last executing test programs: 9m54.028081723s ago: executing program 32 (id=12): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x110, 0x308, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x43, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 9m53.189626876s ago: executing program 33 (id=22): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0/file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa\xa7\xd2\xc2\xb4\xa5:\x89<\xce\xb7\xbf\xf6\x16\xe3\xaa\xf4\xc6\xe8\xebzu\x90^\xfe\x031\xc4\x8fB\xcd?\xabaO3\x16\f\xa6{Km\x19\xd3\x1e\xad<\xe3r\x9aH\x15\xfd\xc3\x19\x9cQ}\\\xe5\x96\xb0_\x90\xe1n^6s\x8b\x9a(\xd2\'!\xe3,\xd3\x03\xe1\xa6\xba\xb8j\xb9\x91H\xc0\xe1\xe8\xdb\x84\xc2c\xb1\xeaA\xb7\xdb=o\xc7\x16D\xc1\xff\x83\f\xc3\x98 }2\x91\xde\xeeb\b\x0eB\x14p*\xa3\x145>\xe5\x14\xc4`Q\xa9\x1f@\x83VY\xb4q\xaf]Y\x05\xa5~\xde\xa3\xa9\xa5=\\\xbdLysy\x88h\xdd\xa6V\xabJ\xff\x9a\xb8\xa1Ejl\xe7e\xa0\x9eV\xd4f\xe2\xb8\xee\xf0=\xcdb\xdd[\xe5\xab\\Zp\x8f\xe9YZ~\xb8r\x11\xeb\x87cZI\xa4p\xe0\xb1\x1c\xd0C\x95\x95^K~3\xd9=G\xeb\xb3\xfe'}]}, 0xf6) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 9m3.052755782s ago: executing program 34 (id=924): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2100, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x7405e000) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write(r6, &(0x7f0000000000)="90193833b141f9fe5cbaa73b465cf4aaeffe0b51363d8de069cc339ea45dc59e9c1afb677b46a57497d043e238497f2c2d4fcb97d7695fc9", 0x38) 8m51.936451019s ago: executing program 35 (id=1081): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r2, 0x4d75c000) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="8fce4e89dd5f2d42b85b456c694eabc9f4afda75bac20360b31d31c35af3734d0fc474b238f809dd6f8eb6bdf179d98742082da4c570321684f7605714f5654130865bd26b91d079b4e0bef503131b1321ebdc0d7991f848faec43d0c8a5133e4b3623621befe280c16b89035e28dc9cfbf7a19d9bcd03fa89ebacd12f2e8151f8fd246b170d9f84efa2e0e7c35ca76f86710501d0c9c22ac2eeea7ab8bce175fc060c978d230307ae774eea1831430db78481eb2b3bea4e82db5996e2677adf37d5d2513d56f39a5c5f018be3bfaa689b7c36f52ba137516241a05981179721a0fabef4898ce488fc8a36f2e5af6651a559", @ANYRESHEX=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8005) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendfile(r6, r0, 0x0, 0x1ff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'lo\x00', @local}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r2, 0x4d75c000) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="8fce4e89dd5f2d42b85b456c694eabc9f4afda75bac20360b31d31c35af3734d0fc474b238f809dd6f8eb6bdf179d98742082da4c570321684f7605714f5654130865bd26b91d079b4e0bef503131b1321ebdc0d7991f848faec43d0c8a5133e4b3623621befe280c16b89035e28dc9cfbf7a19d9bcd03fa89ebacd12f2e8151f8fd246b170d9f84efa2e0e7c35ca76f86710501d0c9c22ac2eeea7ab8bce175fc060c978d230307ae774eea1831430db78481eb2b3bea4e82db5996e2677adf37d5d2513d56f39a5c5f018be3bfaa689b7c36f52ba137516241a05981179721a0fabef4898ce488fc8a36f2e5af6651a559", @ANYRESHEX=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8005) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) sendfile(r6, r0, 0x0, 0x1ff) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'lo\x00', @local}) (async) 8m46.962890084s ago: executing program 36 (id=1169): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') lseek(r1, 0xffffffffffffffff, 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/218, 0xda}, {&(0x7f0000000140)}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f0000000440)=""/150, 0x96}], 0x5}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40000002, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x160e) 6m18.67703078s ago: executing program 37 (id=3673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x8000000) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)='./binderfs/binder0\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5m41.998449304s ago: executing program 9 (id=4361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000500)={{0x2, 0x4e20, @multicast2}, {0x1, @random="bb3c2f7dbece"}, 0x4, {0x2, 0x4e20, @multicast1}, 'ip6gretap0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000002c0)={@my=0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) fsopen(0x0, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r1, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 5m39.336481754s ago: executing program 9 (id=4383): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2040, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) read(r1, &(0x7f0000000040)=""/32, 0x20) sendmsg$nl_generic(r0, &(0x7f00000016c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)={0x1288, 0x24, 0x200, 0x70bd28, 0x25dfdbfb, {0x19}, [@nested={0x1f3, 0x3, 0x0, 0x1, [@generic="ae6e38815a31a163a01b8cc2462ebab860871464376e5195263db694a20420dfed0d794435f571db23029f912ed80b58d282aa18ed3a8c5176236e4fa3c0f3383b1c703062fec2e7ab8642ffa67e426c166ca4685043448397f000e624404d3c0b0a86e6630c8398c83fdd42f7b4d2cf55ad81fdc4bc93ba914c13395544f11321319c1f41a0a67708d6f10590d064f1059d57f9e7dc2c59a54ecd2064253910a9fb7b54e7106e26cd56167aafcaea87d6b32dc46f967e42de0356fe88f848880865e07ac1af6ebaea6a48d3e08add190cb049d6572d82c64d9186dc7ac8d5ab1141aaa7581b", @typed={0xc, 0xc8, 0x0, 0x0, @u64=0x4}, @generic="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"]}, @nested={0x72, 0x9d, 0x0, 0x1, [@nested={0x4, 0x7b}, @nested={0x4, 0x20}, @generic="2539d7e9ca4a08eb07d1d125a370e71c3485bff105b710f9fdab965419fce3757876f4effd", @nested={0x4, 0x12}, @typed={0x8, 0xb0, 0x0, 0x0, @fd=r0}, @generic="dd97d9d909642a94ff0b725886b65f6d100b0ad2532d45d1b33fde7d063551ff9f90d62cf910a8f18d", @typed={0x8, 0x14c, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x8c}]}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r0}, @typed={0x1004, 0x85, 0x0, 0x0, @binary="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"}]}, 0x1288}, 0x1, 0x0, 0x0, 0x811}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000040)={0xda, 0x0, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = epoll_create(0x4) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000100)) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010026bd706e6e24139e07"], 0x40}}, 0x90) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0xffff8000, 0x1, 0x3}}) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/245, 0xf5}) 5m39.240306635s ago: executing program 9 (id=4384): r0 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/153, 0x99}], 0x7, &(0x7f0000000540)=""/115, 0x73}, 0x7}], 0x1, 0x2000, &(0x7f0000000640)={r1, r2+10000000}) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x10002, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x3, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x0, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x6, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd834, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000400)) read(r3, &(0x7f0000000080)=""/93, 0xffffff6c) 5m39.121410147s ago: executing program 9 (id=4385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) personality(0x5400004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1000, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000080)={r2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 5m39.090456187s ago: executing program 9 (id=4386): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 5m38.89785429s ago: executing program 9 (id=4388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1bd201, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r5, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r3, 0x0) r7 = dup3(r6, r3, 0x0) read$FUSE(r7, &(0x7f0000003f80)={0x2020}, 0x2020) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"}) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002280)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r9}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002200)={0x78, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r9}, @dead_binder_done, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002080)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x0, 0x15}}, &(0x7f0000002100)={0x0, 0x18, 0x30}}}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}], 0x38, 0x0, &(0x7f00000021c0)="c96e58ac342d38fa1c7ba757c2c5630ae026659658fcdf7c9c92f2793087ffe69b598af0449830fc8056a502c93e670ae7af23dfdc22c1b8"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002240)=0xc) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x2) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) socket$can_raw(0x1d, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r10, 0x0) 5m38.792715252s ago: executing program 38 (id=4388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1bd201, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r5, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r3, 0x0) r7 = dup3(r6, r3, 0x0) read$FUSE(r7, &(0x7f0000003f80)={0x2020}, 0x2020) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"}) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002280)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r9}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002200)={0x78, 0x0, &(0x7f0000002140)=[@free_buffer={0x40086303, r9}, @dead_binder_done, @exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002080)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x3, 0x0, 0x15}}, &(0x7f0000002100)={0x0, 0x18, 0x30}}}, @exit_looper, @dead_binder_done, @acquire={0x40046305, 0x2}], 0x38, 0x0, &(0x7f00000021c0)="c96e58ac342d38fa1c7ba757c2c5630ae026659658fcdf7c9c92f2793087ffe69b598af0449830fc8056a502c93e670ae7af23dfdc22c1b8"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002240)=0xc) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x2) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) socket$can_raw(0x1d, 0x3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r10, 0x0) 5m25.538905371s ago: executing program 1 (id=4575): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000000)={[{@volatile}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_stats}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000f8ff064d564b00"/24]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6, 0x3f}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000002c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x70) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000500)={r7, r0, 0x7}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffff471, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x160e) 5m24.623488885s ago: executing program 1 (id=4579): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x181000) 5m24.609866066s ago: executing program 1 (id=4580): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB="1a04"]) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r0 = userfaultfd(0x80803) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x88000003, 0x0}, 0x0, 0x8, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0xf, @empty, 0x200}, 0x1c) setsockopt(r1, 0x1, 0x9, &(0x7f0000000040), 0x29) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0xffffffff) epoll_create1(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x0, 0xffffffffffffffff, 0x10, 0x24, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x2, 0x7, 0xd8ad], 0xd000, 0x28bc0}) r6 = socket$packet(0x11, 0x2, 0x300) connect$packet(r6, &(0x7f0000000f00)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xac, 0x0, &(0x7f0000000540)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x9, 0x2, 0x8}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}}, @exit_looper, @request_death, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x5, 0x0, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x12}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/170, 0xaa, 0x0, 0x2f}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x128}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x87) setsockopt$inet6_int(r7, 0x29, 0x7, 0x0, 0xfcab) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0x3, 0x0, 0x100, 0x3}, &(0x7f0000000180)=0x20) 5m24.560065776s ago: executing program 1 (id=4581): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x2240, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xffffbdfb) r3 = fsopen(&(0x7f00000005c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000600)='#\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2240, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) (async) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) (async) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xffffbdfb) (async) fsopen(&(0x7f00000005c0)='9p\x00', 0x1) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000600)='#\x00', &(0x7f0000000640)='./file0\x00', 0xffffffffffffff9c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 5m24.400551939s ago: executing program 1 (id=4582): r0 = socket(0x1d, 0x3, 0x1) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000040)={'veth0_to_bridge\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xede63000) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x6, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r0]) socket(0x1d, 0x3, 0x1) (async) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xede63000) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x6, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r0]) (async) 5m3.975075367s ago: executing program 1 (id=4583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000380)={0xce}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}]}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r10, 0x10001, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 5m3.971585187s ago: executing program 39 (id=4583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46"], 0x69) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='@', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000380)={0xce}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}]}}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r10, 0x10001, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4m17.054156944s ago: executing program 6 (id=5451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) timer_create(0x1, 0x0, &(0x7f0000000380)=0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) timer_delete(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 4m17.046338935s ago: executing program 6 (id=5453): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f00001a2000/0x2000)=nil, 0x2000, 0x10, 0x80012, r0, 0xce668000) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r3, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)={{0x77359400}, {r7, r8/1000+10000}}, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000000), 0x4) 4m16.895854827s ago: executing program 6 (id=5455): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r6, 0x0, 0x0, 0x800) recvfrom$unix(r8, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x8010aebc, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getpeername$packet(r10, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000001240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x985c, r3, &(0x7f0000000080)="45cdf82abdd9", 0x6, 0x6, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000140)="5b3db02b961a36f3e45f27f49f05d90427775d433305de2d5d33885c2993f9a9ea3eba8aa12dc2aa90357c5611578993b9cf1f03bef2795be4c23116dd4b5aa43f9e822c11ac11a66035b06d6840d0fbbbc423c02d52d34d9c002426a713bc280c026d4d3f71fda58cb4aba85a71841fb9f870ecfa", 0x75, 0x6, 0x0, 0x1, r4}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x6, r9, &(0x7f0000000200)="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", 0x1000, 0x0, 0x0, 0x0, r10}]) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 4m16.842673307s ago: executing program 6 (id=5458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) setresuid(0xee01, 0x0, 0x0) syz_clone(0x28180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0xb, 0x2, "d036"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xe, 0x2, '\nI'}, 0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0xd, 0xffffff7f, 0x7, 0x10000, 0x2}]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f0000000880)=0x3ff, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x1004820, &(0x7f0000000080)=ANY=[@ANYBLOB='sm 9\x00\x00\x00\x00\x00\x00=rootcontext,\x00']) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4}, 0x2}], 0x2, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {0x1, 0x6, 0x9, 0x1}, 0xc, [0x400, 0x5, 0x8, 0x93d, 0x7, 0x5dc, 0x6, 0x7, 0x9, 0x4, 0x7fffffff, 0x10, 0xd16, 0x3, 0x3, 0x2, 0xc328, 0x1, 0x3, 0xdb9, 0x0, 0x80, 0x800, 0x10001, 0x0, 0x6, 0x10001, 0xb, 0x7ff, 0x3f, 0x6, 0x8, 0x8a3, 0x9, 0x200, 0x4, 0x2, 0x40, 0x6, 0x8, 0x3, 0x4, 0x7fffffff, 0xb, 0x73ce4db1, 0x40, 0x81, 0x7, 0x10000, 0x6, 0xb, 0x6, 0xffffffff, 0x0, 0x2, 0xed, 0x2, 0x9ba, 0x68a4, 0x3, 0x3, 0x6, 0x4, 0x2], [0x100, 0xb, 0x40, 0x5, 0x9, 0x650, 0xffff, 0x9, 0x6, 0x80, 0x80000000, 0x1, 0x3, 0x6, 0x9, 0x7, 0x77, 0xc, 0x0, 0x9, 0x31, 0xc47, 0x3, 0x401, 0x4ce8, 0x400, 0x10001, 0xfffffff0, 0x6, 0x4, 0xffff, 0xfffffffd, 0x9, 0x5, 0x8, 0x5, 0x9, 0xfffffff7, 0xa0d5, 0x8, 0x9, 0x3, 0x6, 0xfffffffe, 0x7, 0x6, 0x2, 0xfff, 0x3, 0x3a00, 0x7a4f, 0x5, 0x80000000, 0x4, 0x9a0a, 0x3, 0x0, 0x7fffffff, 0x7f, 0x0, 0x6, 0xb1, 0x7fffffff, 0x81], [0x7, 0x10001, 0x80, 0x2, 0xfd0d, 0x3, 0x4, 0x81, 0x8001, 0x1, 0x8, 0x4, 0x9, 0x0, 0x9, 0x445, 0x1, 0x5, 0x6, 0xfffffff8, 0x6, 0x10, 0x1b4, 0x81, 0x0, 0x0, 0x8, 0x100, 0x2279, 0x97, 0x1, 0x3, 0x80000001, 0x9, 0x6, 0xf8c, 0x9, 0xc, 0x1, 0x7, 0x80, 0x8, 0x7, 0x1, 0x9, 0x4, 0x2, 0x7fff, 0x0, 0x14000, 0x13, 0x7, 0x0, 0x8000, 0xffffffff, 0x5, 0x693, 0x6, 0x9, 0x7fffffff, 0xfffffff7, 0x0, 0x6ab, 0xfc7a], [0x3ff, 0xe, 0x58b, 0xa, 0x1, 0x7fffffff, 0x0, 0x80, 0x6, 0x9, 0x582, 0x100, 0xfffffeff, 0x1, 0x8, 0x1a, 0x4, 0x8, 0x3, 0x3, 0x8, 0xa3, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7, 0x4, 0xb, 0x9, 0xffffff00, 0x5, 0x2, 0x0, 0x17, 0x8, 0x63, 0x2, 0x981f, 0x5, 0x3, 0x7, 0x62e7e11, 0x200, 0x7, 0x80, 0xf9, 0xa819, 0x9, 0x4, 0xe2, 0x5, 0xc000000, 0x0, 0x4422, 0x2, 0x2, 0x80000001, 0x9, 0x8, 0x9, 0xffe00000, 0x7ff]}, 0x45c) dup3(r0, r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x805, &(0x7f00000002c0)={'trans=unix,', {[{@noextend}, {@cachetag={'cachetag', 0x3d, './binderfs\x00'}}, {@version_u}], [{@fsname={'fsname', 0x3d, './binderfs\x00'}}, {@subj_type={'subj_type', 0x3d, '\x17,)@\\%^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'rootcontext'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, 'smackfsdef'}}, {@euid_eq={'euid', 0x3d, r7}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash}]}}) 4m16.321260525s ago: executing program 6 (id=5459): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) read(r0, &(0x7f0000000040)=""/123, 0x7b) socket$inet_tcp(0x2, 0x1, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4m16.234525717s ago: executing program 6 (id=5462): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x420080, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 4m16.185752898s ago: executing program 40 (id=5462): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x420080, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1m52.576643704s ago: executing program 5 (id=7294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902", @ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x1) inotify_add_watch(r2, &(0x7f00000003c0)='./file0\x00', 0xa30) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000800)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000302000000000360088295a09a2ca0b16053defdcdbc01704c76b4d0ed922e586f57aac1a0d7"]}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r4, 0x1003, 0x9, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r4, 0x7dfff000) 1m50.868487869s ago: executing program 5 (id=7300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x2e}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m50.860478799s ago: executing program 5 (id=7301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m50.750116931s ago: executing program 5 (id=7302): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r5, &(0x7f0000000400)={0x18, 0x0, r2, {0x91b}}, 0x18) write$FUSE_CREATE_OPEN(r5, 0x0, 0x0) dup2(r5, r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r10) ptrace(0x10, r9) ptrace$getsig(0x4202, r9, 0x2000000000006b, 0x0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m50.420607816s ago: executing program 5 (id=7305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x9, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0xa, 0x4, 0x9, 0x0, 0x0, 0xf, 0x7, 0x4, 0x81, 0x3, 0x4, 0x7, 0x0, 0x0, 0x26, 0x35, 0x6, 0x8, 0x9, '\x00', 0x2, 0x4}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002f40)={0x2020}, 0xa2) 1m50.377981397s ago: executing program 5 (id=7308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) io_setup(0x78865af6, &(0x7f0000000e80)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x489}]}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002205000000a90f66"], 0x0}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x101000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/61) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m50.298118908s ago: executing program 41 (id=7308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) io_setup(0x78865af6, &(0x7f0000000e80)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x489}]}) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002205000000a90f66"], 0x0}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x101000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000001c0)=""/61) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m15.824333945s ago: executing program 4 (id=7602): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f0000000080)='./file0\x00') ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@loopback, 0xfffd, 0x2, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x8, 0x20}, 0x6, 0x1, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="a450c15fecedc05c04c224851b8b40cc86ad97ff8458eab397b1d76ab0fd508a9833509f32831e80b7d141d6818db3af17ea174da4c76cbfe025d66bb171a2b5c997bde6b1606e070e294a2d2813c0addda4ef8d05edf86bd2d0ade13cdd568fecf9f4755951f6da016a9cceddb779ead7c4ee577c3aa120e22a7f96ba5f6e02f71302e1d2b6b594518b3fe5dd0233bbc9c05fb1ed6e7efa28c52a67c9dbaca7a10353b9b91f7ecdb29ec9ef222f36c9e23ba7eb543b5db45d73301bc38a18765aa2650ac3ccc6a67d372dbe23aac196a88c62ce76f408", @ANYRESOCT=r8, @ANYRESHEX=r1, @ANYRES16=r3, @ANYRES16=r7, @ANYRESHEX=r4]) creat(&(0x7f00000001c0)='./file0\x00', 0x8) creat(&(0x7f0000000180)='./file0\x00', 0x31) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 1m15.207341815s ago: executing program 4 (id=7604): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='.\x00', &(0x7f0000000380)) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 1m13.328115204s ago: executing program 4 (id=7608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000024c0)="6c228bb3a719b8b37efe0505c3f816a4a30004589545b16280302f15ccd2f330ac5c608783d51669fb6b761381df6cdaf94bdacff8397c0e46afedba1263f3ffc12f73dbae0e0ddfdfd0065bf1af2e5f11", 0x51}, {&(0x7f0000002540)="84386f3804718005aa0e91a37a4903fb3483aba63e721ca495c4fdc1a5a3ffbbb68238851f439a4ce96cda1a1bd2379ec6300cceeaff697d6e8263da1962da618c1dc13aa618d47b043fd925ddd64a4828cb418b747e6bd24cca9933b01237886abbd453f95863f076b3591e941a22f5fd96be1397df3d597d020a24f3d98692d276249a364854a7c979f877587a8f1772c516930a58036f2d1b692c265252b8a54e62c5cc234313bd468c4c16248c026126c3a3506a03016f", 0xb9}], 0x2}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000180)="2ed8f1126eb11aea4fce58650b5c40446f1589ee82ef098390e2b8c9024d373d3689db58853763e776dbb17b1e1d71acf4c5487f1476a01d74b9c91c5bf67123b58cf7a51ab5f9817ba3b15c1e439c87e73c", 0x52}, {&(0x7f0000001240)="d3713181d230308afc06f1c633c01fa3180452568a90bb9eca0e3b3bfb00bfb7b479c8c97e0043e88753048f6810956283c591cb0645f90f19c3892021d8db01b1b1e3c94f78be25b6c263ea6e541ee503b19d7c8ebec92bde33353a87d3b9a0c4f1044a0fa13f49ebdfb54569d0276854c27f6fb0e58f12c3a6d5c22ad258565ade785d02ed64ff306e0d0f7997222dba5c1ca8a544c6b5a1f5d22d", 0x9c}, {&(0x7f0000001300)="74a8b9ea72e9cb7051c993f4db5738da175663ba0bf3ec15a5922878c5415c3dc8186985cf8f5d40c7a0d5be58159004f058fa1d4f8d415ecd14d53b25331ff26b6cda55c660f249c8d03216469ad5fde483af1746be249c49e005562397474f5e00a2", 0x63}], 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1040}}], 0x2, 0x4000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_open_dev$MSR(&(0x7f0000000040), 0xac, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCFLSH(r3, 0x540b, 0x1) close_range(r1, r3, 0x0) 1m12.654508895s ago: executing program 4 (id=7610): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(0x0, 0xfff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) fremovexattr(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="73656375726974792e000003060000000500789212ac065ebe7756f322c404bb0634"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000280)={0xfffffffffffffffe, 0x2d63, 0xffffffffffff8435, 0x9, 0x1, 0x6, 0x20000000009, 0xc}, &(0x7f0000000080)={0x0, 0x5, 0xb8, 0x8, 0x7, 0xb, 0x46, 0x8}, &(0x7f0000000100)={0x9, 0x10, 0x4, 0x80000000, 0x7fb, 0x4, 0x3, 0x6}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f0000000340)={[0x2]}, 0x8}) write$UHID_CREATE2(r2, &(0x7f00000005c0)=ANY=[], 0x119) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x64, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x101}, @fda={0x66646185, 0x1, 0x1, 0x1b}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @enter_looper, @dead_binder_done, @clear_death={0x400c630f, 0x2}], 0x67, 0x0, &(0x7f0000000440)="9ac0ea5f53ea81f7ff3d4fdde3f64174333390d5641ddac8874314137634d1c77a6be1ee2ee042347f2379eb4cf589dd0b345281e4a714b23b0c0fc40ac09a38fc2ca5fa16e326459f0d42c42345dae43ab1576b9bf731ee4971043439784e95c48d4790b94e60"}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) mprotect(&(0x7f0000953000/0x4000)=nil, 0x4000, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000018c0), 0x1ff, 0x2) syz_open_dev$hidraw(&(0x7f0000000580), 0x597, 0x101000) read$usbfs(r6, &(0x7f0000000000)=""/29, 0x1d) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) tkill(r3, 0x37) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) capset(&(0x7f0000000500)={0x20080522, r7}, &(0x7f0000000540)={0x6, 0x4, 0x1, 0x4, 0x1, 0x8}) 1m11.65079024s ago: executing program 4 (id=7617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000400)={0x0, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) r5 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000904000001020d00000524060001052400a9b30d240f01020000000300ff000606241a0c001407240a050905580c241b04000200a90c090003042402025c2402000424020244241380ae0d62dced1e43f3661806f2f73f4b9c36d86a093869c2cd3c454d4e3eabbc0d102c2476d844438b264833bfbdcb10547b267c48acfc0657fbf61a64cad281fd82d136aed1be294c5ca5efb29cda0905810320000e0c000904010000020d00000904010102020d000009058202"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x1, 0x4000000000, 0x0, 0x910d, 0x6, 0x4, 0x800, 0x2, 0x0, 0x0, 0x7, 0x6, 0x0, 0x2], 0xdddd0000, 0x4}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000002240)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x5, 0x0, 0xe, 0x0, 0x47, 0x2, 0x9d, 0x2, 0x1b, 0x9, 0x4, 0xeb, 0x0, 0x99, 0x9, 0xd6, 0x7, 0xc, 0x4, '\x00', 0x81, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff3b, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @private0, 0x9}, 0x1c) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r10, 