last executing test programs: 5m39.829970779s ago: executing program 2 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'pimreg0\x00', @remote}) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3d, 0x100, 0x70bd26, 0x25dfdbff, {0xb}, [@nested={0x1d, 0x118, 0x0, 0x1, [@generic="9d2410f64991ce83049368c03e", @typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x107}]}, @typed={0x5, 0x40, 0x0, 0x0, @str='\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000740)=0xc00) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x20}], 0x0, 0x1000000, 0x0}) 5m39.783897302s ago: executing program 2 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0xa6c8, 0x0, 0x5, 0x9}, 'syz1\x00', 0x4000008}) ioctl$UI_DEV_CREATE(r0, 0x5501) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x448, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x434, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x2b}, {0x4}, {0x4}, {0xc}, {0x5, 0x8, {0x1}}}}, @m_ipt={0x404, 0x9, 0x0, 0x0, {{0x8}, {0x2e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x125, 0x6, {0x8, 'security\x00', 0x10, 0x0, "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"}}, @TCA_IPT_TARG={0x17f, 0x6, {0x2000, 'mangle\x00', 0x0, 0x5, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xf5, 0x6, "a55e2efce40f6bab37f04b0caa51b6227acccbc8b6cd6ea0d2a050a52cae348912c9207ee57e8b5179dc20b7d353bf46e7a4641ed1a1391abd5ac5b4c6c28408dfedfa02fa1a9a7d0949f4ddb0f8e68235606e324dfdd5e671519129362a83445ab28010d25e7b978625a6b46839558e7e7a742d4b13aff412bb50a5a1247af7fe64c92f2aaa5f85fe5b6874cf23f3e93037bb2753a871b84b49c3e9885011d8b2a1bf0a2ea3ec616dfc7c8b6faa589c2a514ac6d52c977bebb3065d1eb8dc139ba04a72da28493d3a1ba60704f04381c5ec6b032b4ecbb1d523d1b63ccd8e5051325c5e7d32265bd45d7e94bee3998dc2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0xb4, 0x0, &(0x7f0000000040)="de547e22bade76f1a03b79e954ee20bc43f7fe4769d19613725258e482cffcb9fda07fa03d2f3e0e647c2e700000000000000000000000000000000000000000000000000000e83ca671abf8e9dd9252e5cc1791303f537411b95218d2f775824e176226a5cd1789b3c7a450cf51bebc1acbb1ade782557cb9dae6b89b59e738da89432c9f025c09189bd8201f16d010d369f92377a900ed52eed79a21b902a72129207895e289308945afbd678fb4a08f23f2c3"}) fadvise64(r7, 0x5, 0x6, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@handle={0x73682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/207, 0xcf, 0x0, 0x36}, @fd}, &(0x7f0000000180)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 5m39.600991088s ago: executing program 2 (id=268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$xdp(0x2c, 0x3, 0x0) unshare(0x62040200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7fff, 0x1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x3, 0x3a32}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0xe0, 0x7, 0x4c, @remote, @remote, 0x8000, 0x8000, 0x6, 0x7}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xa, r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002080)={&(0x7f0000002100)=@newchain={0x1d1c, 0x64, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x10, 0xa}, {0x6, 0x8}}, [@f_tcindex={{0xc}, {0x61c, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x5e0, 0x7, [@m_skbmod={0x98, 0x20, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x41}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2b, 0x222, 0x30000004, 0x7fffffff, 0xe6}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x63a}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x13, 0x6, "10dce8da2d462d7226069d36ecb980"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xbc, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x7, 0xbb3c, 0x81}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x792}]}, {0x6e, 0x6, "af7b6c2e1d7ba699e77f0a9f7b016a3c8f2a332c351e9ab7dabb05a18d3c8f8f0a22451d7a9293b77f4232601dcf678dc5b13139fe10e18d5138148dd5c3ee61ef53f0b8d8fe572c2f3e7d77bec286d87da9364a4082c0dd231dc62fa535b6b82a02c8c3301b158e7bd3"}, {0xc}, {0xc}}}, @m_mirred={0x1b4, 0x20, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdb0, 0x37, 0x1, 0xc, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x30000000, 0x6, 0x7fffffff}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x3, 0x6, 0x81}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xd, 0x3, 0x8}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x2, 0x3, 0xe7c}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x497, 0xbc2, 0x6, 0xff, 0x800}, 0x7, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfe38, 0x8, 0x7, 0x4, 0xff}, 0x3, r11}}]}, {0xa6, 0x6, "fa3952701d810ab9ff4dbb582f3ef1a538386ed8db73651b563c6640610255662296455e59b33e94adb7efcc3e919919c6d366bd0cf8fb609a928db24ad39aaa785420794ff588dd7693d9814a958e861e341c838eace822e766af0758e74da0a3a14683a80ac2d4e960385313fdcb9e493ed38e5e9ad8a9679e608e2fd270b3e2d7b21855cd5fc415ddfa08b04787b43b4d4b26ba3bd6ca31f92ebaea42ee000000"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}, @m_skbedit={0xb0, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x72, 0x6, "673f5a5ee372d06639aa1b4a938f26d7ef14bea3a6e81199a678875615e8a567674f18c10755b7255b682ba9c5a2759777bf6169d4640168e53877e0832f97b5379c42912e68dd956a4ff7344d7b5e8e991d6ba12780995516d7028aa014ad48c5274a109bdcc2a0ae5213845291"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x224, 0x11, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6e, 0x4, 0x0, 0x0, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x642}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000000, 0x3, 0x5, 0x75d}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcb1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x973}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x18d, 0x6, "551a01392624c2adae38c2e1a135be767cba01fd577a97d7e92933cf1f4e60ae134f2b4f4cfd220f4be227c3104e155200ec52918db9584f44a27b178c3cefb4aa73952b299f7b63ce380a590a535c42394cee268ec66ba259d4f81874990d8675618ca9adf9b13e1da43db8044403302bf93dddf3ff6b74f65d1f9b9d56c3f3abd4c34acb708b597e6b07c913cb7b0452a6c053cc8f25268962106bb2c7bef7d6f042423d57e819ce79912fb460b0696ac83f2cd90aae639e6fe103c26714549b247fd49c1b87000200000da8b7c63e8773d47b1b300ab2951efffd5097bef0a9c303187936300e82308920f8ff40a7c0ba5a453bea549fbb006406b22f7dc480bc0d4bb1664c0826edc7230eb90e39532dcfb8334ccafd476d780af88c84dcdc29e710bc6d6265a9c35e82b2b9917c424086cf672bb464db491c26ee56c2643730207967c89894205c3031e6ad996ab31921f4d6fb7c3eb1b8eec3e47dec4beef465114164140302c20db175a53992695fa57b5eef24aaebad43be71dcc723a6832e664c30f9317a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x2e34}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xfffc}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xb337}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x4040}]}}, @f_rsvp={{0x9}, {0x1608, 0x2, [@TCA_RSVP_ACT={0x1604, 0x6, [@m_ct={0x40, 0x1e, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0xb}]}, {0x6, 0x6, "8d7e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x1d8, 0x10, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x80, 0xffffffffffffffff, 0x6, 0xe83a}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xef, 0x80000000, 0xffffffffffffffff, 0x7, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x6, 0x1, {{0x8, 0x3, 0x4, 0x9, 0xc27}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0xc, 0x1, 0x2, 0x3ff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3cd0, 0x9, 0x2, 0x12, 0xd}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffc, 0x3, 0x20000000, 0x2, 0x9068}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x653, 0x5, 0x10000000, 0x6, 0x6}, 0x9a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9d6, 0x0, 0xffffffffffffffff, 0x9, 0x8000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffffff07, 0x10000000, 0x7, 0x5}, 0x2112}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x10000000, 0x4, 0x5}}}]}, {0x8f, 0x6, "835780b4a64a873ccbedae7a50f4e68cfcce5e89bf67db4364d7b0e754f8def23d5a9c326135a326510533e84649acebf2ecd4cac1d17db19c04e579d1a657b7c39536e3ba05e3c0003b8b09689ed2aa9e0674f140d8831a7de7262d00e93e6f99875a675272b7cc1e6c79c16bacf21abded417831fdb29d847c173eb1d0a349db1f74b463189239b1a37c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xe8, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xaa, 0x5, 0x1, 0x9, 0x200}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x401, 0x7, 0x5, 0x400}, 0x3}}]}, {0x82, 0x6, "55f3af4c0b7b46aa75904baee8b3931e3c83984f186fac0717595f50503bb8ba614354d2636524e44e47d148b9e020cb7eb6381685e53b43a8fe57edf7555476a52f3d95ca51d8e9fc4015e3a7b531ac9cbaff49c0b00eaf00767c3d6d5f7efe0abfcad12060cf3dbab42aacb7525272539a8fed0152417a693f0f57ce36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x1064, 0x19, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK={0x8, 0x5, 0x7e}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "404676a119eebd1157d97f9826fde5f1"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x12c, 0x3, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc3ad, 0x5, 0x3, 0x7b, 0x7ff}, 0xf}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x20000000, 0xb, 0x8}, 0x7}}]}, {0xc1, 0x6, "7d9b4a06aac31c265820c8d7494a2d87e0fa2b5555203e14146f1eb6bc422cda197bf20823637e6f7eb6394aa6d2e5503e4eccc3f16951f2628617a343e7f85594cf3933946c902583cd8ad3173070ba183ddb891817c3eb735db670a5a3d3a002fa2a7346531ff9604d286dfa08dcb126b7618a123b8c5eb5932542c09806143b865c878bc53885d8c15cbf2759f9880136ce853c28f12425409c67114e0e018ac26622cb9ccffd8d3bd98c135a0eae55b53b2e30920e3708e2614d0a"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x170, 0x10, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x9, 0x6, 0x0, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xee12}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7f, 0x8, 0x8, 0xdea}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0xfc, 0x6, "f1a85f650d28b42097a2c61d13d62439ac698f5d65e70924606ad2db97ea49250ec64e37e20cfc0870745701e28df05e2aa181530ec3fa866a4df92bee0cd3a0dcbf2d21497d29e2598fb0041e7866275c8e62cab637539709e5ca3d1a97e550779906106f946a5a9c2b74537c9ca675d9baeb3f1b491510b4248d77e09461653762b45ca9bbe3e855f314f51e77d7343339e1e8e04608317ca4d8fd0723fcf8b5117d166d1c7369836131784a9a74121e76935ffa3c99409382c8dfde74f059f4ce4669491d91ef7431a16a8bfaf74e8dbbcf5029500b3c3271a9ef970e93cddc98425a456555515a2be7e9bbb78258fb7e9a0211d16e2c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @f_rsvp6={{0xa}, {0xb0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x6}}, @TCA_RSVP_POLICE={0x60, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0xd, 0x14fa, 0x7ff, {0x5, 0x1, 0xd, 0xb, 0x3}, {0x3, 0x0, 0x7, 0x6a61, 0x6, 0xa}, 0x3, 0x8, 0xc}}]}, @TCA_RSVP_POLICE={0x24, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x936}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x1, 0xfff}, {0x8, 0x4, 0x200}, 0x6, 0x81, 0x4}}]}}]}, 0x1d1c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x0, 0x407, 0x401, 0x2d, 0x18, "96a00c83b08bcc4e"}) syz_usb_connect(0x6, 0x24, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m39.078321219s ago: executing program 2 (id=272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @private0, 0x80000004}, 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000280)={{0x77359400}, {r1, r2/1000+60000}}, &(0x7f00000002c0)) r3 = syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/keys\x00', 0x0, 0x0) ioprio_get$pid(0x0, r3) pread64(r4, 0x0, 0x0, 0xb9) request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)='\x00', 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000006600)={0x2020}, 0x2020) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138b, 0x800}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mprotect(&(0x7f0000804000/0x2000)=nil, 0x2000, 0x1000008) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005180), 0x0, 0x0) ioctl$RNDGETENTCNT(r6, 0x5207, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 5m38.899453244s ago: executing program 2 (id=273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f0000001800)="d2", 0x1}], 0x1) (async) writev(r1, &(0x7f0000000740)=[{&(0x7f0000001800)="d2", 0x1}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x22081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic="b112ed56"]}]}, 0x28}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIGETBSZ(r3, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m38.745551547s ago: executing program 2 (id=274): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x90100, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000600), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x6, 0x7fff}) 5m38.733940488s ago: executing program 32 (id=274): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x90100, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xffffe000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000600), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x6, 0x7fff}) 4m16.284245882s ago: executing program 3 (id=1099): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0x2000}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x3911c0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x6c, 0x80080) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r2, 0x1ff, {0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x4, 0xf, 0x10, "d6aa7a05b9dc67efc7c81ceac27c84ac35386308767be38ca6f726bbf988ec8a1840f444c2620ae58627294627b5f7974836ccb420da52748b406ef9074e0012", "a16266a2dee0bd02e7afab1863c1e2f4864cd2f80ad88c024d69fc2e51a7f44f812bd18d4aebe50e813154edae7967afe7c96debfbe72ba2810f4e19b80f3ef7", "f92c73ac4aaaa92620f69460cc3e570bbf5fc95ea56234f74910fc0a2d9d64bc", [0xff, 0x6]}}) 4m16.201483569s ago: executing program 3 (id=1100): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 32) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000200000000000000004000000000000001000ff00000000002000000000000000b0acf9d8eb675146b719a096ac36f5388d35a669f635c5e4ea3036c32b63a3a27fe39727ede7b84c27f154de0dd1a02e29944d1a8138fa5ccc7b84356fe03a654a5016ac6f50d540a35289b0b4e32c32fb2549ad45908730b261be762e56ba08d28c07f5d0c7126f6478442a3e179d0592b1017e03c92d523670ddc3ee7b1e1ecb181c0033b92ae85434d76d323c4e9e6f3da7"], 0x24, 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x10000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x80000005, 0x4) (async, rerun: 64) ioprio_set$pid(0x1, 0x0, 0x0) (rerun: 64) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='(\x00', &(0x7f0000000080)='/dev/rnullb0\x00', 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r4, r4, 0x0, 0x7ffff000) 4m15.891538714s ago: executing program 3 (id=1105): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x0, 0xfffffffc}}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000420000014000100ff010006000000000000000000000001150002"], 0x44}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) (async) r6 = dup3(r2, r0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r7, 0x421, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x5) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) (async) r9 = gettid() prlimit64(r9, 0xb, &(0x7f0000000080), 0x0) (async) tkill(r9, 0x12) (async) syz_io_uring_setup(0x6042, 0xfffffffffffffffe, 0x0, 0x0) (async) r10 = gettid() unshare(0x6a040000) (async) tkill(r10, 0x15) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0xffffffff}], 0x0, 0x0, 0x0}) (async) unshare(0xc000400) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r2}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m15.803165741s ago: executing program 3 (id=1106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0x2d8, 0x108, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2074) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2047) syz_fuse_handle_req(r3, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3, {0x0, 0x7, 0x0, '\x00', {0x1, 0x8, 0x4, 0x6, r7, r5, 0xa000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x6}, {0x6, 0x10001}, {0x0, 0x7}, {0x9, 0xa80}, 0x1, 0xb, 0x0, 0x5}}}}) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r6}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20040045) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x8001) 4m15.617562156s ago: executing program 3 (id=1108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4, 0x4, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000040) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/190, 0xfffffffffffffec8, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x1}, 0x10) 4m15.543815682s ago: executing program 3 (id=1112): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000004) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) rename(0x0, &(0x7f00000001c0)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'btrfs\x00'}}], [], 0x6b}}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 4m0.502259071s ago: executing program 33 (id=1112): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000004) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) rename(0x0, &(0x7f00000001c0)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@nodevmap}, {@uname={'uname', 0x3d, 'btrfs\x00'}}], [], 0x6b}}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 26.659901589s ago: executing program 1 (id=3457): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0x300000a, 0x4010, r0, 0xca71a000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x84000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000000000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, &(0x7f00000001c0)="e3566cac4b5b74da506ad2fdab41b5cf54bd0bb2eeb0d3176b9914f5e00e2b9daea090299b7ef7f2be8c690a7c31aac3df6d5b5d0e11970fe6458ee2e104273cd8b8207e21818cb9067845aa8600ddb374bf1b82b1a74af1efdf2d96c66b8e13076f06e0de3aeb5dd97b9c0bf3117b73e59af54a04602b2055a568c1c9b90ac321a52d2ae92eac92c883b5e01d", 0x8d, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="7900b81236c8908b38d88bdea71a0b6ad8b5d70bda310a2a70d9c05965df60671b15005c32c10562f2bbc6e180110993327786ba2b1cc53040546578997dd5cc35382195cbcbfff56afa0ae7ea68f68c281f5400aca4ecf3bf36fef2f7e818c6c21bc427871ff282f11a3cc24780e8f50749829e0b5dab905b2f053cff28fc356bd5226b80f7833d6082897a909604da") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x6, 0xd1, 0x4, 0x1b64}, {0x8, 0x3, 0x5, 0xfa}, {0x9, 0xc5, 0x6, 0xc13}]}, 0x10) 26.593412114s ago: executing program 1 (id=3458): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10010, r0, 0x8372d000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x9a000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r3, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x1a, 0xa, 0x1a5, &(0x7f0000000140)="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"}) r4 = open(&(0x7f0000000380)='./bus\x00', 0x48141, 0x0) fcntl$setlease(r4, 0x400, 0x1) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') keyctl$reject(0x13, 0x0, 0x800000000000002c, 0x80001, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x420200, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f0000000540)={0xd, 