memsw_limit 9223372036854771712 [ 86.339292][ T2146] total_cache 314220544 [ 86.343608][ T2146] total_rss 172032 [ 86.347439][ T2146] total_rss_huge 0 [ 86.351368][ T2146] total_shmem 314216448 [ 86.356007][ T2146] total_mapped_file 0 [ 86.360085][ T2146] total_dirty 0 [ 86.363786][ T2146] total_writeback 0 [ 86.367845][ T2146] total_workingset_refault_anon 80 [ 86.373006][ T2146] total_workingset_refault_file 2948 [ 86.378290][ T2146] total_swap 127791104 [ 86.382428][ T2146] total_swapcached 204800 [ 86.386862][ T2146] total_pgpgin 355573 [ 86.390892][ T2146] total_pgpgout 280306 [ 86.394978][ T2146] total_pgfault 67140 [ 86.398974][ T2146] total_pgmajfault 98 [ 86.403055][ T2146] total_inactive_anon 95834112 [ 86.408006][ T2146] total_active_anon 218734592 [ 86.412738][ T2146] total_inactive_file 0 [ 86.417074][ T2146] total_active_file 4096 [ 86.421408][ T2146] total_unevictable 0 [ 86.425930][ T2146] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2101,uid=0 [ 86.441002][ T2146] Memory cgroup out of memory: Killed process 2101 (syz.2.560) total-vm:90092kB, anon-rss:1076kB, file-rss:53564kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 86.461460][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.472222][ T305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.484891][ T305] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.494601][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.502807][ T305] usb 4-1: SerialNumber: syz [ 86.533289][ T2796] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 86.545295][ T2796] overlayfs: missing 'lowerdir' [ 86.719211][ T305] usb 4-1: MIDIStreaming interface descriptor not found [ 86.747017][ T305] usb 4-1: USB disconnect, device number 33 [ 87.087777][ T2801] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 87.181810][ T2141] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 87.211721][ T2141] CPU: 0 UID: 0 PID: 2141 Comm: syz.2.560 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 87.211758][ T2141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.211772][ T2141] Call Trace: [ 87.211778][ T2141] [ 87.211787][ T2141] __dump_stack+0x21/0x30 [ 87.211816][ T2141] dump_stack_lvl+0x10c/0x190 [ 87.211840][ T2141] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.211864][ T2141] ? ___ratelimit+0x3f7/0x5a0 [ 87.211887][ T2141] dump_stack+0x19/0x20 [ 87.211910][ T2141] dump_header+0xd7/0x490 [ 87.211955][ T2141] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 87.211977][ T2141] oom_kill_process+0x4c0/0x7e0 [ 87.211994][ T2141] ? sched_clock_cpu+0x75/0x400 [ 87.212018][ T2141] out_of_memory+0x7ee/0xbd0 [ 87.212036][ T2141] ? __cfi_out_of_memory+0x10/0x10 [ 87.212054][ T2141] ? mutex_lock_killable+0x92/0x1c0 [ 87.212079][ T2141] ? __cfi_mutex_lock_killable+0x10/0x10 [ 87.212105][ T2141] mem_cgroup_out_of_memory+0x279/0x350 [ 87.212134][ T2141] ? drain_obj_stock+0xed0/0xed0 [ 87.212183][ T2141] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 87.212212][ T2141] try_charge_memcg+0x8f7/0xde0 [ 87.212236][ T2141] ? __cfi_try_charge_memcg+0x10/0x10 [ 87.212260][ T2141] ? __alloc_pages_noprof+0x30d/0x6c0 [ 87.212284][ T2141] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 87.212305][ T2141] ? __folio_batch_add_and_move+0x2ab/0x370 [ 87.212328][ T2141] __mem_cgroup_charge+0xf6/0x410 [ 87.212360][ T2141] ? __kasan_check_write+0x18/0x20 [ 87.212384][ T2141] ? _raw_spin_lock+0x8c/0x120 [ 87.212413][ T2141] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 87.212462][ T2141] shmem_alloc_and_add_folio+0x86d/0x1050 [ 87.212497][ T2141] ? put_swap_device+0x130/0x130 [ 87.212529][ T2141] ? shmem_huge_global_enabled+0x2da/0x360 [ 87.212558][ T2141] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 87.212587][ T2141] ? __kasan_check_write+0x18/0x20 [ 87.212611][ T2141] ? _raw_spin_lock+0x8c/0x120 [ 87.212643][ T2141] shmem_get_folio_gfp+0x5f0/0x1380 [ 87.212676][ T2141] ? shmem_get_folio+0xc0/0xc0 [ 87.212704][ T2141] ? follow_page_pte+0xa5c/0xb90 [ 87.212726][ T2141] ? inode_to_bdi+0x6d/0x100 [ 87.212749][ T2141] shmem_write_begin+0xf4/0x270 [ 87.212780][ T2141] generic_perform_write+0x32d/0x960 [ 87.212809][ T2141] ? __cfi_generic_perform_write+0x10/0x10 [ 87.212833][ T2141] ? down_write+0xe9/0x2a0 [ 87.212860][ T2141] ? file_update_time+0xa3/0x220 [ 87.212883][ T2141] shmem_file_write_iter+0x105/0x130 [ 87.212906][ T2141] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 87.212929][ T2141] __kernel_write_iter+0x395/0x830 [ 87.212955][ T2141] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 87.212979][ T2141] ? __cfi___kernel_write_iter+0x10/0x10 [ 87.213006][ T2141] ? get_dump_page+0x160/0x220 [ 87.213026][ T2141] ? __asan_memset+0x39/0x50 [ 87.213051][ T2141] ? iov_iter_bvec+0xc0/0x180 [ 87.213083][ T2141] dump_user_range+0xb06/0xdf0 [ 87.213111][ T2141] ? __cfi_dump_emit+0x10/0x10 [ 87.213137][ T2141] ? __cfi_dump_user_range+0x10/0x10 [ 87.213165][ T2141] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 87.213192][ T2141] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 87.213220][ T2141] elf_core_dump+0x2cd9/0x3810 [ 87.213255][ T2141] ? __cfi_elf_core_dump+0x10/0x10 [ 87.213294][ T2141] ? dump_interrupted+0xf0/0xf0 [ 87.213317][ T2141] ? filp_open+0x182/0x1d0 [ 87.213339][ T2141] ? 0xffffffffff600000 [ 87.213357][ T2141] do_coredump+0x1bfa/0x2bd0 [ 87.213386][ T2141] ? __cfi_do_coredump+0x10/0x10 [ 87.213411][ T2141] ? asm_exc_page_fault+0x2b/0x30 [ 87.213453][ T2141] ? __kasan_slab_free+0x6a/0x80 [ 87.213482][ T2141] ? kmem_cache_free+0x1c1/0x4c0 [ 87.213510][ T2141] get_signal+0x11fd/0x14f0 [ 87.213537][ T2141] arch_do_signal_or_restart+0x96/0x720 [ 87.213567][ T2141] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 87.213599][ T2141] irqentry_exit_to_user_mode+0x4e/0xb0 [ 87.213628][ T2141] irqentry_exit+0x16/0x60 [ 87.213652][ T2141] exc_page_fault+0x66/0xc0 [ 87.213676][ T2141] asm_exc_page_fault+0x2b/0x30 [ 87.213697][ T2141] RIP: 0033:0x7f77bd98e931 [ 87.213723][ T2141] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 87.213743][ T2141] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 87.213764][ T2141] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 87.213779][ T2141] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 87.213793][ T2141] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.213807][ T2141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 87.213821][ T2141] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 87.213845][ T2141] [ 87.214190][ T2141] memory: usage 307200kB, limit 307200kB, failcnt 40417 [ 87.700584][ T2141] memory+swap: usage 431816kB, limit 9007199254740988kB, failcnt 0 [ 87.710649][ T2141] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 87.717604][ T2141] Memory cgroup stats for /syz2: [ 87.717762][ T2141] cache 314109952 [ 87.726952][ T2141] rss 159744 [ 87.730204][ T2141] rss_huge 0 [ 87.733794][ T2141] shmem 314105856 [ 87.737850][ T2141] mapped_file 0 [ 87.745127][ T2141] dirty 0 [ 87.748371][ T2141] writeback 0 [ 87.752424][ T2141] workingset_refault_anon 97 [ 87.758157][ T2141] workingset_refault_file 4307 [ 87.770442][ T2141] swap 127606784 [ 87.774120][ T2141] swapcached 389120 [ 87.778052][ T2141] pgpgin 367988 [ 87.782026][ T2141] pgpgout 292721 [ 87.785670][ T2141] pgfault 67560 [ 87.789230][ T2141] pgmajfault 123 [ 87.793323][ T2141] inactive_anon 15245312 [ 87.797932][ T2141] active_anon 299323392 [ 87.802428][ T2141] inactive_file 0 [ 87.806240][ T2141] active_file 4096 [ 87.810188][ T2141] unevictable 0 [ 87.814313][ T2141] hierarchical_memory_limit 314572800 [ 87.820953][ T2141] hierarchical_memsw_limit 9223372036854771712 [ 87.827546][ T2141] total_cache 314109952 [ 87.832406][ T2141] total_rss 159744 [ 87.836214][ T2141] total_rss_huge 0 [ 87.840100][ T2141] total_shmem 314105856 [ 87.844696][ T2141] total_mapped_file 0 [ 87.848778][ T2141] total_dirty 0 [ 87.852849][ T2141] total_writeback 0 [ 87.856906][ T2141] total_workingset_refault_anon 97 [ 87.862070][ T2141] total_workingset_refault_file 4307 [ 87.867435][ T2141] total_swap 127606784 [ 87.871708][ T2141] total_swapcached 389120 [ 87.876974][ T2141] total_pgpgin 367988 [ 87.881221][ T2141] total_pgpgout 292721 [ 87.885322][ T2141] total_pgfault 67560 [ 87.889560][ T2141] total_pgmajfault 123 [ 87.893793][ T2141] total_inactive_anon 15245312 [ 87.898565][ T2141] total_active_anon 299323392 [ 87.903354][ T2141] total_inactive_file 0 [ 87.907681][ T2141] total_active_file 4096 [ 87.920372][ T2141] total_unevictable 0 [ 87.924668][ T2141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.560,pid=2105,uid=0 [ 87.950489][ T31] ================================================================== [ 87.958719][ T31] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 87.965678][ T31] Write of size 8 at addr 0000000000000098 by task kworker/1:0/31 [ 87.973514][ T31] [ 87.975867][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 87.975898][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.975913][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 87.975975][ T31] Call Trace: [ 87.975983][ T31] [ 87.975992][ T31] __dump_stack+0x21/0x30 [ 87.976018][ T31] dump_stack_lvl+0x10c/0x190 [ 87.976043][ T31] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.976067][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 87.976094][ T31] ? sched_clock+0x44/0x60 [ 87.976117][ T31] print_report+0x3d/0x70 [ 87.976137][ T31] kasan_report+0x163/0x1a0 [ 87.976168][ T31] ? down_write+0x83/0x2a0 [ 87.976194][ T31] ? down_write+0x83/0x2a0 [ 87.976220][ T31] kasan_check_range+0x299/0x2a0 [ 87.976251][ T31] __kasan_check_write+0x18/0x20 [ 87.976277][ T31] down_write+0x83/0x2a0 [ 87.976302][ T31] ? __cfi_down_write+0x10/0x10 [ 87.976328][ T31] ? _raw_spin_lock+0x8c/0x120 [ 87.976366][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 87.976396][ T31] ? mutex_unlock+0x8b/0x240 [ 87.976419][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 87.976443][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 87.976469][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 87.976508][ T31] ? update_curr_dl_se+0x65a/0xb20 [ 87.976538][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 87.976562][ T31] ? update_curr+0x60d/0xc60 [ 87.976592][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 87.976631][ T31] ? update_load_avg+0x506/0x19a0 [ 87.976652][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 87.976685][ T31] ? dequeue_entity+0xa9c/0x1750 [ 87.976707][ T31] ? arch_stack_walk+0x139/0x170 [ 87.976738][ T31] ? tg_unthrottle_up+0x980/0x980 [ 87.976760][ T31] ? stack_depot_save_flags+0x38/0x800 [ 87.976790][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 87.976816][ T31] ? sched_clock_noinstr+0xd/0x30 [ 87.976839][ T31] ? sched_clock+0x44/0x60 [ 87.976861][ T31] ? sched_clock_cpu+0x75/0x400 [ 87.976886][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 87.976910][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 87.976935][ T31] ? xfd_validate_state+0x68/0x150 [ 87.976960][ T31] ? save_fpregs_to_fpstate+0x196/0x230 [ 87.976994][ T31] ? __kasan_check_write+0x18/0x20 [ 87.977020][ T31] ? __switch_to+0xc7b/0x1310 [ 87.977045][ T31] ? psi_group_change+0xb44/0x1130 [ 87.977071][ T31] ? __cfi___switch_to+0x10/0x10 [ 87.977098][ T31] ? _raw_spin_unlock+0x45/0x60 [ 87.977129][ T31] ? __switch_to_asm+0x3d/0x70 [ 87.977158][ T31] ? __schedule+0x1463/0x1f10 [ 87.977180][ T31] ? kick_pool+0xad/0x550 [ 87.977201][ T31] process_scheduled_works+0x7d2/0x1020 [ 87.977235][ T31] worker_thread+0xc58/0x1250 [ 87.977269][ T31] kthread+0x2ca/0x370 [ 87.977300][ T31] ? __cfi_worker_thread+0x10/0x10 [ 87.977330][ T31] ? __cfi_kthread+0x10/0x10 [ 87.977368][ T31] ret_from_fork+0x64/0xa0 [ 87.977393][ T31] ? __cfi_kthread+0x10/0x10 [ 87.977425][ T31] ret_from_fork_asm+0x1a/0x30 [ 87.977457][ T31] [ 87.977465][ T31] ================================================================== [ 87.990425][ T36] audit: type=1400 audit(1750740186.841:362): avc: denied { map } for pid=2811 comm="syz.3.792" path="socket:[17245]" dev="sockfs" ino=17245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 87.990893][ T31] Disabling lock debugging due to kernel taint [ 88.009616][ T2141] Memory cgroup out of memory: Killed process 2105 (syz.2.560) total-vm:90092kB, anon-rss:1076kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 88.018015][ T31] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 88.120486][ T36] audit: type=1400 audit(1750740186.911:363): avc: denied { accept } for pid=2811 comm="syz.3.792" path="socket:[17245]" dev="sockfs" ino=17245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.123150][ T31] #PF: supervisor write access in kernel mode [ 88.123166][ T31] #PF: error_code(0x0002) - not-present page [ 88.123180][ T31] PGD 0 [ 88.128533][ T36] audit: type=1400 audit(1750740186.961:364): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.135054][ T31] P4D 0 [ 88.135073][ T31] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 88.135097][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G B 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 88.145419][ T36] audit: type=1400 audit(1750740186.961:365): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.154534][ T31] Tainted: [B]=BAD_PAGE [ 88.154547][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.154562][ T31] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 88.154628][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 88.170130][ T36] audit: type=1400 audit(1750740186.961:366): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.170228][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 dd 1c 55 fc 4c 89 f7 be 08 00 00 00 e8 d0 1c 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 88.181639][ T36] audit: type=1400 audit(1750740186.961:367): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.185942][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 88.185966][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 88.203981][ T36] audit: type=1400 