0x2000) 1m11.177243608s ago: executing program 4 (id=7619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc020000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000fc000000000000000000000000000001000000002b00000000000000ff02000000000000000000000000000100000000010200000100"/370], 0x1bc}}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) socket(0x1, 0x80000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001f80)={{0x0, 0x0, 0x80, {0xffff1000, 0xffff1000, 0x3}}, "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", "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"}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 1m11.117686169s ago: executing program 42 (id=7619): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc020000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000fc000000000000000000000000000001000000002b00000000000000ff02000000000000000000000000000100000000010200000100"/370], 0x1bc}}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) socket(0x1, 0x80000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001f80)={{0x0, 0x0, 0x80, {0xffff1000, 0xffff1000, 0x3}}, "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", "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"}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 30.815729799s ago: executing program 7 (id=7930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x44600, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x200000000, 0x800, 0x0, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x9, 0x1000, 0xfffffffd, 0x0, 0x0, 0xfcc00000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000002900)='./file0\x00', 0x6000, 0xc00, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002a40)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000002b40)=0xe8) getresuid(&(0x7f0000002b80), &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002c40)={0x0, 0x0, 0x0}, &(0x7f0000002c80)=0xc) fstat(r1, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002d40), &(0x7f0000002d80)=0x0, &(0x7f0000002dc0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002480)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000002f00)=0xe8) getgroups(0x5, &(0x7f0000002f40)=[0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000002280)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x8, r12, r13, 0x1000, '\x00', 0xd2bc, 0x8, 0x100000000, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x80000b, 0x5, 0x3}}}}) getresuid(&(0x7f00000053c0), &(0x7f0000005400), &(0x7f0000005440)=0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, 0x0, r16) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005580)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000005680)=0xe8) getgroups(0x3, &(0x7f00000056c0)=[0xee01, 0xee00, 0xee00]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000280)="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", 0x2000, &(0x7f0000005840)={&(0x7f0000000100)={0x50, 0x0, 0x401, {0x7, 0x2b, 0x6, 0x3000, 0x7, 0x7, 0x0, 0x6, 0x0, 0x0, 0x10, 0x1}}, &(0x7f0000000040)={0x18, 0x0, 0x9d3, {0xf1}}, &(0x7f00000001c0)={0x18, 0x0, 0x2, {0x10000}}, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x1, {0x2}}, &(0x7f00000022c0)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000002300)={0x28, 0x0, 0x8000000000000, {{0x7fff, 0x5, 0x2}}}, &(0x7f0000002340)={0x60, 0x0, 0xffffffffffffffff, {{0x3, 0x50, 0x4, 0xfff, 0x7, 0xddbc, 0x80, 0xfffffffc}}}, &(0x7f00000023c0)={0x18, 0xffffffffffffffda, 0x8, {0x3ff}}, &(0x7f0000002400)={0x14, 0x0, 0x7af, {'{#%\x00'}}, &(0x7f0000002440)={0x20, 0xfffffffffffffff5, 0x800, {0x0, 0x1}}, &(0x7f0000002580)={0x78, 0xffffffffffffffd1, 0x6, {0x0, 0x63, 0x0, {0x1, 0xffffffffffffffaa, 0x0, 0x7, 0x200, 0x5, 0x2, 0x8, 0xffff5ead, 0x6000, 0x8000, 0x0, 0x0, 0xc0, 0xffffec30}}}, &(0x7f00000026c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x4, 0x2, 0x9, 0x5, {0x2, 0x9f, 0xafc, 0xfffffffffffffa59, 0x4, 0x2, 0x5, 0xd, 0x8, 0x4000, 0x3, 0xee00, 0x0, 0x401, 0x2}}}, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000004fc0)={0x3e8, 0x0, 0x1000, [{{0x3, 0x0, 0x401, 0x2, 0x3, 0x3, {0x0, 0x7, 0x1, 0x4, 0x0, 0x9, 0xce4f, 0x8, 0x3, 0x0, 0x80000000, 0x0, r2, 0x5, 0xae8}}, {0x0, 0x3, 0x1, 0x0, '@'}}, {{0x6, 0x2, 0x10000, 0x5, 0xe09, 0x5, {0x6, 0xdc, 0x3, 0x4, 0x8, 0x2, 0x1ff, 0x5, 0x5, 0xa000, 0xa6, r3, 0xee01, 0x7, 0x81}}, {0x3, 0x3, 0xb, 0x4, 'syzkaller0\x00'}}, {{0x0, 0x2, 0x8, 0x42dd, 0x40, 0x8, {0x5, 0x5, 0xa, 0x9, 0x1, 0x6, 0x7, 0x69, 0x4, 0x1000, 0x6cd7, r4, r5, 0x81, 0x6}}, {0x0, 0x400, 0x3, 0x7, '#\x10\\'}}, {{0x1, 0x1, 0x0, 0x0, 0x2, 0xfff, {0x0, 0x1, 0x9, 0x5, 0xfffffffffffffffa, 0x1, 0x80000001, 0x81, 0xa, 0x2000, 0x1, r6, r7, 0x0, 0xa}}, {0x3, 0x1, 0x1, 0x80000001, '/'}}, {{0x4, 0x1, 0x8, 0xffffffffffffffff, 0x81, 0x9, {0x2, 0x6, 0x100000000, 0x3, 0x2, 0x5, 0x18, 0x800, 0x7ff, 0x6000, 0x1, r8, r9, 0x40, 0x2}}, {0x0, 0x636e, 0x1, 0xa, '\x00'}}, {{0x4, 0x3, 0x4, 0x9, 0x80000000, 0x2, {0x3, 0x5b1e, 0x9, 0x78fa, 0x7, 0xf, 0x8a6, 0xf9b, 0x80000001, 0x1000, 0x1, r10, r13, 0x81, 0x10}}, {0x6, 0x7fff, 0x13, 0xd, './binderfs/binder1\x00'}}]}, &(0x7f0000005480)={0xa0, 0x0, 0x6d8, {{0x3, 0x2, 0x3, 0x6, 0x5, 0x6, {0x3, 0x9, 0x0, 0x1, 0x80000000, 0x8, 0x1, 0x7, 0x8001, 0xa000, 0x7, r14, r16, 0x7f, 0xbb600000}}, {0x0, 0x4}}}, &(0x7f0000005540)={0x20, 0xfffffffffffffffe, 0x4, {0xf2d2, 0x4, 0x2, 0x40}}, &(0x7f0000005700)={0x130, 0x0, 0x9, {0x5, 0x7, 0x0, '\x00', {0x400, 0x5f, 0x0, 0x5, r17, r2, 0xa000, '\x00', 0xffffffff7fffffff, 0xd, 0x8, 0x1, {0x1, 0x5}, {0x5, 0x5}, {0x6a6, 0x1}, {0x1, 0x4}, 0xe, 0x2, 0x8, 0x4}}}}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r18, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 30.759682749s ago: executing program 7 (id=7933): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa1"}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 30.668427801s ago: executing program 7 (id=7934): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r1, 0x8, &(0x7f0000000000)={0x9}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40083, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000001840)={0xed, 0x0, 0x3e1871b1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_clone(0x51090100, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r6, 0x804, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64090100}, 0x10) r7 = syz_open_procfs(r4, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) inotify_add_watch(r7, &(0x7f0000000100)='./file0\x00', 0x0) 30.587247162s ago: executing program 7 (id=7936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x42a4fd9eb9bf64df, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r1, &(0x7f00000002c0)={0xd, 0x7, 0x1, {{}, 0x2}}, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) move_mount(r2, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x12, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={@flat=@weak_handle={0x77682a85, 0x1000, 0x10000003}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000006c0)}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) 29.688855056s ago: executing program 7 (id=7947): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x4140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x7709, 0x2) 29.605634477s ago: executing program 7 (id=7949): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3400000000000000000000000700000044241753ac1e0001"], 0x38}, 0x4000014) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="e36055498e19676d32e701c533a1f14a4a67b48fa319305e96b786fa7ca62b7316509dc5afbfba5803c9024df89e304ba5f65586515c7210a86594830998ed1a84e51a0aae8e5923232bf8890fae15e72c4eadbe259515383f199e3a5df80f3c45b029ef217be53519f5fcdf6166adcddb8f4e41edaf7915094b87cf9362273c7a64463c07d937e958a47ccfbbbd5734a4cac57391aadf5fd5881fb6bc1312c14a56ba8b2cc74ce6f4f073ac837801854a66a8fecd76ac6cd988c55af28dec09db63a76659f97a3fe7aa4dccdf4cf8c430bf09184b", @ANYRES32=r1, @ANYBLOB="43bc470bb56f232a84f9dc8e5cf1b477d5d5fa49fbfe10c5bcb286a746a4c46f448b294ab78cad0b549b3cdf0f1d20ae8bdcd0b69c0e57627eb74c70ca7a4a9883eef6ae7ca4efaa8d2eadf03cdf46fafc944328f92f07425179a6f5cd1a34663ec406480c313656c3a62674deefa125ada818a01072688be48ba8a9d4cef4886e2a97ba9b8b7a03e6aa0f3de4e9fa93358812658489bf50ae06d2993ace00f6cedd3f4042f29be98c0788b1060c487613cd87aefed98025a039245a8fdd48ac47a233234fdf6851291e0d8f340a420240e4a0ca570ea986657e538813de0be02be0d405c258df", @ANYRES8=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3400000000000000000000000700000044241753ac1e0001"], 0x38}, 0x4000014) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="e36055498e19676d32e701c533a1f14a4a67b48fa319305e96b786fa7ca62b7316509dc5afbfba5803c9024df89e304ba5f65586515c7210a86594830998ed1a84e51a0aae8e5923232bf8890fae15e72c4eadbe259515383f199e3a5df80f3c45b029ef217be53519f5fcdf6166adcddb8f4e41edaf7915094b87cf9362273c7a64463c07d937e958a47ccfbbbd5734a4cac57391aadf5fd5881fb6bc1312c14a56ba8b2cc74ce6f4f073ac837801854a66a8fecd76ac6cd988c55af28dec09db63a76659f97a3fe7aa4dccdf4cf8c430bf09184b", @ANYRES32=r1, @ANYBLOB="43bc470bb56f232a84f9dc8e5cf1b477d5d5fa49fbfe10c5bcb286a746a4c46f448b294ab78cad0b549b3cdf0f1d20ae8bdcd0b69c0e57627eb74c70ca7a4a9883eef6ae7ca4efaa8d2eadf03cdf46fafc944328f92f07425179a6f5cd1a34663ec406480c313656c3a62674deefa125ada818a01072688be48ba8a9d4cef4886e2a97ba9b8b7a03e6aa0f3de4e9fa93358812658489bf50ae06d2993ace00f6cedd3f4042f29be98c0788b1060c487613cd87aefed98025a039245a8fdd48ac47a233234fdf6851291e0d8f340a420240e4a0ca570ea986657e538813de0be02be0d405c258df", @ANYRES8=r1], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 29.549190098s ago: executing program 43 (id=7949): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3400000000000000000000000700000044241753ac1e0001"], 0x38}, 0x4000014) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="e36055498e19676d32e701c533a1f14a4a67b48fa319305e96b786fa7ca62b7316509dc5afbfba5803c9024df89e304ba5f65586515c7210a86594830998ed1a84e51a0aae8e5923232bf8890fae15e72c4eadbe259515383f199e3a5df80f3c45b029ef217be53519f5fcdf6166adcddb8f4e41edaf7915094b87cf9362273c7a64463c07d937e958a47ccfbbbd5734a4cac57391aadf5fd5881fb6bc1312c14a56ba8b2cc74ce6f4f073ac837801854a66a8fecd76ac6cd988c55af28dec09db63a76659f97a3fe7aa4dccdf4cf8c430bf09184b", @ANYRES32=r1, @ANYBLOB="43bc470bb56f232a84f9dc8e5cf1b477d5d5fa49fbfe10c5bcb286a746a4c46f448b294ab78cad0b549b3cdf0f1d20ae8bdcd0b69c0e57627eb74c70ca7a4a9883eef6ae7ca4efaa8d2eadf03cdf46fafc944328f92f07425179a6f5cd1a34663ec406480c313656c3a62674deefa125ada818a01072688be48ba8a9d4cef4886e2a97ba9b8b7a03e6aa0f3de4e9fa93358812658489bf50ae06d2993ace00f6cedd3f4042f29be98c0788b1060c487613cd87aefed98025a039245a8fdd48ac47a233234fdf6851291e0d8f340a420240e4a0ca570ea986657e538813de0be02be0d405c258df", @ANYRES8=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3400000000000000000000000700000044241753ac1e0001"], 0x38}, 0x4000014) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=r2, @ANYRESOCT=0x0, @ANYBLOB="e36055498e19676d32e701c533a1f14a4a67b48fa319305e96b786fa7ca62b7316509dc5afbfba5803c9024df89e304ba5f65586515c7210a86594830998ed1a84e51a0aae8e5923232bf8890fae15e72c4eadbe259515383f199e3a5df80f3c45b029ef217be53519f5fcdf6166adcddb8f4e41edaf7915094b87cf9362273c7a64463c07d937e958a47ccfbbbd5734a4cac57391aadf5fd5881fb6bc1312c14a56ba8b2cc74ce6f4f073ac837801854a66a8fecd76ac6cd988c55af28dec09db63a76659f97a3fe7aa4dccdf4cf8c430bf09184b", @ANYRES32=r1, @ANYBLOB="43bc470bb56f232a84f9dc8e5cf1b477d5d5fa49fbfe10c5bcb286a746a4c46f448b294ab78cad0b549b3cdf0f1d20ae8bdcd0b69c0e57627eb74c70ca7a4a9883eef6ae7ca4efaa8d2eadf03cdf46fafc944328f92f07425179a6f5cd1a34663ec406480c313656c3a62674deefa125ada818a01072688be48ba8a9d4cef4886e2a97ba9b8b7a03e6aa0f3de4e9fa93358812658489bf50ae06d2993ace00f6cedd3f4042f29be98c0788b1060c487613cd87aefed98025a039245a8fdd48ac47a233234fdf6851291e0d8f340a420240e4a0ca570ea986657e538813de0be02be0d405c258df", @ANYRES8=r1], 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 26.165286161s ago: executing program 0 (id=7985): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = userfaultfd(0x80001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x2, 0xfffffffd) syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x141, 0x16, 0xb8, 0x71, 0x40, 0x403, 0xfa04, 0x97e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x9, 0x50, 0x0, [{{0x9, 0x4, 0xd0, 0x5, 0x0, 0xda, 0xc8, 0x11, 0x7}}]}}]}}, 0x0) read$FUSE(r2, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 23.080435409s ago: executing program 0 (id=8031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 22.963802341s ago: executing program 0 (id=8033): setresgid(0x0, 0x0, 0xee01) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) setfsgid(r0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1bc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004008) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x8800) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 22.739422735s ago: executing program 0 (id=8036): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000658000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f0000000340)=""/66, 0x42}], 0x2}, 0x9}, {{&(0x7f0000000700)=@ax25={{0x3, @default}, [@null, @default, @netrom, @remote, @netrom, @remote, @netrom]}, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/11, 0xb}, 0x93}, {{&(0x7f0000001dc0)=@rc={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000003380)=""/231, 0xe7}, 0x8000000}, {{&(0x7f0000003480)=@hci, 0x80, &(0x7f00000039c0)}, 0x200}, {{0x0, 0x0, &(0x7f0000004140), 0x0, 0x0, 0xffffffffffffffb0}, 0x11}], 0x5, 0x2040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) shutdown(r3, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000180), 0x4) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000000040), 0x4) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) unshare(0x2000000) unshare(0x4000000) r5 = syz_pidfd_open(r4, 0x0) ftruncate(r5, 0x309c000000000) 21.323504847s ago: executing program 0 (id=8056): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xfffffffc, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) dup3(r4, r5, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 21.170939869s ago: executing program 0 (id=8058): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_ep_write(r0, 0x4, 0x66, &(0x7f0000000000)="59036067567bbbc50a9fa11107a756e660d7c3dd6a447b604a57bda0b7de6a11b0ac101c77a9c748fab6b2c1b63f92f5e9d2c8657b0c63dce3a1d38173ba2a3ff440746e2dbd6b8c8eee3a394ae585919dd19259bffe4a30c9c3c7b93641f8cc88e6879880b3") syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="0000030000000b3b8117bcfea64d14f113ed941769b77d14c463bd00837c9aeadfebcafa01b0833484045b0c95e24e24ce9b18e24bead3ccfa3c22be8e24bc8f33b3873355fd644b93450065db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bdc000/0x400000)=nil) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x0, 0x9, 0x45, {0x45, 0xe, "8ae36a2fe21e15fb76102b9919dcb2f97a3679d22c880ec13e5e40fb893d3513ffd1d0d0b0a8af4d75ec895b928a8348d204f6d369c1976dfbbad9fb106bca12311811"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0xe, "04"}, @global=@item_012={0x2, 0x1, 0xa, "489f"}, @local=@item_4={0x3, 0x2, 0x8, "8606ebaa"}, @global=@item_012={0x2, 0x1, 0x3, "bd77"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x14c7, 0x3, 0x1, {0x22, 0x709}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000640)={0x20, 0x31, 0xc4, "901b7313337f65364cab4433b2811dd86cf552e962e94dbfd8318a3165070de87cc7b76a7622ff4ff8f0bfc865600404547177506b31a8f052149dc60a2a57c0bde360bab3c13efb01eb915555af26f533da4b3315aaa3f5fc7a9aa758bd0b472e1af0dd208a2e0f6b13c90c8d5bf746d65ebd167932f33cbcc363a9e61f42137a180280b86cdf1d6649a1447893812b6a14c22620cb889749a8b0e5e111396090a4f97f036adb3cac639a99aa815c832ed1c01977561abc507d5b61dc1c245c50c55763"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000540)={0x20, 0x1, 0x7c, "be339f6d14bf4cd0364f4f25d6ac3e4422bb56c3a4998275e8b833e07f1f47c241fd12f9fb1f5b9c5e1031d328bd03909a02a4b7b3a22806a0bb24f282a720c1bf3059a93ea1d68023dfae44738fb9720e0848d309d47f66ebdd2f0de531e70aee9901c770bc4765db174fe294e792f24710b554a5743b086cceffd7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xe8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000000f80)={0x0, 0x6, 0x3, "0f4461"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r4 = eventfd(0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x30, 0x0, 0x2, r5, 0x0, 0x0, 0x10001, 0x0, 0x1, r4}]) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x8, 0x9, 0x10}, {0x2, 0x0, 0xd, 0x0, 0x2, 0xfc, 0x7, 0x0, 0x5, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x7, 0x26}, {0xdddd1000, 0x2}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x0, [0x100000, 0x116b, 0x2]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x20, 0x6, 0x3, "910ffa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) 21.013549142s ago: executing program 44 (id=8058): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_ep_write(r0, 0x4, 0x66, &(0x7f0000000000)="59036067567bbbc50a9fa11107a756e660d7c3dd6a447b604a57bda0b7de6a11b0ac101c77a9c748fab6b2c1b63f92f5e9d2c8657b0c63dce3a1d38173ba2a3ff440746e2dbd6b8c8eee3a394ae585919dd19259bffe4a30c9c3c7b93641f8cc88e6879880b3") syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="0000030000000b3b8117bcfea64d14f113ed941769b77d14c463bd00837c9aeadfebcafa01b0833484045b0c95e24e24ce9b18e24bead3ccfa3c22be8e24bc8f33b3873355fd644b93450065db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bdc000/0x400000)=nil) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "a343ed"}, 0xfffffffffffffffd}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x0, 0x9, 0x45, {0x45, 0xe, "8ae36a2fe21e15fb76102b9919dcb2f97a3679d22c880ec13e5e40fb893d3513ffd1d0d0b0a8af4d75ec895b928a8348d204f6d369c1976dfbbad9fb106bca12311811"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000080)={0x0, 0x22, 0xd, {[@local=@item_012={0x1, 0x2, 0xe, "04"}, @global=@item_012={0x2, 0x1, 0xa, "489f"}, @local=@item_4={0x3, 0x2, 0x8, "8606ebaa"}, @global=@item_012={0x2, 0x1, 0x3, "bd77"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x14c7, 0x3, 0x1, {0x22, 0x709}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000640)={0x20, 0x31, 0xc4, "901b7313337f65364cab4433b2811dd86cf552e962e94dbfd8318a3165070de87cc7b76a7622ff4ff8f0bfc865600404547177506b31a8f052149dc60a2a57c0bde360bab3c13efb01eb915555af26f533da4b3315aaa3f5fc7a9aa758bd0b472e1af0dd208a2e0f6b13c90c8d5bf746d65ebd167932f33cbcc363a9e61f42137a180280b86cdf1d6649a1447893812b6a14c22620cb889749a8b0e5e111396090a4f97f036adb3cac639a99aa815c832ed1c01977561abc507d5b61dc1c245c50c55763"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000540)={0x20, 0x1, 0x7c, "be339f6d14bf4cd0364f4f25d6ac3e4422bb56c3a4998275e8b833e07f1f47c241fd12f9fb1f5b9c5e1031d328bd03909a02a4b7b3a22806a0bb24f282a720c1bf3059a93ea1d68023dfae44738fb9720e0848d309d47f66ebdd2f0de531e70aee9901c770bc4765db174fe294e792f24710b554a5743b086cceffd7"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xe8}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000000f80)={0x0, 0x6, 0x3, "0f4461"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r4 = eventfd(0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(r3, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x30, 0x0, 0x2, r5, 0x0, 0x0, 0x10001, 0x0, 0x1, r4}]) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x8, 0x9, 0x10}, {0x2, 0x0, 0xd, 0x0, 0x2, 0xfc, 0x7, 0x0, 0x5, 0x7, 0x4, 0x4}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x3000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x7, 0x26}, {0xdddd1000, 0x2}, {0xdddd1000, 0xffff}, 0xddf8ffdb, 0x0, 0x0, 0x430, 0x0, 0x2501, 0x0, [0x100000, 0x116b, 0x2]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x170003, 0x0, [0x53b2, 0x9, 0x4, 0x5, 0xffffffffffff1e53, 0x5, 0x9, 0xb82]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x20, 0x6, 0x3, "910ffa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) 9.116414858s ago: executing program 2 (id=8094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000280)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d07}]}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xfffffffffffffdf8) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @empty}, 0x10, 0x0}}], 0x1, 0x2000c044) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2401) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/152, 0x98, 0x0, 0x5}, @flat=@binder={0x73622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x42, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cc95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 9.116134978s ago: executing program 3 (id=8095): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x115883, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0xd) 9.115690758s ago: executing program 8 (id=8096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="a801000010000d000000000000000000ff0100000001000009000000000000000000015c00007859f06100"/64, @ANYBLOB="fbb1b1b6dd8efdbbca31979f96c02ed6420fadd8020a386bf481fddcd4dd18e6fdb991e99b2dc192a3e4bbb01c62ca5e5fad51c72443d49fc44f417b8ef877891b4237fb0bd7209eb2ecfa5466d1a379906bd83375e996fd2e9c1862953d0939b68727e53afe50fb5b5aec3c290fa0eca55a44d2e38bc3ac3d66336b9bb153abd9da380ac7c240c45a16195694e2d73c62b7b6752f45e72596ad2674f0ea5155dca2478d3289d645e6980423d4ef4b1ffafb650eeb69002a56", @ANYRES16=r1, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d00010078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280100002b8b78253d14f42f5ed40d4dab4602b37b17b212956f18eb5ae026ee326e263c2665c80174000000"], 0x1a8}}, 0x40004001) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00002cb000/0x5000)=nil, 0x5000, 0x3, 0x28011, r5, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x2, 0x4) 7.523196773s ago: executing program 3 (id=8097): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(r0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff9004"]) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_open_procfs(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x5}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) fchdir(r0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff9004"]) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) syz_open_procfs(r1, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 7.518646163s ago: executing program 2 (id=8098): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a\xdd\xdf\xc3\xcc\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9fc\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99\xfd\xbca\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0\x05d\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecos\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05[D~~\x84\\\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x83\x81\xe1<\xa0\x9f\x17\xb1\xcd\xea=\xd1g\x81a\x19|q\x10\xba\x12T\x88\xd9\xdeN5`\xf2\x17\x9e_\xfd\x97\x1cP\xd8\x8d\xad\x7f\xdb\x02\f\xc0\x1a\xecK\xe9;-\xc9\x12\x0eL\xcc\xac\x0e\x84O\x02\b\xf8\x1bES\x82\xbc\xff\xe6\xc6\xd4\xc5\x92\xc6\xbc_\xe3\x05!\x1c\xd0{\x94\x1eh\x17\xc2\x91\xad\xb5\xc9v/\'\xbf(\r\x13\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 7.517803692s ago: executing program 8 (id=8099): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = getpid() (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) getsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000000)=""/172, &(0x7f00000000c0)=0xac) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0xe}, {0x6000, 0x8000}, {0x1, 0xfffe}, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r8, 0x0) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r9, 0x0, 0x0, 0x0, &(0x7f0000000080)) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r10, 0x33, &(0x7f0000000000)={0x11, 0x4, 0x2}, 0x0) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) (async) ptrace$poke(0x4, r11, &(0x7f0000000080), 0x4) r12 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000005c0)={r13, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 5.75235966s ago: executing program 3 (id=8100): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x80800) bind$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x200, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xe) (async) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000480)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x0, &(0x7f0000000500)}, 0x10) (async) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'user.', '/dev/loop'}) (async, rerun: 32) close(r2) (rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x448002, 0x101) r4 = socket(0x15, 0x4, 0x5) setns(r0, 0x20000000) (async, rerun: 32) chdir(&(0x7f0000000640)='./file0\x00') (async, rerun: 32) r5 = accept$packet(r4, 0x0, &(0x7f0000000680)) recvmmsg(r2, &(0x7f0000006a40)=[{{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/100, 0x64}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/75, 0x4b}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/57, 0x39}, {&(0x7f0000000c00)=""/1, 0x1}, {&(0x7f0000000c40)=""/61, 0x3d}, {&(0x7f0000000c80)=""/119, 0x77}], 0xa, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000001dc0)=""/58, 0x3a}, {&(0x7f0000001e00)=""/209, 0xd1}, {&(0x7f0000001f00)=""/51, 0x33}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/234, 0xea}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x8, &(0x7f0000004140)=""/176, 0xb0}, 0x4ae3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004200)=""/92, 0x5c}, {&(0x7f0000004280)=""/194, 0xc2}, {&(0x7f0000004380)=""/160, 0xa0}, {&(0x7f0000004440)=""/250, 0xfa}, {&(0x7f0000004540)=""/243, 0xf3}], 0x5, &(0x7f00000046c0)=""/240, 0xf0}, 0x6}, {{&(0x7f00000047c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004840)=""/240, 0xf0}, {&(0x7f0000004940)=""/224, 0xe0}, {&(0x7f0000004a40)=""/221, 0xdd}], 0x3}, 0x8}, {{&(0x7f0000004b80)=@xdp, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004c00)=""/4096, 0x1000}], 0x1, &(0x7f0000005c40)=""/107, 0x6b}, 0xffffffff}, {{&(0x7f0000005cc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005d40)=""/110, 0x6e}, {&(0x7f0000005dc0)=""/113, 0x71}, {&(0x7f0000005e40)=""/208, 0xd0}], 0x3}, 0x6bea}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005f80)=""/205, 0xcd}, {&(0x7f0000006080)=""/201, 0xc9}], 0x2}, 0xfff}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f00000061c0)=""/119, 0x77}, {&(0x7f0000006240)}, {&(0x7f0000006280)=""/3, 0x3}, {&(0x7f00000062c0)=""/106, 0x6a}, {&(0x7f0000006340)=""/180, 0xb4}, {&(0x7f0000006400)=""/225, 0xe1}], 0x6}, 0x1}, {{&(0x7f0000006580)=@qipcrtr, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006600)=""/147, 0x93}], 0x1, &(0x7f0000006700)=""/182, 0xb6}, 0xf7}, {{&(0x7f00000067c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006840)=""/86, 0x56}, {&(0x7f00000068c0)=""/142, 0x8e}], 0x2, &(0x7f00000069c0)=""/70, 0x46}, 0x7}], 0xa, 0x40000100, &(0x7f0000006cc0)={0x77359400}) (async) syz_clone3(&(0x7f0000006f40)={0x4000, &(0x7f0000006d00), &(0x7f0000006d40)=0x0, &(0x7f0000006d80)=0x0, {0x2d}, &(0x7f0000006dc0)=""/101, 0x65, &(0x7f0000006e40)=""/166, &(0x7f0000006f00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) syz_open_procfs(r8, &(0x7f0000006fc0)='net/tcp\x00') statfs(&(0x7f0000007000)='./file0\x00', &(0x7f0000007040)=""/123) (async) sendmsg$can_bcm(r4, &(0x7f00000071c0)={&(0x7f00000070c0)={0x1d, r6}, 0x10, &(0x7f0000007180)={&(0x7f0000007100)={0x2, 0x19, 0x2, {}, {}, {0x3, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "361ae7884b6ecc82"}}, 0x48}, 0x1, 0x0, 0x0, 0x20004894}, 0x4040004) (async, rerun: 64) r9 = syz_open_procfs$pagemap(r7, &(0x7f0000007200)) (rerun: 