0x6}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 26.473609164s ago: executing program 1 (id=3459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0xccd, 0x0, 0xe}, {0x482, 0x0, 0xb89}, {0x971, 0x0, 0xfffffffffffffff7}, {0x94e}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 26.409139619s ago: executing program 1 (id=3460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x154) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r2, &(0x7f0000000240)='.log\x00', 0x2a000, 0x12c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0xfffffffe, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x4, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x2, 0x10001}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6d76, &(0x7f0000000780)={0x0, 0x847d, 0x40, 0x1, 0x387}, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x54) mknodat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xfffffffb) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r0, 0x0, 0x80000000) 26.350243964s ago: executing program 1 (id=3461): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000dc0)={0x20000002}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x481, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000085) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x92000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000003000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000044010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000005000000ac1414bb000000000000000000000000000000003200000000002ec388110000ac1414bb000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000001"], 0x1fc}}, 0x48014) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x20000000000000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4fbe00a0000000000c0e9d1241ae3", 0x19) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000240)={@local, r6}, 0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f00000021c0)=[{{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f00000006c0)}, 0x4}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/219, 0xdb}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/119, 0x77}], 0x7, &(0x7f0000000c40)=""/79, 0x4f}}, {{&(0x7f0000000cc0)=@llc, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00)=""/40, 0x28}, 0x9}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/52, 0x34}, {&(0x7f0000000f00)=""/193, 0xc1}, {&(0x7f0000001000)=""/77, 0x4d}, {&(0x7f0000001080)=""/78, 0x4e}, {&(0x7f0000001100)=""/176, 0xb0}], 0x5, &(0x7f0000001240)=""/222, 0xde}, 0x7}, {{&(0x7f0000001340)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001840)=[{&(0x7f00000013c0)=""/98, 0x62}, {&(0x7f0000001440)=""/246, 0xf6}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000001580)=""/71, 0x47}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000001680)=""/187, 0xbb}, {&(0x7f0000001740)=""/236, 0xec}], 0x7, &(0x7f00000018c0)=""/95, 0x5f}, 0x7}, {{&(0x7f0000001940)=@x25={0x9, @remote}, 0x80, &(0x7f00000020c0)=[{&(0x7f00000019c0)=""/14, 0xe}, {&(0x7f0000001a00)=""/184, 0xb8}, {&(0x7f0000001ac0)=""/145, 0x91}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000001c80)=""/69, 0x45}, {&(0x7f0000001d00)=""/158, 0x9e}, {&(0x7f0000001dc0)=""/80, 0x50}, {&(0x7f0000001e40)=""/167, 0xa7}, {&(0x7f0000001f00)=""/187, 0xbb}, {&(0x7f0000001fc0)=""/205, 0xcd}], 0xa, &(0x7f0000002180)=""/47, 0x2f}}], 0x6, 0x40000020, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$inet6(0xa, 0xa, 0xfffffffc) 26.069595537s ago: executing program 1 (id=3462): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000006c0)='net/llc/socket\x00') lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000280)='./file3\x00', &(0x7f0000000400)='./file2\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000600)={'trans=unix,', {[{@noxattr}, {@access_user}, {@nodevmap}, {@fscache}, {@debug={'debug', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, '['}}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type', 0x3d, 'dont_hash'}}]}}) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000180)=0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ',&'}}, {@uid_gt={'uid>', r2}}, {@dont_hash}, {@uid_lt={'uid<', r7}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r9, r8, 0x0, 0x80000000) 26.060743207s ago: executing program 34 (id=3462): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000006c0)='net/llc/socket\x00') lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000280)='./file3\x00', &(0x7f0000000400)='./file2\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000600)={'trans=unix,', {[{@noxattr}, {@access_user}, {@nodevmap}, {@fscache}, {@debug={'debug', 0x3d, 0x400}}], [{@smackfshat={'smackfshat', 0x3d, '['}}, {@euid_lt={'euid<', r6}}, {@subj_type={'subj_type', 0x3d, 'dont_hash'}}]}}) ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000180)=0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ',&'}}, {@uid_gt={'uid>', r2}}, {@dont_hash}, {@uid_lt={'uid<', r7}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r9, r8, 0x0, 0x80000000) 16.110765294s ago: executing program 4 (id=3493): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r2, 0x0, r2, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 14.68345428s ago: executing program 4 (id=3495): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000200)=""/247) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 13.08399401s ago: executing program 4 (id=3500): sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x649, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) inotify_init1(0x80000) (async, rerun: 64) syz_clone(0x82048411, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0) (async, rerun: 64) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.158742016s ago: executing program 4 (id=3504): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file2\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x5, 0x0, 0xd, 0x4, 0x2, "519b"}, 0xb, 0x3) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000240)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x10e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xb8, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84000}, 0x8000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000100)='auxv\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r5, 0x0, 0x80000000) 10.977678641s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b42a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871befae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed49dcfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fb930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4305531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.233556852s ago: executing program 4 (id=3507): clock_gettime(0x9e77661b8e7af6c7, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file0\x00', 0x108) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000001080)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) (async) r3 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x2) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) getdents(r3, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 9.091535504s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.318274127s ago: executing program 0 (id=3511): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.992538863s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.091702048s ago: executing program 0 (id=3512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 5.091265678s ago: executing program 5 (id=3513): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0xfffffffb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000080)={0x1, 0x30, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.922842611s ago: executing program 5 (id=3514): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, 0xffffffffffffffff, 0x147a5000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0xfff7, 0x1, 0x0, 0xa, 0x80, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400200000, 0x2000000000000800, 0x200000000, 0x7fffffffffffffff, 0x7, 0xffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x6e6bb6, 0x0, 0x0, 0x0, 0x2}, {{@in=@local, 0xffffffff, 0x62}, 0x0, @in6=@mcast2, 0x3507, 0x5, 0x3, 0x1, 0xfffffffe, 0x4000000, 0xfffffff7}}, 0xe8) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535ef976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fce30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac353b21fe733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52af50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472787621147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(0xffffffffffffffff, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4.784609152s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.783859815s ago: executing program 0 (id=3515): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x805, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r3, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000000)={0x0, 0x0, 0x12}) close_range(r0, 0xffffffffffffffff, 0x0) 2.780605405s ago: executing program 4 (id=3516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@loopback, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x6, 0x0, 0x900, 0x8e, 0x800084, r3}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000540)=ANY=[@ANYBLOB="7365636c01624e6c2c8faafc7abfa7d702cc00"]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r4, &(0x7f0000000280)=0x2, r5, &(0x7f00000002c0)=0x3, 0x5, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x7a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x5a, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa7"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110226bd7000fedbdf2515000000180001801400020076657468310000008e30db9679180000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r8}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f0000000440)={0x0, 0xffff1000, 0x4, 0xd}) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000300)=0x1, 0x4) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000500)) 2.765544376s ago: executing program 5 (id=3517): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = memfd_secret(0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000080)=0x7, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x8080}, 0x44001) ftruncate(r0, 0x3) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x3, 0x12, 0x0, 0x18, "e533fa3badd4e490888a79224f40024d1d707706d2d0b2fec055d58d49b35ff1be08f023f07318604eec3b9eb12f89773363b9817611bc5bd47b4d35e2d071a1", "62d46cef96e5620924496790fc701d71a9b1ff0502eb868a311494de22b835e3", [0x2]}) madvise(&(0x7f0000b1d000/0x3000)=nil, 0x3000, 0xb) r3 = socket$inet6(0xa, 0x80003, 0xff) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000fcb000), 0xfffffffffffffffa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r5) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000001c0)={0x90, 0x3, 0x8}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.59489865s ago: executing program 0 (id=3518): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032bbd7000ffdbdf2516000000100001800c00010069623a6873727fd04d25"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4010) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'access=client'}}, {@debug={'debug', 0x3d, 0x4}}, {@cache_mmap}, {@access_client}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x50, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 2.517685796s ago: executing program 0 (id=3519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/21, 0x15, 0x2, 0x3e}, @fda={0x66646185, 0x7, 0x0, 0x37}, @flat=@weak_binder={0x77622a85, 0xa, 0x80000003}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 2.509557007s ago: executing program 5 (id=3520): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40014) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000280)=0xfffffffc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000)=0x8, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2.457068611s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 362.374661ms ago: executing program 0 (id=3521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0x1, 0x5, 0x0, 0x3}, 0x20) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x2, 0x1, 0x5, 0x0, 0x3}, 0x20) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 361.791981ms ago: executing program 5 (id=3522): keyctl$assume_authority(0x10, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0x1000, 0xaa}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'sha3-224-generic\x00'}}, &(0x7f0000001180)="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", &(0x7f00000000c0)=""/170) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000980)) 10.23965ms ago: executing program 5 (id=3523): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x38083, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xdc}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffff801}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3ff}]}, 0x98}, 0x1, 0x0, 0x0, 0x44004}, 0x4008000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40010) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101100, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x5c}}, 0x480) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000680)={0x0, 0x2, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @multicast]}) r7 = open_tree(r0, &(0x7f00000006c0)='./file0\x00', 0x1000) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000700)={'veth0_virt_wifi\x00', 0x200}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000) tee(r0, r8, 0x7, 0x4) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000840)={{0xa, 0x4e23, 0x7ff, @mcast1, 0x9}, {0xa, 0x4e21, 0x60, @empty, 0x3}, 0x0, {[0x4, 0x7e2b, 0x1, 0x7f, 0xfffffff9, 0x6, 0x7fff, 0x8b]}}, 0x5c) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000008c0)={0x10}) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000900), 0x80200, 0x0) close_range(r7, r10, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20002080}, 0x48800) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r0) waitid$P_PIDFD(0x3, r7, &(0x7f0000000b00), 0x20000000, &(0x7f0000000b80)) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x9c, r12, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c080) vmsplice(r8, &(0x7f0000000f00)=[{&(0x7f0000000dc0)="d886482fa4404f7f00550ef9cdfd6c0602fb78b7bf9bd030e232d573b0d132d6678467dea482cd027c24ca9dbc7599df0e074902ee69636a548ec61bf7babcdec271", 0x42}, {&(0x7f0000000e40)="37abfc608d3847b6cb5f127149b1f6982586e025e9a86cffe728619fa1786e8c1e6d4633912357de87d7a6b8f8d9be8dd462e047aee40b3e1ac783cbf5380d289fa4b605872c68398bc9ea3b62a1b4242a6d41", 0x53}, {&(0x7f0000000ec0)="c1e97523575633df608296b1383b929aa95ef7c0073f0fa84164448acb", 0x1d}], 0x3, 0x9) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000f40)) 0s ago: executing program 6 (id=3463): clock_gettime(0xfffffffffffffff9, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0x1, &(0x7f0000005e00)=[0x0]) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat(r1, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000440)=[{0xfffffffffffffffa, 0x5a, 0x1}, {0x0, 0x8, 0x81}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) setuid(0xee00) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): er=3 [ 337.057155][ T461] usb 6-1: Product: syz [ 337.061999][ T461] usb 6-1: Manufacturer: syz [ 337.066637][ T461] usb 6-1: SerialNumber: syz [ 337.309495][ T461] usb 6-1: 0:2 : does not exist [ 337.336115][ T461] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 337.362845][ T461] usb 6-1: USB disconnect, device number 31 [ 337.491552][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 337.560437][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3270'. [ 337.726184][T11123] rust_binder: validate_parent_fixup: new_min_offset=15, sg_entry.length=0 [ 337.726202][T11123] rust_binder: Error while translating object. [ 337.734912][T11123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.741189][T11123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 337.850004][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.867839][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.990672][ T484] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 338.080685][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 338.140696][ T484] usb 2-1: Using ep0 maxpacket: 16 [ 338.149246][ T484] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.159508][ T484] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 338.168693][ T484] usb 2-1: config 1 has no interface number 1 [ 338.174827][ T484] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 338.183979][ T484] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.195490][ T484] usb 2-1: config 1 interface 2 has no altsetting 0 [ 338.202193][ T1352] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 338.213103][ T484] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.222421][ T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.230490][ T484] usb 2-1: Product: syz [ 338.234675][ T484] usb 2-1: Manufacturer: syz [ 338.239274][ T484] usb 2-1: SerialNumber: syz [ 338.244093][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 338.256366][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 338.266284][ T9] usb 1-1: config 0 has no interface number 0 [ 338.272607][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 338.282829][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 338.293051][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 338.302176][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.310177][ T9] usb 1-1: Product: syz [ 338.314356][ T9] usb 1-1: Manufacturer: syz [ 338.318957][ T9] usb 1-1: SerialNumber: syz [ 338.326844][ T9] usb 1-1: config 0 descriptor?? [ 338.333245][T11126] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 338.363264][ T1352] usb 6-1: config 0 interface 0 has no altsetting 0 [ 338.369928][ T1352] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 338.378999][ T1352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.389864][ T1352] usb 6-1: config 0 descriptor?? [ 338.542567][ T484] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 338.550545][ T484] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 338.550951][ T9] ipheth 1-1:0.196: Unable to find endpoints [ 338.566794][ T484] usb 2-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 338.574628][ T484] usb 2-1: selecting invalid altsetting 0 [ 338.582089][ T9] usb 1-1: USB disconnect, device number 91 [ 338.594926][ T484] usb 2-1: USB disconnect, device number 58 [ 338.612089][ T1352] betop 0003:20BC:5500.001F: hidraw0: USB HID v1.01 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 338.629655][ T1352] betop 0003:20BC:5500.001F: no