audit(1750740186.961:368): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.206032][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 88.206052][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 88.222958][ T36] audit: type=1400 audit(1750740186.961:369): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.228519][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 88.228550][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 88.228567][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 88.246393][ T36] audit: type=1400 audit(1750740186.961:370): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.249273][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.249304][ T31] CR2: 0000000000000098 CR3: 000000010aece000 CR4: 00000000003526b0 [ 88.249325][ T31] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 88.249339][ T31] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.249356][ T31] Call Trace: [ 88.317670][ T2108] syz.2.560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 88.320314][ T31] [ 88.320333][ T31] ? __cfi_down_write+0x10/0x10 [ 88.320365][ T31] ? _raw_spin_lock+0x8c/0x120 [ 88.320397][ T31] ? __cfi__raw_spin_lock+0x10/0x10 [ 88.320427][ T31] ? mutex_unlock+0x8b/0x240 [ 88.320450][ T31] ? __cfi_mutex_unlock+0x10/0x10 [ 88.320474][ T31] rust_binderfs_remove_file+0x6c/0x110 [ 88.320501][ T31] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 88.428441][ T2108] CPU: 0 UID: 0 PID: 2108 Comm: syz.2.560 Tainted: G B 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 88.428491][ T2108] Tainted: [B]=BAD_PAGE [ 88.428501][ T2108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.428517][ T2108] Call Trace: [ 88.428526][ T2108] [ 88.428538][ T2108] __dump_stack+0x21/0x30 [ 88.428572][ T2108] dump_stack_lvl+0x10c/0x190 [ 88.428600][ T2108] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.428628][ T2108] ? ___ratelimit+0x3f7/0x5a0 [ 88.428653][ T2108] dump_stack+0x19/0x20 [ 88.428680][ T2108] dump_header+0xd7/0x490 [ 88.428715][ T2108] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 88.428741][ T2108] oom_kill_process+0x4c0/0x7e0 [ 88.428763][ T2108] ? sched_clock_cpu+0x75/0x400 [ 88.428793][ T2108] out_of_memory+0x7ee/0xbd0 [ 88.428815][ T2108] ? __cfi_out_of_memory+0x10/0x10 [ 88.428835][ T2108] ? mutex_lock_killable+0x104/0x1c0 [ 88.428863][ T2108] ? __cfi_mutex_lock_killable+0x10/0x10 [ 88.428893][ T2108] mem_cgroup_out_of_memory+0x279/0x350 [ 88.428926][ T2108] ? drain_obj_stock+0xed0/0xed0 [ 88.428958][ T2108] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 88.428989][ T2108] try_charge_memcg+0x8f7/0xde0 [ 88.429016][ T2108] ? set_pte_range+0x441/0x660 [ 88.429049][ T2108] ? __cfi_try_charge_memcg+0x10/0x10 [ 88.429075][ T2108] ? __alloc_pages_noprof+0x30d/0x6c0 [ 88.429102][ T2108] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 88.429129][ T2108] __mem_cgroup_charge+0xf6/0x410 [ 88.429158][ T2108] ? __cfi_folio_unlock+0x10/0x10 [ 88.429180][ T2108] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 88.429212][ T2108] shmem_alloc_and_add_folio+0x86d/0x1050 [ 88.429251][ T2108] ? put_swap_device+0x130/0x130 [ 88.429287][ T2108] ? shmem_huge_global_enabled+0x2da/0x360 [ 88.429420][ T2108] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 88.429490][ T2108] ? __kasan_check_write+0x18/0x20 [ 88.429519][ T2108] ? _raw_spin_lock+0x8c/0x120 [ 88.429553][ T2108] shmem_get_folio_gfp+0x5f0/0x1380 [ 88.429592][ T2108] ? shmem_get_folio+0xc0/0xc0 [ 88.429624][ T2108] ? follow_page_pte+0xa5c/0xb90 [ 88.429648][ T2108] ? inode_to_bdi+0x6d/0x100 [ 88.429675][ T2108] shmem_write_begin+0xf4/0x270 [ 88.429714][ T2108] generic_perform_write+0x32d/0x960 [ 88.429745][ T2108] ? __cfi_generic_perform_write+0x10/0x10 [ 88.429773][ T2108] ? down_write+0xe9/0x2a0 [ 88.429802][ T2108] ? file_update_time+0xa3/0x220 [ 88.429828][ T2108] shmem_file_write_iter+0x105/0x130 [ 88.429853][ T2108] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 88.429879][ T2108] __kernel_write_iter+0x395/0x830 [ 88.429910][ T2108] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 88.429938][ T2108] ? __cfi___kernel_write_iter+0x10/0x10 [ 88.429968][ T2108] ? get_dump_page+0x160/0x220 [ 88.429993][ T2108] ? __asan_memset+0x39/0x50 [ 88.430021][ T2108] ? iov_iter_bvec+0xc0/0x180 [ 88.430057][ T2108] dump_user_range+0xb06/0xdf0 [ 88.430088][ T2108] ? __cfi_dump_emit+0x10/0x10 [ 88.430116][ T2108] ? __cfi_dump_user_range+0x10/0x10 [ 88.430146][ T2108] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 88.430180][ T2108] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 88.430212][ T2108] elf_core_dump+0x2cd9/0x3810 [ 88.430254][ T2108] ? __cfi_elf_core_dump+0x10/0x10 [ 88.430308][ T2108] ? dump_interrupted+0xf0/0xf0 [ 88.430336][ T2108] ? filp_open+0x182/0x1d0 [ 88.430360][ T2108] ? 0xffffffffff600000 [ 88.430380][ T2108] do_coredump+0x1bfa/0x2bd0 [ 88.430414][ T2108] ? __cfi_do_coredump+0x10/0x10 [ 88.430441][ T2108] ? asm_exc_page_fault+0x2b/0x30 [ 88.430476][ T2108] ? __kasan_slab_free+0x6a/0x80 [ 88.430509][ T2108] ? kmem_cache_free+0x1c1/0x4c0 [ 88.430542][ T2108] get_signal+0x11fd/0x14f0 [ 88.430573][ T2108] arch_do_signal_or_restart+0x96/0x720 [ 88.430605][ T2108] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 88.430640][ T2108] ? fpregs_restore_userregs+0x11d/0x260 [ 88.430666][ T2108] irqentry_exit_to_user_mode+0x4e/0xb0 [ 88.430697][ T2108] irqentry_exit+0x16/0x60 [ 88.430725][ T2108] exc_page_fault+0x66/0xc0 [ 88.430753][ T2108] asm_exc_page_fault+0x2b/0x30 [ 88.430778][ T2108] RIP: 0033:0x7f77bd98e931 [ 88.430798][ T2108] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 88.430820][ T2108] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 88.430863][ T2108] RAX: 0000000000000000 RBX: 00007f77bdbb5fa0 RCX: 00007f77bd98e929 [ 88.430881][ T2108] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 88.430898][ T2108] RBP: 00007f77bda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.430913][ T2108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 88.430929][ T2108] R13: 0000000000000000 R14: 00007f77bdbb5fa0 R15: 00007ffc06f32358 [ 88.430950][ T2108] [ 88.463774][ T2108] memory: usage 298160kB, limit 307200kB, failcnt 41086 [ 88.464808][ T31] ? update_curr_dl_se+0x65a/0xb20 [ 88.534238][ T2108] memory+swap: usage 406364kB, limit 9007199254740988kB, failcnt 0 [ 88.543374][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 88.543414][ T31] ? update_curr+0x60d/0xc60 [ 88.543441][ T31] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 88.668488][ T2108] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 88.668514][ T2108] Memory cgroup stats for /syz2 [ 88.676523][ T31] ? update_load_avg+0x506/0x19a0 [ 88.724902][ T2108] : [ 88.733767][ T31] ? detach_entity_load_avg+0x7b0/0x7b0 [ 88.733814][ T31] ? dequeue_entity+0xa9c/0x1750 [ 88.733836][ T31] ? arch_stack_walk+0x139/0x170 [ 88.778637][ T2108] cache 264085504 [ 88.778951][ T31] ? tg_unthrottle_up+0x980/0x980 [ 88.796639][ T2108] rss 90112 [ 88.803319][ T31] ? stack_depot_save_flags+0x38/0x800 [ 