64) ppoll(&(0x7f0000007240)=[{r4}, {r9, 0x8023}, {r5, 0x1210}], 0x3, &(0x7f0000007280)={0x77359400}, &(0x7f00000072c0)={[0x4]}, 0x8) r10 = syz_clone(0x0, &(0x7f0000007300)="c6c698a5d9db4b4bc109113e8af41b3ba66fdcfa6d69fff8d451859dbe79b56509db0f12ff2a2f104e5bc93d3011bb587c64748fac68783b6700dbd1ef63302c15db4f90082fb6c9a286238fc6d995852859d0dad1d9c6cb6a7be0893490ed815e79b12042cb614d00dfabb48486513b31ae91bcaca1f2ad0dc77f9eab6767886926bcbe7be53bc20e9f25f704e3e8a137d1bc93b71ef1165fe7e066365ac961", 0xa0, &(0x7f00000073c0), &(0x7f0000007400), &(0x7f0000007440)="eb7d95ed52920c0404b6fcb8bcc728cc574cfc0fac4c554c17e357e0ff80d56200d9f5bc26394622a7bedabea0a461867c8a540c444933a381011b02fddd1a0e61c444c9b39debf782f9ec6bddbffb") setpriority(0x0, r10, 0x5) (async) close(r9) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) rt_sigprocmask(0x2, &(0x7f00000074c0)={[0x4]}, &(0x7f0000007500), 0x8) write$cgroup_int(r5, &(0x7f0000007540)=0xbda, 0x12) mount$bind(&(0x7f0000007580)='./file0\x00', &(0x7f00000075c0)='./file0\x00', &(0x7f0000007600), 0x48000, 0x0) 5.75203714s ago: executing program 2 (id=8101): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000580)={0x0, 0x7000, 0x800, 0x0, 0x2}, 0x20) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 5.7515961s ago: executing program 8 (id=8102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009302"]) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000100)={0x2a, 0x6, 0xffff}) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="1f128237a3d3d0cde73c5d4ad73d6eaa", 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) (rerun: 32) 3.973552848s ago: executing program 3 (id=8103): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @global, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xbd42}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b99b36c4b97bfac78d37805d1dd1f0ac0d0d761d2b02a74475b02ea0a3f5edf7"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x69}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @local, 0x38}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 3.972682038s ago: executing program 2 (id=8104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYBLOB="1f55f794f8795ef56d9f089733da5f1ceba7cab543c22315dfb65cf5b049c1c6e0e833c24b527bbb66e6492bbe930380be2c52057ef5dc8135e1c1bbe5858acdc7a58778339e99cd6a93f81d9871396d601239a68836d37116a9cdabdb78d97908000000cd9ab078a5b3088fe62e2ac5461ce4ce83fe6d3b72c947e7c3f53247c7a5fc9471cfe0ca46ac13138d4c4e767ae652892f57011e1ec0f42d1b36d740465ecc3ab99f15195ec6a172ace0832c899c81d7c59b36bb30b2ac2ec7e9e4"], 0x119) mmap(&(0x7f0000fe8000/0x3000)=nil, 0x3000, 0x2000003, 0x4000010, r1, 0xe5370000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r1, &(0x7f00000001c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.920594409s ago: executing program 8 (id=8105): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x2b, 0x0, 0x80, 0x8, 0x1, 0x2, 0x14, 0x0, 0x0, 0x1, 0x7}}, 0x50) 2.033278949s ago: executing program 3 (id=8106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000440)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x5, 0x854) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x1000, @mcast2, 0x7}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x18, 0x0, &(0x7f0000000980)) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="3091535b140c42838375ebe454cef526fbe6b1172a0f9093d7cc3b887956fb8d5447856246b649027b4792b40a120c4aeacd44ddf21623270b2738718b1d4d5f2669a4e3b70cfea7c15676", 0x4b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r8, @ANYRES64=r6, @ANYRESOCT=r3], 0x150}}, 0x810) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) clock_gettime(0x9, &(0x7f0000000080)) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000340)={@empty, @broadcast}, &(0x7f0000000380)=0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x80e, 0x4000000000002}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000003c0)={0x7, 'veth0_macvtap\x00', {0x2}, 0x38a}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.028467459s ago: executing program 2 (id=8107): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$igmp6(0xa, 0x3, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000280)=""/65, &(0x7f00000003c0)=0x41) getsockopt$MRT6(r5, 0x3a, 0x1, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x10, 0x3f2, 0x8, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x4040084) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0xffffffffffffffff, 0x400103}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4000010, r0, 0x3bfcd000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@metacopy_on}, {@redirect_dir_nofollow}]}) r8 = syz_io_uring_complete(0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.027721688s ago: executing program 8 (id=8108): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) splice(r0, &(0x7f0000000280)=0x3, 0xffffffffffffffff, &(0x7f00000002c0)=0x1, 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x40000, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r7 = getpgrp(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0xf, 0x1b, {0x1b, 0x23, "345f5502f2ccb1ee802ae0db76a798cd3eb9d4d70b25e88572"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 3.61499ms ago: executing program 3 (id=8109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000830400"]) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0xa5, 0x8000, 0x4, 0x5, 0x14, "f8da467b9d83b73408ff062e0c622f0b14a1bd"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) 1.50825ms ago: executing program 2 (id=8110): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x84aebfbd6349b7f2}) stat(0x0, 0x0) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x810}, 0x4000040) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 8 (id=8111): syz_usb_connect(0x3, 0x35, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b58f55408205d5b9f773000000010902230001000000000904080001ff"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) r1 = syz_open_dev$usbfs(&(0x7f00000018c0), 0x1ff, 0x2) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x7d23000) read(0xffffffffffffffff, 0x0, 0x0) (async) read$usbfs(r1, &(0x7f0000000000)=""/29, 0x1d) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x1000, 0x0) r4 = epoll_create1(0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000740)="660f3880a70000672e0f01c466b9800000c00f326635004000000f30f30f523f66b9201001c066b889d5038566ba467689300f30f30fc77509f3de6e63f30f1af90f06640f0d4ed5", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0xeeee8000, 0x0, 0x0, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x49}, {0xd000, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x4000, 0x0, 0x0, 0x0, 0x3e, 0x26}, {0x26000, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0xdddd0000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x8080000}) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000002}) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xc8, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/26, 0x1a, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/114, 0x72, 0x1, 0x23}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}, @acquire, @clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/184, 0xb8, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/175, 0xaf, 0x2, 0x1b}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x2}], 0xd, 0x0, &(0x7f0000000600)="a67c1d9020ff8e1159ec719bd7"}) (async) ppoll(&(0x7f0000000000)=[{r3, 0xc401}, {r3, 0x230}, {r3, 0x4000}, {r4, 0x444c}, {r3, 0x8400}, {r4, 0x8000}, {r3, 0x5000}, {r3}], 0x8, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xfff]}, 0x8) kernel console output (not intermixed with test programs): 34 using dummy_hcd [ 525.822186][ T735] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 525.832361][ T735] asix 3-1:0.0: probe with driver asix failed with error -61 [ 525.905995][ T383] usb 4-1: not running at top speed; connect to a high speed hub [ 525.915490][ T383] usb 4-1: config 1 interface 0 has no altsetting 0 [ 525.925965][ T383] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.935093][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.943134][ T383] usb 4-1: Product: 쌜腸ꆯ븃教휂㣽핼ᵣ筡섈볅ꁖ譸䡤역磕յ艮疯ꓒ蟛宾듺뚂█繕࿶䖃艻궬秓툫껙戛Ƙꭿࢻ梶⯙뮷⤋̼寧辌勇晬☙ﹺক蘧ɜ숣↡嬼ₗ믚㪸ꄐ䯤ꃭ਻戛葮ጇ懆邾 [ 525.965822][ T383] usb 4-1: Manufacturer: 爝봾푝踃勸ⲣ✂嚶ࡺ㈘鯑퀌沌专ﷃ跍䂾肚蔘 [ 525.976473][ T383] usb 4-1: SerialNumber: ࠉ [ 526.349230][ T36] kauditd_printk_skb: 440 callbacks suppressed [ 526.349251][ T36] audit: type=1400 audit(2000000624.704:20404): avc: denied { execmem } for pid=23069 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 526.419965][ T383] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 526.428652][ T36] audit: type=1400 audit(2000000624.754:20405): avc: denied { ioctl } for pid=23018 comm="syz.2.7485" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 526.452594][ T383] usb 4-1: USB disconnect, device number 34 [ 526.512461][ T36] audit: type=1400 audit(2000000624.864:20406): avc: denied { read } for pid=23070 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 526.544812][ T36] audit: type=1400 audit(2000000624.864:20407): avc: denied { read open } for pid=23070 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 526.569007][ T36] audit: type=1400 audit(2000000624.864:20408): avc: denied { mounton } for pid=23070 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 526.590798][ T36] audit: type=1400 audit(2000000624.894:20409): avc: denied { sys_module } for pid=23070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 526.612945][ T36] audit: type=1400 audit(2000000624.894:20410): avc: denied { sys_module } for pid=23070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 526.634416][ T36] audit: type=1400 audit(2000000624.894:20411): avc: denied { sys_module } for pid=23070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 526.656354][ T36] audit: type=1400 audit(2000000624.904:20412): avc: denied { sys_module } for pid=23070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 526.679581][T23070] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.686679][T23070] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.693957][T23070] bridge_slave_0: entered allmulticast mode [ 526.700222][T23070] bridge_slave_0: entered promiscuous mode [ 526.707757][T23070] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.714874][T23070] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.721955][T23070] bridge_slave_1: entered allmulticast mode [ 526.728347][T23070] bridge_slave_1: entered promiscuous mode [ 526.740712][ T36] audit: type=1400 audit(2000000625.094:20413): avc: denied { ioctl } for pid=23018 comm="syz.2.7485" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 526.840467][T23070] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.847582][T23070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.854904][T23070] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.861952][T23070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.917245][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.925351][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.946162][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.953287][ T5676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.967387][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.974527][ T5674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.085498][T23070] veth0_vlan: entered promiscuous mode [ 527.124609][T23070] veth1_macvtap: entered promiscuous mode [ 527.307522][ T5674] bridge_slave_1: left allmulticast mode [ 527.328375][ T5674] bridge_slave_1: left promiscuous mode [ 527.333948][T23082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 527.335241][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.362390][ T5674] bridge_slave_0: left allmulticast mode [ 527.375779][ T5674] bridge_slave_0: left promiscuous mode [ 527.400172][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.475970][T23090] rust_binder: Write failure EFAULT in pid:273 [ 527.629825][ T5674] veth1_macvtap: left promiscuous mode [ 527.651851][ T5674] veth0_vlan: left promiscuous mode [ 528.123829][ T31] usb 3-1: USB disconnect, device number 40 [ 528.329657][ T5674] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.362571][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 530.362589][T23111] Bluetooth: hci0: command 0x1003 tx timeout [ 531.356687][ T36] kauditd_printk_skb: 527 callbacks suppressed [ 531.356708][ T36] audit: type=1400 audit(2000000629.714:20941): avc: denied { create } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.387731][ T36] audit: type=1400 audit(2000000629.744:20942): avc: denied { write } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.410069][ T36] audit: type=1400 audit(2000000629.744:20943): avc: denied { read } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.462252][ T36] audit: type=1400 audit(2000000629.744:20944): avc: denied { read } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.501437][ T36] audit: type=1400 audit(2000000629.784:20945): avc: denied { create } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.525504][ T36] audit: type=1400 audit(2000000629.784:20946): avc: denied { write } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.549064][T23152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 531.568371][ T36] audit: type=1400 audit(2000000629.784:20947): avc: denied { read } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 531.611311][T23151] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 531.611339][T23151] rust_binder: Error while translating object. [ 531.632014][T23151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 531.632574][ T36] audit: type=1400 audit(2000000629.794:20948): avc: denied { create } for pid=23146 comm="syz.2.7526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 531.639838][T23151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:740 [ 531.660236][ T36] audit: type=1400 audit(2000000629.794:20949): avc: denied { read write } for pid=22463 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.721617][ T36] audit: type=1400 audit(2000000629.794:20950): avc: denied { read write open } for pid=22463 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.750553][T23158] can0: slcan on ttyS3. [ 531.845525][T23158] can0 (unregistered): slcan off ttyS3. [ 532.054189][T23173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.249808][T23186] input: syz0 as /devices/virtual/input/input26 [ 532.308633][T23186] rust_binder: Write failure EFAULT in pid:296 [ 532.453355][T23195] batadv_slave_1: entered promiscuous mode [ 532.470854][T23192] rust_binder: 23190 RLIMIT_NICE not set [ 532.585586][T23195] batadv_slave_1: left promiscuous mode [ 532.611332][T23209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.755560][T23214] rust_binder: Write failure EFAULT in pid:304 [ 533.353237][T23249] rust_binder: Write failure EINVAL in pid:312 [ 533.386081][T23249] rust_binder: Write failure EFAULT in pid:312 [ 533.909608][T23270] tipc: Enabling of bearer rejected, failed to enable media [ 534.673685][T23275] rust_binder: Write failure EINVAL in pid:759 [ 536.034538][T23321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 536.041213][T23321] rust_binder: Write failure EINVAL in pid:768 [ 536.048186][T23321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:768 [ 536.291051][T23326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 536.314864][T23326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:105 [ 536.394001][ T36] kauditd_printk_skb: 927 callbacks suppressed [ 536.394030][ T36] audit: type=1400 audit(2000000634.754:21878): avc: denied { read write } for pid=23070 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.693267][ T36] audit: type=1400 audit(2000000634.844:21879): avc: denied { read write open } for pid=23070 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 536.772748][ T36] audit: type=1400 audit(2000000634.844:21880): avc: denied { ioctl } for pid=23070 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.069186][ T36] audit: type=1400 audit(2000000634.874:21881): avc: denied { read write } for pid=22463 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.102981][ T36] audit: type=1400 audit(2000000634.874:21882): avc: denied { read write open } for pid=22463 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.128806][ T36] audit: type=1400 audit(2000000634.874:21883): avc: denied { ioctl } for pid=22463 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 537.158501][ T36] audit: type=1400 audit(2000000634.964:21884): avc: denied { create } for pid=23327 comm="syz.0.7566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 537.232930][T23337] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000007265 not found [ 537.262451][ T36] audit: type=1400 audit(2000000634.964:21885): avc: denied { read } for pid=23327 comm="syz.0.7566" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 537.283271][T23337] rust_binder: Write failure EINVAL in pid:53 [ 537.330645][ T36] audit: type=1400 audit(2000000634.984:21886): avc: denied { read open } for pid=23327 comm="syz.0.7566" path="net:[4026532581]" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 537.453371][ T36] audit: type=1400 audit(2000000634.984:21887): avc: denied { create } for pid=23327 comm="syz.0.7566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 538.092620][T23356] SELinux: security_context_str_to_sid () failed with errno=-22 [ 538.192481][ T814] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 538.379472][T23361] binder: Bad value for 'max' [ 538.386913][T23361] binder: Bad value for 'max' [ 538.479251][ T814] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 538.511422][T23296] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 538.541649][ T814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.592474][ T814] usb 4-1: Product: syz [ 538.603760][T23296] CPU: 1 UID: 0 PID: 23296 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 538.603803][T23296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.603821][T23296] Call Trace: [ 538.603839][T23296] [ 538.603852][T23296] __dump_stack+0x21/0x30 [ 538.603891][T23296] dump_stack_lvl+0x10c/0x190 [ 538.603922][T23296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 538.603953][T23296] ? ___ratelimit+0x3f7/0x5a0 [ 538.603982][T23296] dump_stack+0x19/0x20 [ 538.604011][T23296] dump_header+0xd7/0x490 [ 538.604049][T23296] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 538.604077][T23296] oom_kill_process+0x4c0/0x7e0 [ 538.604102][T23296] ? sched_clock_cpu+0x75/0x400 [ 538.604133][T23296] out_of_memory+0x7ee/0xbd0 [ 538.604158][T23296] ? __cfi_out_of_memory+0x10/0x10 [ 538.604185][T23296] ? mutex_lock_killable+0x92/0x1c0 [ 538.604218][T23296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 538.604252][T23296] mem_cgroup_out_of_memory+0x279/0x350 [ 538.604289][T23296] ? drain_obj_stock+0xed0/0xed0 [ 538.604324][T23296] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 538.604359][T23296] try_charge_memcg+0x8f7/0xde0 [ 538.604389][T23296] ? __cfi_try_charge_memcg+0x10/0x10 [ 538.604418][T23296] ? __alloc_pages_noprof+0x30d/0x6c0 [ 538.604446][T23296] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 538.604471][T23296] ? __folio_batch_add_and_move+0x2ab/0x370 [ 538.604496][T23296] __mem_cgroup_charge+0xf6/0x410 [ 538.604528][T23296] ? __kasan_check_write+0x18/0x20 [ 538.604559][T23296] ? _raw_spin_lock+0x8c/0x120 [ 538.604597][T23296] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 538.604631][T23296] shmem_alloc_and_add_folio+0x86d/0x1050 [ 538.604675][T23296] ? put_swap_device+0x130/0x130 [ 538.604714][T23296] ? shmem_huge_global_enabled+0x2da/0x360 [ 538.604752][T23296] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 538.604790][T23296] ? __kasan_check_write+0x18/0x20 [ 538.604821][T23296] ? _raw_spin_lock+0x8c/0x120 [ 538.604866][T23296] shmem_get_folio_gfp+0x5f0/0x1380 [ 538.604907][T23296] ? shmem_get_folio+0xc0/0xc0 [ 538.604941][T23296] ? follow_page_pte+0xa5c/0xb90 [ 538.604968][T23296] ? inode_to_bdi+0x6d/0x100 [ 538.604997][T23296] shmem_write_begin+0xf4/0x270 [ 538.605037][T23296] generic_perform_write+0x330/0x960 [ 538.605072][T23296] ? __cfi_generic_perform_write+0x10/0x10 [ 538.605102][T23296] ? down_write+0xe9/0x2a0 [ 538.605135][T23296] ? file_update_time+0xa3/0x220 [ 538.605164][T23296] shmem_file_write_iter+0x105/0x130 [ 538.605193][T23296] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 538.605221][T23296] __kernel_write_iter+0x392/0x830 [ 538.605254][T23296] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 538.605283][T23296] ? __cfi___kernel_write_iter+0x10/0x10 [ 538.605316][T23296] ? get_dump_page+0x160/0x220 [ 538.605342][T23296] ? __asan_memset+0x39/0x50 [ 538.605372][T23296] ? iov_iter_bvec+0xc0/0x180 [ 538.605409][T23296] dump_user_range+0xb06/0xdf0 [ 538.605443][T23296] ? __cfi_dump_emit+0x10/0x10 [ 538.605475][T23296] ? __cfi_dump_user_range+0x10/0x10 [ 538.605508][T23296] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 538.605542][T23296] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 538.605576][T23296] elf_core_dump+0x2cd9/0x3810 [ 538.605619][T23296] ? __cfi_elf_core_dump+0x10/0x10 [ 538.605666][T23296] ? dump_interrupted+0xf0/0xf0 [ 538.605698][T23296] ? 0xffffffffff600000 [ 538.605720][T23296] do_coredump+0x1bf7/0x2bd0 [ 538.605755][T23296] ? __cfi_do_coredump+0x10/0x10 [ 538.605785][T23296] ? asm_exc_page_fault+0x2b/0x30 [ 538.605828][T23296] ? __kasan_slab_free+0x6a/0x80 [ 538.605866][T23296] ? kmem_cache_free+0x1c1/0x4c0 [ 538.605901][T23296] get_signal+0x11fd/0x14f0 [ 538.605932][T23296] arch_do_signal_or_restart+0x96/0x720 [ 538.605967][T23296] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 538.606007][T23296] irqentry_exit_to_user_mode+0x4e/0xb0 [ 538.606042][T23296] irqentry_exit+0x16/0x60 [ 538.606074][T23296] exc_page_fault+0x66/0xc0 [ 538.606106][T23296] asm_exc_page_fault+0x2b/0x30 [ 538.606132][T23296] RIP: 0033:0x7fd3f138e931 [ 538.606154][T23296] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 538.606177][T23296] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 538.606203][T23296] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 538.606222][T23296] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 538.606238][T23296] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 538.606255][T23296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.606272][T23296] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 538.606293][T23296] [ 538.609605][T23296] memory: usage 307200kB, limit 307200kB, failcnt 63778 [ 538.614506][ T814] usb 4-1: Manufacturer: syz [ 538.633899][T23296] memory+swap: usage 431976kB, limit 9007199254740988kB, failcnt 0 [ 538.707571][ T814] usb 4-1: SerialNumber: syz [ 538.747060][T23296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 539.229870][T23296] Memory cgroup stats for /syz3: [ 539.230053][T23296] cache 314204160 [ 539.240070][T23366] rust_binder: Error while translating object. [ 539.240114][T23366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 539.240210][T23296] rss 159744 [ 539.260378][T23296] rss_huge 0 [ 539.288465][T23366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 539.329893][T23296] shmem 247377920 [ 539.402848][T23296] mapped_file 0 [ 539.419017][T23296] dirty 0 [ 539.422029][T23296] writeback 0 [ 539.442497][T23296] workingset_refault_anon 673 [ 539.450988][T23296] workingset_refault_file 0 [ 539.456488][T23296] swap 127770624 [ 539.472431][T23296] swapcached 217088 [ 539.476410][T23296] pgpgin 832579 [ 539.479882][T23296] pgpgout 757823 [ 539.515385][T23296] pgfault 263473 [ 539.534718][T23296] pgmajfault 2220 [ 539.548244][T23296] inactive_anon 118505472 [ 539.565606][T23296] active_anon 129241088 [ 539.588901][T23296] inactive_file 0 [ 539.603432][T23296] active_file 0 [ 539.618991][T23296] unevictable 66826240 [ 539.634038][T23296] hierarchical_memory_limit 314572800 [ 539.639505][T23296] hierarchical_memsw_limit 9223372036854771712 [ 539.672453][T23296] total_cache 314204160 [ 539.682454][T23296] total_rss 159744 [ 539.686449][T23296] total_rss_huge 0 [ 539.698072][T23296] total_shmem 247377920 [ 539.714701][T23296] total_mapped_file 0 [ 539.718761][T23296] total_dirty 0 [ 539.722241][T23296] total_writeback 0 [ 539.746405][T23296] total_workingset_refault_anon 673 [ 539.751673][T23296] total_workingset_refault_file 0 [ 539.766937][T23296] total_swap 127770624 [ 539.771090][T23296] total_swapcached 217088 [ 539.797276][T23296] total_pgpgin 832579 [ 539.801342][T23296] total_pgpgout 757823 [ 539.820022][T23296] total_pgfault 263473 [ 539.825125][T23296] total_pgmajfault 2220 [ 539.829409][T23296] total_inactive_anon 118505472 [ 539.834341][T23296] total_active_anon 129241088 [ 539.839051][T23296] total_inactive_file 0 [ 539.845098][T23296] total_active_file 0 [ 539.849121][T23296] total_unevictable 66826240 [ 539.853891][T23296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23289,uid=0 [ 539.871771][T23296] Memory cgroup out of memory: Killed process 23289 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:44032kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 539.993095][T23304] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 540.022552][T23304] CPU: 1 UID: 0 PID: 23304 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 540.022591][T23304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.022607][T23304] Call Trace: [ 540.022615][T23304] [ 540.022625][T23304] __dump_stack+0x21/0x30 [ 540.022658][T23304] dump_stack_lvl+0x10c/0x190 [ 540.022685][T23304] ? __cfi_dump_stack_lvl+0x10/0x10 [ 540.022711][T23304] ? ___ratelimit+0x3f7/0x5a0 [ 540.022737][T23304] dump_stack+0x19/0x20 [ 540.022766][T23304] dump_header+0xd7/0x490 [ 540.022800][T23304] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 540.022823][T23304] oom_kill_process+0x4c0/0x7e0 [ 540.022844][T23304] ? sched_clock_cpu+0x75/0x400 [ 540.022878][T23304] out_of_memory+0x7ee/0xbd0 [ 540.022899][T23304] ? __cfi_out_of_memory+0x10/0x10 [ 540.022919][T23304] ? mutex_lock_killable+0x104/0x1c0 [ 540.022947][T23304] ? __cfi_mutex_lock_killable+0x10/0x10 [ 540.022975][T23304] mem_cgroup_out_of_memory+0x279/0x350 [ 540.023005][T23304] ? drain_obj_stock+0xed0/0xed0 [ 540.023036][T23304] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 540.023067][T23304] try_charge_memcg+0x8f7/0xde0 [ 540.023094][T23304] ? __cfi_try_charge_memcg+0x10/0x10 [ 540.023118][T23304] ? __alloc_pages_noprof+0x30d/0x6c0 [ 540.023143][T23304] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 540.023166][T23304] ? __folio_batch_add_and_move+0x2ab/0x370 [ 540.023190][T23304] __mem_cgroup_charge+0xf6/0x410 [ 540.023217][T23304] ? __kasan_check_write+0x18/0x20 [ 540.023243][T23304] ? _raw_spin_lock+0x8c/0x120 [ 540.023276][T23304] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 540.023305][T23304] shmem_alloc_and_add_folio+0x86d/0x1050 [ 540.023342][T23304] ? put_swap_device+0x130/0x130 [ 540.023376][T23304] ? shmem_huge_global_enabled+0x2da/0x360 [ 540.023408][T23304] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 540.023441][T23304] ? __kasan_check_write+0x18/0x20 [ 540.023466][T23304] ? _raw_spin_lock+0x8c/0x120 [ 540.023499][T23304] shmem_get_folio_gfp+0x5f0/0x1380 [ 540.023534][T23304] ? shmem_get_folio+0xc0/0xc0 [ 540.023563][T23304] ? follow_page_pte+0xa5c/0xb90 [ 540.023587][T23304] ? inode_to_bdi+0x6d/0x100 [ 540.023613][T23304] shmem_write_begin+0xf4/0x270 [ 540.023646][T23304] generic_perform_write+0x330/0x960 [ 540.023676][T23304] ? __cfi_generic_perform_write+0x10/0x10 [ 540.023701][T23304] ? down_write+0xe9/0x2a0 [ 540.023730][T23304] ? file_update_time+0xa3/0x220 [ 540.023755][T23304] shmem_file_write_iter+0x105/0x130 [ 540.023780][T23304] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.023803][T23304] __kernel_write_iter+0x392/0x830 [ 540.023832][T23304] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.023865][T23304] ? __cfi___kernel_write_iter+0x10/0x10 [ 540.023893][T23304] ? get_dump_page+0x160/0x220 [ 540.023915][T23304] ? __asan_memset+0x39/0x50 [ 540.023942][T23304] ? iov_iter_bvec+0xc0/0x180 [ 540.023974][T23304] dump_user_range+0xb06/0xdf0 [ 540.024004][T23304] ? __cfi_dump_emit+0x10/0x10 [ 540.024031][T23304] ? __cfi_dump_user_range+0x10/0x10 [ 540.024059][T23304] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 540.024089][T23304] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 540.024120][T23304] elf_core_dump+0x2cd9/0x3810 [ 540.024158][T23304] ? __cfi_elf_core_dump+0x10/0x10 [ 540.024199][T23304] ? dump_interrupted+0xf0/0xf0 [ 540.024226][T23304] ? 