inputs found [ 338.702193][ T8641] udevd[8641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 338.707029][T11135] 9pnet_fd: p9_fd_create_tcp (11135): problem binding to privport [ 338.788075][ T1352] usb 6-1: USB disconnect, device number 32 [ 338.836260][T11136] fido_id[11136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 339.120623][ T1352] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 339.135715][T11148] rust_binder: 11145 RLIMIT_NICE not set [ 339.139199][ T461] rust_binder: 11144: removing orphan mapping 0:4248 [ 339.218375][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3279'. [ 339.229985][T11151] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 339.270619][ T1352] usb 6-1: Using ep0 maxpacket: 16 [ 339.277381][ T1352] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.287038][ T1352] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.300377][ T1352] usb 6-1: config 1 interface 0 has no altsetting 0 [ 339.309598][ T1352] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 339.318676][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.326703][ T1352] usb 6-1: Product: syz [ 339.330929][ T1352] usb 6-1: Manufacturer: syz [ 339.335835][ T1352] usb 6-1: SerialNumber: syz [ 339.552627][ T1352] usbhid 6-1:1.0: can't add hid device: -71 [ 339.558670][ T1352] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 339.567692][ T1352] usb 6-1: USB disconnect, device number 33 [ 339.713676][T11079] can0 (unregistered): slcan off ptm0. [ 339.826599][T11160] /dev/rnullb0: Can't open blockdev [ 339.860414][T11164] /dev/rnullb0: Can't open blockdev [ 340.006553][T11172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 340.176666][ T36] kauditd_printk_skb: 923 callbacks suppressed [ 340.176685][ T36] audit: type=1400 audit(2000000395.495:60288): avc: denied { read write } for pid=9753 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.244979][ T36] audit: type=1400 audit(2000000395.515:60289): avc: denied { search } for pid=11183 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.323646][ T36] audit: type=1400 audit(2000000395.515:60290): avc: denied { read } for pid=11183 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.353885][ T36] audit: type=1400 audit(2000000395.515:60291): avc: denied { read open } for pid=11183 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.380499][ T36] audit: type=1400 audit(2000000395.525:60292): avc: denied { search } for pid=11183 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.404470][ T36] audit: type=1400 audit(2000000395.525:60293): avc: denied { search } for pid=11183 comm="cmp" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.447091][T11198] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.452475][ T36] audit: type=1400 audit(2000000395.525:60294): avc: denied { search } for pid=11183 comm="cmp" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.454450][T11200] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.484521][ T36] audit: type=1400 audit(2000000395.525:60295): avc: denied { read } for pid=11183 comm="cmp" name="resolv.conf.can0.link" dev="tmpfs" ino=8633 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.778352][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3292'. [ 340.882150][T11243] SELinux: security_context_str_to_sid () failed with errno=-22 [ 341.186588][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 341.411488][T11288] tmpfs: Unknown parameter '„osx\' [ 341.940625][ T537] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 342.062727][T11305] kvm: MWAIT instruction emulated as NOP! [ 342.090602][ T537] usb 6-1: Using ep0 maxpacket: 16 [ 342.108480][ T537] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.117788][ T537] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.128193][ T537] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.142244][ T537] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.153241][ T537] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.162042][ T537] usb 6-1: Product: syz [ 342.166713][ T537] usb 6-1: Manufacturer: syz [ 342.172136][ T537] usb 6-1: SerialNumber: syz [ 342.258101][T11311] rust_binder: Write failure EFAULT in pid:291 [ 342.594910][ T537] usb 6-1: 0:2 : does not exist [ 342.800613][ T461] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 342.902434][T11345] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 342.950601][ T461] usb 1-1: Using ep0 maxpacket: 16 [ 342.957818][ T461] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.969041][ T461] usb 1-1: config 0 interface 0 has no altsetting 0 [ 342.975722][ T461] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 342.984815][ T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.994639][ T461] usb 1-1: config 0 descriptor?? [ 343.408838][ T461] wacom 0003:056A:00F0.0020: unknown main item tag 0x0 [ 343.415844][ T461] wacom 0003:056A:00F0.0020: unknown main item tag 0x0 [ 343.422838][ T461] wacom 0003:056A:00F0.0020: unknown main item tag 0x0 [ 343.429773][ T461] wacom 0003:056A:00F0.0020: unknown main item tag 0x0 [ 343.436737][ T461] wacom 0003:056A:00F0.0020: unknown main item tag 0x0 [ 343.444479][ T461] wacom 0003:056A:00F0.0020: hidraw0: USB HID v0.05 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0 [ 343.672757][T11351] rust_binder: Write failure EFAULT in pid:1267 [ 344.019330][T11381] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 344.037694][T11381] rust_binder: Write failure EINVAL in pid:39 [ 344.320651][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 344.480615][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 344.487861][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.499644][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.509470][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.518542][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.528379][ T10] usb 2-1: config 0 descriptor?? [ 344.541148][ T10] hub 2-1:0.0: USB hub found [ 344.642526][ T537] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 344.669544][ T537] usb 6-1: USB disconnect, device number 34 [ 344.748555][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 344.748708][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 344.807165][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 344.830520][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 344.880346][ T10] usb 2-1: USB disconnect, device number 59 [ 345.261054][ T36] kauditd_printk_skb: 1276 callbacks suppressed [ 345.261082][ T36] audit: type=1400 audit(2000000400.585:61373): avc: denied { ioctl } for pid=11399 comm="syz.5.3333" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.301036][ T36] audit: type=1400 audit(2000000400.625:61374): avc: denied { read write } for pid=5760 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.365004][ T36] audit: type=1400 audit(2000000400.625:61375): avc: denied { read write open } for pid=5760 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.390620][ T537] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 345.393580][ T36] audit: type=1400 audit(2000000400.625:61376): avc: denied { ioctl } for pid=5760 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.424428][ T36] audit: type=1400 audit(2000000400.655:61377): avc: denied { ioctl } for pid=11399 comm="syz.5.3333" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.449515][ T36] audit: type=1400 audit(2000000400.655:61378): avc: denied { read write } for pid=5760 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.473774][ T36] audit: type=1400 audit(2000000400.655:61379): avc: denied { read write open } for pid=5760 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.498933][ T36] audit: type=1400 audit(2000000400.655:61380): avc: denied { ioctl } for pid=5760 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.524819][ T36] audit: type=1400 audit(2000000400.675:61381): avc: denied { read write } for pid=11404 comm="syz.1.3335" name="binder1" dev="binder" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.548876][ T36] audit: type=1400 audit(2000000400.675:61382): avc: denied { read write open } for pid=11404 comm="syz.1.3335" path="/dev/binderfs/binder1" dev="binder" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.593201][ T45] usb 1-1: USB disconnect, device number 92 [ 345.603252][ T537] usb 6-1: Using ep0 maxpacket: 16 [ 345.640319][ T537] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 345.652049][ T537] usb 6-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 345.676314][ T537] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 345.710127][ T537] usb 6-1: config 1 interface 0 has no altsetting 0 [ 345.730712][ T537] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.760631][ T537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.777439][ T537] usb 6-1: SerialNumber: syz [ 345.790420][ T537] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 345.808961][ T537] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 345.836488][ T537] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 345.921981][T11418] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3339'. [ 346.035001][ T10] usb 6-1: USB disconnect, device number 35 [ 346.350740][T11426] usb usb8: usbfs: process 11426 (syz.4.3342) did not claim interface 0 before use [ 346.727062][T11468] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 346.774229][T11470] rust_binder: Read failure Err(EAGAIN) in pid:311 [ 346.831222][T11476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.976883][T11488] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3351'. [ 347.029061][T11488] fuse: Bad value for 'user_id' [ 347.054241][T11488] fuse: Bad value for 'user_id' [ 347.101845][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.704800][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3361'. [ 347.780390][T11526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.953286][T11542] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 348.107578][T11552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11552 comm=syz.0.3370 [ 348.134307][T11552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11552 comm=syz.0.3370 [ 348.272389][T11563] veth0_to_team: entered promiscuous mode [ 348.278238][T11563] veth0_to_team: entered allmulticast mode [ 348.335703][T11565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:418 [ 348.518411][T11573] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 348.713683][T11586] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3383'. [ 349.310294][T11616] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 349.391621][T11624] rust_binder: 11615 RLIMIT_NICE not set [ 349.472419][ T10] rust_binder: 11612: removing orphan mapping 0:1048 [ 349.599214][T11634] netlink: 'syz.5.3398': attribute type 16 has an invalid length. [ 349.617249][T11634] netlink: 'syz.5.3398': attribute type 3 has an invalid length. [ 349.647316][T11634] netlink: 64054 bytes leftover after parsing attributes in process `syz.5.3398'. [ 349.695642][T11640] syzkaller0: entered promiscuous mode [ 349.726362][T11640] syzkaller0: entered allmulticast mode [ 350.361101][ T36] kauditd_printk_skb: 932 callbacks suppressed [ 350.361117][ T36] audit: type=1400 audit(2000000405.685:62315): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.430994][ T36] audit: type=1400 audit(2000000405.755:62316): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.490613][ T45] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 350.499072][ T36] audit: type=1400 audit(2000000405.815:62317): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.525220][ T36] audit: type=1400 audit(2000000405.855:62318): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.550923][ T36] audit: type=1400 audit(2000000405.855:62319): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.591053][ T36] audit: type=1400 audit(2000000405.915:62320): avc: denied { ioctl } for pid=11660 comm="syz.5.3407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.621226][ T36] audit: type=1400 audit(2000000405.945:62321): avc: denied { read write } for pid=9665 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.645462][ T36] audit: type=1400 audit(2000000405.945:62322): avc: denied { read write open } for pid=9665 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.652642][T11663] rust_binder: 360: no such ref 3 [ 350.671981][ T36] audit: type=1400 audit(2000000405.945:62323): avc: denied { ioctl } for pid=9665 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.675640][T11663] rust_binder: Write failure EFAULT in pid:360 [ 350.701137][ T36] audit: type=1400 audit(2000000405.965:62324): avc: denied { read } for pid=11662 comm="syz.0.3408" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.732099][ T45] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 350.741529][ T45] usb 6-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 350.750383][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.761250][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 350.770395][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.780317][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.794937][ T45] usb 6-1: config 0 descriptor?? [ 351.020709][ T1352] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 351.173056][ T1352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 351.181382][ T1352] usb 1-1: not running at top speed; connect to a high speed hub [ 351.190628][ T1352] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.200783][ T1352] usb 1-1: config 0 has no interfaces? [ 351.208994][ T1352] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 351.218088][ T1352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.226111][ T1352] usb 1-1: Product: syz [ 351.230267][ T1352] usb 1-1: Manufacturer: syz [ 351.234878][ T1352] usb 1-1: SerialNumber: syz [ 351.240737][ T1352] usb 1-1: config 0 descriptor?? [ 351.452005][ T45] usb 1-1: USB disconnect, device number 93 [ 352.079155][ T2388] Bluetooth: hci0: Frame reassembly failed (-84) [ 352.087116][T11676] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 352.151725][T11677] rust_binder: 11676 RLIMIT_NICE not set [ 352.818008][T11679] TCP: TCP_TX_DELAY enabled [ 352.940664][T11682] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.942671][T11682] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 353.008838][T11684] syzkaller0: entered promiscuous mode [ 353.022319][T11684] syzkaller0: entered allmulticast mode [ 353.199724][ T537] usb 6-1: USB disconnect, device number 36 [ 353.242974][T11689] futex_wake_op: syz.5.3417 tries to shift op by 32; fix this program [ 353.258440][T11689] syzkaller0: left promiscuous mode [ 353.263804][T11689] syzkaller0: left allmulticast mode [ 353.377870][T11694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 353.530691][T11707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.604276][T11706] rust_binder: Error while translating object. [ 353.611073][T11706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.617263][T11706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:473 [ 354.120824][ T1062] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 354.120867][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 354.148326][ T9] rust_binder: 11675: removing orphan mapping 0:24 [ 354.590649][ T798] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 354.710628][ T537] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 354.721094][ T798] usb 2-1: device descriptor read/64, error -71 [ 354.860628][ T537] usb 1-1: Using ep0 maxpacket: 32 [ 354.867715][ T537] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 354.876868][ T537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.886604][ T537] usb 1-1: config 0 descriptor?? [ 354.960647][ T798] usb 2-1: device descriptor read/64, error -71 [ 355.200616][ T798] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 355.296716][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.303728][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.310651][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.317581][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.324553][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.331489][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.338353][ T537] wacom 0003:056A:006B.0021: unknown main item tag 0x0 [ 355.345288][ T798] usb 2-1: device descriptor read/64, error -71 [ 355.351754][ T537] wacom 0003:056A:006B.0021: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 355.361996][ T537] wacom 0003:056A:006B.0021: hidraw0: USB HID v10.00 Device [HID 056a:006b] on usb-dummy_hcd.0-1/input0 [ 355.373929][ T537] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:006B.0021/input/input52 [ 355.410600][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 355.410632][ T36] audit: type=1400 audit(2000000410.725:62686): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=874 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.441281][ T36] audit: type=1400 audit(2000000410.725:62687): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=874 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.467040][ T36] audit: type=1400 audit(2000000410.795:62688): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=874 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.491929][ T36] audit: type=1400 audit(2000000410.795:62689): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=874 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.518224][ T36] audit: type=1400 audit(2000000410.795:62690): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=874 ioctlcmd=0x4522 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.530627][ T45] usb 1-1: USB disconnect, device number 94 [ 355.580636][ T36] audit: type=1400 audit(2000000410.795:62691): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=874 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.610445][ T36] audit: type=1400 audit(2000000410.815:62692): avc: denied { ioctl } for pid=11725 comm="syz.0.3428" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 355.637328][ T36] audit: type=1400 audit(2000000410.815:62693): avc: denied { create } for pid=11725 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.665899][ T36] audit: type=1400 audit(2000000410.815:62694): avc: denied { write } for pid=11725 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.686508][ T36] audit: type=1400 audit(2000000410.815:62695): avc: denied { read } for pid=11725 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.708410][ T798] usb 2-1: device descriptor read/64, error -71 [ 355.820709][ T798] usb usb2-port1: attempt power cycle [ 355.907341][T11741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.907373][T11741] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 