88.803363][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 88.803389][ T31] ? sched_clock_noinstr+0xd/0x30 [ 88.862429][ T2108] rss_huge 0 [ 88.864062][ T31] ? sched_clock+0x44/0x60 [ 88.870633][ T2108] shmem 264081408 [ 88.874305][ T31] ? sched_clock_cpu+0x75/0x400 [ 88.883676][ T2108] mapped_file 0 [ 88.884431][ T31] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 88.894972][ T2108] dirty 0 [ 88.899643][ T31] ? kvm_sched_clock_read+0x15/0x30 [ 88.899681][ T31] ? xfd_validate_state+0x68/0x150 [ 88.917555][ T2108] writeback 1732608 [ 88.922043][ T31] ? save_fpregs_to_fpstate+0x196/0x230 [ 88.922090][ T31] ? __kasan_check_write+0x18/0x20 [ 88.937258][ T2108] workingset_refault_anon 97 [ 88.937296][ T31] ? __switch_to+0xc7b/0x1310 [ 88.948559][ T2108] workingset_refault_file 4307 [ 88.948652][ T31] ? psi_group_change+0xb44/0x1130 [ 88.959276][ T2108] swap 123850752 [ 88.964773][ T31] ? __cfi___switch_to+0x10/0x10 [ 88.964808][ T31] ? _raw_spin_unlock+0x45/0x60 [ 88.983102][ T2108] swapcached 1986560 [ 88.988226][ T31] ? __switch_to_asm+0x3d/0x70 [ 89.004761][ T2108] pgpgin 367989 [ 89.008398][ T31] ? __schedule+0x1463/0x1f10 [ 89.023512][ T2108] pgpgout 304546 [ 89.028550][ T31] ? kick_pool+0xad/0x550 [ 89.028582][ T31] process_scheduled_works+0x7d2/0x1020 [ 89.047012][ T2108] pgfault 67560 [ 89.050126][ T31] worker_thread+0xc58/0x1250 [ 89.066164][ T2108] pgmajfault 123 [ 89.067582][ T31] kthread+0x2ca/0x370 [ 89.081317][ T2108] inactive_anon 253648896 [ 89.083156][ T31] ? __cfi_worker_thread+0x10/0x10 [ 89.095666][ T2108] active_anon 12353536 [ 89.097485][ T31] ? __cfi_kthread+0x10/0x10 [ 89.110412][ T2108] inactive_file 0 [ 89.116483][ T31] ret_from_fork+0x64/0xa0 [ 89.133928][ T2108] active_file 4096 [ 89.136470][ T31] ? __cfi_kthread+0x10/0x10 [ 89.148488][ T2108] unevictable 0 [ 89.150378][ T31] ret_from_fork_asm+0x1a/0x30 [ 89.163768][ T2108] hierarchical_memory_limit 314572800 [ 89.165944][ T31] [ 89.165955][ T31] Modules linked in: [ 89.165992][ T31] CR2: 0000000000000098 [ 89.177144][ T2108] hierarchical_memsw_limit 9223372036854771712 [ 89.182489][ T31] ---[ end trace 0000000000000000 ]--- [ 89.182516][ T31] RIP: 0010:down_write+0x9a/0x2a0 [ 89.194132][ T2108] total_cache 264085504 [ 89.194289][ T31] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 dd 1c 55 fc 4c 89 f7 be 08 00 00 00 e8 d0 1c 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 89.204313][ T2108] total_rss 90112 [ 89.208058][ T31] RSP: 0018:ffffc90000207500 EFLAGS: 00010256 [ 89.221353][ T2108] total_rss_huge 0 [ 89.233580][ T31] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 89.233607][ T31] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000207520 [ 89.233623][ T31] RBP: ffffc90000207598 R08: ffffc90000207527 R09: 1ffff92000040ea4 [ 89.233641][ T31] R10: dffffc0000000000 R11: fffff52000040ea5 R12: dffffc0000000000 [ 89.233657][ T31] R13: 1ffff92000040ea0 R14: ffffc90000207520 R15: 0000000000000000 [ 89.233675][ T31] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 89.253794][ T2108] total_shmem 264081408 [ 89.256168][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.256191][ T31] CR2: 0000000000000098 CR3: 000000010aece000 CR4: 00000000003526b0 [ 89.275476][ T2108] total_mapped_file 0 [ 89.280232][ T31] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 89.280251][ T31] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.292097][ T2108] total_dirty 0 [ 89.295601][ T31] Kernel panic - not syncing: Fatal exception [ 89.296083][ T31] Kernel Offset: disabled