0xffffffffff600000 [ 540.024245][T23304] do_coredump+0x1bf7/0x2bd0 [ 540.024276][T23304] ? __cfi_do_coredump+0x10/0x10 [ 540.024303][T23304] ? asm_exc_page_fault+0x2b/0x30 [ 540.024334][T23304] ? __kasan_slab_free+0x6a/0x80 [ 540.024366][T23304] ? kmem_cache_free+0x1c1/0x4c0 [ 540.024393][T23304] get_signal+0x11fd/0x14f0 [ 540.024422][T23304] arch_do_signal_or_restart+0x96/0x720 [ 540.024453][T23304] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 540.024487][T23304] irqentry_exit_to_user_mode+0x4e/0xb0 [ 540.024518][T23304] irqentry_exit+0x16/0x60 [ 540.024545][T23304] exc_page_fault+0x66/0xc0 [ 540.024573][T23304] asm_exc_page_fault+0x2b/0x30 [ 540.024595][T23304] RIP: 0033:0x7fd3f138e931 [ 540.024615][T23304] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 540.024635][T23304] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 540.024656][T23304] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 540.024673][T23304] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 540.024688][T23304] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 540.024703][T23304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.024718][T23304] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 540.024737][T23304] [ 540.024870][T23304] memory: usage 306984kB, limit 307200kB, failcnt 65133 [ 540.335034][ T814] usb 4-1: USB disconnect, device number 35 [ 540.343097][T23304] memory+swap: usage 421932kB, limit 9007199254740988kB, failcnt 0 [ 540.568308][T23304] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 540.618535][T23304] Memory cgroup stats for /syz3: [ 540.618705][T23304] cache 313729024 [ 540.627405][T23304] rss 155648 [ 540.630618][T23304] rss_huge 0 [ 540.633882][T23304] shmem 246902784 [ 540.637534][T23304] mapped_file 0 [ 540.641011][T23304] dirty 0 [ 540.644016][T23304] writeback 0 [ 540.648313][T23304] workingset_refault_anon 689 [ 540.653700][T23304] workingset_refault_file 0 [ 540.658223][T23304] swap 127905792 [ 540.661769][T23304] swapcached 81920 [ 540.666724][T23304] pgpgin 838380 [ 540.670214][T23304] pgpgout 763778 [ 540.674681][T23304] pgfault 263849 [ 540.678248][T23304] pgmajfault 2225 [ 540.681882][T23304] inactive_anon 88731648 [ 540.692436][T23304] active_anon 158380032 [ 540.696655][T23304] inactive_file 0 [ 540.705592][T23304] active_file 0 [ 540.709104][T23304] unevictable 66826240 [ 540.713870][T23304] hierarchical_memory_limit 314572800 [ 540.722489][T23304] hierarchical_memsw_limit 9223372036854771712 [ 540.732257][T23304] total_cache 313729024 [ 540.738915][T23304] total_rss 155648 [ 540.742705][T23304] total_rss_huge 0 [ 540.746494][T23304] total_shmem 246902784 [ 540.753357][T23304] total_mapped_file 0 [ 540.757391][T23304] total_dirty 0 [ 540.760913][T23304] total_writeback 0 [ 540.765661][T23304] total_workingset_refault_anon 689 [ 540.770892][T23304] total_workingset_refault_file 0 [ 540.777382][T23304] total_swap 127905792 [ 540.781499][T23304] total_swapcached 81920 [ 540.788201][T23304] total_pgpgin 838380 [ 540.807708][T23304] total_pgpgout 763778 [ 540.811857][T23304] total_pgfault 263849 [ 540.843641][T23304] total_pgmajfault 2225 [ 540.847874][T23304] total_inactive_anon 88731648 [ 540.889025][T23304] total_active_anon 158380032 [ 540.902442][T23304] total_inactive_file 0 [ 540.913282][T23304] total_active_file 0 [ 540.922437][T23304] total_unevictable 66826240 [ 540.927090][T23304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23293,uid=0 [ 540.962467][T23304] Memory cgroup out of memory: Killed process 23293 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:43648kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 541.040566][T23307] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 541.067057][T23307] CPU: 1 UID: 0 PID: 23307 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 541.067102][T23307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.067120][T23307] Call Trace: [ 541.067129][T23307] [ 541.067140][T23307] __dump_stack+0x21/0x30 [ 541.067178][T23307] dump_stack_lvl+0x10c/0x190 [ 541.067207][T23307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 541.067238][T23307] ? ___ratelimit+0x3f7/0x5a0 [ 541.067267][T23307] dump_stack+0x19/0x20 [ 541.067295][T23307] dump_header+0xd7/0x490 [ 541.067333][T23307] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 541.067362][T23307] oom_kill_process+0x4c0/0x7e0 [ 541.067387][T23307] ? sched_clock_cpu+0x75/0x400 [ 541.067419][T23307] out_of_memory+0x7ee/0xbd0 [ 541.067443][T23307] ? __cfi_out_of_memory+0x10/0x10 [ 541.067466][T23307] ? mutex_lock_killable+0x104/0x1c0 [ 541.067497][T23307] ? __cfi_mutex_lock_killable+0x10/0x10 [ 541.067531][T23307] mem_cgroup_out_of_memory+0x279/0x350 [ 541.067672][T23307] ? drain_obj_stock+0xed0/0xed0 [ 541.067723][T23307] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 541.067759][T23307] try_charge_memcg+0x8f7/0xde0 [ 541.067790][T23307] ? __cfi_try_charge_memcg+0x10/0x10 [ 541.067827][T23307] ? __alloc_pages_noprof+0x30d/0x6c0 [ 541.067857][T23307] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 541.067884][T23307] ? __folio_batch_add_and_move+0x2ab/0x370 [ 541.067910][T23307] __mem_cgroup_charge+0xf6/0x410 [ 541.067962][T23307] ? __kasan_check_write+0x18/0x20 [ 541.067995][T23307] ? _raw_spin_lock+0x8c/0x120 [ 541.068037][T23307] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 541.068072][T23307] shmem_alloc_and_add_folio+0x86d/0x1050 [ 541.068123][T23307] ? put_swap_device+0x130/0x130 [ 541.068164][T23307] ? shmem_huge_global_enabled+0x2da/0x360 [ 541.068205][T23307] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 541.068244][T23307] ? __kasan_check_write+0x18/0x20 [ 541.068277][T23307] ? _raw_spin_lock+0x8c/0x120 [ 541.068318][T23307] shmem_get_folio_gfp+0x5f0/0x1380 [ 541.068361][T23307] ? shmem_get_folio+0xc0/0xc0 [ 541.068397][T23307] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 541.068430][T23307] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 541.068462][T23307] ? inode_to_bdi+0x6d/0x100 [ 541.068494][T23307] shmem_write_begin+0xf4/0x270 [ 541.068537][T23307] generic_perform_write+0x330/0x960 [ 541.068573][T23307] ? __cfi_generic_perform_write+0x10/0x10 [ 541.068604][T23307] ? down_write+0xe9/0x2a0 [ 541.068638][T23307] ? mnt_get_write_access_file+0x1af/0x3b0 [ 541.068674][T23307] ? mnt_put_write_access_file+0xc2/0x100 [ 541.068703][T23307] ? file_update_time+0x1ef/0x220 [ 541.068734][T23307] shmem_file_write_iter+0x105/0x130 [ 541.068764][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 541.068793][T23307] __kernel_write_iter+0x392/0x830 [ 541.068836][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 541.068866][T23307] ? __cfi___kernel_write_iter+0x10/0x10 [ 541.068900][T23307] ? get_dump_page+0x160/0x220 [ 541.068928][T23307] ? __asan_memset+0x39/0x50 [ 541.068961][T23307] ? iov_iter_bvec+0xc0/0x180 [ 541.069002][T23307] dump_user_range+0xb06/0xdf0 [ 541.069039][T23307] ? __cfi_dump_emit+0x10/0x10 [ 541.069071][T23307] ? __cfi_dump_user_range+0x10/0x10 [ 541.069105][T23307] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 541.069143][T23307] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 541.069179][T23307] elf_core_dump+0x2cd9/0x3810 [ 541.069225][T23307] ? __cfi_elf_core_dump+0x10/0x10 [ 541.069276][T23307] ? dump_interrupted+0xf0/0xf0 [ 541.069309][T23307] ? 0xffffffffff600000 [ 541.069332][T23307] do_coredump+0x1bf7/0x2bd0 [ 541.069370][T23307] ? __cfi_do_coredump+0x10/0x10 [ 541.069401][T23307] ? asm_exc_page_fault+0x2b/0x30 [ 541.069440][T23307] ? __kasan_slab_free+0x6a/0x80 [ 541.069479][T23307] ? kmem_cache_free+0x1c1/0x4c0 [ 541.069515][T23307] get_signal+0x11fd/0x14f0 [ 541.069549][T23307] arch_do_signal_or_restart+0x96/0x720 [ 541.069587][T23307] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 541.069628][T23307] irqentry_exit_to_user_mode+0x4e/0xb0 [ 541.069664][T23307] irqentry_exit+0x16/0x60 [ 541.069697][T23307] exc_page_fault+0x66/0xc0 [ 541.069730][T23307] asm_exc_page_fault+0x2b/0x30 [ 541.069757][T23307] RIP: 0033:0x7fd3f138e931 [ 541.069780][T23307] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 541.069829][T23307] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 541.069854][T23307] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 541.069875][T23307] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 541.069893][T23307] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 541.069910][T23307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.069928][T23307] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 541.069951][T23307] [ 541.222564][T23307] memory: usage 303744kB, limit 307200kB, failcnt 65798 [ 541.432563][ T36] kauditd_printk_skb: 253 callbacks suppressed [ 541.432587][ T36] audit: type=1400 audit(2000000639.534:22141): avc: denied { read write } for pid=23412 comm="syz.2.7588" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 541.523061][T23413] rust_binder: Write failure EINVAL in pid:795 [ 541.634719][T23307] memory+swap: usage 430248kB, limit 9007199254740988kB, failcnt 0 [ 541.675292][ T36] audit: type=1400 audit(2000000639.534:22142): avc: denied { read write open } for pid=23412 comm="syz.2.7588" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 541.728425][T23307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 541.772457][T23307] Memory cgroup stats for /syz3: [ 541.772616][T23307] cache 314155008 [ 541.790469][T23307] rss 163840 [ 541.815934][T23307] rss_huge 0 [ 541.819201][T23307] shmem 247328768 [ 541.842646][T23307] mapped_file 0 [ 541.852453][T23307] dirty 0 [ 541.855452][T23307] writeback 0 [ 541.862456][ T36] audit: type=1400 audit(2000000639.534:22143): avc: denied { ioctl } for pid=23412 comm="syz.2.7588" path="/dev/binderfs/binder0" dev="binder" ino=34 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 541.871844][T23307] workingset_refault_anon 690 [ 541.942480][ T36] audit: type=1400 audit(2000000639.534:22144): avc: denied { set_context_mgr } for pid=23412 comm="syz.2.7588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 541.942597][T23307] workingset_refault_file 0 [ 542.003235][T23426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.018832][T23307] swap 127492096 [ 542.028297][T23427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.036131][T23426] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 542.042510][ T36] audit: type=1400 audit(2000000639.784:22145): avc: denied { map } for pid=23412 comm="syz.2.7588" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 542.048893][T23422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=539148999 (1078297998 ns) > initial count (4211076 ns). Using initial count to start timer. [ 542.074052][T23427] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 542.098952][T23307] swapcached 278528 [ 542.103837][T23432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 542.124657][T23307] pgpgin 844242 [ 542.128538][T23307] pgpgout 769486 [ 542.132125][T23307] pgfault 264160 [ 542.149210][T23307] pgmajfault 2226 [ 542.172600][T23307] inactive_anon 107941888 [ 542.184608][T23307] active_anon 139804672 [ 542.212467][T23307] inactive_file 0 [ 542.216170][T23307] active_file 0 [ 542.235929][T23307] unevictable 66826240 [ 542.252457][T23307] hierarchical_memory_limit 314572800 [ 542.263190][T23307] hierarchical_memsw_limit 9223372036854771712 [ 542.269407][T23307] total_cache 314155008 [ 542.312442][T23307] total_rss 163840 [ 542.318875][T23307] total_rss_huge 0 [ 542.336551][T23307] total_shmem 247328768 [ 542.340783][T23307] total_mapped_file 0 [ 542.372455][T23307] total_dirty 0 [ 542.375992][T23307] total_writeback 0 [ 542.391854][T23307] total_workingset_refault_anon 690 [ 542.402732][T23307] total_workingset_refault_file 0 [ 542.408792][T23442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23442 comm=syz.4.7596 [ 542.429995][T23307] total_swap 127492096 [ 542.434238][T23307] total_swapcached 278528 [ 542.439048][T23307] total_pgpgin 844242 [ 542.443550][T23307] total_pgpgout 769486 [ 542.447902][T23307] total_pgfault 264160 [ 542.452135][T23307] total_pgmajfault 2226 [ 542.464277][T23442] rust_binder: Error while translating object. [ 542.464330][T23442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 542.478061][T23307] total_inactive_anon 107941888 [ 542.493633][T23442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:145 [ 542.520633][T23307] total_active_anon 139804672 [ 542.552017][T23307] total_inactive_file 0 [ 542.556377][T23307] total_active_file 0 [ 542.561704][T23307] total_unevictable 66826240 [ 542.566761][T23307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23301,uid=0 [ 542.597437][T23307] Memory cgroup out of memory: Killed process 23301 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 542.676029][T23307] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 542.687825][T23307] CPU: 0 UID: 0 PID: 23307 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 542.687864][T23307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.687880][T23307] Call Trace: [ 542.687888][T23307] [ 542.687897][T23307] __dump_stack+0x21/0x30 [ 542.687929][T23307] dump_stack_lvl+0x10c/0x190 [ 542.687955][T23307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 542.687982][T23307] ? ___ratelimit+0x3f7/0x5a0 [ 542.688008][T23307] dump_stack+0x19/0x20 [ 542.688034][T23307] dump_header+0xd7/0x490 [ 542.688068][T23307] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 542.688093][T23307] oom_kill_process+0x4c0/0x7e0 [ 542.688114][T23307] ? sched_clock_cpu+0x75/0x400 [ 542.688142][T23307] out_of_memory+0x7ee/0xbd0 [ 542.688163][T23307] ? __cfi_out_of_memory+0x10/0x10 [ 542.688183][T23307] ? mutex_lock_killable+0x104/0x1c0 [ 542.688211][T23307] ? __cfi_mutex_lock_killable+0x10/0x10 [ 542.688241][T23307] mem_cgroup_out_of_memory+0x279/0x350 [ 542.688272][T23307] ? drain_obj_stock+0xed0/0xed0 [ 542.688303][T23307] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 542.688335][T23307] try_charge_memcg+0x8f7/0xde0 [ 542.688361][T23307] ? __cfi_try_charge_memcg+0x10/0x10 [ 542.688386][T23307] ? __alloc_pages_noprof+0x30d/0x6c0 [ 542.688411][T23307] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 542.688435][T23307] ? __folio_batch_add_and_move+0x2ab/0x370 [ 542.688458][T23307] __mem_cgroup_charge+0xf6/0x410 [ 542.688486][T23307] ? __kasan_check_write+0x18/0x20 [ 542.688524][T23307] ? _raw_spin_lock+0x8c/0x120 [ 542.688557][T23307] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 542.688586][T23307] shmem_alloc_and_add_folio+0x86d/0x1050 [ 542.688625][T23307] ? put_swap_device+0x130/0x130 [ 542.688660][T23307] ? shmem_huge_global_enabled+0x2da/0x360 [ 542.688694][T23307] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 542.688726][T23307] ? __kasan_check_write+0x18/0x20 [ 542.688753][T23307] ? _raw_spin_lock+0x8c/0x120 [ 542.688787][T23307] shmem_get_folio_gfp+0x5f0/0x1380 [ 542.688822][T23307] ? shmem_get_folio+0xc0/0xc0 [ 542.688852][T23307] ? follow_page_pte+0xa5c/0xb90 [ 542.688877][T23307] ? inode_to_bdi+0x6d/0x100 [ 542.688903][T23307] shmem_write_begin+0xf4/0x270 [ 542.688939][T23307] generic_perform_write+0x330/0x960 [ 542.688968][T23307] ? __cfi_generic_perform_write+0x10/0x10 [ 542.688995][T23307] ? down_write+0xe9/0x2a0 [ 542.689023][T23307] ? file_update_time+0xa3/0x220 [ 542.689049][T23307] shmem_file_write_iter+0x105/0x130 [ 542.689074][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 542.689098][T23307] __kernel_write_iter+0x392/0x830 [ 542.689128][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 542.689170][T23307] ? __cfi___kernel_write_iter+0x10/0x10 [ 542.689199][T23307] ? get_dump_page+0x160/0x220 [ 542.689222][T23307] ? __asan_memset+0x39/0x50 [ 542.689248][T23307] ? iov_iter_bvec+0xc0/0x180 [ 542.689281][T23307] dump_user_range+0xb06/0xdf0 [ 542.689312][T23307] ? __cfi_dump_emit+0x10/0x10 [ 542.689339][T23307] ? __cfi_dump_user_range+0x10/0x10 [ 542.689369][T23307] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 542.689399][T23307] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 542.689430][T23307] elf_core_dump+0x2cd9/0x3810 [ 542.689468][T23307] ? __cfi_elf_core_dump+0x10/0x10 [ 542.689524][T23307] ? dump_interrupted+0xf0/0xf0 [ 542.689551][T23307] ? 0xffffffffff600000 [ 542.689571][T23307] do_coredump+0x1bf7/0x2bd0 [ 542.689601][T23307] ? __cfi_do_coredump+0x10/0x10 [ 542.689628][T23307] ? asm_exc_page_fault+0x2b/0x30 [ 542.689661][T23307] ? __kasan_slab_free+0x6a/0x80 [ 542.689696][T23307] ? kmem_cache_free+0x1c1/0x4c0 [ 542.689726][T23307] get_signal+0x11fd/0x14f0 [ 542.689754][T23307] arch_do_signal_or_restart+0x96/0x720 [ 542.689787][T23307] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 542.689822][T23307] irqentry_exit_to_user_mode+0x4e/0xb0 [ 542.689852][T23307] irqentry_exit+0x16/0x60 [ 542.689880][T23307] exc_page_fault+0x66/0xc0 [ 542.689908][T23307] asm_exc_page_fault+0x2b/0x30 [ 542.689931][T23307] RIP: 0033:0x7fd3f138e931 [ 542.689951][T23307] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 542.689972][T23307] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 542.689994][T23307] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 542.690012][T23307] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 542.690027][T23307] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 542.690042][T23307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 542.690057][T23307] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 542.690077][T23307] [ 542.690087][T23307] memory: usage 307200kB, limit 307200kB, failcnt 68441 [ 543.162853][T23307] memory+swap: usage 395896kB, limit 9007199254740988kB, failcnt 0 [ 543.171099][T23307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 543.181134][T23307] Memory cgroup stats for /syz3: [ 543.181287][T23307] cache 283987968 [ 543.190156][T23307] rss 159744 [ 543.194172][T23307] rss_huge 0 [ 543.198086][T23307] shmem 217161728 [ 543.201820][T23307] mapped_file 0 [ 543.206555][T23307] dirty 0 [ 543.209567][T23307] writeback 0 [ 543.215816][T23307] workingset_refault_anon 690 [ 543.221001][T23307] workingset_refault_file 0 [ 543.227014][T23307] swap 121004032 [ 543.230868][T23307] swapcached 270336 [ 543.236859][T23307] pgpgin 844245 [ 543.240682][T23307] pgpgout 776857 [ 543.245716][T23307] pgfault 264161 [ 543.249718][T23307] pgmajfault 2226 [ 543.254739][T23307] inactive_anon 104108032 [ 543.259488][T23307] active_anon 113459200 [ 543.265586][T23307] inactive_file 0 [ 543.269653][T23307] active_file 0 [ 543.273559][T23307] unevictable 66826240 [ 543.277651][T23307] hierarchical_memory_limit 314572800 [ 543.300352][T23307] hierarchical_memsw_limit 9223372036854771712 [ 543.322940][T23307] total_cache 283987968 [ 543.333212][T23307] total_rss 159744 [ 543.336985][T23307] total_rss_huge 0 [ 543.361312][T23307] total_shmem 217161728 [ 543.370509][T23307] total_mapped_file 0 [ 543.378094][T23307] total_dirty 0 [ 543.381597][T23307] total_writeback 0 [ 543.412434][T23307] total_workingset_refault_anon 690 [ 543.417755][T23307] total_workingset_refault_file 0 [ 543.429316][T23307] total_swap 121004032 [ 543.438720][T23307] total_swapcached 270336 [ 543.449763][T23307] total_pgpgin 844245 [ 543.455808][T23307] total_pgpgout 776857 [ 543.460774][T23307] total_pgfault 264161 [ 543.478513][T23307] total_pgmajfault 2226 [ 543.492441][T23307] total_inactive_anon 104108032 [ 543.512439][T23307] total_active_anon 113459200 [ 543.517186][T23307] total_inactive_file 0 [ 543.528515][T23307] total_active_file 0 [ 543.567094][T23307] total_unevictable 66826240 [ 543.589673][T23307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23304,uid=0 [ 543.625010][T23307] Memory cgroup out of memory: Killed process 23304 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 543.708758][ T45] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 543.727159][T23460] rust_binder: Got transaction with invalid offset. [ 543.727211][T23460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 543.764327][T23460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 543.797153][T23463] fuse: Unknown parameter 'P_\$@̆X곗jP3P2AցMl%kqɗ`n)J-(ݤkЭ [ 544.212038][T23307] __dump_stack+0x21/0x30 [ 544.212070][T23307] dump_stack_lvl+0x10c/0x190 [ 544.212100][T23307] ? __cfi_dump_stack_lvl+0x10/0x10 [ 544.212126][T23307] ? ___ratelimit+0x3f7/0x5a0 [ 544.212152][T23307] dump_stack+0x19/0x20 [ 544.212176][T23307] dump_header+0xd7/0x490 [ 544.212209][T23307] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 544.212233][T23307] oom_kill_process+0x4c0/0x7e0 [ 544.212255][T23307] ? sched_clock_cpu+0x75/0x400 [ 544.212288][T23307] out_of_memory+0x7ee/0xbd0 [ 544.212309][T23307] ? __cfi_out_of_memory+0x10/0x10 [ 544.212330][T23307] ? mutex_lock_killable+0x92/0x1c0 [ 544.212358][T23307] ? __cfi_mutex_lock_killable+0x10/0x10 [ 544.212387][T23307] mem_cgroup_out_of_memory+0x279/0x350 [ 544.212416][T23307] ? drain_obj_stock+0xed0/0xed0 [ 544.212449][T23307] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 544.212478][T23307] try_charge_memcg+0x8f7/0xde0 [ 544.212504][T23307] ? __cfi_try_charge_memcg+0x10/0x10 [ 544.212529][T23307] ? __alloc_pages_noprof+0x30d/0x6c0 [ 544.212554][T23307] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 544.212577][T23307] ? __folio_batch_add_and_move+0x2ab/0x370 [ 544.212601][T23307] __mem_cgroup_charge+0xf6/0x410 [ 544.212627][T23307] ? __kasan_check_write+0x18/0x20 [ 544.212652][T23307] ? _raw_spin_lock+0x8c/0x120 [ 544.212686][T23307] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 544.212716][T23307] shmem_alloc_and_add_folio+0x86d/0x1050 [ 544.212756][T23307] ? put_swap_device+0x130/0x130 [ 544.212791][T23307] ? shmem_huge_global_enabled+0x2da/0x360 [ 544.212825][T23307] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 544.212859][T23307] ? __kasan_check_write+0x18/0x20 [ 544.212886][T23307] ? _raw_spin_lock+0x8c/0x120 [ 544.212921][T23307] shmem_get_folio_gfp+0x5f0/0x1380 [ 544.212957][T23307] ? shmem_get_folio+0xc0/0xc0 [ 544.212988][T23307] ? follow_page_pte+0xa5c/0xb90 [ 544.213012][T23307] ? inode_to_bdi+0x6d/0x100 [ 544.213039][T23307] shmem_write_begin+0xf4/0x270 [ 544.213074][T23307] generic_perform_write+0x330/0x960 [ 544.213105][T23307] ? __cfi_generic_perform_write+0x10/0x10 [ 544.213132][T23307] ? down_write+0xe9/0x2a0 [ 544.213162][T23307] ? file_update_time+0xa3/0x220 [ 544.213187][T23307] shmem_file_write_iter+0x105/0x130 [ 544.213212][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 544.213237][T23307] __kernel_write_iter+0x392/0x830 [ 544.213273][T23307] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 544.213299][T23307] ? __cfi___kernel_write_iter+0x10/0x10 [ 544.213327][T23307] ? get_dump_page+0x160/0x220 [ 544.213350][T23307] ? __asan_memset+0x39/0x50 [ 544.213377][T23307] ? iov_iter_bvec+0xc0/0x180 [ 544.213410][T23307] dump_user_range+0xb06/0xdf0 [ 544.213442][T23307] ? __cfi_dump_emit+0x10/0x10 [ 544.213469][T23307] ? __cfi_dump_user_range+0x10/0x10 [ 544.213499][T23307] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 544.213529][T23307] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 544.213561][T23307] elf_core_dump+0x2cd9/0x3810 [ 544.213597][T23307] ? __cfi_elf_core_dump+0x10/0x10 [ 544.213638][T23307] ? dump_interrupted+0xf0/0xf0 [ 544.213665][T23307] ? 