355.916883][T11741] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:396 [ 356.020628][ T45] rust_binder: 11740: removing orphan mapping 0:1048 [ 356.170697][ T798] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 356.192737][ T798] usb 2-1: device descriptor read/8, error -71 [ 356.290657][ T537] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 356.330137][ T798] usb 2-1: device descriptor read/8, error -71 [ 356.442797][ T537] usb 1-1: config 0 has no interfaces? [ 356.451161][ T537] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.460400][ T537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.468435][ T537] usb 1-1: Product: syz [ 356.472661][ T537] usb 1-1: Manufacturer: syz [ 356.477260][ T537] usb 1-1: SerialNumber: syz [ 356.483412][ T537] usb 1-1: config 0 descriptor?? [ 356.570660][ T798] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 356.592509][ T798] usb 2-1: device descriptor read/8, error -71 [ 356.698466][ T10] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 356.708910][ T10] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.722179][ T537] usb 1-1: USB disconnect, device number 95 [ 356.730772][ T798] usb 2-1: device descriptor read/8, error -71 [ 356.772466][T11764] fido_id[11764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.851317][ T798] usb usb2-port1: unable to enumerate USB device [ 357.298855][ T798] rust_binder: 11772: removing orphan mapping 0:24 [ 357.742850][T11796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3449'. [ 357.943870][T11811] : renamed from veth0_vlan (while UP) [ 357.960092][T11811] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 358.082305][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3456'. [ 358.125360][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3456'. [ 358.238532][T11823] lo: entered allmulticast mode [ 358.244207][T11823] lo: left allmulticast mode [ 358.310615][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 358.366430][T11825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.470600][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 358.506987][ T9] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 358.515238][ T9] usb 1-1: config 0 has no interface number 0 [ 358.522244][ T9] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 358.537016][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 358.547720][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.556357][ T9] usb 1-1: Product: syz [ 358.560531][ T9] usb 1-1: Manufacturer: syz [ 358.565139][ T9] usb 1-1: SerialNumber: syz [ 358.571492][ T9] usb 1-1: config 0 descriptor?? [ 358.578501][T11816] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 358.796288][T11816] rust_binder: Error while translating object. [ 358.796345][T11816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 358.803244][T11816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:421 [ 358.814507][ T9] usb 1-1: USB disconnect, device number 96 [ 359.639487][T11840] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 359.639516][T11840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 359.657659][T11840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:143 [ 359.846161][T11850] /dev/rnullb0: Can't open blockdev [ 359.900697][ T45] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 360.030667][ T45] usb 1-1: device descriptor read/64, error -71 [ 360.270666][ T45] usb 1-1: device descriptor read/64, error -71 [ 360.451045][ T36] kauditd_printk_skb: 620 callbacks suppressed [ 360.451062][ T36] audit: type=1400 audit(2000000415.775:63316): avc: denied { ioctl } for pid=11838 comm="syz.0.3464" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.483252][ T36] audit: type=1400 audit(2000000415.785:63317): avc: denied { read } for pid=11855 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 360.504817][ T36] audit: type=1400 audit(2000000415.785:63318): avc: denied { read open } for pid=11855 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 360.535650][ T36] audit: type=1400 audit(2000000415.785:63319): avc: denied { mounton } for pid=11855 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 360.557382][ T45] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 360.558611][ T36] audit: type=1400 audit(2000000415.785:63320): avc: denied { sys_module } for pid=11855 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 360.586419][ T36] audit: type=1400 audit(2000000415.795:63321): avc: denied { sys_module } for pid=11855 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 360.607953][ T36] audit: type=1400 audit(2000000415.795:63322): avc: denied { sys_module } for pid=11855 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 360.629490][ T36] audit: type=1400 audit(2000000415.795:63323): avc: denied { sys_module } for pid=11855 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 360.651484][ T36] audit: type=1400 audit(2000000415.895:63324): avc: denied { ioctl } for pid=11838 comm="syz.0.3464" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.676613][ T36] audit: type=1400 audit(2000000415.895:63325): avc: denied { ioctl } for pid=11838 comm="syz.0.3464" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 360.710670][ T45] usb 1-1: device descriptor read/64, error -71 [ 360.950769][ T45] usb 1-1: device descriptor read/64, error -71 [ 361.061067][ T45] usb usb1-port1: attempt power cycle [ 361.310913][T11865] rust_binder: Read failure Err(EAGAIN) in pid:503 [ 361.400766][ T45] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 361.432722][ T45] usb 1-1: device descriptor read/8, error -71 [ 361.562486][ T45] usb 1-1: device descriptor read/8, error -71 [ 361.801028][ T45] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 361.822656][ T45] usb 1-1: device descriptor read/8, error -71 [ 361.952525][ T45] usb 1-1: device descriptor read/8, error -71 [ 362.060818][ T45] usb usb1-port1: unable to enumerate USB device [ 362.099572][T11868] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 4096) [ 362.099609][T11868] rust_binder: Error while translating object. [ 362.110379][T11868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 362.116972][T11868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:505 [ 362.163923][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3473'. [ 362.195938][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3473'. [ 363.104435][T11880] binder: Unknown parameter 'defcontext01777777777777777777777' [ 363.191716][T11887] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 363.426491][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 363.580689][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 363.590788][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.601174][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 363.608761][ T10] usb 1-1: can't read configurations, error -71 [ 365.572323][ T36] kauditd_printk_skb: 249 callbacks suppressed [ 365.572341][ T36] audit: type=1400 audit(2000000420.895:63575): avc: denied { execmem } for pid=11906 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 365.597115][T11910] can0: slcan on ptm2. [ 365.643896][ T36] audit: type=1400 audit(2000000420.895:63576): avc: denied { read write } for pid=11907 comm="syz.4.3484" name="binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.675706][ T36] audit: type=1400 audit(2000000420.895:63577): avc: denied { read write open } for pid=11907 comm="syz.4.3484" path="/dev/binderfs/binder1" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.702372][ T36] audit: type=1400 audit(2000000420.895:63578): avc: denied { read } for pid=11911 comm="syz.0.3483" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.737764][T11918] rust_binder: Read failure Err(EAGAIN) in pid:526 [ 365.746644][T11916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.753971][ T36] audit: type=1400 audit(2000000420.895:63579): avc: denied { read open } for pid=11911 comm="syz.0.3483" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.810683][ T10] rust_binder: 0: removing orphan mapping 0:4224 [ 365.829579][T11926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.831575][T11925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.845200][T11925] audit: audit_lost=253 audit_rate_limit=0 audit_backlog_limit=64 [ 365.849944][T11926] audit: audit_lost=254 audit_rate_limit=0 audit_backlog_limit=64 [ 365.855559][ T36] audit: type=1400 audit(2000000420.895:63580): avc: denied { ioctl } for pid=11907 comm="syz.4.3484" path="/dev/binderfs/binder1" dev="binder" ino=24 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 368.651954][T11909] can0 (unregistered): slcan off ptm2. [ 368.709455][T11963] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3492'. [ 368.731470][T11963] 0ªö»ôM: renamed from gretap0 (while UP) [ 368.745716][T11963] 0ªö»ôM: entered allmulticast mode [ 368.770858][T11963] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 368.842140][ T1352] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 369.002900][ T1352] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 369.011136][ T1352] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.021247][ T1352] usb 6-1: config 0 has no interface number 0 [ 369.032255][ T1352] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 369.041854][ T1352] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 369.050168][ T1352] usb 6-1: Product: syz [ 369.055958][ T1352] usb 6-1: Manufacturer: syz [ 369.061391][ T1352] usb 6-1: SerialNumber: syz [ 369.070615][ T1352] usb 6-1: config 0 descriptor?? [ 369.419725][ T1352] usb 6-1: USB disconnect, device number 37 [ 370.255234][ T62] rust_binder: 12016: removing orphan mapping 0:1048 [ 371.723597][ T36] kauditd_printk_skb: 1140 callbacks suppressed [ 371.723616][ T36] audit: type=1400 audit(2000000427.045:64440): avc: denied { execmem } for pid=12022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 371.765754][T12031] __vm_enough_memory: pid: 12031, comm: syz.5.3501, bytes: 21200063868928 not enough memory for the allocation [ 371.777842][T12032] __vm_enough_memory: pid: 12032, comm: syz.5.3501, bytes: 21200063868928 not enough memory for the allocation [ 371.792791][ T36] audit: type=1400 audit(2000000427.045:64441): avc: denied { create } for pid=12024 comm="syz.4.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.854929][ T36] audit: type=1400 audit(2000000427.075:64442): avc: denied { read } for pid=12023 comm="syz.5.3501" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.914406][ T36] audit: type=1400 audit(2000000427.075:64443): avc: denied { read open } for pid=12023 comm="syz.5.3501" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.973066][ T36] audit: type=1400 audit(2000000427.075:64444): avc: denied { read } for pid=12023 comm="syz.5.3501" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 372.010399][ T36] audit: type=1400 audit(2000000427.075:64445): avc: denied { read open } for pid=12023 comm="syz.5.3501" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 372.045897][ T36] audit: type=1400 audit(2000000427.085:64446): avc: denied { create } for pid=12023 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 372.076602][ T36] audit: type=1400 audit(2000000427.085:64447): avc: denied { write } for pid=12023 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 372.100611][ T1352] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 372.108258][ T36] audit: type=1400 audit(2000000427.085:64448): avc: denied { create } for pid=12023 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.150946][ T36] audit: type=1400 audit(2000000427.085:64449): avc: denied { create } for pid=12023 comm="syz.5.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.260637][ T1352] usb 6-1: device descriptor read/64, error -71 [ 372.510620][ T1352] usb 6-1: device descriptor read/64, error -71 [ 372.754536][ T1352] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 372.920639][ T1352] usb 6-1: device descriptor read/64, error -71 [ 373.160686][ T1352] usb 6-1: device descriptor read/64, error -71 [ 373.270702][ T1352] usb usb6-port1: attempt power cycle [ 373.620638][ T1352] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 373.673550][T12073] rust_binder: Write failure EINVAL in pid:470 [ 373.676721][ T1352] usb 6-1: device descriptor read/8, error -71 [ 373.689263][T12073] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 373.710616][T12073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 373.805045][T12081] rust_binder: 475: no such ref 3 [ 373.829742][T12081] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 373.844401][ T1352] usb 6-1: device descriptor read/8, error -71 [ 373.857837][T12081] rust_binder: Read failure Err(EFAULT) in pid:475 [ 373.981267][T12078] overlayfs: failed to clone upperpath [ 374.077827][T12051] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 374.090603][ T1352] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 374.107846][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 374.107880][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.107892][T12051] Call Trace: [ 374.107899][T12051] [ 374.107907][T12051] __dump_stack+0x21/0x30 [ 374.107937][T12051] dump_stack_lvl+0x10c/0x190 [ 374.107959][T12051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 374.107980][T12051] ? ___ratelimit+0x3f7/0x5a0 [ 374.107998][T12051] dump_stack+0x19/0x20 [ 374.108017][T12051] dump_header+0xd7/0x490 [ 374.108039][T12051] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 374.108062][T12051] oom_kill_process+0x4c0/0x7e0 [ 374.108083][T12051] ? sched_clock_cpu+0x75/0x400 [ 374.108106][T12051] out_of_memory+0x7ee/0xbd0 [ 374.108125][T12051] ? __cfi_out_of_memory+0x10/0x10 [ 374.108144][T12051] ? mutex_lock_killable+0x92/0x1c0 [ 374.108167][T12051] ? __cfi_mutex_lock_killable+0x10/0x10 [ 374.108191][T12051] mem_cgroup_out_of_memory+0x279/0x350 [ 374.108214][T12051] ? drain_obj_stock+0xed0/0xed0 [ 374.108239][T12051] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 374.108263][T12051] try_charge_memcg+0x8f7/0xde0 [ 374.108284][T12051] ? __cfi_try_charge_memcg+0x10/0x10 [ 374.108304][T12051] ? __alloc_pages_noprof+0x31f/0x7b0 [ 374.108324][T12051] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 374.108346][T12051] ? __folio_batch_add_and_move+0x2ab/0x370 [ 374.108366][T12051] __mem_cgroup_charge+0xf6/0x410 [ 374.108388][T12051] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 374.108413][T12051] shmem_alloc_and_add_folio+0x86d/0x1050 [ 374.108434][T12051] ? put_swap_device+0x130/0x130 [ 374.108452][T12051] ? shmem_huge_global_enabled+0x2da/0x360 [ 374.108479][T12051] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 374.108503][T12051] ? __kasan_check_write+0x18/0x20 [ 374.108525][T12051] ? _raw_spin_lock+0x8c/0x120 [ 374.108550][T12051] shmem_get_folio_gfp+0x5f0/0x1380 [ 374.108578][T12051] ? shmem_get_folio+0xc0/0xc0 [ 374.108602][T12051] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 374.108626][T12051] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 374.108649][T12051] ? inode_to_bdi+0x6d/0x100 [ 374.108671][T12051] shmem_write_begin+0xf4/0x270 [ 374.108689][T12051] generic_perform_write+0x330/0x960 [ 374.108714][T12051] ? __cfi_generic_perform_write+0x10/0x10 [ 374.108736][T12051] ? down_write+0xe9/0x2a0 [ 374.108757][T12051] ? mnt_get_write_access_file+0x1af/0x3b0 [ 374.108778][T12051] ? mnt_put_write_access_file+0xc2/0x100 [ 374.108798][T12051] ? file_update_time+0x1ef/0x220 [ 374.108820][T12051] shmem_file_write_iter+0x105/0x130 [ 374.108840][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 374.108859][T12051] __kernel_write_iter+0x392/0x830 [ 374.108885][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 374.108906][T12051] ? __cfi___kernel_write_iter+0x10/0x10 [ 374.108928][T12051] ? get_dump_page+0x160/0x220 [ 374.108947][T12051] ? __asan_memset+0x39/0x50 [ 374.108969][T12051] ? iov_iter_bvec+0xc0/0x180 [ 374.108987][T12051] dump_user_range+0xb06/0xdf0 [ 374.109010][T12051] ? __cfi_dump_emit+0x10/0x10 [ 374.109040][T12051] ? __cfi_dump_user_range+0x10/0x10 [ 374.109065][T12051] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 374.109091][T12051] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 374.109117][T12051] elf_core_dump+0x2cd9/0x3810 [ 374.109139][T12051] ? __cfi_elf_core_dump+0x10/0x10 [ 374.109165][T12051] ? dump_interrupted+0xf0/0xf0 [ 374.109189][T12051] ? 0xffffffffff600000 [ 374.109220][T12051] do_coredump+0x1bfa/0x2bd0 [ 374.109247][T12051] ? __cfi_do_coredump+0x10/0x10 [ 374.109271][T12051] ? asm_exc_page_fault+0x2b/0x30 [ 374.109298][T12051] ? __kasan_slab_free+0x6a/0x80 [ 374.109326][T12051] ? kmem_cache_free+0x1c1/0x510 [ 374.109352][T12051] ? get_signal+0xa75/0x14f0 [ 374.109373][T12051] get_signal+0x11fd/0x14f0 [ 374.109397][T12051] arch_do_signal_or_restart+0x96/0x720 [ 374.109423][T12051] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 374.109453][T12051] irqentry_exit_to_user_mode+0x4e/0xb0 [ 374.109478][T12051] irqentry_exit+0x16/0x60 [ 374.109500][T12051] exc_page_fault+0x66/0xc0 [ 374.109522][T12051] asm_exc_page_fault+0x2b/0x30 [ 374.109542][T12051] RIP: 0033:0x7fa32c98ebf1 [ 374.109559][T12051] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 374.109577][T12051] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 374.109596][T12051] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 374.109611][T12051] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 374.109626][T12051] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 374.109640][T12051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.109653][T12051] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 374.109671][T12051] [ 374.109690][T12051] memory: usage 307200kB, limit 307200kB, failcnt 16787 [ 374.125796][ T1352] usb 6-1: device descriptor read/8, error -71 [ 374.142184][T12051] memory+swap: usage 431820kB, limit 9007199254740988kB, failcnt 0 [ 374.292993][ T1352] usb 6-1: device descriptor read/8, error -71 [ 374.294189][T12051] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 374.411093][ T1352] usb usb6-port1: unable to enumerate USB device [ 374.414832][T12051] Memory cgroup stats for /syz4: [ 374.618011][T12051] cache 314150912 [ 374.626706][T12051] rss 73728 [ 374.629860][T12051] rss_huge 0 [ 374.633093][T12051] shmem 314150912 [ 374.636719][T12051] mapped_file 0 [ 374.640184][T12051] dirty 0 [ 374.643144][T12051] writeback 0 [ 374.646419][T12051] workingset_refault_anon 156 [ 374.651105][T12051] workingset_refault_file 27 [ 374.655680][T12051] swap 127774720 [ 374.659203][T12051] swapcached 212992 [ 374.663028][T12051] pgpgin 444370 [ 374.666475][T12051] pgpgout 367603 [ 374.669997][T12051] pgfault 167600 [ 374.673553][T12051] pgmajfault 6697 [ 374.677170][T12051] inactive_anon 141766656 [ 374.681504][T12051] active_anon 172662784 [ 374.685687][T12051] inactive_file 0 [ 374.689295][T12051] active_file 0 [ 374.692777][T12051] unevictable 0 [ 374.696239][T12051] hierarchical_memory_limit 314572800 [ 374.701654][T12051] hierarchical_memsw_limit 9223372036854771712 [ 374.707797][T12051] total_cache 314150912 [ 374.711971][T12051] total_rss 73728 [ 374.715591][T12051] total_rss_huge 0 [ 374.719308][T12051] total_shmem 314150912 [ 374.723469][T12051] total_mapped_file 0 [ 374.727434][T12051] total_dirty 0 [ 374.730919][T12051] total_writeback 0 [ 374.734717][T12051] total_workingset_refault_anon 156 [ 374.739891][T12051] total_workingset_refault_file 27 [ 374.745010][T12051] total_swap 127774720 [ 374.749065][T12051] total_swapcached 212992 [ 374.753408][T12051] total_pgpgin 444370 [ 374.757391][T12051] total_pgpgout 367603 [ 374.761654][T12051] total_pgfault 167600 [ 374.765730][T12051] total_pgmajfault 6697 [ 374.769876][T12051] total_inactive_anon 141766656 [ 374.774786][T12051] total_active_anon 172662784 [ 374.780580][T12051] total_inactive_file 0 [ 374.784745][T12051] total_active_file 0 [ 374.788712][T12051] total_unevictable 0 [ 374.792711][T12051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12033,uid=0 [ 374.809071][T12051] Memory cgroup out of memory: Killed process 12033 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 374.978650][T12067] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 375.050777][T12067] CPU: 0 UID: 0 PID: 12067 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 375.050813][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.050825][T12067] Call Trace: [ 375.050832][T12067] [ 375.050841][T12067] __dump_stack+0x21/0x30 [ 375.050870][T12067] dump_stack_lvl+0x10c/0x190 [ 375.050898][T12067] ? __cfi_dump_stack_lvl+0x10/0x10 [ 375.050921][T12067] ? ___ratelimit+0x3f7/0x5a0 [ 375.050942][T12067] dump_stack+0x19/0x20 [ 375.050963][T12067] dump_header+0xd7/0x490 [ 375.050980][T12067] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 375.051003][T12067] oom_kill_process+0x4c0/0x7e0 [ 375.051023][T12067] ? sched_clock_cpu+0x75/0x400 [ 375.051046][T12067] out_of_memory+0x7ee/0xbd0 [ 375.051066][T12067] ? __cfi_out_of_memory+0x10/0x10 [ 375.051084][T12067] ? mutex_lock_killable+0x92/0x1c0 [ 375.051107][T12067] ? __cfi_mutex_lock_killable+0x10/0x10 [ 375.051130][T12067] mem_cgroup_out_of_memory+0x279/0x350 [ 375.051157][T12067] ? drain_obj_stock+0xed0/0xed0 [ 375.051184][T12067] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 375.051210][T12067] try_charge_memcg+0x8f7/0xde0 [ 375.051233][T12067] ? __cfi_try_charge_memcg+0x10/0x10 [ 375.051256][T12067] ? __alloc_pages_noprof+0x31f/0x7b0 [ 375.051279][T12067] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 375.051300][T12067] ? __folio_batch_add_and_move+0x2ab/0x370 [ 375.051321][T12067] __mem_cgroup_charge+0xf6/0x410 [ 375.051345][T12067] ? _raw_spin_lock+0x8c/0x120 [ 375.051371][T12067] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 375.051397][T12067] shmem_alloc_and_add_folio+0x86d/0x1050 [ 375.051416][T12067] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 375.051440][T12067] ? put_swap_device+0x130/0x130 [ 375.051459][T12067] ? shmem_huge_global_enabled+0x2da/0x360 [ 375.051505][T12067] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 375.051532][T12067] ? __kasan_check_write+0x18/0x20 [ 375.051556][T12067] ? _raw_spin_lock+0x8c/0x120 [ 375.051582][T12067] shmem_get_folio_gfp+0x5f0/0x1380 [ 375.051611][T12067] ? shmem_get_folio+0xc0/0xc0 [ 375.051636][T12067] ? follow_page_pte+0xa5c/0xb90 [ 375.051656][T12067] ? inode_to_bdi+0x6d/0x100 [ 375.051679][T12067] shmem_write_begin+0xf4/0x270 [ 375.051699][T12067] generic_perform_write+0x330/0x960 [ 375.051725][T12067] ? __cfi_generic_perform_write+0x10/0x10 [ 375.051748][T12067] ? down_write+0xe9/0x2a0 [ 375.051771][T12067] ? file_update_time+0xa3/0x220 [ 375.051794][T12067] shmem_file_write_iter+0x105/0x130 [ 375.051815][T12067] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 375.051837][T12067] __kernel_write_iter+0x392/0x830 [ 375.051863][T12067] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 375.051890][T12067] ? __cfi___kernel_write_iter+0x10/0x10 [ 375.051914][T12067] ? get_dump_page+0x160/0x220 [ 375.051935][T12067] ? __asan_memset+0x39/0x50 [ 375.051958][T12067] ? iov_iter_bvec+0xc0/0x180 [ 375.051977][T12067] dump_user_range+0xb06/0xdf0 [ 375.052005][T12067] ? __cfi_dump_emit+0x10/0x10 [ 375.052029][T12067] ? __cfi_dump_user_range+0x10/0x10 [ 375.052055][T12067] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 375.052080][T12067] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 375.052107][T12067] elf_core_dump+0x2cd9/0x3810 [ 375.052129][T12067] ? __cfi_elf_core_dump+0x10/0x10 [ 375.052154][T12067] ? dump_interrupted+0xf0/0xf0 [ 375.052179][T12067] ? 0xffffffffff600000 [ 375.052196][T12067] do_coredump+0x1bfa/0x2bd0 [ 375.052223][T12067] ? __cfi_do_coredump+0x10/0x10 [ 375.052247][T12067] ? asm_exc_page_fault+0x2b/0x30 [ 375.052275][T12067] ? __kasan_slab_free+0x6a/0x80 [ 375.052303][T12067] ? kmem_cache_free+0x1c1/0x510 [ 375.052328][T12067] ? get_signal+0xa75/0x14f0 [ 375.052350][T12067] get_signal+0x11fd/0x14f0 [ 375.052374][T12067] arch_do_signal_or_restart+0x96/0x720 [ 375.052398][T12067] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 375.052421][T12067] irqentry_exit_to_user_mode+0x4e/0xb0 [ 375.052443][T12067] irqentry_exit+0x16/0x60 [ 375.052465][T12067] exc_page_fault+0x66/0xc0 [ 375.052487][T12067] asm_exc_page_fault+0x2b/0x30 [ 375.052508][T12067] RIP: 0033:0x7fa32c98ebf1 [ 375.052524][T12067] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 375.052541][T12067] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 375.052560][T12067] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 375.052576][T12067] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 375.052589][T12067] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.052603][T12067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 375.052616][T12067] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 375.052634][T12067] [ 375.052641][T12067] memory: usage 299500kB, limit 307200kB, failcnt 19297 [ 375.554299][T12067] memory+swap: usage 432152kB, limit 9007199254740988kB, failcnt 0 [ 375.583205][T12067] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 375.612621][T12067] Memory cgroup stats for /syz4: [ 375.612763][T12067] cache 314458112 [ 375.650849][T12067] rss 94208 [ 375.653983][T12067] rss_huge 0 [ 375.657175][T12067] shmem 314458112 [ 375.672277][T12067] mapped_file 0 [ 375.686721][T12067] dirty 0 [ 375.691557][T12067] writeback 0 [ 375.694874][T12067] workingset_refault_anon 165 [ 375.714115][T12067] workingset_refault_file 1035 [ 375.718900][T12067] swap 127959040 [ 375.733294][T12067] swapcached 36864 [ 375.737040][T12067] pgpgin 455675 [ 375.740492][T12067] pgpgout 378875 [ 375.751754][T12067] pgfault 168177 [ 375.755468][T12067] pgmajfault 6704 [ 375.759095][T12067] inactive_anon 267972608 [ 375.763454][T12067] active_anon 46600192 [ 375.767761][T12067] inactive_file 0 [ 375.771415][T12067] active_file 0 [ 375.775567][T12067] unevictable 0 [ 375.779013][T12067] hierarchical_memory_limit 314572800 [ 375.784403][T12067] hierarchical_memsw_limit 9223372036854771712 [ 375.790598][T12067] total_cache 314458112 [ 375.794741][T12067] total_rss 94208 [ 375.798351][T12067] total_rss_huge 0 [ 375.802438][T12067] total_shmem 314458112 [ 375.806594][T12067] total_mapped_file 0 [ 375.810658][T12067] total_dirty 0 [ 375.814108][T12067] total_writeback 0 [ 375.817904][T12067] total_workingset_refault_anon 165 [ 375.823139][T12067] total_workingset_refault_file 1035 [ 375.828449][T12067] total_swap 127959040 [ 375.832551][T12067] total_swapcached 36864 [ 375.836794][T12067] total_pgpgin 455675 [ 375.840784][T12067] total_pgpgout 378875 [ 375.844838][T12067] total_pgfault 168177 [ 375.848881][T12067] total_pgmajfault 6704 [ 375.853037][T12067] total_inactive_anon 267972608 [ 375.857871][T12067] total_active_anon 46600192 [ 375.862458][T12067] total_inactive_file 0 [ 375.866861][T12067] total_active_file 0 [ 375.870847][T12067] total_unevictable 0 [ 375.874811][T12067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12030,uid=0 [ 375.890503][T12067] Memory cgroup out of memory: Killed process 12030 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:51712kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 376.100593][ T1352] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 376.144092][T12066] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 376.222274][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 376.222319][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.222332][T12066] Call Trace: [ 376.222339][T12066] [ 376.222347][T12066] __dump_stack+0x21/0x30 [ 376.222378][T12066] dump_stack_lvl+0x10c/0x190 [ 376.222399][T12066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 376.222420][T12066] ? ___ratelimit+0x3f7/0x5a0 [ 376.222441][T12066] dump_stack+0x19/0x20 [ 376.222462][T12066] dump_header+0xd7/0x490 [ 376.222480][T12066] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 376.222502][T12066] oom_kill_process+0x4c0/0x7e0 [ 376.222522][T12066] ? sched_clock_cpu+0x75/0x400 [ 376.222555][T12066] out_of_memory+0x7ee/0xbd0 [ 376.222575][T12066] ? __cfi_out_of_memory+0x10/0x10 [ 376.222594][T12066] ? mutex_lock_killable+0x92/0x1c0 [ 376.222617][T12066] ? __cfi_mutex_lock_killable+0x10/0x10 [ 376.222641][T12066] mem_cgroup_out_of_memory+0x279/0x350 [ 376.222666][T12066] ? drain_obj_stock+0xed0/0xed0 [ 376.222693][T12066] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 376.222720][T12066] try_charge_memcg+0x8f7/0xde0 [ 376.222744][T12066] ? __cfi_try_charge_memcg+0x10/0x10 [ 376.222766][T12066] ? __alloc_pages_noprof+0x31f/0x7b0 [ 376.222787][T12066] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 376.222809][T12066] ? __folio_batch_add_and_move+0x2ab/0x370 [ 376.222831][T12066] __mem_cgroup_charge+0xf6/0x410 [ 376.222856][T12066] ? _raw_spin_lock+0x8c/0x120 [ 376.222882][T12066] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 376.222908][T12066] shmem_alloc_and_add_folio+0x86d/0x1050 [ 376.222931][T12066] ? put_swap_device+0x130/0x130 [ 376.222949][T12066] ? shmem_huge_global_enabled+0x2da/0x360 [ 376.222978][T12066] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 376.223006][T12066] ? __kasan_check_write+0x18/0x20 [ 376.223030][T12066] ? _raw_spin_lock+0x8c/0x120 [ 376.223057][T12066] shmem_get_folio_gfp+0x5f0/0x1380 [ 376.223086][T12066] ? shmem_get_folio+0xc0/0xc0 [ 376.223112][T12066] ? follow_page_pte+0xa5c/0xb90 [ 376.223134][T12066] ? inode_to_bdi+0x6d/0x100 [ 376.223157][T12066] shmem_write_begin+0xf4/0x270 [ 376.223177][T12066] generic_perform_write+0x330/0x960 [ 376.223203][T12066] ? __cfi_generic_perform_write+0x10/0x10 [ 376.223227][T12066] ? down_write+0xe9/0x2a0 [ 376.223251][T12066] ? file_update_time+0xa3/0x220 [ 376.223274][T12066] shmem_file_write_iter+0x105/0x130 [ 376.223296][T12066] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 376.223318][T12066] __kernel_write_iter+0x392/0x830 [ 376.223344][T12066] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 376.223366][T12066] ? __cfi___kernel_write_iter+0x10/0x10 [ 376.223392][T12066] ? get_dump_page+0x160/0x220 [ 376.223412][T12066] ? __asan_memset+0x39/0x50 [ 376.223435][T12066] ? iov_iter_bvec+0xc0/0x180 [ 376.223455][T12066] dump_user_range+0xb06/0xdf0 [ 376.223482][T12066] ? __cfi_dump_emit+0x10/0x10 [ 376.223506][T12066] ? __cfi_dump_user_range+0x10/0x10 [ 376.223539][T12066] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 376.223565][T12066] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 376.223591][T12066] elf_core_dump+0x2cd9/0x3810 [ 376.223614][T12066] ? __cfi_elf_core_dump+0x10/0x10 [ 376.223639][T12066] ? dump_interrupted+0xf0/0xf0 [ 376.223664][T12066] ? 0xffffffffff600000 [ 376.223680][T12066] do_coredump+0x1bfa/0x2bd0 [ 376.223707][T12066] ? __cfi_do_coredump+0x10/0x10 [ 376.223731][T12066] ? asm_exc_page_fault+0x2b/0x30 [ 376.223759][T12066] ? __kasan_slab_free+0x6a/0x80 [ 376.223785][T12066] ? kmem_cache_free+0x1c1/0x510 [ 376.223811][T12066] ? get_signal+0xa75/0x14f0 [ 376.223833][T12066] get_signal+0x11fd/0x14f0 [ 376.223857][T12066] arch_do_signal_or_restart+0x96/0x720 [ 376.223883][T12066] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 376.223912][T12066] irqentry_exit_to_user_mode+0x4e/0xb0 [ 376.223936][T12066] irqentry_exit+0x16/0x60 [ 376.223958][T12066] exc_page_fault+0x66/0xc0 [ 376.223980][T12066] asm_exc_page_fault+0x2b/0x30 [ 376.224000][T12066] RIP: 0033:0x7fa32c98ebf1 [ 376.224016][T12066] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 376.224033][T12066] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 376.224052][T12066] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 376.224067][T12066] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 376.224081][T12066] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 376.224095][T12066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.224108][T12066] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 376.224125][T12066] [ 376.224134][T12066] memory: usage 307200kB, limit 307200kB, failcnt 23410 [ 376.686074][T12066] memory+swap: usage 431276kB, limit 9007199254740988kB, failcnt 0 [ 376.694281][T12066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.701191][T12066] Memory cgroup stats for /syz4: [ 376.701823][T12066] cache 313720832 [ 376.711395][T12066] rss 135168 [ 376.715480][T12066] rss_huge 0 [ 376.715534][ T1352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.715557][ T1352] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.721225][T12066] shmem 313720832 [ 376.731227][ T1352] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 376.738256][T12066] mapped_file 0 [ 376.741798][ T1352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.751057][T12066] dirty 0 [ 376.756314][ T1352] usb 6-1: SerialNumber: syz [ 376.762524][T12066] writeback 577536 [ 376.768246][ T36] kauditd_printk_skb: 222 callbacks suppressed [ 376.768274][ T36] audit: type=1400 audit(2000000432.085:64672): avc: denied { ioctl } for pid=12094 comm="syz.5.3510" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.769910][T12066] workingset_refault_anon 165 [ 376.775114][ T36] audit: type=1400 audit(2000000432.105:64673): avc: denied { ioctl } for pid=12094 comm="syz.5.3510" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.779637][T12066] workingset_refault_file 1035 [ 376.779647][T12066] swap 127262720 [ 376.779654][T12066] swapcached 733184 [ 376.779661][T12066] pgpgin 463293 [ 376.823530][ T36] audit: type=1400 audit(2000000432.135:64674): avc: denied { ioctl } for pid=12094 comm="syz.5.3510" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.834415][T12066] pgpgout 386493 [ 376.878882][T12066] pgfault 168677 [ 376.882450][T12066] pgmajfault 6704 [ 376.886333][T12066] inactive_anon 65314816 [ 376.890619][T12066] active_anon 249257984 [ 376.894759][T12066] inactive_file 0 [ 376.898369][T12066] active_file 0 [ 376.901841][T12066] unevictable 0 [ 376.905296][T12066] hierarchical_memory_limit 314572800 [ 376.910713][T12066] hierarchical_memsw_limit 9223372036854771712 [ 376.916881][T12066] total_cache 313720832 [ 376.921780][T12066] total_rss 135168 [ 376.925516][T12066] total_rss_huge 0 [ 376.929223][T12066] total_shmem 313720832 [ 376.933430][T12066] total_mapped_file 0 [ 376.937394][T12066] total_dirty 0 [ 376.940867][T12066] total_writeback 577536 [ 376.945102][T12066] total_workingset_refault_anon 165 [ 376.950284][T12066] total_workingset_refault_file 1035 [ 376.955587][T12066] total_swap 127262720 [ 376.959643][T12066] total_swapcached 733184 [ 376.964003][T12066] total_pgpgin 463293 [ 376.967976][T12066] total_pgpgout 386493 [ 376.972044][T12066] total_pgfault 168677 [ 376.976100][T12066] total_pgmajfault 6704 [ 376.980240][T12066] total_inactive_anon 65314816 [ 376.985015][T12066] total_active_anon 249257984 [ 376.989679][T12066] total_inactive_file 0 [ 376.993855][T12066] total_active_file 0 [ 376.997820][T12066] total_unevictable 0 [ 377.001818][T12066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12038,uid=0 [ 377.016799][T12066] Memory cgroup out of memory: Killed process 12038 (syz.4.3500) total-vm:90104kB, anon-rss:1080kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 377.036972][T12099] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3510'. [ 377.049054][ T36] audit: type=1400 audit(2000000432.375:64675): avc: denied { mounton } for pid=12094 comm="syz.5.3510" path="/168/bus" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.252416][T12087] syz.4.3507 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 377.292084][T12087] CPU: 0 UID: 0 PID: 12087 Comm: syz.4.3507 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 377.292119][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.292132][T12087] Call Trace: [ 377.292140][T12087] [ 377.292148][T12087] __dump_stack+0x21/0x30 [ 377.292180][T12087] dump_stack_lvl+0x10c/0x190 [ 377.292203][T12087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 377.292223][T12087] ? ___ratelimit+0x3f7/0x5a0 [ 377.292243][T12087] dump_stack+0x19/0x20 [ 377.292264][T12087] dump_header+0xd7/0x490 [ 377.292281][T12087] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 377.292303][T12087] oom_kill_process+0x4c0/0x7e0 [ 377.292323][T12087] ? sched_clock_cpu+0x75/0x400 [ 377.292346][T12087] out_of_memory+0x7ee/0xbd0 [ 377.292365][T12087] ? __cfi_out_of_memory+0x10/0x10 [ 377.292384][T12087] ? mutex_lock_killable+0x92/0x1c0 [ 377.292406][T12087] ? __cfi_mutex_lock_killable+0x10/0x10 [ 377.292430][T12087] mem_cgroup_out_of_memory+0x279/0x350 [ 377.292458][T12087] ? drain_obj_stock+0xed0/0xed0 [ 377.292493][T12087] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 377.292520][T12087] try_charge_memcg+0x8f7/0xde0 [ 377.292543][T12087] ? __cfi_try_charge_memcg+0x10/0x10 [ 377.292567][T12087] ? __alloc_pages_noprof+0x31f/0x7b0 [ 377.292590][T12087] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 377.292612][T12087] __mem_cgroup_charge+0xf6/0x410 [ 377.292637][T12087] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 377.292662][T12087] ? enqueue_task+0x1133/0x11f0 [ 377.292688][T12087] ? __cfi_sched_clock_cpu+0x10/0x10 [ 377.292712][T12087] folio_prealloc+0x67/0x240 [ 377.292729][T12087] do_wp_page+0x1c54/0x3270 [ 377.292758][T12087] ? post_init_entity_util_avg+0x8d/0x460 [ 377.292779][T12087] ? folio_put+0x90/0x90 [ 377.292804][T12087] ? __cfi__raw_spin_lock+0x10/0x10 [ 377.292830][T12087] ? __pte_offset_map+0x1b0/0x230 [ 377.292853][T12087] ? pte_offset_map_rw_nolock+0xba/0x110 [ 377.292876][T12087] handle_mm_fault+0xff7/0x1b90 [ 377.292906][T12087] ? __cfi_handle_mm_fault+0x10/0x10 [ 377.292932][T12087] ? lock_vma_under_rcu+0x49d/0x530 [ 377.292963][T12087] ? __se_sys_rt_sigprocmask+0x22e/0x290 [ 377.292987][T12087] ? __x64_sys_rt_sigprocmask+0xc0/0xc0 [ 377.293011][T12087] do_user_addr_fault+0x96c/0x1200 [ 377.293038][T12087] exc_page_fault+0x59/0xc0 [ 377.293060][T12087] asm_exc_page_fault+0x2b/0x30 [ 377.293082][T12087] RIP: 0033:0x7fa32c8560b6 [ 377.293099][T12087] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 44 f6 e8 00 00 75 1e 80 3d 0f c0 35 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8 [ 377.293117][T12087] RSP: 002b:00007ffccaed6cc0 EFLAGS: 00010246 [ 377.293136][T12087] RAX: 00007fa32c3ff000 RBX: 00007fa32cbb6038 RCX: 00007fa32c9461f7 [ 377.293151][T12087] RDX: 00007fa32cbb5fa0 RSI: 00007fa32cbb5fa0 RDI: 00007fa32cbb6038 [ 377.293167][T12087] RBP: 0000000000000000 R08: 00007fa32cbb5fa0 R09: 00007ffccaed6b67 [ 377.293182][T12087] R10: 0000000000000008 R11: 0000000000000246 R12: 00007fa32cbb5fac [ 377.293196][T12087] R13: 00007fa32cbb5fa0 R14: 00000000000000ec R15: 0000000000000002 [ 377.293213][T12087] [ 377.293236][T12087] memory: usage 304364kB, limit 307200kB, failcnt 27277 [ 377.564016][ T36] audit: type=1400 audit(2000000432.815:64676): avc: denied { execmem } for pid=12101 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 377.611919][T12087] memory+swap: usage 419060kB, limit 9007199254740988kB, failcnt 0 [ 377.674117][ T36] audit: type=1400 audit(2000000432.885:64677): avc: denied { read write } for pid=12102 comm="syz.0.3511" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.706182][ T36] audit: type=1400 audit(2000000432.885:64678): avc: denied { read open } for pid=12102 comm="syz.0.3511" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.740256][ T36] audit: type=1400 audit(2000000432.905:64679): avc: denied { map } for pid=12102 comm="syz.0.3511" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.769960][ T36] audit: type=1400 audit(2000000432.905:64680): avc: denied { execmem } for pid=12102 comm="syz.0.