0xffffffffff600000 [ 544.213683][T23307] do_coredump+0x1bf7/0x2bd0 [ 544.213713][T23307] ? __cfi_do_coredump+0x10/0x10 [ 544.213740][T23307] ? asm_exc_page_fault+0x2b/0x30 [ 544.213773][T23307] ? __kasan_slab_free+0x6a/0x80 [ 544.213805][T23307] ? kmem_cache_free+0x1c1/0x4c0 [ 544.213834][T23307] get_signal+0x11fd/0x14f0 [ 544.213862][T23307] arch_do_signal_or_restart+0x96/0x720 [ 544.213894][T23307] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 544.213928][T23307] irqentry_exit_to_user_mode+0x4e/0xb0 [ 544.213959][T23307] irqentry_exit+0x16/0x60 [ 544.213987][T23307] exc_page_fault+0x66/0xc0 [ 544.214015][T23307] asm_exc_page_fault+0x2b/0x30 [ 544.214039][T23307] RIP: 0033:0x7fd3f138e931 [ 544.214057][T23307] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 544.214077][T23307] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 544.214099][T23307] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 544.214116][T23307] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 544.214131][T23307] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 544.214146][T23307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 544.214161][T23307] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 544.214181][T23307] [ 544.671487][T23307] memory: usage 307200kB, limit 307200kB, failcnt 70620 [ 544.679628][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 544.689383][T23307] memory+swap: usage 432040kB, limit 9007199254740988kB, failcnt 0 [ 544.697405][T23307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 544.704362][T23307] Memory cgroup stats for /syz3: [ 544.704537][T23307] cache 314376192 [ 544.713175][T23307] rss 143360 [ 544.716411][T23307] rss_huge 0 [ 544.719640][T23307] shmem 247549952 [ 544.723334][T23307] mapped_file 0 [ 544.726819][T23307] dirty 0 [ 544.729776][T23307] writeback 0 [ 544.733100][T23307] workingset_refault_anon 690 [ 544.737805][T23307] workingset_refault_file 0 [ 544.742347][T23307] swap 127836160 [ 544.745948][T23307] swapcached 53248 [ 544.749693][T23307] pgpgin 862604 [ 544.753191][T23307] pgpgout 787848 [ 544.756767][T23307] pgfault 265368 [ 544.760337][T23307] pgmajfault 2226 [ 544.764012][T23307] inactive_anon 176705536 [ 544.768375][T23307] active_anon 71041024 [ 544.772494][T23307] inactive_file 0 [ 544.776234][T23307] active_file 0 [ 544.779739][T23307] unevictable 66826240 [ 544.783903][T23307] hierarchical_memory_limit 314572800 [ 544.789331][T23307] hierarchical_memsw_limit 9223372036854771712 [ 544.795550][T23307] total_cache 314376192 [ 544.799741][T23307] total_rss 143360 [ 544.803526][T23307] total_rss_huge 0 [ 544.809098][T23307] total_shmem 247549952 [ 544.813356][T23307] total_mapped_file 0 [ 544.817369][T23307] total_dirty 0 [ 544.820857][T23307] total_writeback 0 [ 544.824732][T23307] total_workingset_refault_anon 690 [ 544.829957][T23307] total_workingset_refault_file 0 [ 544.835031][T23307] total_swap 127836160 [ 544.839147][T23307] total_swapcached 53248 [ 544.843499][T23307] total_pgpgin 862604 [ 544.847674][T23307] total_pgpgout 787848 [ 544.851783][T23307] total_pgfault 265368 [ 544.855931][T23307] total_pgmajfault 2226 [ 544.860178][T23307] total_inactive_anon 176705536 [ 544.865078][T23307] total_active_anon 71041024 [ 544.869695][T23307] total_inactive_file 0 [ 544.873891][T23307] total_active_file 0 [ 544.877901][T23307] total_unevictable 66826240 [ 544.882603][T23307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23290,uid=0 [ 544.897742][T23307] Memory cgroup out of memory: Killed process 23290 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:46976kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 545.118585][T23457] tmpfs: Bad value for 'nr_blocks' [ 545.221204][T21637] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 545.282473][T21637] CPU: 0 UID: 0 PID: 21637 Comm: syz-executor Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 545.282516][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.282532][T21637] Call Trace: [ 545.282540][T21637] [ 545.282550][T21637] __dump_stack+0x21/0x30 [ 545.282584][T21637] dump_stack_lvl+0x10c/0x190 [ 545.282611][T21637] ? __cfi_dump_stack_lvl+0x10/0x10 [ 545.282637][T21637] ? ___ratelimit+0x3f7/0x5a0 [ 545.282662][T21637] dump_stack+0x19/0x20 [ 545.282690][T21637] dump_header+0xd7/0x490 [ 545.282723][T21637] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 545.282749][T21637] oom_kill_process+0x4c0/0x7e0 [ 545.282770][T21637] ? sched_clock_cpu+0x75/0x400 [ 545.282798][T21637] out_of_memory+0x7ee/0xbd0 [ 545.282820][T21637] ? __cfi_out_of_memory+0x10/0x10 [ 545.282841][T21637] ? mutex_lock_killable+0x92/0x1c0 [ 545.282869][T21637] ? __cfi_mutex_lock_killable+0x10/0x10 [ 545.282900][T21637] mem_cgroup_out_of_memory+0x279/0x350 [ 545.282932][T21637] ? drain_obj_stock+0xed0/0xed0 [ 545.282965][T21637] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 545.282996][T21637] try_charge_memcg+0x8f7/0xde0 [ 545.283023][T21637] ? __cfi_try_charge_memcg+0x10/0x10 [ 545.283048][T21637] ? __alloc_pages_noprof+0x30d/0x6c0 [ 545.283074][T21637] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 545.283097][T21637] ? __switch_to_asm+0x3d/0x70 [ 545.283128][T21637] __mem_cgroup_charge+0xf6/0x410 [ 545.283157][T21637] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 545.283187][T21637] folio_prealloc+0x67/0x240 [ 545.283223][T21637] do_wp_page+0x1c54/0x3270 [ 545.283253][T21637] ? psi_task_change+0x1ce/0x360 [ 545.283280][T21637] ? __cfi_preempt_schedule+0x10/0x10 [ 545.283304][T21637] ? folio_put+0x90/0x90 [ 545.283333][T21637] ? __cfi__raw_spin_lock+0x10/0x10 [ 545.283368][T21637] ? __pte_offset_map+0x1b0/0x230 [ 545.283393][T21637] ? pte_offset_map_rw_nolock+0xba/0x110 [ 545.283420][T21637] handle_mm_fault+0xff7/0x1b90 [ 545.283463][T21637] ? __cfi_handle_mm_fault+0x10/0x10 [ 545.283495][T21637] ? lock_vma_under_rcu+0x49d/0x530 [ 545.283532][T21637] ? __cfi___x64_sys_clone+0x10/0x10 [ 545.283557][T21637] ? __kasan_check_read+0x15/0x20 [ 545.283585][T21637] do_user_addr_fault+0x96c/0x1200 [ 545.283617][T21637] exc_page_fault+0x59/0xc0 [ 545.283646][T21637] asm_exc_page_fault+0x2b/0x30 [ 545.283670][T21637] RIP: 0033:0x7fd3f1384d08 [ 545.283690][T21637] Code: 84 e4 74 66 e8 89 04 00 00 41 89 c4 85 c0 0f 84 4e 01 00 00 49 c7 c5 a8 ff ff ff 64 45 8b 75 00 48 89 da 89 ee bf 02 00 00 00 93 09 00 00 45 85 e4 79 05 64 45 89 75 00 48 8b 84 24 c8 00 00 [ 545.283709][T21637] RSP: 002b:00007ffd10e293e0 EFLAGS: 00010206 [ 545.283731][T21637] RAX: 0000000000000172 RBX: 0000000000000000 RCX: 00007fd3f1385193 [ 545.283747][T21637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 545.283762][T21637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 545.283776][T21637] R10: 00005555721737d0 R11: 0000000000000246 R12: 0000000000000172 [ 545.283792][T21637] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 00007ffd10e29570 [ 545.283812][T21637] [ 545.283824][T21637] memory: usage 303920kB, limit 307200kB, failcnt 75539 [ 545.623592][T21637] memory+swap: usage 418924kB, limit 9007199254740988kB, failcnt 0 [ 545.631537][T21637] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 545.664488][T21637] Memory cgroup stats for /syz3: [ 545.664651][T21637] cache 302157824 [ 545.683152][T21637] rss 73728 [ 545.686336][T21637] rss_huge 0 [ 545.689560][T21637] shmem 235331584 [ 545.694471][T21637] mapped_file 0 [ 545.697969][T21637] dirty 0 [ 545.700922][T21637] writeback 0 [ 545.706860][T21637] workingset_refault_anon 691 [ 545.717621][T21637] workingset_refault_file 0 [ 545.722179][T21637] swap 127930368 [ 545.727456][T21637] swapcached 57344 [ 545.731716][T21637] pgpgin 866254 [ 545.735233][T21637] pgpgout 794502 [ 545.738795][T21637] pgfault 265551 [ 545.742358][T21637] pgmajfault 2227 [ 545.747774][T21637] inactive_anon 160743424 [ 545.752138][T21637] active_anon 74657792 [ 545.757163][T21637] inactive_file 0 [ 545.760829][T21637] active_file 0 [ 545.769845][T21637] unevictable 66826240 [ 545.776325][T21637] hierarchical_memory_limit 314572800 [ 545.791978][T21637] hierarchical_memsw_limit 9223372036854771712 [ 545.802479][T21637] total_cache 302157824 [ 545.806699][T21637] total_rss 73728 [ 545.810365][T21637] total_rss_huge 0 [ 545.826394][T21637] total_shmem 235331584 [ 545.830619][T21637] total_mapped_file 0 [ 545.848155][T21637] total_dirty 0 [ 545.851685][T21637] total_writeback 0 [ 545.868820][T21637] total_workingset_refault_anon 691 [ 545.874642][T21637] total_workingset_refault_file 0 [ 545.881114][T21637] total_swap 127930368 [ 545.886498][T21637] total_swapcached 57344 [ 545.890782][T21637] total_pgpgin 866254 [ 545.894849][T21637] total_pgpgout 794502 [ 545.898939][T21637] total_pgfault 265551 [ 545.903088][T21637] total_pgmajfault 2227 [ 545.907275][T21637] total_inactive_anon 160743424 [ 545.912153][T21637] total_active_anon 74657792 [ 545.918198][T21637] total_inactive_file 0 [ 545.922389][T21637] total_active_file 0 [ 545.927436][T21637] total_unevictable 66826240 [ 545.932052][T21637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23295,uid=0 [ 545.954397][T21637] Memory cgroup out of memory: Killed process 23295 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:47872kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 545.992870][T23292] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 546.003845][T23480] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 546.018261][T23292] CPU: 0 UID: 0 PID: 23292 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 546.018304][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.018319][T23292] Call Trace: [ 546.018328][T23292] [ 546.018338][T23292] __dump_stack+0x21/0x30 [ 546.018373][T23292] dump_stack_lvl+0x10c/0x190 [ 546.018401][T23292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 546.018430][T23292] ? ___ratelimit+0x3f7/0x5a0 [ 546.018456][T23292] dump_stack+0x19/0x20 [ 546.018483][T23292] dump_header+0xd7/0x490 [ 546.018518][T23292] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 546.018543][T23292] oom_kill_process+0x4c0/0x7e0 [ 546.018565][T23292] ? sched_clock_cpu+0x75/0x400 [ 546.018593][T23292] out_of_memory+0x7ee/0xbd0 [ 546.018616][T23292] ? __cfi_out_of_memory+0x10/0x10 [ 546.018637][T23292] ? mutex_lock_killable+0x104/0x1c0 [ 546.018666][T23292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 546.018696][T23292] mem_cgroup_out_of_memory+0x279/0x350 [ 546.018728][T23292] ? drain_obj_stock+0xed0/0xed0 [ 546.018761][T23292] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 546.018792][T23292] try_charge_memcg+0x8f7/0xde0 [ 546.018819][T23292] ? __cfi_try_charge_memcg+0x10/0x10 [ 546.018845][T23292] ? __alloc_pages_noprof+0x30d/0x6c0 [ 546.018871][T23292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 546.018896][T23292] ? __folio_batch_add_and_move+0x2ab/0x370 [ 546.018920][T23292] __mem_cgroup_charge+0xf6/0x410 [ 546.018949][T23292] ? __kasan_check_write+0x18/0x20 [ 546.018976][T23292] ? _raw_spin_lock+0x8c/0x120 [ 546.019010][T23292] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 546.019041][T23292] shmem_alloc_and_add_folio+0x86d/0x1050 [ 546.019079][T23292] ? put_swap_device+0x130/0x130 [ 546.019114][T23292] ? shmem_huge_global_enabled+0x2da/0x360 [ 546.019149][T23292] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 546.019183][T23292] ? __kasan_check_write+0x18/0x20 [ 546.019210][T23292] ? _raw_spin_lock+0x8c/0x120 [ 546.019251][T23292] shmem_get_folio_gfp+0x5f0/0x1380 [ 546.019286][T23292] ? shmem_get_folio+0xc0/0xc0 [ 546.019316][T23292] ? follow_page_pte+0xa5c/0xb90 [ 546.019339][T23292] ? inode_to_bdi+0x6d/0x100 [ 546.019364][T23292] shmem_write_begin+0xf4/0x270 [ 546.019398][T23292] generic_perform_write+0x330/0x960 [ 546.019428][T23292] ? __cfi_generic_perform_write+0x10/0x10 [ 546.019454][T23292] ? down_write+0xe9/0x2a0 [ 546.019483][T23292] ? file_update_time+0xa3/0x220 [ 546.019507][T23292] shmem_file_write_iter+0x105/0x130 [ 546.019531][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 546.019556][T23292] __kernel_write_iter+0x392/0x830 [ 546.019585][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 546.019609][T23292] ? __cfi___kernel_write_iter+0x10/0x10 [ 546.019637][T23292] ? get_dump_page+0x160/0x220 [ 546.019659][T23292] ? __asan_memset+0x39/0x50 [ 546.019685][T23292] ? iov_iter_bvec+0xc0/0x180 [ 546.019719][T23292] dump_user_range+0xb06/0xdf0 [ 546.019749][T23292] ? __cfi_dump_emit+0x10/0x10 [ 546.019777][T23292] ? __cfi_dump_user_range+0x10/0x10 [ 546.019805][T23292] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 546.019836][T23292] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 546.019867][T23292] elf_core_dump+0x2cd9/0x3810 [ 546.019905][T23292] ? __cfi_elf_core_dump+0x10/0x10 [ 546.019946][T23292] ? dump_interrupted+0xf0/0xf0 [ 546.019975][T23292] ? 0xffffffffff600000 [ 546.019994][T23292] do_coredump+0x1bf7/0x2bd0 [ 546.020042][T23292] ? __cfi_do_coredump+0x10/0x10 [ 546.020067][T23292] ? asm_exc_page_fault+0x2b/0x30 [ 546.020099][T23292] ? __kasan_slab_free+0x6a/0x80 [ 546.020132][T23292] ? kmem_cache_free+0x1c1/0x4c0 [ 546.020161][T23292] get_signal+0x11fd/0x14f0 [ 546.020188][T23292] arch_do_signal_or_restart+0x96/0x720 [ 546.020224][T23292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 546.020260][T23292] irqentry_exit_to_user_mode+0x4e/0xb0 [ 546.020291][T23292] irqentry_exit+0x16/0x60 [ 546.020318][T23292] exc_page_fault+0x66/0xc0 [ 546.020345][T23292] asm_exc_page_fault+0x2b/0x30 [ 546.020367][T23292] RIP: 0033:0x7fd3f138e931 [ 546.020387][T23292] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 546.020406][T23292] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 546.020427][T23292] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 546.020443][T23292] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 546.020457][T23292] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 546.020471][T23292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.020485][T23292] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 546.020505][T23292] [ 546.020517][T23292] memory: usage 307200kB, limit 307200kB, failcnt 75627 [ 546.168375][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 546.208406][T23482] syzkaller0: entered promiscuous mode [ 546.214586][T23292] memory+swap: usage 407208kB, limit 9007199254740988kB, failcnt 0 [ 546.288506][T23483] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 546.292531][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 546.298289][T23482] syzkaller0: entered allmulticast mode [ 546.303207][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 546.309342][T23292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 546.312658][ T45] usb 3-1: USB disconnect, device number 41 [ 546.317148][T23292] Memory cgroup stats for [ 546.443365][T23485] can0: slcan on ttyS3. [ 546.472626][ T36] kauditd_printk_skb: 359 callbacks suppressed [ 546.472650][ T36] audit: type=1400 audit(2000000644.834:22489): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 546.477354][T23292] /syz3 [ 546.486093][ T36] audit: type=1400 audit(2000000644.834:22490): avc: denied { ioctl } for pid=23481 comm="syz.0.7609" path="/dev/binderfs/binder0" dev="binder" ino=40 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 546.488135][T23292] : [ 546.626344][T23292] cache 299196416 [ 546.632539][T23292] rss 81920 [ 546.635767][T23292] rss_huge 0 [ 546.639031][T23292] shmem 232370176 [ 546.643017][T23292] mapped_file 0 [ 546.646539][T23292] dirty 0 [ 546.649587][T23292] writeback 0 [ 546.652934][T23292] workingset_refault_anon 691 [ 546.657645][T23292] workingset_refault_file 0 [ 546.662183][T23292] swap 115191808 [ 546.666373][T23292] swapcached 53248 [ 546.670222][T23292] pgpgin 869261 [ 546.674109][T23292] pgpgout 798231 [ 546.678216][T23292] pgfault 265554 [ 546.681807][T23292] pgmajfault 2227 [ 546.685308][ T36] audit: type=1400 audit(2000000645.034:22491): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 546.685644][T23292] inactive_anon 122515456 [ 546.713149][T23292] active_anon 109969408 [ 546.713261][T23485] can0 (unregistered): slcan off ttyS3. [ 546.717349][T23292] inactive_file 0 [ 546.717361][T23292] active_file 0 [ 546.717369][T23292] unevictable 66826240 [ 546.735451][T23292] hierarchical_memory_limit 314572800 [ 546.740992][T23292] hierarchical_memsw_limit 9223372036854771712 [ 546.748284][T23292] total_cache 299196416 [ 546.753181][T23292] total_rss 81920 [ 546.763919][ T36] audit: type=1400 audit(2000000645.114:22492): avc: denied { read write } for pid=22463 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.772483][T23292] total_rss_huge 0 [ 546.789770][ T36] audit: type=1400 audit(2000000645.114:22493): avc: denied { read write open } for pid=22463 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.824543][ T36] audit: type=1400 audit(2000000645.114:22494): avc: denied { ioctl } for pid=22463 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.863643][T23292] total_shmem 232370176 [ 546.882443][T23292] total_mapped_file 0 [ 546.898695][T23292] total_dirty 0 [ 546.902217][T23292] total_writeback 0 [ 546.932447][T23292] total_workingset_refault_anon 691 [ 546.932504][ T36] audit: type=1400 audit(2000000645.144:22495): avc: denied { read write } for pid=19664 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 546.937697][T23292] total_workingset_refault_file 0 [ 546.937707][T23292] total_swap 115191808 [ 546.937716][T23292] total_swapcached 53248 [ 546.937726][T23292] total_pgpgin 869261 [ 546.937735][T23292] total_pgpgout 798231 [ 546.966975][ T36] audit: type=1400 audit(2000000645.144:22496): avc: denied { read write open } for pid=19664 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.019819][ T36] audit: type=1400 audit(2000000645.144:22497): avc: denied { ioctl } for pid=19664 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 547.027355][T23292] total_pgfault 265554 [ 547.053301][ T36] audit: type=1400 audit(2000000645.184:22498): avc: denied { read write } for pid=23487 comm="syz.4.7610" name="binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 547.080369][T23292] total_pgmajfault 2227 [ 547.085211][T23292] total_inactive_anon 122515456 [ 547.090226][T23292] total_active_anon 109969408 [ 547.095863][T23292] total_inactive_file 0 [ 547.106929][T23494] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 547.122435][T23292] total_active_file 0 [ 547.136759][T23292] total_unevictable 66826240 [ 547.143263][T23292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23291,uid=0 [ 547.160833][T23292] Memory cgroup out of memory: Killed process 23291 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 547.730146][T23294] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 547.811565][T23294] CPU: 0 UID: 0 PID: 23294 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 547.811606][T23294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.811622][T23294] Call Trace: [ 547.811630][T23294] [ 547.811639][T23294] __dump_stack+0x21/0x30 [ 547.811672][T23294] dump_stack_lvl+0x10c/0x190 [ 547.811699][T23294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 547.811726][T23294] ? ___ratelimit+0x3f7/0x5a0 [ 547.811752][T23294] dump_stack+0x19/0x20 [ 547.811777][T23294] dump_header+0xd7/0x490 [ 547.811811][T23294] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 547.811836][T23294] oom_kill_process+0x4c0/0x7e0 [ 547.811859][T23294] ? sched_clock_cpu+0x75/0x400 [ 547.811886][T23294] out_of_memory+0x7ee/0xbd0 [ 547.811907][T23294] ? __cfi_out_of_memory+0x10/0x10 [ 547.811927][T23294] ? mutex_lock_killable+0x92/0x1c0 [ 547.811956][T23294] ? __cfi_mutex_lock_killable+0x10/0x10 [ 547.811986][T23294] mem_cgroup_out_of_memory+0x279/0x350 [ 547.812017][T23294] ? drain_obj_stock+0xed0/0xed0 [ 547.812050][T23294] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 547.812080][T23294] try_charge_memcg+0x8f7/0xde0 [ 547.812107][T23294] ? __cfi_try_charge_memcg+0x10/0x10 [ 547.812131][T23294] ? __alloc_pages_noprof+0x30d/0x6c0 [ 547.812157][T23294] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 547.812181][T23294] ? __folio_batch_add_and_move+0x2ab/0x370 [ 547.812205][T23294] __mem_cgroup_charge+0xf6/0x410 [ 547.812233][T23294] ? __kasan_check_write+0x18/0x20 [ 547.812260][T23294] ? _raw_spin_lock+0x8c/0x120 [ 547.812299][T23294] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 547.812330][T23294] shmem_alloc_and_add_folio+0x86d/0x1050 [ 547.812370][T23294] ? put_swap_device+0x130/0x130 [ 547.812409][T23294] ? shmem_huge_global_enabled+0x2da/0x360 [ 547.812440][T23294] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 547.812470][T23294] ? __kasan_check_write+0x18/0x20 [ 547.812496][T23294] ? _raw_spin_lock+0x8c/0x120 [ 547.812529][T23294] shmem_get_folio_gfp+0x5f0/0x1380 [ 547.812563][T23294] ? shmem_get_folio+0xc0/0xc0 [ 547.812592][T23294] ? follow_page_pte+0xa5c/0xb90 [ 547.812615][T23294] ? inode_to_bdi+0x6d/0x100 [ 547.812641][T23294] shmem_write_begin+0xf4/0x270 [ 547.812675][T23294] generic_perform_write+0x330/0x960 [ 547.812704][T23294] ? __cfi_generic_perform_write+0x10/0x10 [ 547.812729][T23294] ? down_write+0xe9/0x2a0 [ 547.812758][T23294] ? file_update_time+0xa3/0x220 [ 547.812781][T23294] shmem_file_write_iter+0x105/0x130 [ 547.812806][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 547.812830][T23294] __kernel_write_iter+0x392/0x830 [ 547.812858][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 547.812880][T23294] ? __cfi___kernel_write_iter+0x10/0x10 [ 547.812907][T23294] ? get_dump_page+0x160/0x220 [ 547.812928][T23294] ? __asan_memset+0x39/0x50 [ 547.812954][T23294] ? iov_iter_bvec+0xc0/0x180 [ 547.812986][T23294] dump_user_range+0xb06/0xdf0 [ 547.813015][T23294] ? __cfi_dump_emit+0x10/0x10 [ 547.813041][T23294] ? __cfi_dump_user_range+0x10/0x10 [ 547.813069][T23294] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 547.813099][T23294] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 547.813129][T23294] elf_core_dump+0x2cd9/0x3810 [ 547.813166][T23294] ? __cfi_elf_core_dump+0x10/0x10 [ 547.813204][T23294] ? dump_interrupted+0xf0/0xf0 [ 547.813230][T23294] ? 0xffffffffff600000 [ 547.813249][T23294] do_coredump+0x1bf7/0x2bd0 [ 547.813277][T23294] ? __cfi_do_coredump+0x10/0x10 [ 547.813310][T23294] ? asm_exc_page_fault+0x2b/0x30 [ 547.813343][T23294] ? __kasan_slab_free+0x6a/0x80 [ 547.813375][T23294] ? kmem_cache_free+0x1c1/0x4c0 [ 547.813404][T23294] get_signal+0x11fd/0x14f0 [ 547.813433][T23294] arch_do_signal_or_restart+0x96/0x720 [ 547.813464][T23294] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 547.813498][T23294] irqentry_exit_to_user_mode+0x4e/0xb0 [ 547.813524][T23294] irqentry_exit+0x16/0x60 [ 547.813552][T23294] exc_page_fault+0x66/0xc0 [ 547.813578][T23294] asm_exc_page_fault+0x2b/0x30 [ 547.813601][T23294] RIP: 0033:0x7fd3f138e931 [ 547.813620][T23294] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 547.813640][T23294] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 547.813661][T23294] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 547.813678][T23294] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 547.813692][T23294] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 547.813707][T23294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 547.813721][T23294] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 547.813741][T23294] [ 547.853351][T23516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 547.889912][T23294] memory: usage 298740kB, limit 307200kB, failcnt 78925 [ 547.937764][T23518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:818 [ 547.956893][T23294] memory+swap: usage 426364kB, limit 9007199254740988kB, failcnt 0 [ 548.153207][T23519] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 548.284858][T23294] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 548.317771][T23294] Memory cgroup stats for /syz3: [ 548.317929][T23294] cache 314302464 [ 548.327941][T23294] rss 233472 [ 548.331259][T23294] rss_huge 0 [ 548.335563][T23294] shmem 247476224 [ 548.339353][T23294] mapped_file 0 [ 548.342978][ T814] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 548.351516][ T5674] bridge_slave_1: left allmulticast mode [ 548.357269][ T5674] bridge_slave_1: left promiscuous mode [ 548.365651][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.381181][T23294] dirty 0 [ 548.402667][ T5674] bridge_slave_0: left allmulticast mode [ 548.408470][ T5674] bridge_slave_0: left promiscuous mode [ 548.430109][T23294] writeback 0 [ 548.430140][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.453520][T23294] workingset_refault_anon 692 [ 548.482520][T23294] workingset_refault_file 0 [ 548.501780][T23294] swap 127836160 [ 548.510324][T23294] swapcached 53248 [ 548.518508][ T814] usb 4-1: not running at top speed; connect to a high speed hub [ 548.534699][T23294] pgpgin 888440 [ 548.543990][T23294] pgpgout 813684 [ 548.549755][T23294] pgfault 266999 [ 548.556697][ T814] usb 4-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 548.562828][T23294] pgmajfault 2228 [ 548.589330][ T814] usb 4-1: config 1 interface 0 has no altsetting 0 [ 548.609479][ T814] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.612462][T23294] inactive_anon 120893440 [ 548.635614][T23294] active_anon 126853120 [ 548.639827][T23294] inactive_file 0 [ 548.640803][ T814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.653665][T23294] active_file 0 [ 548.657170][T23294] unevictable 66826240 [ 548.661251][T23294] hierarchical_memory_limit 314572800 [ 548.667205][ T814] usb 4-1: Product: ﱥ幜絏딎㷐㇏瓙근䍜횚߭㾁満䮢룳瘝杔ካம㛺ᛳ悵걍랒鿢㉦篍㔝蝛漯ꃚᨬ顴斉됪샟㙔嬁⬜箣ꡦഒ䫈眽৏├髉퍡풃峐涄娚➩堻៨⭕祾눮힘퐞黳詮蔞앃ꟹ장倜⎶땚ꞅ喡辬땽찕籠瀧⨺ಀﱫһ쓢蛒渀룷鷱늵⦉婐伮샃 [ 548.685849][T23294] hierarchical_memsw_limit 9223372036854771712 [ 548.704318][T23294] total_cache 314302464 [ 548.709031][T23294] total_rss 233472 [ 548.722492][ T31] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 548.734383][T23294] total_rss_huge 0 [ 548.738166][T23294] total_shmem 247476224 [ 548.742346][T23294] total_mapped_file 0 [ 548.742488][ T814] usb 4-1: Manufacturer: Д [ 548.754129][ T814] usb 4-1: SerialNumber: 过๑帿窒兵훑ﹾ楾쀜࿪ꙏ᷏ [ 548.758166][T23294] total_dirty 0 [ 548.766184][ T5674] veth1_macvtap: left promiscuous mode [ 548.781150][T23294] total_writeback 0 [ 548.783647][ T5674] veth0_vlan: left promiscuous mode [ 548.789941][T23294] total_workingset_refault_anon 692 [ 548.795888][T23294] total_workingset_refault_file 0 [ 548.803921][T23517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.824439][T23294] total_swap 127836160 [ 548.830662][T23294] total_swapcached 53248 [ 548.841524][T23294] total_pgpgin 888440 [ 548.860778][T23294] total_pgpgout 813684 [ 548.877757][T23294] total_pgfault 266999 [ 548.881901][T23294] total_pgmajfault 2228 [ 548.912465][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 548.932434][T23294] total_inactive_anon 120893440 [ 548.937356][T23294] total_active_anon 126853120 [ 548.942052][T23294] total_inactive_file 0 [ 548.950355][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 548.979828][T23294] total_active_file 0 [ 548.987059][T23294] total_unevictable 66826240 [ 548.992243][T23294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 548.994012][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 549.013427][T23294] ,cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23296,uid=0 [ 549.029509][T23294] Memory cgroup out of memory: Killed process 23296 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:50688kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 549.052459][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 549.082478][ T31] usb 3-1: SerialNumber: syz [ 549.099276][T23310] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 549.163016][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 549.171497][ T31] usb-storage 3-1:1.0: USB Mass Storage device detected [ 549.179711][T23310] CPU: 1 UID: 0 PID: 23310 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 549.179747][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.179762][T23310] Call Trace: [ 549.179770][T23310] [ 549.179779][T23310] __dump_stack+0x21/0x30 [ 549.179811][T23310] dump_stack_lvl+0x10c/0x190 [ 549.179838][T23310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 549.179864][T23310] ? ___ratelimit+0x3f7/0x5a0 [ 549.179890][T23310] dump_stack+0x19/0x20 [ 549.179915][T23310] dump_header+0xd7/0x490 [ 549.179947][T23310] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 549.179971][T23310] oom_kill_process+0x4c0/0x7e0 [ 549.179991][T23310] ? sched_clock_cpu+0x75/0x400 [ 549.180018][T23310] out_of_memory+0x7ee/0xbd0 [ 549.180037][T23310] ? __cfi_out_of_memory+0x10/0x10 [ 549.180057][T23310] ? mutex_lock_killable+0x104/0x1c0 [ 549.180085][T23310] ? __cfi_mutex_lock_killable+0x10/0x10 [ 549.180114][T23310] mem_cgroup_out_of_memory+0x279/0x350 [ 549.180146][T23310] ? drain_obj_stock+0xed0/0xed0 [ 549.180175][T23310] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 549.180216][T23310] try_charge_memcg+0x8f7/0xde0 [ 549.180241][T23310] ? __switch_to_asm+0x3d/0x70 [ 549.180271][T23310] ? __cfi_try_charge_memcg+0x10/0x10 [ 549.180297][T23310] ? __alloc_pages_noprof+0x30d/0x6c0 [ 549.180322][T23310] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 549.180347][T23310] __mem_cgroup_charge+0xf6/0x410 [ 549.180374][T23310] ? __cfi__raw_spin_lock+0x10/0x10 [ 549.180406][T23310] ? __schedule+0x1463/0x1f10 [ 549.180428][T23310] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 549.180458][T23310] shmem_alloc_and_add_folio+0x86d/0x1050 [ 549.180495][T23310] ? put_swap_device+0x130/0x130 [ 549.180529][T23310] ? shmem_huge_global_enabled+0x2da/0x360 [ 549.180563][T23310] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 549.180596][T23310] ? __kasan_check_write+0x18/0x20 [ 549.180623][T23310] ? _raw_spin_lock+0x8c/0x120 [ 549.180655][T23310] shmem_get_folio_gfp+0x5f0/0x1380 [ 549.180690][T23310] ? shmem_get_folio+0xc0/0xc0 [ 549.180719][T23310] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 549.180745][T23310] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 549.180770][T23310] ? inode_to_bdi+0x6d/0x100 [ 549.180795][T23310] shmem_write_begin+0xf4/0x270 [ 549.180831][T23310] generic_perform_write+0x330/0x960 [ 549.180860][T23310] ? __cfi_generic_perform_write+0x10/0x10 [ 549.180885][T23310] ? down_write+0xe9/0x2a0 [ 549.180913][T23310] ? mnt_get_write_access_file+0x1af/0x3b0 [ 549.180937][T23310] ? mnt_put_write_access_file+0xc2/0x100 [ 549.180962][T23310] ? file_update_time+0x1ef/0x220 [ 549.180986][T23310] shmem_file_write_iter+0x105/0x130 [ 549.181010][T23310] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 549.181034][T23310] __kernel_write_iter+0x392/0x830 [ 549.181061][T23310] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 549.181086][T23310] ? __cfi___kernel_write_iter+0x10/0x10 [ 549.181116][T23310] ? get_dump_page+0x160/0x220 [ 549.181138][T23310] ? __asan_memset+0x39/0x50 [ 549.181164][T23310] ? iov_iter_bvec+0xc0/0x180 [ 549.181196][T23310] dump_user_range+0xb06/0xdf0 [ 549.181235][T23310] ? __cfi_dump_emit+0x10/0x10 [ 549.181262][T23310] ? __cfi_dump_user_range+0x10/0x10 [ 549.181290][T23310] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 549.181320][T23310] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 549.181351][T23310] elf_core_dump+0x2cd9/0x3810 [ 549.181390][T23310] ? __cfi_elf_core_dump+0x10/0x10 [ 549.181431][T23310] ? dump_interrupted+0xf0/0xf0 [ 549.181458][T23310] ? 