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 377.797540][T12087] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.827119][T12087] Memory cgroup stats for /syz4: [ 377.827426][T12087] cache 314200064 [ 377.837088][ T36] audit: type=1400 audit(2000000432.905:64681): avc: denied { read execute } for pid=12102 comm="syz.0.3511" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 377.875658][T12087] rss 106496 [ 377.891911][T12087] rss_huge 0 [ 377.909298][T12087] shmem 313131008 [ 377.926505][T12087] mapped_file 913408 [ 377.948089][T12087] dirty 0 [ 377.951097][T12087] writeback 4096 [ 377.964583][T12087] workingset_refault_anon 165 [ 377.969284][T12087] workingset_refault_file 1296 [ 377.975115][T12087] swap 121868288 [ 377.978671][T12087] swapcached 143360 [ 377.983617][T12087] pgpgin 472698 [ 377.987096][T12087] pgpgout 395929 [ 377.991777][T12087] pgfault 169250 [ 377.995338][T12087] pgmajfault 6705 [ 377.998973][T12087] inactive_anon 185602048 [ 378.009203][T12087] active_anon 127406080 [ 378.020592][T12087] inactive_file 0 [ 378.024251][T12087] active_file 1069056 [ 378.028232][T12087] unevictable 0 [ 378.043775][T12087] hierarchical_memory_limit 314572800 [ 378.049414][T12087] hierarchical_memsw_limit 9223372036854771712 [ 378.067947][T12087] total_cache 314200064 [ 378.074906][T12087] total_rss 106496 [ 378.078660][T12087] total_rss_huge 0 [ 378.082412][T12087] total_shmem 313131008 [ 378.086565][T12087] total_mapped_file 913408 [ 378.091004][T12087] total_dirty 0 [ 378.094460][T12087] total_writeback 4096 [ 378.098505][T12087] total_workingset_refault_anon 165 [ 378.103736][T12087] total_workingset_refault_file 1296 [ 378.109016][T12087] total_swap 121868288 [ 378.113102][T12087] total_swapcached 143360 [ 378.117431][T12087] total_pgpgin 472698 [ 378.121438][T12087] total_pgpgout 395929 [ 378.125498][T12087] total_pgfault 169250 [ 378.129566][T12087] total_pgmajfault 6705 [ 378.133811][T12087] total_inactive_anon 185602048 [ 378.140176][T12087] total_active_anon 127406080 [ 378.144882][T12087] total_inactive_file 0 [ 378.149035][T12087] total_active_file 1069056 [ 378.153558][T12087] total_unevictable 0 [ 378.157534][T12087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12039,uid=0 [ 378.172475][T12087] Memory cgroup out of memory: Killed process 12039 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:50816kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 378.330138][T12068] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 378.430320][T12068] CPU: 0 UID: 0 PID: 12068 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 378.430357][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.430376][T12068] Call Trace: [ 378.430383][T12068] [ 378.430393][T12068] __dump_stack+0x21/0x30 [ 378.430426][T12068] dump_stack_lvl+0x10c/0x190 [ 378.430448][T12068] ? __cfi_dump_stack_lvl+0x10/0x10 [ 378.430471][T12068] ? ___ratelimit+0x3f7/0x5a0 [ 378.430492][T12068] dump_stack+0x19/0x20 [ 378.430514][T12068] dump_header+0xd7/0x490 [ 378.430531][T12068] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 378.430553][T12068] oom_kill_process+0x4c0/0x7e0 [ 378.430569][T12068] ? sched_clock_cpu+0x75/0x400 [ 378.430589][T12068] out_of_memory+0x7ee/0xbd0 [ 378.430605][T12068] ? __cfi_out_of_memory+0x10/0x10 [ 378.430622][T12068] ? mutex_lock_killable+0x92/0x1c0 [ 378.430644][T12068] ? __cfi_mutex_lock_killable+0x10/0x10 [ 378.430667][T12068] mem_cgroup_out_of_memory+0x279/0x350 [ 378.430693][T12068] ? drain_obj_stock+0xed0/0xed0 [ 378.430719][T12068] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 378.430746][T12068] try_charge_memcg+0x8f7/0xde0 [ 378.430770][T12068] ? __cfi_try_charge_memcg+0x10/0x10 [ 378.430792][T12068] ? __alloc_pages_noprof+0x31f/0x7b0 [ 378.430815][T12068] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 378.430837][T12068] ? __folio_batch_add_and_move+0x2ab/0x370 [ 378.430859][T12068] __mem_cgroup_charge+0xf6/0x410 [ 378.430883][T12068] ? _raw_spin_lock+0x8c/0x120 [ 378.430909][T12068] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 378.430936][T12068] shmem_alloc_and_add_folio+0x86d/0x1050 [ 378.430958][T12068] ? put_swap_device+0x130/0x130 [ 378.430977][T12068] ? shmem_huge_global_enabled+0x2da/0x360 [ 378.431006][T12068] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 378.431033][T12068] ? __kasan_check_write+0x18/0x20 [ 378.431058][T12068] ? _raw_spin_lock+0x8c/0x120 [ 378.431084][T12068] shmem_get_folio_gfp+0x5f0/0x1380 [ 378.431113][T12068] ? shmem_get_folio+0xc0/0xc0 [ 378.431139][T12068] ? follow_page_pte+0xa5c/0xb90 [ 378.431160][T12068] ? inode_to_bdi+0x6d/0x100 [ 378.431183][T12068] shmem_write_begin+0xf4/0x270 [ 378.431203][T12068] generic_perform_write+0x330/0x960 [ 378.431244][T12068] ? __cfi_generic_perform_write+0x10/0x10 [ 378.431267][T12068] ? down_write+0xe9/0x2a0 [ 378.431291][T12068] ? file_update_time+0xa3/0x220 [ 378.431314][T12068] shmem_file_write_iter+0x105/0x130 [ 378.431336][T12068] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 378.431358][T12068] __kernel_write_iter+0x392/0x830 [ 378.431390][T12068] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 378.431413][T12068] ? __cfi___kernel_write_iter+0x10/0x10 [ 378.431438][T12068] ? get_dump_page+0x160/0x220 [ 378.431458][T12068] ? __asan_memset+0x39/0x50 [ 378.431482][T12068] ? iov_iter_bvec+0xc0/0x180 [ 378.431501][T12068] dump_user_range+0xb06/0xdf0 [ 378.431529][T12068] ? __cfi_dump_emit+0x10/0x10 [ 378.431554][T12068] ? __cfi_dump_user_range+0x10/0x10 [ 378.431580][T12068] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 378.431606][T12068] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 378.431631][T12068] elf_core_dump+0x2cd9/0x3810 [ 378.431654][T12068] ? __cfi_elf_core_dump+0x10/0x10 [ 378.431679][T12068] ? dump_interrupted+0xf0/0xf0 [ 378.431704][T12068] ? 0xffffffffff600000 [ 378.431720][T12068] do_coredump+0x1bfa/0x2bd0 [ 378.431748][T12068] ? __cfi_do_coredump+0x10/0x10 [ 378.431772][T12068] ? asm_exc_page_fault+0x2b/0x30 [ 378.431800][T12068] ? __kasan_slab_free+0x6a/0x80 [ 378.431828][T12068] ? kmem_cache_free+0x1c1/0x510 [ 378.431853][T12068] ? get_signal+0xa75/0x14f0 [ 378.431875][T12068] get_signal+0x11fd/0x14f0 [ 378.431899][T12068] arch_do_signal_or_restart+0x96/0x720 [ 378.431925][T12068] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 378.431954][T12068] irqentry_exit_to_user_mode+0x4e/0xb0 [ 378.431978][T12068] irqentry_exit+0x16/0x60 [ 378.432001][T12068] exc_page_fault+0x66/0xc0 [ 378.432023][T12068] asm_exc_page_fault+0x2b/0x30 [ 378.432043][T12068] RIP: 0033:0x7fa32c98ebf1 [ 378.432059][T12068] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 378.432077][T12068] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 378.432097][T12068] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 378.432112][T12068] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 378.432126][T12068] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.432139][T12068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 378.432152][T12068] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 378.432170][T12068] [ 378.908312][T12068] memory: usage 307200kB, limit 307200kB, failcnt 30388 [ 378.948233][ T1352] usb 6-1: USB disconnect, device number 42 [ 378.967142][T12068] memory+swap: usage 431724kB, limit 9007199254740988kB, failcnt 0 [ 379.006164][T12068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 379.013074][T12068] Memory cgroup stats for /syz4: [ 379.013213][T12068] cache 314277888 [ 379.021850][T12068] rss 122880 [ 379.025045][T12068] rss_huge 0 [ 379.028240][T12068] shmem 314277888 [ 379.031887][T12068] mapped_file 0 [ 379.035344][T12068] dirty 0 [ 379.038271][T12068] writeback 12288 [ 379.041909][T12068] workingset_refault_anon 171 [ 379.046593][T12068] workingset_refault_file 2147 [ 379.051377][T12068] swap 127807488 [ 379.054926][T12068] swapcached 188416 [ 379.058722][T12068] pgpgin 482944 [ 379.062286][T12068] pgpgout 406144 [ 379.066159][T12068] pgfault 169804 [ 379.069696][T12068] pgmajfault 6716 [ 379.073343][T12068] inactive_anon 108040192 [ 379.077664][T12068] active_anon 206532608 [ 379.081966][T12068] inactive_file 0 [ 379.085747][T12068] active_file 0 [ 379.089209][T12068] unevictable 0 [ 379.092692][T12068] hierarchical_memory_limit 314572800 [ 379.098068][T12068] hierarchical_memsw_limit 9223372036854771712 [ 379.104372][T12068] total_cache 314277888 [ 379.108554][T12068] total_rss 122880 [ 379.112295][T12068] total_rss_huge 0 [ 379.116014][T12068] total_shmem 314277888 [ 379.120161][T12068] total_mapped_file 0 [ 379.124178][T12068] total_dirty 0 [ 379.127679][T12068] total_writeback 12288 [ 379.131888][T12068] total_workingset_refault_anon 171 [ 379.137164][T12068] total_workingset_refault_file 2147 [ 379.142509][T12068] total_swap 127807488 [ 379.146797][T12068] total_swapcached 188416 [ 379.151198][T12068] total_pgpgin 482944 [ 379.155169][T12068] total_pgpgout 406144 [ 379.159216][T12068] total_pgfault 169804 [ 379.163304][T12068] total_pgmajfault 6716 [ 379.167462][T12068] total_inactive_anon 108040192 [ 379.172331][T12068] total_active_anon 206532608 [ 379.177076][T12068] total_inactive_file 0 [ 379.181338][T12068] total_active_file 0 [ 379.185299][T12068] total_unevictable 0 [ 379.189357][T12068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12027,uid=0 [ 379.204466][T12068] Memory cgroup out of memory: Killed process 12027 (syz.4.3500) total-vm:89840kB, anon-rss:1080kB, file-rss:53812kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 379.231980][T12057] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 379.250604][T12057] CPU: 1 UID: 0 PID: 12057 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 379.250640][T12057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.250652][T12057] Call Trace: [ 379.250659][T12057] [ 379.250668][T12057] __dump_stack+0x21/0x30 [ 379.250697][T12057] dump_stack_lvl+0x10c/0x190 [ 379.250720][T12057] ? __cfi_dump_stack_lvl+0x10/0x10 [ 379.250743][T12057] ? ___ratelimit+0x3f7/0x5a0 [ 379.250764][T12057] dump_stack+0x19/0x20 [ 379.250786][T12057] dump_header+0xd7/0x490 [ 379.250803][T12057] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 379.250825][T12057] oom_kill_process+0x4c0/0x7e0 [ 379.250846][T12057] ? sched_clock_cpu+0x75/0x400 [ 379.250869][T12057] out_of_memory+0x7ee/0xbd0 [ 379.250889][T12057] ? __cfi_out_of_memory+0x10/0x10 [ 379.250907][T12057] ? mutex_lock_killable+0x104/0x1c0 [ 379.250930][T12057] ? __cfi_mutex_lock_killable+0x10/0x10 [ 379.250954][T12057] mem_cgroup_out_of_memory+0x279/0x350 [ 379.250981][T12057] ? drain_obj_stock+0xed0/0xed0 [ 379.251008][T12057] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 379.251034][T12057] try_charge_memcg+0x8f7/0xde0 [ 379.251057][T12057] ? __cfi_try_charge_memcg+0x10/0x10 [ 379.251079][T12057] ? __alloc_pages_noprof+0x31f/0x7b0 [ 379.251100][T12057] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 379.251122][T12057] ? __folio_batch_add_and_move+0x2ab/0x370 [ 379.251144][T12057] __mem_cgroup_charge+0xf6/0x410 [ 379.251168][T12057] ? _raw_spin_lock+0x8c/0x120 [ 379.251208][T12057] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 379.251234][T12057] shmem_alloc_and_add_folio+0x86d/0x1050 [ 379.251257][T12057] ? put_swap_device+0x130/0x130 [ 379.251275][T12057] ? shmem_huge_global_enabled+0x2da/0x360 [ 379.251304][T12057] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 379.251332][T12057] ? __kasan_check_write+0x18/0x20 [ 379.251356][T12057] ? _raw_spin_lock+0x8c/0x120 [ 379.251382][T12057] shmem_get_folio_gfp+0x5f0/0x1380 [ 379.251418][T12057] ? shmem_get_folio+0xc0/0xc0 [ 379.251443][T12057] ? follow_page_pte+0xa5c/0xb90 [ 379.251464][T12057] ? inode_to_bdi+0x6d/0x100 [ 379.251487][T12057] shmem_write_begin+0xf4/0x270 [ 379.251506][T12057] generic_perform_write+0x330/0x960 [ 379.251532][T12057] ? __cfi_generic_perform_write+0x10/0x10 [ 379.251555][T12057] ? down_write+0xe9/0x2a0 [ 379.251578][T12057] ? file_update_time+0xa3/0x220 [ 379.251600][T12057] shmem_file_write_iter+0x105/0x130 [ 379.251622][T12057] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 379.251643][T12057] __kernel_write_iter+0x392/0x830 [ 379.251669][T12057] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 379.251691][T12057] ? __cfi___kernel_write_iter+0x10/0x10 [ 379.251720][T12057] ? get_dump_page+0x160/0x220 [ 379.251739][T12057] ? __asan_memset+0x39/0x50 [ 379.251763][T12057] ? iov_iter_bvec+0xc0/0x180 [ 379.251782][T12057] dump_user_range+0xb06/0xdf0 [ 379.251809][T12057] ? __cfi_dump_emit+0x10/0x10 [ 379.251834][T12057] ? __cfi_dump_user_range+0x10/0x10 [ 379.251859][T12057] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 379.251886][T12057] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 379.251912][T12057] elf_core_dump+0x2cd9/0x3810 [ 379.251934][T12057] ? __cfi_elf_core_dump+0x10/0x10 [ 379.251960][T12057] ? dump_interrupted+0xf0/0xf0 [ 379.251984][T12057] ? 0xffffffffff600000 [ 379.252000][T12057] do_coredump+0x1bfa/0x2bd0 [ 379.252027][T12057] ? __cfi_do_coredump+0x10/0x10 [ 379.252051][T12057] ? asm_exc_page_fault+0x2b/0x30 [ 379.252079][T12057] ? __kasan_slab_free+0x6a/0x80 [ 379.252106][T12057] ? kmem_cache_free+0x1c1/0x510 [ 379.252132][T12057] ? get_signal+0xa75/0x14f0 [ 379.252153][T12057] get_signal+0x11fd/0x14f0 [ 379.252177][T12057] arch_do_signal_or_restart+0x96/0x720 [ 379.252204][T12057] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 379.252232][T12057] irqentry_exit_to_user_mode+0x4e/0xb0 [ 379.252256][T12057] irqentry_exit+0x16/0x60 [ 379.252278][T12057] exc_page_fault+0x66/0xc0 [ 379.252300][T12057] asm_exc_page_fault+0x2b/0x30 [ 379.252321][T12057] RIP: 0033:0x7fa32c98ebf1 [ 379.252338][T12057] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 379.252355][T12057] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 379.252373][T12057] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 379.252395][T12057] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 379.252409][T12057] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 379.252423][T12057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.252436][T12057] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 379.252454][T12057] [ 379.252462][T12057] memory: usage 305172kB, limit 307200kB, failcnt 30861 [ 379.723082][T12057] memory+swap: usage 428748kB, limit 9007199254740988kB, failcnt 0 [ 379.734218][T12057] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 379.741249][T12057] Memory cgroup stats for /syz4: [ 379.741395][T12057] cache 314064896 [ 379.750826][T12057] rss 208896 [ 379.754559][T12057] rss_huge 0 [ 379.757992][T12057] shmem 309936128 [ 379.765622][T12057] mapped_file 4124672 [ 379.771178][T12057] dirty 0 [ 379.790686][T12057] writeback 0 [ 379.794009][T12057] workingset_refault_anon 196 [ 379.807875][T12057] workingset_refault_file 3155 [ 379.817096][T12057] swap 124710912 [ 379.821376][T12057] swapcached 176128 [ 379.831211][T12057] pgpgin 492583 [ 379.835574][T12057] pgpgout 415837 [ 379.839133][T12057] pgfault 170044 [ 379.863119][T12057] pgmajfault 6742 [ 379.870604][T12057] inactive_anon 191930368 [ 379.875449][T12057] active_anon 118259712 [ 379.882275][T12057] inactive_file 0 [ 379.885933][T12057] active_file 4128768 [ 379.905950][T12057] unevictable 0 [ 379.909440][T12057] hierarchical_memory_limit 314572800 [ 379.925120][T12112] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 379.954159][T12057] hierarchical_memsw_limit 9223372036854771712 [ 379.960382][T12057] total_cache 314064896 [ 380.017963][T12057] total_rss 208896 [ 380.035839][T12057] total_rss_huge 0 [ 380.048156][T12057] total_shmem 309936128 [ 380.071406][T12057] total_mapped_file 4124672 [ 380.076057][T12057] total_dirty 0 [ 380.079566][T12057] total_writeback 0 [ 380.084604][T12057] total_workingset_refault_anon 196 [ 380.089930][T12057] total_workingset_refault_file 3155 [ 380.095761][T12057] total_swap 124710912 [ 380.101115][T12057] total_swapcached 176128 [ 380.105524][T12057] total_pgpgin 492583 [ 380.109670][T12057] total_pgpgout 415837 [ 380.115630][T12057] total_pgfault 170044 [ 380.119758][T12057] total_pgmajfault 6742 [ 380.125187][T12057] total_inactive_anon 191930368 [ 380.130121][T12057] total_active_anon 118259712 [ 380.136069][T12057] total_inactive_file 0 [ 380.140349][T12057] total_active_file 4128768 [ 380.144918][T12057] total_unevictable 0 [ 380.148906][T12057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12057,uid=0 [ 380.163839][T12057] Memory cgroup out of memory: Killed process 12057 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 380.654492][T12051] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 380.685040][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 380.685076][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.685089][T12051] Call Trace: [ 380.685097][T12051] [ 380.685106][T12051] __dump_stack+0x21/0x30 [ 380.685135][T12051] dump_stack_lvl+0x10c/0x190 [ 380.685157][T12051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 380.685180][T12051] ? ___ratelimit+0x3f7/0x5a0 [ 380.685201][T12051] dump_stack+0x19/0x20 [ 380.685229][T12051] dump_header+0xd7/0x490 [ 380.685246][T12051] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 380.685269][T12051] oom_kill_process+0x4c0/0x7e0 [ 380.685290][T12051] ? sched_clock_cpu+0x75/0x400 [ 380.685313][T12051] out_of_memory+0x7ee/0xbd0 [ 380.685333][T12051] ? __cfi_out_of_memory+0x10/0x10 [ 380.685352][T12051] ? mutex_lock_killable+0x92/0x1c0 [ 380.685374][T12051] ? __cfi_mutex_lock_killable+0x10/0x10 [ 380.685398][T12051] mem_cgroup_out_of_memory+0x279/0x350 [ 380.685425][T12051] ? drain_obj_stock+0xed0/0xed0 [ 380.685452][T12051] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 380.685478][T12051] try_charge_memcg+0x8f7/0xde0 [ 380.685501][T12051] ? __cfi_try_charge_memcg+0x10/0x10 [ 380.685523][T12051] ? preempt_schedule_irq+0x9c/0x100 [ 380.685543][T12051] ? __alloc_pages_noprof+0x31f/0x7b0 [ 380.685564][T12051] ? __folio_batch_add_and_move+0x2ab/0x370 [ 380.685586][T12051] __mem_cgroup_charge+0xf6/0x410 [ 380.685610][T12051] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 380.685634][T12051] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 380.685658][T12051] ? shmem_alloc_and_add_folio+0x463/0x1050 [ 380.685679][T12051] shmem_alloc_and_add_folio+0x86d/0x1050 [ 380.685701][T12051] ? put_swap_device+0x130/0x130 [ 380.685720][T12051] ? shmem_huge_global_enabled+0x2da/0x360 [ 380.685748][T12051] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 380.685775][T12051] ? __kasan_check_write+0x18/0x20 [ 380.685799][T12051] ? _raw_spin_lock+0x8c/0x120 [ 380.685825][T12051] shmem_get_folio_gfp+0x5f0/0x1380 [ 380.685854][T12051] ? shmem_get_folio+0xc0/0xc0 [ 380.685880][T12051] ? follow_page_pte+0xa5c/0xb90 [ 380.685901][T12051] ? inode_to_bdi+0x6d/0x100 [ 380.685924][T12051] shmem_write_begin+0xf4/0x270 [ 380.685944][T12051] generic_perform_write+0x330/0x960 [ 380.685969][T12051] ? __cfi_generic_perform_write+0x10/0x10 [ 380.685992][T12051] ? down_write+0xe9/0x2a0 [ 380.686015][T12051] ? file_update_time+0xa3/0x220 [ 380.686037][T12051] shmem_file_write_iter+0x105/0x130 [ 380.686059][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 380.686081][T12051] __kernel_write_iter+0x392/0x830 [ 380.686107][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 380.686129][T12051] ? __cfi___kernel_write_iter+0x10/0x10 [ 380.686154][T12051] ? get_dump_page+0x160/0x220 [ 380.686174][T12051] ? __asan_memset+0x39/0x50 [ 380.686198][T12051] ? iov_iter_bvec+0xc0/0x180 [ 380.686217][T12051] dump_user_range+0xb06/0xdf0 [ 380.686248][T12051] ? __cfi_dump_emit+0x10/0x10 [ 380.686273][T12051] ? __cfi_dump_user_range+0x10/0x10 [ 380.686298][T12051] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 380.686323][T12051] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 380.686349][T12051] elf_core_dump+0x2cd9/0x3810 [ 380.686372][T12051] ? __cfi_elf_core_dump+0x10/0x10 [ 380.686397][T12051] ? dump_interrupted+0xf0/0xf0 [ 380.686421][T12051] ? 0xffffffffff600000 [ 380.686437][T12051] do_coredump+0x1bfa/0x2bd0 [ 380.686464][T12051] ? __cfi_do_coredump+0x10/0x10 [ 380.686487][T12051] ? asm_exc_page_fault+0x2b/0x30 [ 380.686514][T12051] ? __kasan_slab_free+0x6a/0x80 [ 380.686542][T12051] ? kmem_cache_free+0x1c1/0x510 [ 380.686566][T12051] ? get_signal+0xa75/0x14f0 [ 380.686588][T12051] get_signal+0x11fd/0x14f0 [ 380.686611][T12051] arch_do_signal_or_restart+0x96/0x720 [ 380.686637][T12051] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 380.686665][T12051] irqentry_exit_to_user_mode+0x4e/0xb0 [ 380.686689][T12051] irqentry_exit+0x16/0x60 [ 380.686711][T12051] exc_page_fault+0x66/0xc0 [ 380.686732][T12051] asm_exc_page_fault+0x2b/0x30 [ 380.686752][T12051] RIP: 0033:0x7fa32c98ebf1 [ 380.686769][T12051] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 380.686786][T12051] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 380.686805][T12051] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 380.686819][T12051] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 380.686834][T12051] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 380.686847][T12051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 380.686860][T12051] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 380.686877][T12051] [ 380.686885][T12051] memory: usage 307200kB, limit 307200kB, failcnt 34296 [ 381.154764][T12051] memory+swap: usage 431944kB, limit 9007199254740988kB, failcnt 0 [ 381.163243][T12051] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 381.170100][T12051] Memory cgroup stats for /syz4: [ 381.170175][T12051] cache 314236928 [ 381.180736][T12051] rss 98304 [ 381.183859][T12051] rss_huge 0 [ 381.187033][T12051] shmem 314236928 [ 381.190689][T12051] mapped_file 0 [ 381.194162][T12051] dirty 0 [ 381.197126][T12051] writeback 0 [ 381.200382][T12051] workingset_refault_anon 201 [ 381.205068][T12051] workingset_refault_file 3155 [ 381.209942][T12051] swap 127737856 [ 381.213528][T12051] swapcached 258048 [ 381.217322][T12051] pgpgin 517996 [ 381.220864][T12051] pgpgout 441196 [ 381.224399][T12051] pgfault 171571 [ 381.227920][T12051] pgmajfault 6747 [ 381.231558][T12051] inactive_anon 172191744 [ 381.235871][T12051] active_anon 142381056 [ 381.239998][T12051] inactive_file 0 [ 381.243727][T12051] active_file 0 [ 381.247184][T12051] unevictable 0 [ 381.250655][T12051] hierarchical_memory_limit 314572800 [ 381.256023][T12051] hierarchical_memsw_limit 9223372036854771712 [ 381.262198][T12051] total_cache 314236928 [ 381.266358][T12051] total_rss 98304 [ 381.269969][T12051] total_rss_huge 0 [ 381.273721][T12051] total_shmem 314236928 [ 381.277865][T12051] total_mapped_file 0 [ 381.281848][T12051] total_dirty 0 [ 381.285291][T12051] total_writeback 0 [ 381.289071][T12051] total_workingset_refault_anon 201 [ 381.294271][T12051] total_workingset_refault_file 3155 [ 381.299537][T12051] total_swap 127737856 [ 381.303615][T12051] total_swapcached 258048 [ 381.307927][T12051] total_pgpgin 517996 [ 381.311908][T12051] total_pgpgout 441196 [ 381.315960][T12051] total_pgfault 171571 [ 381.320000][T12051] total_pgmajfault 6747 [ 381.324182][T12051] total_inactive_anon 172191744 [ 381.329018][T12051] total_active_anon 142381056 [ 381.333712][T12051] total_inactive_file 0 [ 381.337857][T12051] total_active_file 0 [ 381.341843][T12051] total_unevictable 0 [ 381.345808][T12051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12056,uid=0 [ 381.360793][T12051] Memory cgroup out of memory: Killed process 12056 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 381.467349][T12051] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 381.530606][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 381.530643][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.530657][T12051] Call Trace: [ 381.530664][T12051] [ 381.530673][T12051] __dump_stack+0x21/0x30 [ 381.530702][T12051] dump_stack_lvl+0x10c/0x190 [ 381.530724][T12051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 381.530746][T12051] ? ___ratelimit+0x3f7/0x5a0 [ 381.530766][T12051] dump_stack+0x19/0x20 [ 381.530787][T12051] dump_header+0xd7/0x490 [ 381.530804][T12051] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 381.530827][T12051] oom_kill_process+0x4c0/0x7e0 [ 381.530847][T12051] ? sched_clock_cpu+0x75/0x400 [ 381.530871][T12051] out_of_memory+0x7ee/0xbd0 [ 381.530890][T12051] ? __cfi_out_of_memory+0x10/0x10 [ 381.530908][T12051] ? mutex_lock_killable+0x92/0x1c0 [ 381.530930][T12051] ? __cfi_mutex_lock_killable+0x10/0x10 [ 381.530953][T12051] mem_cgroup_out_of_memory+0x279/0x350 [ 381.530979][T12051] ? drain_obj_stock+0xed0/0xed0 [ 381.531023][T12051] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 381.531048][T12051] try_charge_memcg+0x8f7/0xde0 [ 381.531071][T12051] ? __cfi_try_charge_memcg+0x10/0x10 [ 381.531093][T12051] ? preempt_schedule_irq+0x9c/0x100 [ 381.531112][T12051] ? __alloc_pages_noprof+0x31f/0x7b0 [ 381.531134][T12051] ? __folio_batch_add_and_move+0x2ab/0x370 [ 381.531154][T12051] __mem_cgroup_charge+0xf6/0x410 [ 381.531178][T12051] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 381.531201][T12051] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 381.531224][T12051] ? shmem_alloc_and_add_folio+0x463/0x1050 [ 381.531244][T12051] shmem_alloc_and_add_folio+0x86d/0x1050 [ 381.531265][T12051] ? put_swap_device+0x130/0x130 [ 381.531283][T12051] ? shmem_huge_global_enabled+0x2da/0x360 [ 381.531311][T12051] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 381.531337][T12051] ? __kasan_check_write+0x18/0x20 [ 381.531360][T12051] ? _raw_spin_lock+0x8c/0x120 [ 381.531386][T12051] shmem_get_folio_gfp+0x5f0/0x1380 [ 381.531420][T12051] ? shmem_get_folio+0xc0/0xc0 [ 381.531440][T12051] ? follow_page_pte+0xa5c/0xb90 [ 381.531460][T12051] ? inode_to_bdi+0x6d/0x100 [ 381.531480][T12051] shmem_write_begin+0xf4/0x270 [ 381.531499][T12051] generic_perform_write+0x330/0x960 [ 381.531523][T12051] ? __cfi_generic_perform_write+0x10/0x10 [ 381.531544][T12051] ? down_write+0xe9/0x2a0 [ 381.531566][T12051] ? file_update_time+0xa3/0x220 [ 381.531585][T12051] shmem_file_write_iter+0x105/0x130 [ 381.531607][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 381.531628][T12051] __kernel_write_iter+0x392/0x830 [ 381.531654][T12051] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 381.531676][T12051] ? __cfi___kernel_write_iter+0x10/0x10 [ 381.531698][T12051] ? get_dump_page+0x160/0x220 [ 381.531715][T12051] ? __asan_memset+0x39/0x50 [ 381.531736][T12051] ? iov_iter_bvec+0xc0/0x180 [ 381.531756][T12051] dump_user_range+0xb06/0xdf0 [ 381.531783][T12051] ? __cfi_dump_emit+0x10/0x10 [ 381.531808][T12051] ? __cfi_dump_user_range+0x10/0x10 [ 381.531834][T12051] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 381.531860][T12051] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 381.531887][T12051] elf_core_dump+0x2cd9/0x3810 [ 381.531909][T12051] ? __cfi_elf_core_dump+0x10/0x10 [ 381.531935][T12051] ? dump_interrupted+0xf0/0xf0 [ 381.531960][T12051] ? 0xffffffffff600000 [ 381.531977][T12051] do_coredump+0x1bfa/0x2bd0 [ 381.532004][T12051] ? __cfi_do_coredump+0x10/0x10 [ 381.532028][T12051] ? asm_exc_page_fault+0x2b/0x30 [ 381.532055][T12051] ? __kasan_slab_free+0x6a/0x80 [ 381.532084][T12051] ? kmem_cache_free+0x1c1/0x510 [ 381.532109][T12051] ? get_signal+0xa75/0x14f0 [ 381.532131][T12051] get_signal+0x11fd/0x14f0 [ 381.532155][T12051] arch_do_signal_or_restart+0x96/0x720 [ 381.532175][T12051] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 381.532196][T12051] irqentry_exit_to_user_mode+0x4e/0xb0 [ 381.532220][T12051] irqentry_exit+0x16/0x60 [ 381.532242][T12051] exc_page_fault+0x66/0xc0 [ 381.532264][T12051] asm_exc_page_fault+0x2b/0x30 [ 381.532285][T12051] RIP: 0033:0x7fa32c98ebf1 [ 381.532302][T12051] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 381.532319][T12051] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 381.532338][T12051] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 381.532353][T12051] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 381.532367][T12051] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.532381][T12051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.532394][T12051] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 381.532419][T12051] [ 381.532428][T12051] memory: usage 307200kB, limit 307200kB, failcnt 35740 [ 382.024390][T12051] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 382.031862][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 382.031879][ T36] audit: type=1400 audit(2000000437.345:64739): avc: denied { write } for pid=12117 comm="syz.0.3515" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.038002][T12051] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 382.040056][ T36] audit: type=1400 audit(2000000437.355:64740): avc: denied { write open } for pid=12117 comm="syz.0.3515" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.061590][T12051] Memory cgroup stats for [ 382.095314][ T36] audit: type=1400 audit(2000000437.385:64741): avc: denied { execmem } for pid=12116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 382.120664][T12051] /syz4: [ 382.120797][T12051] cache 314335232 [ 382.138745][ T36] audit: type=1400 audit(2000000437.425:64742): avc: denied { create } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.158728][ T36] audit: type=1400 audit(2000000437.425:64743): avc: denied { create } for pid=12119 comm="syz.5.3517" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.162668][T12051] rss 81920 [ 382.180356][ T36] audit: type=1400 audit(2000000437.445:64744): avc: denied { bind } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.209018][ T36] audit: type=1400 audit(2000000437.445:64745): avc: denied { create } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.229060][T12051] rss_huge 0 [ 382.232503][T12051] shmem 314335232 [ 382.236150][T12051] mapped_file 0 [ 382.239656][T12051] dirty 0 [ 382.242823][T12051] writeback 0 [ 382.246114][T12051] workingset_refault_anon 205 [ 382.251012][T12051] workingset_refault_file 4287 [ 382.257208][ T36] audit: type=1400 audit(2000000437.445:64746): avc: denied { bind } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.284370][T12051] swap 127832064 [ 382.288708][T12051] swapcached 163840 [ 382.292761][T12051] pgpgin 529779 [ 382.296228][T12051] pgpgout 452979 [ 382.299769][T12051] pgfault 172291 [ 382.303369][ T36] audit: type=1400 audit(2000000437.445:64747): avc: denied { bind } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.322942][T12051] pgmajfault 6757 [ 382.326785][T12051] inactive_anon 313352192 [ 382.331168][T12051] active_anon 1220608 [ 382.335187][T12051] inactive_file 0 [ 382.340656][T12051] active_file 0 [ 382.344177][T12051] unevictable 0 [ 382.347633][T12051] hierarchical_memory_limit 314572800 [ 382.356646][ T36] audit: type=1400 audit(2000000437.445:64748): avc: denied { bind } for pid=12117 comm="syz.0.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.381697][T12051] hierarchical_memsw_limit 9223372036854771712 [ 382.388117][T12051] total_cache 314335232 [ 382.402006][T12051] total_rss 81920 [ 382.405756][T12051] total_rss_huge 0 [ 382.409487][T12051] total_shmem 314335232 [ 382.425951][T12051] total_mapped_file 0 [ 382.429975][T12051] total_dirty 0 [ 382.438311][T12128] rust_binder: validate_parent_fixup: new_min_offset=83, sg_entry.length=21 [ 382.438335][T12128] rust_binder: Error while translating object. [ 382.440535][T12051] total_writeback 0 [ 382.448724][T12128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 382.453884][T12051] total_workingset_refault_anon 205 [ 382.458642][T12128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 382.467402][T12051] total_workingset_refault_file 4287 [ 382.486637][T12051] total_swap 127832064 [ 382.490775][T12051] total_swapcached 163840 [ 382.495109][T12051] total_pgpgin 529779 [ 382.499096][T12051] total_pgpgout 452979 [ 382.503215][T12051] total_pgfault 172291 [ 382.507479][T12051] total_pgmajfault 6757 [ 382.511651][T12051] total_inactive_anon 313352192 [ 382.516491][T12051] total_active_anon 1220608 [ 382.521017][T12051] total_inactive_file 0 [ 382.525165][T12051] total_active_file 0 [ 382.529136][T12051] total_unevictable 0 [ 382.533131][T12051] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12040,uid=0 [ 382.548072][T12051] Memory cgroup out of memory: Killed process 12040 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:52992kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:0 [ 382.857477][T12063] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 382.882133][T12063] CPU: 1 UID: 0 PID: 12063 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 382.882169][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.882182][T12063] Call Trace: [ 382.882189][T12063] [ 382.882197][T12063] __dump_stack+0x21/0x30 [ 382.882225][T12063] dump_stack_lvl+0x10c/0x190 [ 382.882248][T12063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 382.882270][T12063] ? ___ratelimit+0x3f7/0x5a0 [ 382.882290][T12063] dump_stack+0x19/0x20 [ 382.882309][T12063] dump_header+0xd7/0x490 [ 382.882324][T12063] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 382.882343][T12063] oom_kill_process+0x4c0/0x7e0 [ 382.882360][T12063] ? sched_clock_cpu+0x75/0x400 [ 382.882382][T12063] out_of_memory+0x7ee/0xbd0 [ 382.882399][T12063] ? __cfi_out_of_memory+0x10/0x10 [ 382.882415][T12063] ? mutex_lock_killable+0x92/0x1c0 [ 382.882435][T12063] ? __cfi_mutex_lock_killable+0x10/0x10 [ 382.882455][T12063] mem_cgroup_out_of_memory+0x279/0x350 [ 382.882478][T12063] ? drain_obj_stock+0xed0/0xed0 [ 382.882502][T12063] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 382.882525][T12063] try_charge_memcg+0x8f7/0xde0 [ 382.882545][T12063] ? __cfi_try_charge_memcg+0x10/0x10 [ 382.882565][T12063] ? __alloc_pages_noprof+0x31f/0x7b0 [ 382.882584][T12063] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 382.882602][T12063] ? __folio_batch_add_and_move+0x2ab/0x370 [ 382.882622][T12063] __mem_cgroup_charge+0xf6/0x410 [ 382.882643][T12063] ? _raw_spin_lock+0x8c/0x120 [ 382.882666][T12063] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 382.882688][T12063] shmem_alloc_and_add_folio+0x86d/0x1050 [ 382.882707][T12063] ? put_swap_device+0x130/0x130 [ 382.882723][T12063] ? shmem_huge_global_enabled+0x2da/0x360 [ 382.882748][T12063] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 382.882772][T12063] ? __kasan_check_write+0x18/0x20 [ 382.882793][T12063] ? _raw_spin_lock+0x8c/0x120 [ 382.882816][T12063] shmem_get_folio_gfp+0x5f0/0x1380 [ 382.882842][T12063] ? shmem_get_folio+0xc0/0xc0 [ 382.882864][T12063] ? follow_page_pte+0xa5c/0xb90 [ 382.882883][T12063] ? inode_to_bdi+0x6d/0x100 [ 382.882903][T12063] shmem_write_begin+0xf4/0x270 [ 382.882920][T12063] generic_perform_write+0x330/0x960 [ 382.882942][T12063] ? __cfi_generic_perform_write+0x10/0x10 [ 382.882962][T12063] ? down_write+0xe9/0x2a0 [ 382.882983][T12063] ? file_update_time+0xa3/0x220 [ 382.883003][T12063] shmem_file_write_iter+0x105/0x130 [ 382.883022][T12063] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 382.883041][T12063] __kernel_write_iter+0x392/0x830 [ 382.883064][T12063] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 382.883083][T12063] ? __cfi___kernel_write_iter+0x10/0x10 [ 382.883105][T12063] ? get_dump_page+0x160/0x220 [ 382.883128][T12063] ? __asan_memset+0x39/0x50 [ 382.883148][T12063] ? iov_iter_bvec+0xc0/0x180 [ 382.883164][T12063] dump_user_range+0xb06/0xdf0 [ 382.883188][T12063] ? __cfi_dump_emit+0x10/0x10 [ 382.883210][T12063] ? __cfi_dump_user_range+0x10/0x10 [ 382.883232][T12063] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 382.883255][T12063] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 382.883278][T12063] elf_core_dump+0x2cd9/0x3810 [ 382.883298][T12063] ? __cfi_elf_core_dump+0x10/0x10 [ 382.883320][T12063] ? dump_interrupted+0xf0/0xf0 [ 382.883342][T12063] ? 