0xffffffffff600000 [ 549.181477][T23310] do_coredump+0x1bf7/0x2bd0 [ 549.181508][T23310] ? __cfi_do_coredump+0x10/0x10 [ 549.181534][T23310] ? asm_exc_page_fault+0x2b/0x30 [ 549.181567][T23310] ? __kasan_slab_free+0x6a/0x80 [ 549.181600][T23310] ? kmem_cache_free+0x1c1/0x4c0 [ 549.181630][T23310] get_signal+0x11fd/0x14f0 [ 549.181658][T23310] arch_do_signal_or_restart+0x96/0x720 [ 549.181690][T23310] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 549.181722][T23310] irqentry_exit_to_user_mode+0x4e/0xb0 [ 549.181752][T23310] irqentry_exit+0x16/0x60 [ 549.181780][T23310] exc_page_fault+0x66/0xc0 [ 549.181806][T23310] asm_exc_page_fault+0x2b/0x30 [ 549.181830][T23310] RIP: 0033:0x7fd3f138e931 [ 549.181848][T23310] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 549.181869][T23310] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 549.181891][T23310] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 549.181910][T23310] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 549.181925][T23310] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 549.181942][T23310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.181957][T23310] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 549.181976][T23310] [ 549.292514][T23310] memory: usage 304728kB, limit 307200kB, failcnt 79210 [ 549.630716][ T31] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 549.650840][T23310] memory+swap: usage 432080kB, limit 9007199254740988kB, failcnt 0 [ 549.657090][ T31] scsi host1: usb-storage 3-1:1.0 [ 549.657715][T23310] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 549.692483][T23310] Memory cgroup stats for /syz3: [ 549.692657][T23310] cache 314281984 [ 549.701346][T23310] rss 241664 [ 549.704654][T23310] rss_huge 0 [ 549.707946][T23310] shmem 247455744 [ 549.711704][T23310] mapped_file 0 [ 549.715259][T23310] dirty 0 [ 549.718334][T23310] writeback 0 [ 549.721668][T23310] workingset_refault_anon 693 [ 549.726780][T23310] workingset_refault_file 0 [ 549.731348][T23310] swap 127893504 [ 549.735033][T23310] swapcached 53248 [ 549.738815][T23310] pgpgin 895985 [ 549.742370][T23310] pgpgout 821233 [ 549.749145][T23310] pgfault 267271 [ 549.752838][T23310] pgmajfault 2229 [ 549.756524][T23310] inactive_anon 199700480 [ 549.760917][T23310] active_anon 47984640 [ 549.765061][T23310] inactive_file 0 [ 549.768779][T23310] active_file 0 [ 549.772273][T23310] unevictable 66826240 [ 549.776463][T23310] hierarchical_memory_limit 314572800 [ 549.781932][T23310] hierarchical_memsw_limit 9223372036854771712 [ 549.786503][T23526] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.788246][T23310] total_cache 314281984 [ 549.799478][T23310] total_rss 241664 [ 549.803326][T23310] total_rss_huge 0 [ 549.807093][T23310] total_shmem 247455744 [ 549.811292][T23310] total_mapped_file 0 [ 549.815373][T23310] total_dirty 0 [ 549.818910][T23310] total_writeback 0 [ 549.822820][T23310] total_workingset_refault_anon 693 [ 549.828119][T23310] total_workingset_refault_file 0 [ 549.842299][T23310] total_swap 127893504 [ 549.846003][T23526] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.852452][T23310] total_swapcached 53248 [ 549.857795][T23310] total_pgpgin 895985 [ 549.861835][T23310] total_pgpgout 821233 [ 549.876379][T23526] bridge_slave_0: entered allmulticast mode [ 549.882917][T23310] total_pgfault 267271 [ 549.889007][T23310] total_pgmajfault 2229 [ 549.894258][T23310] total_inactive_anon 199700480 [ 549.897157][T23526] bridge_slave_0: entered promiscuous mode [ 549.899197][T23310] total_active_anon 47984640 [ 549.909735][T23310] total_inactive_file 0 [ 549.913996][T23310] total_active_file 0 [ 549.918051][T23310] total_unevictable 66826240 [ 549.923882][T23310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23305,uid=0 [ 549.929205][T23526] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.950476][T23526] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.958564][T23526] bridge_slave_1: entered allmulticast mode [ 549.966089][T23526] bridge_slave_1: entered promiscuous mode [ 549.966881][T23310] Memory cgroup out of memory: Killed process 23305 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 550.063566][T23292] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 550.085133][T23292] CPU: 0 UID: 0 PID: 23292 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 550.085169][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.085184][T23292] Call Trace: [ 550.085192][T23292] [ 550.085202][T23292] __dump_stack+0x21/0x30 [ 550.085238][T23292] dump_stack_lvl+0x10c/0x190 [ 550.085266][T23292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 550.085292][T23292] ? ___ratelimit+0x3f7/0x5a0 [ 550.085318][T23292] dump_stack+0x19/0x20 [ 550.085343][T23292] dump_header+0xd7/0x490 [ 550.085378][T23292] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 550.085403][T23292] oom_kill_process+0x4c0/0x7e0 [ 550.085425][T23292] ? sched_clock_cpu+0x75/0x400 [ 550.085451][T23292] out_of_memory+0x7ee/0xbd0 [ 550.085472][T23292] ? __cfi_out_of_memory+0x10/0x10 [ 550.085492][T23292] ? mutex_lock_killable+0x104/0x1c0 [ 550.085520][T23292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 550.085548][T23292] mem_cgroup_out_of_memory+0x279/0x350 [ 550.085578][T23292] ? drain_obj_stock+0xed0/0xed0 [ 550.085608][T23292] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 550.085637][T23292] try_charge_memcg+0x8f7/0xde0 [ 550.085664][T23292] ? __cfi_try_charge_memcg+0x10/0x10 [ 550.085690][T23292] ? __alloc_pages_noprof+0x30d/0x6c0 [ 550.085714][T23292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 550.085739][T23292] __mem_cgroup_charge+0xf6/0x410 [ 550.085765][T23292] ? _raw_spin_lock+0x8c/0x120 [ 550.085798][T23292] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 550.085828][T23292] shmem_alloc_and_add_folio+0x86d/0x1050 [ 550.085864][T23292] ? put_swap_device+0x130/0x130 [ 550.085905][T23292] ? shmem_huge_global_enabled+0x2da/0x360 [ 550.085937][T23292] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 550.085971][T23292] shmem_get_folio_gfp+0x5f0/0x1380 [ 550.086005][T23292] ? shmem_get_folio+0xc0/0xc0 [ 550.086034][T23292] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 550.086060][T23292] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 550.086085][T23292] ? __switch_to_asm+0x3d/0x70 [ 550.086114][T23292] ? inode_to_bdi+0x6d/0x100 [ 550.086140][T23292] shmem_write_begin+0xf4/0x270 [ 550.086174][T23292] generic_perform_write+0x330/0x960 [ 550.086205][T23292] ? __cfi_generic_perform_write+0x10/0x10 [ 550.086231][T23292] ? down_write+0xe9/0x2a0 [ 550.086259][T23292] ? mnt_get_write_access_file+0x1af/0x3b0 [ 550.086283][T23292] ? mnt_put_write_access_file+0xc2/0x100 [ 550.086308][T23292] ? file_update_time+0x1ef/0x220 [ 550.086332][T23292] shmem_file_write_iter+0x105/0x130 [ 550.086357][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 550.086381][T23292] __kernel_write_iter+0x392/0x830 [ 550.086410][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 550.086436][T23292] ? __cfi___kernel_write_iter+0x10/0x10 [ 550.086466][T23292] ? __asan_memset+0x39/0x50 [ 550.086491][T23292] ? iov_iter_bvec+0xc0/0x180 [ 550.086522][T23292] dump_user_range+0xb06/0xdf0 [ 550.086551][T23292] ? __cfi_dump_emit+0x10/0x10 [ 550.086577][T23292] ? __cfi_dump_user_range+0x10/0x10 [ 550.086604][T23292] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 550.086634][T23292] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 550.086662][T23292] elf_core_dump+0x2cd9/0x3810 [ 550.086698][T23292] ? __cfi_elf_core_dump+0x10/0x10 [ 550.086739][T23292] ? dump_interrupted+0xf0/0xf0 [ 550.086765][T23292] ? 0xffffffffff600000 [ 550.086783][T23292] do_coredump+0x1bf7/0x2bd0 [ 550.086810][T23292] ? __cfi_do_coredump+0x10/0x10 [ 550.086834][T23292] ? asm_exc_page_fault+0x2b/0x30 [ 550.086865][T23292] ? __kasan_slab_free+0x6a/0x80 [ 550.086902][T23292] ? kmem_cache_free+0x1c1/0x4c0 [ 550.086930][T23292] get_signal+0x11fd/0x14f0 [ 550.086958][T23292] arch_do_signal_or_restart+0x96/0x720 [ 550.086988][T23292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 550.087023][T23292] irqentry_exit_to_user_mode+0x4e/0xb0 [ 550.087053][T23292] irqentry_exit+0x16/0x60 [ 550.087080][T23292] exc_page_fault+0x66/0xc0 [ 550.087107][T23292] asm_exc_page_fault+0x2b/0x30 [ 550.087129][T23292] RIP: 0033:0x7fd3f138e931 [ 550.087147][T23292] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 550.087167][T23292] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 550.087188][T23292] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 550.087206][T23292] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 550.087220][T23292] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 550.087235][T23292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.087250][T23292] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 550.087269][T23292] [ 550.090825][T23292] memory: usage 307164kB, limit 307200kB, failcnt 80852 [ 550.553390][T23292] memory+swap: usage 396532kB, limit 9007199254740988kB, failcnt 0 [ 550.561356][T23292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 550.568305][T23292] Memory cgroup stats for /syz3: [ 550.568471][T23292] cache 283836416 [ 550.577203][T23292] rss 237568 [ 550.580477][T23292] rss_huge 0 [ 550.583763][T23292] shmem 217010176 [ 550.587432][T23292] mapped_file 0 [ 550.590929][T23292] dirty 0 [ 550.593967][T23292] writeback 0 [ 550.597308][T23292] workingset_refault_anon 693 [ 550.602014][T23292] workingset_refault_file 0 [ 550.606728][T23292] swap 121942016 [ 550.610329][T23292] swapcached 53248 [ 550.614145][T23292] pgpgin 895990 [ 550.617643][T23292] pgpgout 828672 [ 550.621240][T23292] pgfault 267273 [ 550.624878][T23292] pgmajfault 2229 [ 550.628569][T23292] inactive_anon 175267840 [ 550.632966][T23292] active_anon 42012672 [ 550.637082][T23292] inactive_file 0 [ 550.640750][T23292] active_file 0 [ 550.645875][T23292] unevictable 66826240 [ 550.650633][T23292] hierarchical_memory_limit 314572800 [ 550.656094][T23292] hierarchical_memsw_limit 9223372036854771712 [ 550.662285][T23292] total_cache 283836416 [ 550.666524][T23292] total_rss 237568 [ 550.670279][T23292] total_rss_huge 0 [ 550.674412][T23292] total_shmem 217010176 [ 550.678611][T23292] total_mapped_file 0 [ 550.702437][T23292] total_dirty 0 [ 550.706004][T23292] total_writeback 0 [ 550.709846][T23292] total_workingset_refault_anon 693 [ 550.723144][T23292] total_workingset_refault_file 0 [ 550.751251][T23292] total_swap 121942016 [ 550.757278][T23292] total_swapcached 53248 [ 550.761578][T23292] total_pgpgin 895990 [ 550.782493][T23292] total_pgpgout 828672 [ 550.786662][T23292] total_pgfault 267273 [ 550.790779][T23292] total_pgmajfault 2229 [ 550.800648][T23292] total_inactive_anon 175267840 [ 550.806354][T23292] total_active_anon 42012672 [ 550.811002][T23292] total_inactive_file 0 [ 550.816226][T23292] total_active_file 0 [ 550.820270][T23292] total_unevictable 66826240 [ 550.827548][T23292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23297,uid=0 [ 550.843507][T23292] Memory cgroup out of memory: Killed process 23297 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 550.976552][ T814] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 550.986537][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.993673][ T5687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.084133][ T814] usb 4-1: USB disconnect, device number 36 [ 551.153484][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.160595][ T5674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.498102][ T36] kauditd_printk_skb: 334 callbacks suppressed [ 551.498122][ T36] audit: type=1400 audit(2000000649.854:22833): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.551307][T23294] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 551.605286][ T36] audit: type=1400 audit(2000000649.904:22834): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.627617][T23294] CPU: 0 UID: 0 PID: 23294 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 551.627651][T23294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.627675][T23294] Call Trace: [ 551.627684][T23294] [ 551.627693][T23294] __dump_stack+0x21/0x30 [ 551.627725][T23294] dump_stack_lvl+0x10c/0x190 [ 551.627751][T23294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 551.627777][T23294] ? ___ratelimit+0x3f7/0x5a0 [ 551.627802][T23294] dump_stack+0x19/0x20 [ 551.627828][T23294] dump_header+0xd7/0x490 [ 551.627861][T23294] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 551.627886][T23294] oom_kill_process+0x4c0/0x7e0 [ 551.627908][T23294] ? sched_clock_cpu+0x75/0x400 [ 551.627933][T23294] out_of_memory+0x7ee/0xbd0 [ 551.627954][T23294] ? __cfi_out_of_memory+0x10/0x10 [ 551.627975][T23294] ? mutex_lock_killable+0x92/0x1c0 [ 551.628002][T23294] ? __cfi_mutex_lock_killable+0x10/0x10 [ 551.628031][T23294] mem_cgroup_out_of_memory+0x279/0x350 [ 551.628061][T23294] ? drain_obj_stock+0xed0/0xed0 [ 551.628092][T23294] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 551.628122][T23294] try_charge_memcg+0x8f7/0xde0 [ 551.628148][T23294] ? __cfi_try_charge_memcg+0x10/0x10 [ 551.628174][T23294] ? __alloc_pages_noprof+0x30d/0x6c0 [ 551.628200][T23294] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 551.628223][T23294] ? __folio_batch_add_and_move+0x2ab/0x370 [ 551.628247][T23294] __mem_cgroup_charge+0xf6/0x410 [ 551.628274][T23294] ? __kasan_check_write+0x18/0x20 [ 551.628300][T23294] ? _raw_spin_lock+0x8c/0x120 [ 551.628332][T23294] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 551.628362][T23294] shmem_alloc_and_add_folio+0x86d/0x1050 [ 551.628401][T23294] ? put_swap_device+0x130/0x130 [ 551.628435][T23294] ? shmem_huge_global_enabled+0x2da/0x360 [ 551.628469][T23294] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 551.628502][T23294] ? __kasan_check_write+0x18/0x20 [ 551.628528][T23294] ? _raw_spin_lock+0x8c/0x120 [ 551.628562][T23294] shmem_get_folio_gfp+0x5f0/0x1380 [ 551.628597][T23294] ? shmem_get_folio+0xc0/0xc0 [ 551.628626][T23294] ? follow_page_pte+0xa5c/0xb90 [ 551.628650][T23294] ? inode_to_bdi+0x6d/0x100 [ 551.628716][T23294] shmem_write_begin+0xf4/0x270 [ 551.628752][T23294] generic_perform_write+0x330/0x960 [ 551.628782][T23294] ? __cfi_generic_perform_write+0x10/0x10 [ 551.628808][T23294] ? down_write+0xe9/0x2a0 [ 551.628836][T23294] ? file_update_time+0xa3/0x220 [ 551.628861][T23294] shmem_file_write_iter+0x105/0x130 [ 551.628885][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 551.628909][T23294] __kernel_write_iter+0x392/0x830 [ 551.628940][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 551.628965][T23294] ? __cfi___kernel_write_iter+0x10/0x10 [ 551.628993][T23294] ? get_dump_page+0x160/0x220 [ 551.629015][T23294] ? __asan_memset+0x39/0x50 [ 551.629042][T23294] ? iov_iter_bvec+0xc0/0x180 [ 551.629075][T23294] dump_user_range+0xb06/0xdf0 [ 551.629104][T23294] ? __cfi_dump_emit+0x10/0x10 [ 551.629131][T23294] ? __cfi_dump_user_range+0x10/0x10 [ 551.629159][T23294] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 551.629189][T23294] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 551.629220][T23294] elf_core_dump+0x2cd9/0x3810 [ 551.629258][T23294] ? __cfi_elf_core_dump+0x10/0x10 [ 551.629301][T23294] ? dump_interrupted+0xf0/0xf0 [ 551.629328][T23294] ? 0xffffffffff600000 [ 551.629347][T23294] do_coredump+0x1bf7/0x2bd0 [ 551.629377][T23294] ? __cfi_do_coredump+0x10/0x10 [ 551.629402][T23294] ? asm_exc_page_fault+0x2b/0x30 [ 551.629434][T23294] ? __kasan_slab_free+0x6a/0x80 [ 551.629467][T23294] ? kmem_cache_free+0x1c1/0x4c0 [ 551.629496][T23294] get_signal+0x11fd/0x14f0 [ 551.629549][T23294] arch_do_signal_or_restart+0x96/0x720 [ 551.629581][T23294] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 551.629615][T23294] irqentry_exit_to_user_mode+0x4e/0xb0 [ 551.629644][T23294] irqentry_exit+0x16/0x60 [ 551.629681][T23294] exc_page_fault+0x66/0xc0 [ 551.629709][T23294] asm_exc_page_fault+0x2b/0x30 [ 551.629732][T23294] RIP: 0033:0x7fd3f138e931 [ 551.629751][T23294] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 551.629772][T23294] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 551.629793][T23294] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 551.629811][T23294] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 551.629826][T23294] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 551.629841][T23294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.629856][T23294] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 551.629875][T23294] [ 551.691357][ T36] audit: type=1400 audit(2000000649.904:22835): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.695681][T23294] memory: usage 304444kB, limit 307200kB, failcnt 84280 [ 551.710326][ T36] audit: type=1400 audit(2000000649.904:22836): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.714800][T23294] memory+swap: usage 429380kB, limit 9007199254740988kB, failcnt 0 [ 551.714819][T23294] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 551.714834][T23294] Memory cgroup stats for /syz3: [ 551.714987][T23294] cache 311492608 [ 551.861096][T23526] veth0_vlan: entered promiscuous mode [ 551.876394][ T383] usb 3-1: USB disconnect, device number 42 [ 551.941793][T23526] veth1_macvtap: entered promiscuous mode [ 551.944636][ T36] audit: type=1400 audit(2000000649.924:22837): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.951435][T23294] rss 225280 [ 551.960428][ T36] audit: type=1400 audit(2000000649.924:22838): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 551.966248][T23294] rss_huge 0 [ 551.972214][ T36] audit: type=1400 audit(2000000649.924:22839): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.014538][T23294] shmem 244666368 [ 552.029326][ T36] audit: type=1400 audit(2000000649.934:22840): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.111924][T23294] mapped_file 0 [ 552.187157][ T36] audit: type=1400 audit(2000000649.934:22841): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.200282][T23294] dirty 0 [ 552.212524][ T36] audit: type=1400 audit(2000000649.934:22842): avc: denied { sys_module } for pid=23526 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.263901][T23294] writeback 0 [ 552.342024][T23294] workingset_refault_anon 697 [ 552.347769][T23294] workingset_refault_file 0 [ 552.406868][T23294] swap 127934464 [ 552.410575][T23294] swapcached 49152 [ 552.414389][T23294] pgpgin 915171 [ 552.418134][T23294] pgpgout 841104 [ 552.421706][T23294] pgfault 268471 [ 552.425313][T23294] pgmajfault 2233 [ 552.429164][T23294] inactive_anon 115326976 [ 552.433580][T23294] active_anon 129597440 [ 552.437754][T23294] inactive_file 0 [ 552.441397][T23294] active_file 0 [ 552.445606][T23294] unevictable 66826240 [ 552.449960][T23294] hierarchical_memory_limit 314572800 [ 552.455419][T23294] hierarchical_memsw_limit 9223372036854771712 [ 552.462725][T23294] total_cache 311492608 [ 552.467807][T23294] total_rss 225280 [ 552.471549][T23294] total_rss_huge 0 [ 552.476844][T23294] total_shmem 244666368 [ 552.481044][T23294] total_mapped_file 0 [ 552.485390][T23294] total_dirty 0 [ 552.489127][T23294] total_writeback 0 [ 552.492986][T23294] total_workingset_refault_anon 697 [ 552.498275][T23294] total_workingset_refault_file 0 [ 552.503537][T23294] total_swap 127934464 [ 552.507815][T23294] total_swapcached 49152 [ 552.512115][T23294] total_pgpgin 915171 [ 552.518763][T23294] total_pgpgout 841104 [ 552.527425][T23294] total_pgfault 268471 [ 552.531854][T23294] total_pgmajfault 2233 [ 552.541597][T23294] total_inactive_anon 115326976 [ 552.548304][T23294] total_active_anon 129597440 [ 552.553073][T23294] total_inactive_file 0 [ 552.562483][T23294] total_active_file 0 [ 552.566601][T23294] total_unevictable 66826240 [ 552.571252][T23294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23307,uid=0 [ 552.587612][T23294] Memory cgroup out of memory: Killed process 23307 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 552.822210][T23292] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 552.864512][T23584] rust_binder: Failed to allocate buffer. len:1144, is_oneway:false [ 552.912465][T23292] CPU: 0 UID: 0 PID: 23292 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 552.912507][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.912522][T23292] Call Trace: [ 552.912530][T23292] [ 552.912540][T23292] __dump_stack+0x21/0x30 [ 552.912572][T23292] dump_stack_lvl+0x10c/0x190 [ 552.912664][T23292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 552.912690][T23292] ? ___ratelimit+0x3f7/0x5a0 [ 552.912714][T23292] dump_stack+0x19/0x20 [ 552.912739][T23292] dump_header+0xd7/0x490 [ 552.912772][T23292] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 552.912796][T23292] oom_kill_process+0x4c0/0x7e0 [ 552.912817][T23292] ? sched_clock_cpu+0x75/0x400 [ 552.912843][T23292] out_of_memory+0x7ee/0xbd0 [ 552.912864][T23292] ? __cfi_out_of_memory+0x10/0x10 [ 552.912883][T23292] ? mutex_lock_killable+0x92/0x1c0 [ 552.912910][T23292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 552.912939][T23292] mem_cgroup_out_of_memory+0x279/0x350 [ 552.912968][T23292] ? drain_obj_stock+0xed0/0xed0 [ 552.912998][T23292] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 552.913027][T23292] try_charge_memcg+0x8f7/0xde0 [ 552.913050][T23292] ? __cfi_try_charge_memcg+0x10/0x10 [ 552.913071][T23292] ? __alloc_pages_noprof+0x30d/0x6c0 [ 552.913093][T23292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 552.913116][T23292] __mem_cgroup_charge+0xf6/0x410 [ 552.913148][T23292] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 552.913183][T23292] shmem_alloc_and_add_folio+0x86d/0x1050 [ 552.913218][T23292] ? put_swap_device+0x130/0x130 [ 552.913249][T23292] ? shmem_huge_global_enabled+0x2da/0x360 [ 552.913287][T23292] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 552.913468][T23292] ? __kasan_check_write+0x18/0x20 [ 552.913498][T23292] ? _raw_spin_lock+0x8c/0x120 [ 552.913641][T23292] shmem_get_folio_gfp+0x5f0/0x1380 [ 552.913789][T23292] ? shmem_get_folio+0xc0/0xc0 [ 552.913828][T23292] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 552.913985][T23292] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 552.914077][T23292] ? inode_to_bdi+0x6d/0x100 [ 552.914110][T23292] shmem_write_begin+0xf4/0x270 [ 552.914145][T23292] generic_perform_write+0x330/0x960 [ 552.914173][T23292] ? __cfi_generic_perform_write+0x10/0x10 [ 552.914198][T23292] ? down_write+0xe9/0x2a0 [ 552.914226][T23292] ? mnt_get_write_access_file+0x1af/0x3b0 [ 552.914250][T23292] ? mnt_put_write_access_file+0xc2/0x100 [ 552.914274][T23292] ? file_update_time+0x1ef/0x220 [ 552.914297][T23292] shmem_file_write_iter+0x105/0x130 [ 552.914320][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 552.914344][T23292] __kernel_write_iter+0x392/0x830 [ 552.914371][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 552.914395][T23292] ? __cfi___kernel_write_iter+0x10/0x10 [ 552.914424][T23292] ? __asan_memset+0x39/0x50 [ 552.914450][T23292] ? iov_iter_bvec+0xc0/0x180 [ 552.914483][T23292] dump_user_range+0xb06/0xdf0 [ 552.914513][T23292] ? __cfi_dump_emit+0x10/0x10 [ 552.914539][T23292] ? __cfi_dump_user_range+0x10/0x10 [ 552.914568][T23292] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 552.914597][T23292] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 552.914643][T23292] elf_core_dump+0x2cd9/0x3810 [ 552.914681][T23292] ? __cfi_elf_core_dump+0x10/0x10 [ 552.914723][T23292] ? dump_interrupted+0xf0/0xf0 [ 552.914751][T23292] ? 0xffffffffff600000 [ 552.914769][T23292] do_coredump+0x1bf7/0x2bd0 [ 552.914798][T23292] ? __cfi_do_coredump+0x10/0x10 [ 552.914822][T23292] ? asm_exc_page_fault+0x2b/0x30 [ 552.914853][T23292] ? __kasan_slab_free+0x6a/0x80 [ 552.914885][T23292] ? kmem_cache_free+0x1c1/0x4c0 [ 552.914914][T23292] get_signal+0x11fd/0x14f0 [ 552.914941][T23292] arch_do_signal_or_restart+0x96/0x720 [ 552.914972][T23292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 552.915006][T23292] irqentry_exit_to_user_mode+0x4e/0xb0 [ 552.915036][T23292] irqentry_exit+0x16/0x60 [ 552.915063][T23292] exc_page_fault+0x66/0xc0 [ 552.915090][T23292] asm_exc_page_fault+0x2b/0x30 [ 552.915113][T23292] RIP: 0033:0x7fd3f138e931 [ 552.915132][T23292] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 552.915153][T23292] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 552.915173][T23292] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 552.915190][T23292] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 552.915205][T23292] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 552.915220][T23292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 552.915234][T23292] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 552.915253][T23292] [ 552.921909][T23292] memory: usage 306836kB, limit 307200kB, failcnt 87551 [ 552.924735][T23588] can0: slcan on ttyS3. [ 552.960370][T23292] memory+swap: usage 430292kB, limit 9007199254740988kB, failcnt 0 [ 553.431385][T23292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 553.448556][T23292] Memory cgroup stats for /syz3: [ 553.448722][T23292] cache 314232832 [ 553.464239][T23292] rss 229376 [ 553.467491][T23292] rss_huge 0 [ 553.470718][T23588] can0 (unregistered): slcan off ttyS3. [ 553.470829][T23292] shmem 247406592 [ 553.527949][T23292] mapped_file 0 [ 553.531483][T23292] dirty 0 [ 553.548896][T23292] writeback 32768 [ 553.566099][T23292] workingset_refault_anon 698 [ 553.572444][T23292] workingset_refault_file 0 [ 553.602462][T23292] swap 127909888 [ 553.606112][T23292] swapcached 77824 [ 553.620645][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.648330][T23292] pgpgin 924260 [ 553.658598][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.666662][T23292] pgpgout 849516 [ 553.676552][T23292] pgfault 268517 [ 553.680242][T23292] pgmajfault 2234 [ 553.686445][T23598] fuse: Unknown parameter '000000000000000000000100x0000000000000008' [ 553.695057][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.702346][T23292] inactive_anon 131571712 [ 553.707153][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.714480][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.721728][T23595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.723313][T23292] active_anon 115859456 [ 553.736717][T23292] inactive_file 0 [ 553.740456][T23292] active_file 0 [ 553.744043][T23292] unevictable 66826240 [ 553.752236][T23292] hierarchical_memory_limit 314572800 [ 553.761409][T23292] hierarchical_memsw_limit 9223372036854771712 [ 553.767662][T23292] total_cache 314232832 [ 553.771959][T23292] total_rss 229376 [ 553.775958][T23292] total_rss_huge 0 [ 553.779882][T23292] total_shmem 247406592 [ 553.784922][T23292] total_mapped_file 0 [ 553.788932][T23292] total_dirty 0 [ 553.793476][T23292] total_writeback 32768 [ 553.797759][T23292] total_workingset_refault_anon 698 [ 553.804218][T23292] total_workingset_refault_file 0 [ 553.809387][T23292] total_swap 127909888 [ 553.820326][T23292] total_swapcached 77824 [ 553.825542][T23292] total_pgpgin 924260 [ 553.833975][T23292] total_pgpgout 849516 [ 553.838107][T23292] total_pgfault 268517 [ 553.845423][T23292] total_pgmajfault 2234 [ 553.849650][T23292] total_inactive_anon 131571712 [ 553.856176][T23292] total_active_anon 115859456 [ 553.861338][T23292] total_inactive_file 0 [ 553.866415][T23292] total_active_file 0 [ 553.871195][T23292] total_unevictable 66826240 [ 553.876355][T23292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23300,uid=0 [ 553.892476][T23292] Memory cgroup out of memory: Killed process 23300 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 553.976462][T23601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=23601 comm=syz.7.7643 [ 554.082513][ T45] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 554.204876][T23308] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 554.269020][T23308] CPU: 0 UID: 0 PID: 23308 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 554.269063][T23308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.269078][T23308] Call Trace: [ 554.269087][T23308] [ 554.269096][T23308] __dump_stack+0x21/0x30 [ 554.269129][T23308] dump_stack_lvl+0x10c/0x190 [ 554.269157][T23308] ? __cfi_dump_stack_lvl+0x10/0x10 [ 554.269184][T23308] ? ___ratelimit+0x3f7/0x5a0 [ 554.269210][T23308] dump_stack+0x19/0x20 [ 554.269234][T23308] dump_header+0xd7/0x490 [ 554.269266][T23308] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 554.269290][T23308] oom_kill_process+0x4c0/0x7e0 [ 554.269340][T23308] ? sched_clock_cpu+0x75/0x400 [ 554.269366][T23308] out_of_memory+0x7ee/0xbd0 [ 554.269386][T23308] ? __cfi_out_of_memory+0x10/0x10 [ 554.269405][T23308] ? mutex_lock_killable+0x92/0x1c0 [ 554.269432][T23308] ? __cfi_mutex_lock_killable+0x10/0x10 [ 554.269461][T23308] mem_cgroup_out_of_memory+0x279/0x350 [ 554.269490][T23308] ? drain_obj_stock+0xed0/0xed0 [ 554.269520][T23308] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 554.269551][T23308] try_charge_memcg+0x8f7/0xde0 [ 554.269577][T23308] ? __cfi_try_charge_memcg+0x10/0x10 [ 554.269603][T23308] ? __alloc_pages_noprof+0x30d/0x6c0 [ 554.269628][T23308] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 554.269654][T23308] ? __folio_batch_add_and_move+0x2ab/0x370 [ 554.269678][T23308] __mem_cgroup_charge+0xf6/0x410 [ 554.269720][T23308] ? __kasan_check_write+0x18/0x20 [ 554.269747][T23308] ? _raw_spin_lock+0x8c/0x120 [ 554.269782][T23308] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 554.269813][T23308] shmem_alloc_and_add_folio+0x86d/0x1050 [ 554.269852][T23308] ? put_swap_device+0x130/0x130 [ 554.269887][T23308] ? shmem_huge_global_enabled+0x2da/0x360 [ 554.269922][T23308] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 554.269952][T23308] ? __kasan_check_write+0x18/0x20 [ 554.269975][T23308] ? _raw_spin_lock+0x8c/0x120 [ 554.270005][T23308] shmem_get_folio_gfp+0x5f0/0x1380 [ 554.270035][T23308] ? shmem_get_folio+0xc0/0xc0 [ 554.270062][T23308] ? follow_page_pte+0xa5c/0xb90 [ 554.270083][T23308] ? inode_to_bdi+0x6d/0x100 [ 554.270104][T23308] shmem_write_begin+0xf4/0x270 [ 554.270135][T23308] generic_perform_write+0x330/0x960 [ 554.270160][T23308] ? __cfi_generic_perform_write+0x10/0x10 [ 554.270183][T23308] ? down_write+0xe9/0x2a0 [ 554.270208][T23308] ? file_update_time+0xa3/0x220 [ 554.270230][T23308] shmem_file_write_iter+0x105/0x130 [ 554.270251][T23308] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 554.270272][T23308] __kernel_write_iter+0x392/0x830 [ 554.270297][T23308] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 554.270319][T23308] ? __cfi___kernel_write_iter+0x10/0x10 [ 554.270343][T23308] ? get_dump_page+0x160/0x220 [ 554.270363][T23308] ? __asan_memset+0x39/0x50 [ 554.270385][T23308] ? iov_iter_bvec+0xc0/0x180 [ 554.270414][T23308] dump_user_range+0xb06/0xdf0 [ 554.270440][T23308] ? __cfi_dump_emit+0x10/0x10 [ 554.270465][T23308] ? __cfi_dump_user_range+0x10/0x10 [ 554.270491][T23308] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 554.270517][T23308] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 554.270544][T23308] elf_core_dump+0x2cd9/0x3810 [ 554.270576][T23308] ? __cfi_elf_core_dump+0x10/0x10 [ 554.270613][T23308] ? dump_interrupted+0xf0/0xf0 [ 554.270638][T23308] ? 0xffffffffff600000 [ 554.270655][T23308] do_coredump+0x1bf7/0x2bd0 [ 554.270682][T23308] ? __cfi_do_coredump+0x10/0x10 [ 554.270710][T23308] ? asm_exc_page_fault+0x2b/0x30 [ 554.270739][T23308] ? __kasan_slab_free+0x6a/0x80 [ 554.270767][T23308] ? kmem_cache_free+0x1c1/0x4c0 [ 554.270793][T23308] get_signal+0x11fd/0x14f0 [ 554.270818][T23308] arch_do_signal_or_restart+0x96/0x720 [ 554.270845][T23308] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 554.270875][T23308] irqentry_exit_to_user_mode+0x4e/0xb0 [ 554.270902][T23308] irqentry_exit+0x16/0x60 [ 554.270926][T23308] exc_page_fault+0x66/0xc0 [ 554.270950][T23308] asm_exc_page_fault+0x2b/0x30 [ 554.270970][T23308] RIP: 0033:0x7fd3f138e931 [ 554.270987][T23308] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 554.271005][T23308] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 554.271023][T23308] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 554.271039][T23308] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 554.271052][T23308] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 554.271065][T23308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 554.271078][T23308] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 554.271095][T23308] [ 554.271189][T23308] memory: usage 307200kB, limit 307200kB, failcnt 89538 [ 554.272465][ T45] usb 3-1: device descriptor read/64, error -71 [ 554.336382][T23308] memory+swap: usage 425816kB, limit 9007199254740988kB, failcnt 0 [ 554.652489][ T45] usb 3-1: device descriptor read/64, error -71 [ 554.654553][T23308] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 554.768162][T23308] Memory cgroup stats for /syz3: [ 554.768321][T23308] cache 309936128 [ 554.778294][T23308] rss 114688 [ 554.781537][T23308] rss_huge 0 [ 554.784007][T23610] rust_binder: Write failure EINVAL in pid:14 [ 554.785404][T23308] shmem 243109888 [ 554.796126][T23308] mapped_file 0 [ 554.799631][T23308] dirty 0 [ 554.803491][T23308] writeback 0 [ 554.806812][T23308] workingset_refault_anon 702 [ 554.811504][T23308] workingset_refault_file 0 [ 554.817225][T23308] swap 127930368 [ 554.820802][T23308] swapcached 45056 [ 554.825504][T23308] pgpgin 935081 [ 554.829004][T23308] pgpgout 861422 [ 554.833485][T23308] pgfault 268803 [ 554.837062][T23308] pgmajfault 2238 [ 554.844226][T23308] inactive_anon 193576960 [ 554.848787][T23308] active_anon 49676288 [ 554.860571][T23308] inactive_file 0 [ 554.867880][T23308] active_file 0 [ 554.871521][T23308] unevictable 66826240 [ 554.876703][T23308] hierarchical_memory_limit 314572800 [ 554.882251][T23308] hierarchical_memsw_limit 9223372036854771712 [ 554.889592][T23308] total_cache 309936128 [ 554.893815][T23308] total_rss 114688 [ 554.897622][T23308] total_rss_huge 0 [ 554.901402][T23308] total_shmem 243109888 [ 554.905678][T23308] total_mapped_file 0 [ 554.909671][T23308] total_dirty 0 [ 554.912501][ T45] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 554.914188][T23308] total_writeback 0 [ 554.924573][T23308] total_workingset_refault_anon 702 [ 554.929841][T23308] total_workingset_refault_file 0 [ 554.934931][T23308] total_swap 127930368 [ 554.939013][T23308] total_swapcached 45056 [ 554.943349][T23308] total_pgpgin 935081 [ 554.947342][T23308] total_pgpgout 861422 [ 554.951403][T23308] total_pgfault 268803 [ 554.955510][T23308] total_pgmajfault 2238 [ 554.959679][T23308] total_inactive_anon 193576960 [ 554.964621][T23308] total_active_anon 49676288 [ 554.969235][T23308] total_inactive_file 0 [ 554.973490][T23308] total_active_file 0 [ 554.977483][T23308] total_unevictable 66826240 [ 554.982346][T23308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23308,uid=0 [ 554.997607][T23308] Memory cgroup out of memory: Killed process 23308 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 555.052466][ T45] usb 3-1: device descriptor read/64, error -71 [ 555.173750][T23294] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 555.204499][T23294] CPU: 1 UID: 0 PID: 23294 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 555.204541][T23294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.204557][T23294] Call Trace: [ 555.204565][T23294] [ 555.204574][T23294] __dump_stack+0x21/0x30 [ 555.204606][T23294] dump_stack_lvl+0x10c/0x190 [ 555.204630][T23294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 555.204654][T23294] ? ___ratelimit+0x3f7/0x5a0 [ 555.204685][T23294] dump_stack+0x19/0x20 [ 555.204708][T23294] dump_header+0xd7/0x490 [ 555.204739][T23294] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 555.204763][T23294] oom_kill_process+0x4c0/0x7e0 [ 555.204784][T23294] ? sched_clock_cpu+0x75/0x400 [ 555.204810][T23294] out_of_memory+0x7ee/0xbd0 [ 555.204830][T23294] ? __cfi_out_of_memory+0x10/0x10 [ 555.204848][T23294] ? mutex_lock_killable+0x92/0x1c0 [ 555.204876][T23294] ? __cfi_mutex_lock_killable+0x10/0x10 [ 555.204903][T23294] mem_cgroup_out_of_memory+0x279/0x350 [ 555.204932][T23294] ? drain_obj_stock+0xed0/0xed0 [ 555.204961][T23294] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 555.204988][T23294] try_charge_memcg+0x8f7/0xde0 [ 555.205012][T23294] ? __cfi_try_charge_memcg+0x10/0x10 [ 555.205040][T23294] ? __alloc_pages_noprof+0x30d/0x6c0 [ 555.205062][T23294] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 555.205084][T23294] ? __folio_batch_add_and_move+0x2ab/0x370 [ 555.205107][T23294] __mem_cgroup_charge+0xf6/0x410 [ 555.205133][T23294] ? __kasan_check_write+0x18/0x20 [ 555.205160][T23294] ? _raw_spin_lock+0x8c/0x120 [ 555.205192][T23294] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 555.205223][T23294] shmem_alloc_and_add_folio+0x86d/0x1050 [ 555.205260][T23294] ? put_swap_device+0x130/0x130 [ 555.205294][T23294] ? shmem_huge_global_enabled+0x2da/0x360 [ 555.205327][T23294] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 555.205359][T23294] ? __kasan_check_write+0x18/0x20 [ 555.205387][T23294] ? _raw_spin_lock+0x8c/0x120 [ 555.205420][T23294] shmem_get_folio_gfp+0x5f0/0x1380 [ 555.205455][T23294] ? shmem_get_folio+0xc0/0xc0 [ 555.205486][T23294] ? follow_page_pte+0xa5c/0xb90 [ 555.205509][T23294] ? inode_to_bdi+0x6d/0x100 [ 555.205533][T23294] shmem_write_begin+0xf4/0x270 [ 555.205567][T23294] generic_perform_write+0x330/0x960 [ 555.205596][T23294] ? __cfi_generic_perform_write+0x10/0x10 [ 555.205620][T23294] ? down_write+0xe9/0x2a0 [ 555.205648][T23294] ? file_update_time+0xa3/0x220 [ 555.205676][T23294] shmem_file_write_iter+0x105/0x130 [ 555.205699][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 555.205724][T23294] __kernel_write_iter+0x392/0x830 [ 555.205753][T23294] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 555.205778][T23294] ? __cfi___kernel_write_iter+0x10/0x10 [ 555.205805][T23294] ? get_dump_page+0x160/0x220 [ 555.205827][T23294] ? __asan_memset+0x39/0x50 [ 555.205852][T23294] ? iov_iter_bvec+0xc0/0x180 [ 555.205885][T23294] dump_user_range+0xb06/0xdf0 [ 555.205915][T23294] ? __cfi_dump_emit+0x10/0x10 [ 555.205941][T23294] ? __cfi_dump_user_range+0x10/0x10 [ 555.205969][T23294] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 555.205997][T23294] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 555.206029][T23294] elf_core_dump+0x2cd9/0x3810 [ 555.206065][T23294] ? __cfi_elf_core_dump+0x10/0x10 [ 555.206107][T23294] ? dump_interrupted+0xf0/0xf0 [ 555.206135][T23294] ? 0xffffffffff600000 [ 555.206153][T23294] do_coredump+0x1bf7/0x2bd0 [ 555.206185][T23294] ? __cfi_do_coredump+0x10/0x10 [ 555.206211][T23294] ? asm_exc_page_fault+0x2b/0x30 [ 555.206243][T23294] ? __kasan_slab_free+0x6a/0x80 [ 555.206293][T23294] ? kmem_cache_free+0x1c1/0x4c0 [ 555.206322][T23294] get_signal+0x11fd/0x14f0 [ 555.206350][T23294] arch_do_signal_or_restart+0x96/0x720 [ 555.206380][T23294] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 555.206414][T23294] irqentry_exit_to_user_mode+0x4e/0xb0 [ 555.206444][T23294] irqentry_exit+0x16/0x60 [ 555.206472][T23294] exc_page_fault+0x66/0xc0 [ 555.206500][T23294] asm_exc_page_fault+0x2b/0x30 [ 555.206522][T23294] RIP: 0033:0x7fd3f138e931 [ 555.206542][T23294] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 555.206563][T23294] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 555.206584][T23294] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 555.206601][T23294] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 555.206616][T23294] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 555.206631][T23294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.206645][T23294] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 555.206670][T23294] [ 555.206764][T23294] memory: usage 306476kB, limit 307200kB, failcnt 91599 [ 555.675782][T23294] memory+swap: usage 401624kB, limit 9007199254740988kB, failcnt 0 [ 555.691290][T23294] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 555.704660][T23294] Memory cgroup stats for /syz3: [ 555.704815][T23294] cache 296546304 [ 555.714361][T23294] rss 147456 [ 555.726156][T23294] rss_huge 0 [ 555.729421][T23294] shmem 229720064 [ 555.742479][T23294] mapped_file 0 [ 555.745994][T23294] dirty 0 [ 555.748993][T23294] writeback 0 [ 555.752296][T23294] workingset_refault_anon 702 [ 555.768784][T23294] workingset_refault_file 0 [ 555.774122][T23294] swap 114151424 [ 555.782445][T23294] swapcached 434176 [ 555.786298][T23294] pgpgin 937208 [ 555.789771][T23294] pgpgout 866715 [ 555.797655][T23294] pgfault 268837 [ 555.801250][T23294] pgmajfault 2238 [ 555.806290][T23294] inactive_anon 120578048 [ 555.810667][T23294] active_anon 109707264 [ 555.816119][T23294] inactive_file 0 [ 555.819790][T23294] active_file 0 [ 555.823379][ T45] usb 3-1: device descriptor read/64, error -71 [ 555.837620][T23294] unevictable 66826240 [ 555.841749][T23294] hierarchical_memory_limit 314572800 [ 555.849780][T23294] hierarchical_memsw_limit 9223372036854771712 [ 555.856977][T23294] total_cache 296546304 [ 555.861169][T23294] total_rss 147456 [ 555.866143][T23294] total_rss_huge 0 [ 555.869894][T23294] total_shmem 229720064 [ 555.874097][T23294] total_mapped_file 0 [ 555.878087][T23294] total_dirty 0 [ 555.881538][T23294] total_writeback 0 [ 555.885394][T23294] total_workingset_refault_anon 702 [ 555.890603][T23294] total_workingset_refault_file 0 [ 555.895666][T23294] total_swap 114151424 [ 555.899744][T23294] total_swapcached 434176 [ 555.904106][T23294] total_pgpgin 937208 [ 555.908115][T23294] total_pgpgout 866715 [ 555.912204][T23294] total_pgfault 268837 [ 555.916327][T23294] total_pgmajfault 2238 [ 555.920551][T23294] total_inactive_anon 120578048 [ 555.925447][T23294] total_active_anon 109707264 [ 555.930138][T23294] total_inactive_file 0 [ 555.934916][ T45] usb usb3-port1: attempt power cycle [ 555.936044][T23294] total_active_file 0 [ 555.944411][T23294] total_unevictable 66826240 [ 555.949066][T23294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23312,uid=0 [ 555.964249][T23294] Memory cgroup out of memory: Killed process 23312 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 556.235491][ T814] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 556.282447][ T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 556.329425][ T45] usb 3-1: device descriptor read/8, error -71 [ 556.356277][T23292] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 556.366482][T23292] CPU: 0 UID: 0 PID: 23292 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 556.366517][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.366531][T23292] Call Trace: [ 556.366540][T23292] [ 556.366558][T23292] __dump_stack+0x21/0x30 [ 556.366590][T23292] dump_stack_lvl+0x10c/0x190 [ 556.366616][T23292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 556.366641][T23292] ? ___ratelimit+0x3f7/0x5a0 [ 556.366665][T23292] dump_stack+0x19/0x20 [ 556.366689][T23292] dump_header+0xd7/0x490 [ 556.366720][T23292] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 556.366745][T23292] oom_kill_process+0x4c0/0x7e0 [ 556.366764][T23292] ? sched_clock_cpu+0x75/0x400 [ 556.366790][T23292] out_of_memory+0x7ee/0xbd0 [ 556.366810][T23292] ? __cfi_out_of_memory+0x10/0x10 [ 556.366830][T23292] ? mutex_lock_killable+0x92/0x1c0 [ 556.366856][T23292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 556.366885][T23292] mem_cgroup_out_of_memory+0x279/0x350 [ 556.366915][T23292] ? drain_obj_stock+0xed0/0xed0 [ 556.366945][T23292] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 556.366967][T23292] try_charge_memcg+0x8f7/0xde0 [ 556.366985][T23292] ? __cfi_try_charge_memcg+0x10/0x10 [ 556.367001][T23292] ? __alloc_pages_noprof+0x30d/0x6c0 [ 556.367019][T23292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 556.367035][T23292] ? __folio_batch_add_and_move+0x2ab/0x370 [ 556.367051][T23292] __mem_cgroup_charge+0xf6/0x410 [ 556.367070][T23292] ? __kasan_check_write+0x18/0x20 [ 556.367088][T23292] ? _raw_spin_lock+0x8c/0x120 [ 556.367111][T23292] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 556.367132][T23292] shmem_alloc_and_add_folio+0x86d/0x1050 [ 556.367158][T23292] ? put_swap_device+0x130/0x130 [ 556.367182][T23292] ? shmem_huge_global_enabled+0x2da/0x360 [ 556.367205][T23292] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 556.367227][T23292] ? __kasan_check_write+0x18/0x20 [ 556.367246][T23292] ? _raw_spin_lock+0x8c/0x120 [ 556.367274][T23292] shmem_get_folio_gfp+0x5f0/0x1380 [ 556.367309][T23292] ? shmem_get_folio+0xc0/0xc0 [ 556.367339][T23292] ? follow_page_pte+0xa5c/0xb90 [ 556.367362][T23292] ? inode_to_bdi+0x6d/0x100 [ 556.367384][T23292] shmem_write_begin+0xf4/0x270 [ 556.367409][T23292] generic_perform_write+0x330/0x960 [ 556.367430][T23292] ? __cfi_generic_perform_write+0x10/0x10 [ 556.367449][T23292] ? down_write+0xe9/0x2a0 [ 556.367470][T23292] ? file_update_time+0xa3/0x220 [ 556.367487][T23292] shmem_file_write_iter+0x105/0x130 [ 556.367504][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 556.367521][T23292] __kernel_write_iter+0x392/0x830 [ 556.367541][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 556.367565][T23292] ? __cfi___kernel_write_iter+0x10/0x10 [ 556.367585][T23292] ? get_dump_page+0x160/0x220 [ 556.367600][T23292] ? __asan_memset+0x39/0x50 [ 556.367619][T23292] ? iov_iter_bvec+0xc0/0x180 [ 556.367642][T23292] dump_user_range+0xb06/0xdf0 [ 556.367664][T23292] ? __cfi_dump_emit+0x10/0x10 [ 556.367683][T23292] ? __cfi_dump_user_range+0x10/0x10 [ 556.367703][T23292] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 556.367725][T23292] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 556.367747][T23292] elf_core_dump+0x2cd9/0x3810 [ 556.367775][T23292] ? __cfi_elf_core_dump+0x10/0x10 [ 556.367804][T23292] ? dump_interrupted+0xf0/0xf0 [ 556.367824][T23292] ? 0xffffffffff600000 [ 556.367837][T23292] do_coredump+0x1bf7/0x2bd0 [ 556.367859][T23292] ? __cfi_do_coredump+0x10/0x10 [ 556.367878][T23292] ? asm_exc_page_fault+0x2b/0x30 [ 556.367901][T23292] ? __kasan_slab_free+0x6a/0x80 [ 556.367924][T23292] ? kmem_cache_free+0x1c1/0x4c0 [ 556.367945][T23292] get_signal+0x11fd/0x14f0 [ 556.367965][T23292] arch_do_signal_or_restart+0x96/0x720 [ 556.367987][T23292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 556.368012][T23292] irqentry_exit_to_user_mode+0x4e/0xb0 [ 556.368033][T23292] irqentry_exit+0x16/0x60 [ 556.368053][T23292] exc_page_fault+0x66/0xc0 [ 556.368072][T23292] asm_exc_page_fault+0x2b/0x30 [ 556.368089][T23292] RIP: 0033:0x7fd3f138e931 [ 556.368102][T23292] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 556.368116][T23292] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 556.368131][T23292] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 556.368143][T23292] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 556.368153][T23292] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 556.368164][T23292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 556.368174][T23292] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 556.368188][T23292] [ 556.368195][T23292] memory: usage 307200kB, limit 307200kB, failcnt 95211 [ 556.495947][ T45] usb 3-1: device descriptor read/8, error -71 [ 556.500099][T23292] memory+swap: usage 431992kB, limit 9007199254740988kB, failcnt 0 [ 556.505016][ T36] kauditd_printk_skb: 313 callbacks suppressed [ 556.505035][ T36] audit: type=1400 audit(2000000654.854:23156): avc: denied { ioctl } for pid=23599 comm="syz.2.7642" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.510117][T23292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 556.530668][ T36] audit: type=1400 audit(2000000654.884:23157): avc: denied { read write } for pid=23526 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.531556][T23292] Memory cgroup stats for [ 556.547731][ T36] audit: type=1400 audit(2000000654.884:23158): avc: denied { read write open } for pid=23526 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.552291][ T814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.566995][ T36] audit: type=1400 audit(2000000654.884:23159): avc: denied { ioctl } for pid=23526 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.568836][T23292] /syz3 [ 556.588246][ T36] audit: type=1400 audit(2000000654.904:23160): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.594443][T23292] : [ 556.606869][ T36] audit: type=1400 audit(2000000654.904:23161): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.609602][ T814] usb 4-1: not running at top speed; connect to a high speed hub [ 556.624125][ T36] audit: type=1400 audit(2000000654.904:23162): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.637549][T23292] cache 314208256 [ 556.642545][ T36] audit: type=1400 audit(2000000654.904:23163): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.675558][T23292] rss 172032 [ 556.680034][ T36] audit: type=1400 audit(2000000654.904:23164): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.711847][T23292] rss_huge 0 [ 556.711935][ T814] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 556.793095][ T36] audit: type=1400 audit(2000000654.904:23165): avc: denied { ioctl } for pid=23605 comm="syz.3.7645" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.799951][ T45] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 556.881100][T23292] shmem 247382016 [ 556.913946][ T45] usb 3-1: device descriptor read/8, error -71 [ 556.956526][ T814] usb 4-1: config 0 has no interface number 0 [ 556.973797][T23292] mapped_file 0 [ 557.072279][ T814] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 557.135000][ T45] usb 3-1: device descriptor read/8, error -71 [ 557.180964][ T814] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 557.190510][T23292] dirty 0 [ 557.218919][T23292] writeback 0 [ 557.222258][T23292] workingset_refault_anon 703 [ 557.227859][T23292] workingset_refault_file 0 [ 557.233480][T23292] swap 127787008 [ 557.254741][T23292] swapcached 200704 [ 557.258664][T23292] pgpgin 953064 [ 557.299743][ T814] usb 4-1: config 0 interface 88 has no altsetting 0 [ 557.302749][T23292] pgpgout 878308 [ 557.320199][ T814] usb 4-1: string descriptor 0 read error: -71 [ 557.327135][T23292] pgfault 269029 [ 557.333270][ T45] usb usb3-port1: unable to enumerate USB device [ 557.340961][ T814] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 557.350423][ T814] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 557.351620][T23292] pgmajfault 2239 [ 557.378889][ T814] usb 4-1: config 0 descriptor?? [ 557.387300][ T814] usb 4-1: can't set config #0, error -71 [ 557.405853][ T814] usb 4-1: USB disconnect, device number 37 [ 557.418438][T23292] inactive_anon 117432320 [ 557.442503][T23292] active_anon 130314240 [ 557.469129][T23292] inactive_file 0 [ 557.473459][T23292] active_file 0 [ 557.476951][T23292] unevictable 66826240 [ 557.490796][T23292] hierarchical_memory_limit 314572800 [ 557.502447][T23292] hierarchical_memsw_limit 9223372036854771712 [ 557.516590][T23292] total_cache 314208256 [ 557.530954][T23292] total_rss 172032 [ 557.536044][T23292] total_rss_huge 0 [ 557.539811][T23292] total_shmem 247382016 [ 557.548084][T23292] total_mapped_file 0 [ 557.552116][T23292] total_dirty 0 [ 557.556173][T23663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 557.556499][T23292] total_writeback 0 [ 557.571185][T23292] total_workingset_refault_anon 703 [ 557.576524][T23292] total_workingset_refault_file 0 [ 557.581853][T23292] total_swap 127787008 [ 557.588190][T23292] total_swapcached 200704 [ 557.596792][T23292] total_pgpgin 953064 [ 557.600866][T23292] total_pgpgout 878308 [ 557.608738][T23292] total_pgfault 269029 [ 557.621250][T23292] total_pgmajfault 2239 [ 557.627832][T23292] total_inactive_anon 117432320 [ 557.642433][T23292] total_active_anon 130314240 [ 557.652470][T23292] total_inactive_file 0 [ 557.656683][T23292] total_active_file 0 [ 557.662055][T23292] total_unevictable 66826240 [ 557.666749][T23292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23299,uid=0 [ 557.681776][T23292] Memory cgroup out of memory: Killed process 23299 (syz.3.7560) total-vm:90092kB, anon-rss:940kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 557.685764][T23666] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 557.739777][T23292] syz.3.7560 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 557.793422][T23292] CPU: 0 UID: 0 PID: 23292 Comm: syz.3.7560 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 557.793464][T23292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.793479][T23292] Call Trace: [ 557.793488][T23292] [ 557.793498][T23292] __dump_stack+0x21/0x30 [ 557.793531][T23292] dump_stack_lvl+0x10c/0x190 [ 557.793558][T23292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 557.793584][T23292] ? ___ratelimit+0x3f7/0x5a0 [ 557.793610][T23292] dump_stack+0x19/0x20 [ 557.793635][T23292] dump_header+0xd7/0x490 [ 557.793667][T23292] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 557.793692][T23292] oom_kill_process+0x4c0/0x7e0 [ 557.793714][T23292] ? sched_clock_cpu+0x75/0x400 [ 557.793740][T23292] out_of_memory+0x7ee/0xbd0 [ 557.793762][T23292] ? __cfi_out_of_memory+0x10/0x10 [ 557.793781][T23292] ? mutex_lock_killable+0x104/0x1c0 [ 557.793809][T23292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 557.793840][T23292] mem_cgroup_out_of_memory+0x279/0x350 [ 557.793870][T23292] ? drain_obj_stock+0xed0/0xed0 [ 557.793901][T23292] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 557.793932][T23292] try_charge_memcg+0x8f7/0xde0 [ 557.793957][T23292] ? __cfi_try_charge_memcg+0x10/0x10 [ 557.793982][T23292] ? __alloc_pages_noprof+0x30d/0x6c0 [ 557.794007][T23292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 557.794030][T23292] ? __folio_batch_add_and_move+0x2ab/0x370 [ 557.794054][T23292] __mem_cgroup_charge+0xf6/0x410 [ 557.794081][T23292] ? __kasan_check_write+0x18/0x20 [ 557.794108][T23292] ? _raw_spin_lock+0x8c/0x120 [ 557.794141][T23292] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 557.794177][T23292] shmem_alloc_and_add_folio+0x86d/0x1050 [ 557.794215][T23292] ? put_swap_device+0x130/0x130 [ 557.794249][T23292] ? shmem_huge_global_enabled+0x2da/0x360 [ 557.794282][T23292] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 557.794315][T23292] ? __kasan_check_write+0x18/0x20 [ 557.794341][T23292] ? _raw_spin_lock+0x8c/0x120 [ 557.794374][T23292] shmem_get_folio_gfp+0x5f0/0x1380 [ 557.794408][T23292] ? shmem_get_folio+0xc0/0xc0 [ 557.794439][T23292] ? follow_page_pte+0xa5c/0xb90 [ 557.794467][T23292] ? inode_to_bdi+0x6d/0x100 [ 557.794492][T23292] shmem_write_begin+0xf4/0x270 [ 557.794527][T23292] generic_perform_write+0x330/0x960 [ 557.794556][T23292] ? __cfi_generic_perform_write+0x10/0x10 [ 557.794583][T23292] ? down_write+0xe9/0x2a0 [ 557.794612][T23292] ? file_update_time+0xa3/0x220 [ 557.794637][T23292] shmem_file_write_iter+0x105/0x130 [ 557.794661][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 557.794686][T23292] __kernel_write_iter+0x392/0x830 [ 557.794714][T23292] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 557.794739][T23292] ? __cfi___kernel_write_iter+0x10/0x10 [ 557.794767][T23292] ? get_dump_page+0x160/0x220 [ 557.794789][T23292] ? __asan_memset+0x39/0x50 [ 557.794815][T23292] ? iov_iter_bvec+0xc0/0x180 [ 557.794848][T23292] dump_user_range+0xb06/0xdf0 [ 557.794878][T23292] ? __cfi_dump_emit+0x10/0x10 [ 557.794905][T23292] ? __cfi_dump_user_range+0x10/0x10 [ 557.794933][T23292] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 557.794963][T23292] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 557.794993][T23292] elf_core_dump+0x2cd9/0x3810 [ 557.795031][T23292] ? __cfi_elf_core_dump+0x10/0x10 [ 557.795072][T23292] ? dump_interrupted+0xf0/0xf0 [ 557.795100][T23292] ? 