0xffffffffff600000 [ 382.883356][T12063] do_coredump+0x1bfa/0x2bd0 [ 382.883380][T12063] ? __cfi_do_coredump+0x10/0x10 [ 382.883401][T12063] ? asm_exc_page_fault+0x2b/0x30 [ 382.883426][T12063] ? __kasan_slab_free+0x6a/0x80 [ 382.883449][T12063] ? kmem_cache_free+0x1c1/0x510 [ 382.883472][T12063] ? get_signal+0xa75/0x14f0 [ 382.883491][T12063] get_signal+0x11fd/0x14f0 [ 382.883512][T12063] arch_do_signal_or_restart+0x96/0x720 [ 382.883535][T12063] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 382.883560][T12063] irqentry_exit_to_user_mode+0x4e/0xb0 [ 382.883582][T12063] irqentry_exit+0x16/0x60 [ 382.883601][T12063] exc_page_fault+0x66/0xc0 [ 382.883620][T12063] asm_exc_page_fault+0x2b/0x30 [ 382.883638][T12063] RIP: 0033:0x7fa32c98ebf1 [ 382.883652][T12063] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 382.883668][T12063] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 382.883684][T12063] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 382.883698][T12063] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 382.883710][T12063] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 382.883722][T12063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 382.883733][T12063] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 382.883748][T12063] [ 382.883756][T12063] memory: usage 307200kB, limit 307200kB, failcnt 40178 [ 383.352411][T12063] memory+swap: usage 431996kB, limit 9007199254740988kB, failcnt 0 [ 383.360506][T12063] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 383.367463][T12063] Memory cgroup stats for /syz4: [ 383.367595][T12063] cache 314290176 [ 383.376264][T12063] rss 106496 [ 383.379451][T12063] rss_huge 0 [ 383.382665][T12063] shmem 314290176 [ 383.386287][T12063] mapped_file 0 [ 383.389723][T12063] dirty 0 [ 383.392670][T12063] writeback 0 [ 383.396026][T12063] workingset_refault_anon 209 [ 383.400705][T12063] workingset_refault_file 5295 [ 383.405456][T12063] swap 127791104 [ 383.408982][T12063] swapcached 200704 [ 383.412818][T12063] pgpgin 538915 [ 383.416264][T12063] pgpgout 462115 [ 383.419789][T12063] pgfault 172498 [ 383.423351][T12063] pgmajfault 6763 [ 383.426989][T12063] inactive_anon 163082240 [ 383.431319][T12063] active_anon 151490560 [ 383.435464][T12063] inactive_file 0 [ 383.439073][T12063] active_file 0 [ 383.442547][T12063] unevictable 0 [ 383.445993][T12063] hierarchical_memory_limit 314572800 [ 383.451460][T12063] hierarchical_memsw_limit 9223372036854771712 [ 383.457617][T12063] total_cache 314290176 [ 383.461889][T12063] total_rss 106496 [ 383.465592][T12063] total_rss_huge 0 [ 383.469286][T12063] total_shmem 314290176 [ 383.473447][T12063] total_mapped_file 0 [ 383.477416][T12063] total_dirty 0 [ 383.480896][T12063] total_writeback 0 [ 383.484691][T12063] total_workingset_refault_anon 209 [ 383.489861][T12063] total_workingset_refault_file 5295 [ 383.495154][T12063] total_swap 127791104 [ 383.499205][T12063] total_swapcached 200704 [ 383.503543][T12063] total_pgpgin 538915 [ 383.507507][T12063] total_pgpgout 462115 [ 383.511581][T12063] total_pgfault 172498 [ 383.515634][T12063] total_pgmajfault 6763 [ 383.519765][T12063] total_inactive_anon 163082240 [ 383.524617][T12063] total_active_anon 151490560 [ 383.529274][T12063] total_inactive_file 0 [ 383.533439][T12063] total_active_file 0 [ 383.537407][T12063] total_unevictable 0 [ 383.541430][T12063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12059,uid=0 [ 383.556397][T12063] Memory cgroup out of memory: Killed process 12059 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 383.584398][T11047] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 383.650420][T11047] CPU: 1 UID: 0 PID: 11047 Comm: syz-executor Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 383.650457][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.650469][T11047] Call Trace: [ 383.650476][T11047] [ 383.650483][T11047] __dump_stack+0x21/0x30 [ 383.650512][T11047] dump_stack_lvl+0x10c/0x190 [ 383.650533][T11047] ? __cfi_dump_stack_lvl+0x10/0x10 [ 383.650558][T11047] ? ___ratelimit+0x3f7/0x5a0 [ 383.650579][T11047] dump_stack+0x19/0x20 [ 383.650600][T11047] dump_header+0xd7/0x490 [ 383.650614][T11047] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 383.650633][T11047] oom_kill_process+0x4c0/0x7e0 [ 383.650650][T11047] ? sched_clock_cpu+0x75/0x400 [ 383.650671][T11047] out_of_memory+0x7ee/0xbd0 [ 383.650690][T11047] ? __cfi_out_of_memory+0x10/0x10 [ 383.650709][T11047] ? mutex_lock_killable+0x104/0x1c0 [ 383.650732][T11047] ? __cfi_mutex_lock_killable+0x10/0x10 [ 383.650755][T11047] mem_cgroup_out_of_memory+0x279/0x350 [ 383.650782][T11047] ? drain_obj_stock+0xed0/0xed0 [ 383.650809][T11047] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 383.650836][T11047] try_charge_memcg+0x8f7/0xde0 [ 383.650873][T11047] ? sched_clock_cpu+0x75/0x400 [ 383.650896][T11047] ? __cfi_try_charge_memcg+0x10/0x10 [ 383.650918][T11047] ? __alloc_pages_noprof+0x31f/0x7b0 [ 383.650940][T11047] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 383.650964][T11047] __mem_cgroup_charge+0xf6/0x410 [ 383.650988][T11047] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 383.651018][T11047] folio_prealloc+0x67/0x240 [ 383.651034][T11047] do_wp_page+0x1c54/0x3270 [ 383.651063][T11047] ? __kasan_check_read+0x15/0x20 [ 383.651086][T11047] ? folio_put+0x90/0x90 [ 383.651113][T11047] ? __cfi__raw_spin_lock+0x10/0x10 [ 383.651139][T11047] ? __pte_offset_map+0x1b0/0x230 [ 383.651162][T11047] ? pte_offset_map_rw_nolock+0xba/0x110 [ 383.651185][T11047] handle_mm_fault+0xff7/0x1b90 [ 383.651215][T11047] ? __cfi_handle_mm_fault+0x10/0x10 [ 383.651241][T11047] ? lock_vma_under_rcu+0x49d/0x530 [ 383.651270][T11047] ? __cfi___x64_sys_clone+0x10/0x10 [ 383.651291][T11047] ? __kasan_check_read+0x15/0x20 [ 383.651315][T11047] do_user_addr_fault+0x96c/0x1200 [ 383.651342][T11047] exc_page_fault+0x59/0xc0 [ 383.651364][T11047] asm_exc_page_fault+0x2b/0x30 [ 383.651385][T11047] RIP: 0033:0x7fa32c984fc8 [ 383.651402][T11047] Code: 84 e4 74 66 e8 89 04 00 00 41 89 c4 85 c0 0f 84 4e 01 00 00 49 c7 c5 a8 ff ff ff 64 45 8b 75 00 48 89 da 89 ee bf 02 00 00 00 93 09 00 00 45 85 e4 79 05 64 45 89 75 00 48 8b 84 24 c8 00 00 [ 383.651419][T11047] RSP: 002b:00007ffccaed6df0 EFLAGS: 00010206 [ 383.651438][T11047] RAX: 00000000000000cf RBX: 0000000000000000 RCX: 00007fa32c985453 [ 383.651453][T11047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 383.651466][T11047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 383.651479][T11047] R10: 000055556216d7d0 R11: 0000000000000246 R12: 00000000000000cf [ 383.651493][T11047] R13: ffffffffffffffa8 R14: 0000000000000004 R15: 00007ffccaed6f80 [ 383.651510][T11047] [ 383.944997][T11047] memory: usage 307200kB, limit 307200kB, failcnt 42571 [ 383.951987][T11047] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 383.959904][T11047] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 383.966795][T11047] Memory cgroup stats for /syz4: [ 383.966928][T11047] cache 314249216 [ 383.975510][T11047] rss 98304 [ 383.978598][T11047] rss_huge 0 [ 383.981832][T11047] shmem 314249216 [ 383.985482][T11047] mapped_file 0 [ 383.988937][T11047] dirty 0 [ 383.991933][T11047] writeback 0 [ 383.995222][T11047] workingset_refault_anon 209 [ 383.999877][T11047] workingset_refault_file 6306 [ 384.004710][T11047] swap 127750144 [ 384.008306][T11047] swapcached 245760 [ 384.012151][T11047] pgpgin 549203 [ 384.015604][T11047] pgpgout 472403 [ 384.019143][T11047] pgfault 173042 [ 384.022721][T11047] pgmajfault 6766 [ 384.026345][T11047] inactive_anon 78553088 [ 384.030610][T11047] active_anon 236019712 [ 384.034798][T11047] inactive_file 0 [ 384.038424][T11047] active_file 0 [ 384.041985][T11047] unevictable 0 [ 384.045459][T11047] hierarchical_memory_limit 314572800 [ 384.050885][T11047] hierarchical_memsw_limit 9223372036854771712 [ 384.057029][T11047] total_cache 314249216 [ 384.061191][T11047] total_rss 98304 [ 384.064812][T11047] total_rss_huge 0 [ 384.068504][T11047] total_shmem 314249216 [ 384.072668][T11047] total_mapped_file 0 [ 384.076895][T11047] total_dirty 0 [ 384.080331][T11047] total_writeback 0 [ 384.084165][T11047] total_workingset_refault_anon 209 [ 384.089348][T11047] total_workingset_refault_file 6306 [ 384.094646][T11047] total_swap 127750144 [ 384.098705][T11047] total_swapcached 245760 [ 384.103046][T11047] total_pgpgin 549203 [ 384.107018][T11047] total_pgpgout 472403 [ 384.111125][T11047] total_pgfault 173042 [ 384.115184][T11047] total_pgmajfault 6766 [ 384.119315][T11047] total_inactive_anon 78553088 [ 384.124128][T11047] total_active_anon 236019712 [ 384.128790][T11047] total_inactive_file 0 [ 384.132969][T11047] total_active_file 0 [ 384.137022][T11047] total_unevictable 0 [ 384.141018][T11047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12062,uid=0 [ 384.155956][T11047] Memory cgroup out of memory: Killed process 12062 (syz.4.3500) total-vm:90104kB, anon-rss:952kB, file-rss:55732kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 384.183567][T12063] syz.4.3500 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 384.298289][T12063] CPU: 1 UID: 0 PID: 12063 Comm: syz.4.3500 Not tainted 6.12.38-syzkaller-g886d2f37b799 #0 f36c02f5443cd552c209ccf9d090ed65beec93f8 [ 384.298321][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.298332][T12063] Call Trace: [ 384.298337][T12063] [ 384.298344][T12063] __dump_stack+0x21/0x30 [ 384.298370][T12063] dump_stack_lvl+0x10c/0x190 [ 384.298389][T12063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 384.298407][T12063] ? ___ratelimit+0x3f7/0x5a0 [ 384.298426][T12063] dump_stack+0x19/0x20 [ 384.298447][T12063] dump_header+0xd7/0x490 [ 384.298464][T12063] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 384.298486][T12063] oom_kill_process+0x4c0/0x7e0 [ 384.298507][T12063] ? sched_clock_cpu+0x75/0x400 [ 384.298530][T12063] out_of_memory+0x7ee/0xbd0 [ 384.298549][T12063] ? __cfi_out_of_memory+0x10/0x10 [ 384.298568][T12063] ? mutex_lock_killable+0x104/0x1c0 [ 384.298589][T12063] ? __cfi_mutex_lock_killable+0x10/0x10 [ 384.298613][T12063] mem_cgroup_out_of_memory+0x279/0x350 [ 384.298640][T12063] ? drain_obj_stock+0xed0/0xed0 [ 384.298667][T12063] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 384.298692][T12063] try_charge_memcg+0x8f7/0xde0 [ 384.298716][T12063] ? __cfi_try_charge_memcg+0x10/0x10 [ 384.298737][T12063] ? __alloc_pages_noprof+0x31f/0x7b0 [ 384.298760][T12063] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 384.298783][T12063] __mem_cgroup_charge+0xf6/0x410 [ 384.298808][T12063] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 384.298832][T12063] ? do_pte_missing+0x2b7a/0x4230 [ 384.298854][T12063] shmem_alloc_and_add_folio+0x86d/0x1050 [ 384.298876][T12063] ? put_swap_device+0x130/0x130 [ 384.298895][T12063] ? shmem_huge_global_enabled+0x2da/0x360 [ 384.298924][T12063] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 384.298951][T12063] ? __kasan_check_write+0x18/0x20 [ 384.298975][T12063] ? _raw_spin_lock+0x8c/0x120 [ 384.299000][T12063] shmem_get_folio_gfp+0x5f0/0x1380 [ 384.299028][T12063] ? shmem_get_folio+0xc0/0xc0 [ 384.299054][T12063] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 384.299079][T12063] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 384.299102][T12063] ? inode_to_bdi+0x6d/0x100 [ 384.299125][T12063] shmem_write_begin+0xf4/0x270 [ 384.299145][T12063] generic_perform_write+0x330/0x960 [ 384.299172][T12063] ? __cfi_generic_perform_write+0x10/0x10 [ 384.299194][T12063] ? down_write+0xe9/0x2a0 [ 384.299216][T12063] ? mnt_get_write_access_file+0x1af/0x3b0 [ 384.299238][T12063] ? mnt_put_write_access_file+0xc2/0x100 [ 384.299267][T12063] ? file_update_time+0x1ef/0x220 [ 384.299289][T12063] shmem_file_write_iter+0x105/0x130 [ 384.299311][T12063] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 384.299333][T12063] __kernel_write_iter+0x392/0x830 [ 384.299359][T12063] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 384.299381][T12063] ? __cfi___kernel_write_iter+0x10/0x10 [ 384.299407][T12063] ? get_dump_page+0x160/0x220 [ 384.299424][T12063] ? __asan_memset+0x39/0x50 [ 384.299442][T12063] ? iov_iter_bvec+0xc0/0x180 [ 384.299461][T12063] dump_user_range+0xb06/0xdf0 [ 384.299488][T12063] ? __cfi_dump_emit+0x10/0x10 [ 384.299513][T12063] ? __cfi_dump_user_range+0x10/0x10 [ 384.299539][T12063] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 384.299565][T12063] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 384.299591][T12063] elf_core_dump+0x2cd9/0x3810 [ 384.299613][T12063] ? __cfi_elf_core_dump+0x10/0x10 [ 384.299638][T12063] ? dump_interrupted+0xf0/0xf0 [ 384.299663][T12063] ? 0xffffffffff600000 [ 384.299680][T12063] do_coredump+0x1bfa/0x2bd0 [ 384.299707][T12063] ? __cfi_do_coredump+0x10/0x10 [ 384.299731][T12063] ? asm_exc_page_fault+0x2b/0x30 [ 384.299757][T12063] ? __kasan_slab_free+0x6a/0x80 [ 384.299780][T12063] ? kmem_cache_free+0x1c1/0x510 [ 384.299804][T12063] ? get_signal+0xa75/0x14f0 [ 384.299826][T12063] get_signal+0x11fd/0x14f0 [ 384.299850][T12063] arch_do_signal_or_restart+0x96/0x720 [ 384.299876][T12063] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 384.299906][T12063] irqentry_exit_to_user_mode+0x4e/0xb0 [ 384.299930][T12063] irqentry_exit+0x16/0x60 [ 384.299952][T12063] exc_page_fault+0x66/0xc0 [ 384.299974][T12063] asm_exc_page_fault+0x2b/0x30 [ 384.299994][T12063] RIP: 0033:0x7fa32c98ebf1 [ 384.300010][T12063] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 384.300028][T12063] RSP: 002b:ffffffffffffff40 EFLAGS: 00010217 [ 384.300046][T12063] RAX: 0000000000000000 RBX: 00007fa32cbb5fa0 RCX: 00007fa32c98ebe9 [ 384.300061][T12063] RDX: 0000000000000000 RSI: ffffffffffffff40 RDI: 0000000082048411 [ 384.300076][T12063] RBP: 00007fa32ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 384.300090][T12063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 384.300103][T12063] R13: 00007fa32cbb6038 R14: 00007fa32cbb5fa0 R15: 00007ffccaed6b68 [ 384.300121][T12063] [ 384.300129][T12063] memory: usage 247356kB, limit 307200kB, failcnt 42666 [ 384.639862][T12137] rust_binder: 494: no such ref 0 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=3463 state=3 status=67 (errno 9: Bad file descriptor) [ 384.831483][T12135] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 384.838833][T12135] rust_binder: Write failure EINVAL in pid:494 [ 385.072479][T12063] memory+swap: usage 401500kB, limit 9007199254740988kB, failcnt 0 [ 385.160632][T12063] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 385.167524][T12063] Memory cgroup stats for /syz4: [ 385.167675][T12063] cache 265093120 [ 385.250612][T12063] rss 28672 [ 385.253850][T12063] rss_huge 0 [ 385.257050][T12063] shmem 261533696 [ 385.320673][T12063] mapped_file 2625536 [ 385.324693][T12063] dirty 0 [ 385.327629][T12063] writeback 69632 [ 385.390858][T12063] workingset_refault_anon 213 [ 385.396546][T12063] workingset_refault_file 7776 [ 385.450619][T12063] swap 127389696 [ 385.454215][T12063] swapcached 90112 [ 385.457970][T12063] pgpgin 557102 [ 385.510642][T12063] pgpgout 492342 [ 385.514240][T12063] pgfault 173410 [ 385.517779][T12063] pgmajfault 6779 [ 385.560673][T12063] inactive_anon 163622912 [ 385.565322][T12063] active_anon 97288192 [ 385.569391][T12063] inactive_file 1413120 [ 385.580759][T12063] active_file 2146304 [ 385.584775][T12063] unevictable 0 [ 385.588236][T12063] hierarchical_memory_limit 314572800 [ 385.593671][T12063] hierarchical_memsw_limit 9223372036854771712 [ 385.599896][T12063] total_cache 265093120 [ 385.604077][T12063] total_rss 28672 [ 385.607757][T12063] total_rss_huge 0 [ 385.611494][T12063] total_shmem 261533696 [ 385.615639][T12063] total_mapped_file 2625536 [ 385.620136][T12063] total_dirty 0 [ 385.623623][T12063] total_writeback 69632 [ 385.627789][T12063] total_workingset_refault_anon 213 [ 385.633031][T12063] total_workingset_refault_file 7776 [ 385.638486][T12063] total_swap 127389696 [ 385.646036][T12063] total_swapcached 90112 [ 385.650317][T12063] total_pgpgin 557102 [ 385.654366][T12063] total_pgpgout 492342 [ 385.658461][T12063] total_pgfault 173410 [ 385.662557][T12063] total_pgmajfault 6779 [ 385.666699][T12063] total_inactive_anon 163622912 [ 385.671558][T12063] total_active_anon 97288192 [ 385.676142][T12063] total_inactive_file 1413120 [ 385.680866][T12063] total_active_file 2146304 [ 385.685364][T12063] total_unevictable 0 [ 385.689340][T12063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3500,pid=12052,uid=0 [ 385.704481][T12063] Memory cgroup out of memory: OOM victim 12052 (syz.4.3500) is already exiting. Skip killing the task [ 385.735246][ T2388] bridge_slave_1: left allmulticast mode [ 385.740961][ T2388] bridge_slave_1: left promiscuous mode [ 385.746596][ T2388] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.754808][ T2388] bridge_slave_0: left allmulticast mode [ 385.760484][ T2388] bridge_slave_0: left promiscuous mode [ 385.767465][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.775394][ T2388] bridge_slave_1: left allmulticast mode [ 385.781064][ T2388] bridge_slave_1: left promiscuous mode [ 385.786651][ T2388] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.794436][ T2388] bridge_slave_0: left allmulticast mode [ 385.800082][ T2388] bridge_slave_0: left promiscuous mode [ 385.805764][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.282033][ T2388] veth1_macvtap: left promiscuous mode [ 386.287550][ T2388] : left promiscuous mode [ 386.292346][ T2388] veth1_macvtap: left promiscuous mode [ 386.297834][ T2388] veth0_vlan: left promiscuous mode [ 387.541071][ T2388] bridge_slave_1: left allmulticast mode [ 387.546743][ T2388] bridge_slave_1: left promiscuous mode [ 387.552388][ T2388] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.559776][ T2388] bridge_slave_0: left allmulticast mode [ 387.565504][ T2388] bridge_slave_0: left promiscuous mode [ 387.571130][ T2388] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.791376][ T2388] veth1_macvtap: left promiscuous mode [ 387.796911][ T2388] veth0_vlan: left promiscuous mode