0xffffffffff600000 [ 557.795119][T23292] do_coredump+0x1bf7/0x2bd0 [ 557.795150][T23292] ? __cfi_do_coredump+0x10/0x10 [ 557.795181][T23292] ? asm_exc_page_fault+0x2b/0x30 [ 557.795215][T23292] ? __kasan_slab_free+0x6a/0x80 [ 557.795246][T23292] ? kmem_cache_free+0x1c1/0x4c0 [ 557.795276][T23292] get_signal+0x11fd/0x14f0 [ 557.795304][T23292] arch_do_signal_or_restart+0x96/0x720 [ 557.795340][T23292] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 557.795374][T23292] irqentry_exit_to_user_mode+0x4e/0xb0 [ 557.795405][T23292] irqentry_exit+0x16/0x60 [ 557.795433][T23292] exc_page_fault+0x66/0xc0 [ 557.795461][T23292] asm_exc_page_fault+0x2b/0x30 [ 557.795484][T23292] RIP: 0033:0x7fd3f138e931 [ 557.795503][T23292] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 557.795523][T23292] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 557.795544][T23292] RAX: 0000000000000000 RBX: 00007fd3f15b6160 RCX: 00007fd3f138e929 [ 557.795561][T23292] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 557.795575][T23292] RBP: 00007fd3f1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 557.795590][T23292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.795604][T23292] R13: 0000000000000000 R14: 00007fd3f15b6160 R15: 00007ffd10e29158 [ 557.795623][T23292] [ 557.799992][T23292] memory: usage 306612kB, limit 307200kB, failcnt 95613 [ 558.277735][T23292] memory+swap: usage 396972kB, limit 9007199254740988kB, failcnt 0 [ 558.289009][T23292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 558.322458][T23292] Memory cgroup stats for /syz3: [ 558.322620][T23292] cache 288325632 [ 558.331269][T23292] rss 155648 [ 558.365556][T23292] rss_huge 0 [ 558.368831][T23292] shmem 221499392 [ 558.393487][T23292] mapped_file 0 [ 558.397017][T23292] dirty 0 [ 558.399976][T23292] writeback 188416 [ 558.424315][T23292] workingset_refault_anon 753 [ 558.462461][T23292] workingset_refault_file 0 [ 558.467029][T23292] swap 106573824 [ 558.470596][T23292] swapcached 438272 [ 558.511234][T23292] pgpgin 958501 [ 558.519810][T23292] pgpgout 889971 [ 558.534579][T23292] pgfault 269355 [ 558.550064][T23292] pgmajfault 2270 [ 558.563730][T23292] inactive_anon 85647360 [ 558.568758][T23292] active_anon 136335360 [ 558.590527][T23678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 558.622819][T23292] inactive_file 0 [ 558.649905][T23292] active_file 0 [ 558.672440][T23292] unevictable 66826240 [ 558.676619][T23292] hierarchical_memory_limit 314572800 [ 558.682016][T23292] hierarchical_memsw_limit 9223372036854771712 [ 558.716745][T23292] total_cache 288325632 [ 558.720965][T23292] total_rss 155648 [ 558.752448][T23292] total_rss_huge 0 [ 558.762442][T23292] total_shmem 221499392 [ 558.766664][T23292] total_mapped_file 0 [ 558.770665][T23292] total_dirty 0 [ 558.790079][T23292] total_writeback 188416 [ 558.795749][T23292] total_workingset_refault_anon 753 [ 558.800989][T23292] total_workingset_refault_file 0 [ 558.832515][T23292] total_swap 106573824 [ 558.836654][T23292] total_swapcached 438272 [ 558.840997][T23292] total_pgpgin 958501 [ 558.847360][T23681] binder: Bad value for 'max' [ 558.869047][T23292] total_pgpgout 889971 [ 558.896768][T23292] total_pgfault 269355 [ 558.900901][T23292] total_pgmajfault 2270 [ 558.910202][T23292] total_inactive_anon 85647360 [ 558.917686][T23292] total_active_anon 136335360 [ 558.933650][T23292] total_inactive_file 0 [ 558.940564][T23292] total_active_file 0 [ 558.952438][T23292] total_unevictable 66826240 [ 558.957137][T23292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7560,pid=23294,uid=0 [ 558.984460][T23292] Memory cgroup out of memory: Killed process 23294 (syz.3.7560) total-vm:90092kB, anon-rss:1068kB, file-rss:60160kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 559.077265][T23657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 559.172462][ T31] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 559.219849][T23687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.247422][T23687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.342493][ T383] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 559.372432][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 559.512462][ T31] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 559.532436][ T383] usb 4-1: Using ep0 maxpacket: 16 [ 559.540444][ T383] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 559.553936][ T383] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.564662][ T383] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.575354][ T383] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 559.587249][ T383] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 559.613529][ T383] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.623041][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 559.631751][ T383] usb 4-1: SerialNumber: syz [ 559.640826][T23657] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 559.651690][ T383] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 559.660817][ T383] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 559.692465][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 559.703744][ T31] usb usb3-port1: attempt power cycle [ 559.853377][T23657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 559.931164][T23657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385 [ 560.018017][ T735] usb 4-1: USB disconnect, device number 38 [ 560.052492][ T31] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 560.073392][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 560.202537][ T31] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 560.223295][ T31] usb 3-1: Invalid ep0 maxpacket: 32 [ 560.228800][ T31] usb usb3-port1: unable to enumerate USB device [ 560.555243][T23692] rust_binder: Error while translating object. [ 560.555288][T23692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 560.571756][T23692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 561.082600][ T383] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 561.232465][ T383] usb 4-1: device descriptor read/64, error -71 [ 561.409680][T23702] rust_binder: Error while translating object. [ 561.409713][T23702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 561.416056][T23702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 561.473652][ T383] usb 4-1: device descriptor read/64, error -71 [ 561.592957][ T36] kauditd_printk_skb: 376 callbacks suppressed [ 561.592977][ T36] audit: type=1400 audit(2000000659.954:23542): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.624275][ T36] audit: type=1400 audit(2000000659.954:23543): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.662940][ T36] audit: type=1400 audit(2000000660.024:23544): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.722505][ T383] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 561.730699][ T36] audit: type=1400 audit(2000000660.084:23545): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.755838][ T36] audit: type=1400 audit(2000000660.084:23546): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.781071][ T36] audit: type=1400 audit(2000000660.084:23547): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.806278][ T36] audit: type=1400 audit(2000000660.094:23548): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.831772][ T36] audit: type=1400 audit(2000000660.094:23549): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.857225][ T36] audit: type=1400 audit(2000000660.094:23550): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.888008][ T383] usb 4-1: device descriptor read/64, error -71 [ 561.888209][ T36] audit: type=1400 audit(2000000660.094:23551): avc: denied { ioctl } for pid=23699 comm="syz.3.7675" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 562.132540][ T383] usb 4-1: device descriptor read/64, error -71 [ 562.242566][ T383] usb usb4-port1: attempt power cycle [ 562.402293][T23713] sit0: entered promiscuous mode [ 562.409035][T23713] netlink: 'syz.7.7681': attribute type 1 has an invalid length. [ 562.417505][T23713] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7681'. [ 562.582475][ T383] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 562.625327][ T383] usb 4-1: device descriptor read/8, error -71 [ 562.754899][ T383] usb 4-1: device descriptor read/8, error -71 [ 562.842563][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 562.992480][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 562.992540][ T383] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 563.001767][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 563.014324][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.025016][ T45] usb 3-1: config 0 descriptor?? [ 563.025388][ T383] usb 4-1: device descriptor read/8, error -71 [ 563.165981][ T383] usb 4-1: device descriptor read/8, error -71 [ 563.283083][ T383] usb usb4-port1: unable to enumerate USB device [ 564.257593][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.277060][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.313066][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.333736][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.344297][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 564.354579][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 564.372486][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 564.381127][ T45] usb 3-1: USB disconnect, device number 51 [ 564.567512][T23740] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 564.574728][T23740] rust_binder: Write failure EINVAL in pid:175 [ 564.592446][ T383] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 564.752441][ T383] usb 4-1: Using ep0 maxpacket: 8 [ 564.779829][ T383] usb 4-1: config 0 has an invalid interface number: 24 but max is 3 [ 564.798245][ T383] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 564.809251][T23748] input: syz0 as /devices/virtual/input/input27 [ 564.818462][ T383] usb 4-1: config 0 has an invalid interface number: 16 but max is 3 [ 564.832069][ T383] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 564.861241][ T383] usb 4-1: config 0 has an invalid interface number: 103 but max is 3 [ 564.886834][ T383] usb 4-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 564.917537][ T383] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 564.948194][ T383] usb 4-1: config 0 has no interface number 0 [ 564.964540][ T383] usb 4-1: config 0 has no interface number 1 [ 564.970696][ T383] usb 4-1: config 0 has no interface number 2 [ 565.006961][ T383] usb 4-1: config 0 interface 24 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 1023 [ 565.017170][ T383] usb 4-1: config 0 interface 16 altsetting 215 has an invalid descriptor for endpoint zero, skipping [ 565.028271][ T383] usb 4-1: config 0 interface 16 altsetting 215 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 565.061486][ T383] usb 4-1: config 0 interface 16 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 565.080076][ T383] usb 4-1: config 0 interface 16 altsetting 215 has an invalid descriptor for endpoint zero, skipping [ 565.104299][ T383] usb 4-1: config 0 interface 16 altsetting 215 has a duplicate endpoint with address 0xE, skipping [ 565.146526][ T383] usb 4-1: config 0 interface 16 altsetting 215 endpoint 0x8 has an invalid bInterval 127, changing to 10 [ 565.182993][ T383] usb 4-1: config 0 interface 16 altsetting 215 has a duplicate endpoint with address 0x8, skipping [ 565.203617][ T383] usb 4-1: config 0 interface 16 altsetting 215 has a duplicate endpoint with address 0x2, skipping [ 565.218973][ T383] usb 4-1: config 0 interface 16 altsetting 215 has a duplicate endpoint with address 0x4, skipping [ 565.231821][ T383] usb 4-1: config 0 interface 16 altsetting 215 has a duplicate endpoint with address 0x3, skipping [ 565.243647][ T383] usb 4-1: config 0 interface 24 has no altsetting 0 [ 565.253278][ T383] usb 4-1: config 0 interface 16 has no altsetting 0 [ 565.260029][ T383] usb 4-1: config 0 interface 103 has no altsetting 0 [ 565.289865][ T383] usb 4-1: New USB device found, idVendor=04ca, idProduct=3014, bcdDevice=1b.af [ 565.310946][ T383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.342450][ T383] usb 4-1: Product: syz [ 565.351563][ T383] usb 4-1: Manufacturer: syz [ 565.369739][ T383] usb 4-1: SerialNumber: syz [ 565.385767][ T383] usb 4-1: config 0 descriptor?? [ 565.415744][T23736] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 565.443095][T23762] rust_binder: Write failure EFAULT in pid:190 [ 565.543099][T23764] tmpfs: Unsupported parameter 'mpol' [ 565.771973][T23773] SELinux: security_context_str_to_sid () failed with errno=-22 [ 566.509138][T23790] can0: slcan on ttyS3. [ 566.510666][T23792] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 566.590039][T23790] can0 (unregistered): slcan off ttyS3. [ 566.628822][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 566.628841][ T36] audit: type=1400 audit(2000000664.984:24050): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 566.685151][T23794] option changes via remount are deprecated (pid=23793 comm=syz.2.7710) [ 566.702550][ T36] audit: type=1400 audit(2000000664.984:24051): avc: denied { create } for pid=23793 comm="syz.2.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 566.733331][T23794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 566.777291][ T36] audit: type=1400 audit(2000000664.994:24052): avc: denied { write } for pid=23793 comm="syz.2.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 566.856787][ T36] audit: type=1400 audit(2000000664.994:24053): avc: denied { nlmsg_write } for pid=23793 comm="syz.2.7710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 566.906648][ T36] audit: type=1400 audit(2000000664.994:24054): avc: denied { read } for pid=23793 comm="syz.2.7710" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 566.931198][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7712'. [ 566.946487][ T36] audit: type=1400 audit(2000000664.994:24055): avc: denied { read open } for pid=23793 comm="syz.2.7710" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 566.988666][ T36] audit: type=1400 audit(2000000664.994:24056): avc: denied { mounton } for pid=23793 comm="syz.2.7710" path="/273/bus" dev="tmpfs" ino=1489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 567.015130][ T36] audit: type=1400 audit(2000000665.004:24057): avc: denied { unlink } for pid=23793 comm="syz.2.7710" name="#40" dev="tmpfs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 567.110904][ T36] audit: type=1400 audit(2000000665.014:24058): avc: denied { mount } for pid=23793 comm="syz.2.7710" name="/" dev="overlay" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 567.178626][ T36] audit: type=1400 audit(2000000665.024:24059): avc: denied { read } for pid=23793 comm="syz.2.7710" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 567.356264][T23801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 567.390194][ T383] usb 4-1: USB disconnect, device number 43 [ 567.513983][T23819] rust_binder: Write failure EFAULT in pid:98 [ 567.607081][T23823] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 568.277982][T23854] /dev/rnullb0: Can't open blockdev [ 568.572491][T23863] 9pnet_fd: Insufficient options for proto=fd [ 568.819565][T23869] rust_binder: Write failure EINVAL in pid:115 [ 568.821423][T23869] rust_binder: Read failure Err(EAGAIN) in pid:115 [ 569.422809][T23895] rust_binder: Error in use_page_slow: ESRCH [ 569.422831][T23895] rust_binder: use_range failure ESRCH [ 569.428873][T23895] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 569.456285][T23895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 569.456326][T23895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 570.942026][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 570.977512][T23922] binder: Bad value for 'defcontext' [ 571.002481][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.112109][T23926] fido_id[23926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 571.229855][T23944] can0: slcan on ttyS3. [ 571.273205][T23944] can0 (unregistered): slcan off ttyS3. [ 571.582475][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 571.653105][ T36] kauditd_printk_skb: 21903 callbacks suppressed [ 571.653122][ T36] audit: type=1400 audit(2000000670.014:45954): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.732450][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 571.738458][ T36] audit: type=1400 audit(2000000670.094:45955): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.745443][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 571.765147][ T36] audit: type=1400 audit(2000000670.094:45956): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.797233][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 571.816303][ T36] audit: type=1400 audit(2000000670.104:45957): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.833756][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 571.872281][ T36] audit: type=1400 audit(2000000670.104:45958): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.879046][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 571.917038][ T36] audit: type=1400 audit(2000000670.104:45959): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.948908][T23526] audit: audit_backlog=66 > audit_backlog_limit=64 [ 571.957827][ T36] audit: type=1400 audit(2000000670.144:45960): avc: denied { ioctl } for pid=23947 comm="syz.3.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 571.980594][T23526] audit: audit_lost=29 audit_rate_limit=0 audit_backlog_limit=64 [ 571.996563][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.008316][T23526] audit: backlog limit exceeded [ 572.016069][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 572.062435][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 572.091439][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.109810][ T10] usb 4-1: config 0 descriptor?? [ 572.343805][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 572.591067][ T10] usb 4-1: USB disconnect, device number 44 [ 572.624933][ T10] usblp0: removed [ 572.856948][T23981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 573.351555][T23997] rust_binder: Write failure EINVAL in pid:456 [ 574.175954][T24019] netlink: 412 bytes leftover after parsing attributes in process `syz.7.7783'. [ 574.239387][T24018] netlink: 412 bytes leftover after parsing attributes in process `syz.7.7783'. [ 574.501406][T11834] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 574.538314][T11834] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.829676][T24037] fido_id[24037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 575.164134][T24068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=24068 comm=syz.2.7796 [ 575.288822][T24075] tmpfs: Bad value for 'nr_inodes' [ 575.304599][T24073] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 575.304627][T24073] rust_binder: Error while translating object. [ 575.327484][T24073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 575.343868][T24073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:216 [ 575.396739][T24077] rust_binder: Error while translating object. [ 575.407169][T24077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 575.414924][T24077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479 [ 575.518922][T24083] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 575.668159][T24092] can0: slcan on ttyS3. [ 575.702530][T24092] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 575.725209][T24092] overlayfs: missing 'lowerdir' [ 575.742708][T11834] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 575.792768][T24098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 575.796313][T24098] rust_binder: Error while translating object. [ 575.801958][T24092] can0 (unregistered): slcan off ttyS3. [ 575.827151][T24098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 575.827190][T24098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 575.922551][T11834] usb 4-1: Using ep0 maxpacket: 32 [ 575.982585][T11834] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 575.993013][T24109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 575.993050][T24109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 575.997976][T11834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 55, changing to 7 [ 576.088723][T24114] rust_binder: Write failure EFAULT in pid:232 [ 576.102442][T11834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8496, setting to 1024 [ 576.113368][T24114] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 576.163819][T11834] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 576.180859][T24118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 576.180894][T24118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:232 [ 576.193231][T24116] rust_binder: Write failure EINVAL in pid:165 [ 576.203132][T11834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.265996][T11834] usb 4-1: Product: syz [ 576.280429][T11834] usb 4-1: Manufacturer: syz [ 576.285739][T11834] usb 4-1: SerialNumber: syz [ 576.302000][T11834] usb 4-1: config 0 descriptor?? [ 576.327634][T11834] hub 4-1:0.0: bad descriptor, ignoring hub [ 576.342428][T11834] hub 4-1:0.0: probe with driver hub failed with error -5 [ 576.405845][T24130] fuse: Unknown parameter 'fn0x0000000000000007' [ 576.696539][ T36] kauditd_printk_skb: 25365 callbacks suppressed [ 576.696560][ T36] audit: type=1400 audit(2000000675.054:71326): avc: denied { setopt } for pid=24141 comm="syz.7.7817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 576.755488][ T36] audit: type=1400 audit(2000000675.084:71327): avc: denied { read write } for pid=24141 comm="syz.7.7817" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 576.822476][ T36] audit: type=1400 audit(2000000675.084:71328): avc: denied { read write open } for pid=24141 comm="syz.7.7817" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 576.882491][ T36] audit: type=1400 audit(2000000675.084:71329): avc: denied { ioctl } for pid=24141 comm="syz.7.7817" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xae92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 576.942083][T24149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 576.953758][T24149] audit: audit_lost=30 audit_rate_limit=0 audit_backlog_limit=64 [ 576.961701][T24149] audit: backlog limit exceeded [ 576.968522][T24149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 576.976593][T24149] audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 [ 576.982892][ T36] audit: type=1400 audit(2000000675.084:71330): avc: denied { ioctl } for pid=24141 comm="syz.7.7817" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 577.162923][T11834] usb 4-1: USB disconnect, device number 45 [ 578.219849][T24198] tmpfs: Unknown parameter 'indo64' [ 578.708310][T24225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 578.715797][T24225] rust_binder: Error while translating object. [ 578.725220][T24225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 578.731423][T24225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 578.752498][T24225] 9pnet_fd: Insufficient options for proto=fd [ 579.122559][ T45] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 579.282446][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 579.315845][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 579.340743][ T45] usb 4-1: config 179 has no interface number 0 [ 579.360580][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 579.387030][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 579.405587][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 579.418854][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 579.431766][ T45] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 579.446027][ T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 579.456336][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.457997][T24243] rust_binder: Write failure EFAULT in pid:247 [ 579.475468][T24230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.606441][T24245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7846'. [ 579.818034][T24251] input: syz1 as /devices/virtual/input/input28 [ 579.870364][ T45] usb 4-1: USB disconnect, device number 46 [ 579.876419][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 579.876466][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 581.425626][T24277] tipc: Started in network mode [ 581.441930][T24277] tipc: Node identity 4, cluster identity 4711 [ 581.448215][T24277] tipc: Node number set to 4 [ 581.702464][ T36] kauditd_printk_skb: 1012 callbacks suppressed [ 581.702533][ T36] audit: type=1400 audit(2000000680.054:72183): avc: denied { create } for pid=24285 comm="syz.2.7858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 581.729735][ T36] audit: type=1400 audit(2000000680.064:72184): avc: denied { map } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.757192][ T36] audit: type=1400 audit(2000000680.064:72185): avc: denied { read } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.784472][ T36] audit: type=1400 audit(2000000680.104:72186): avc: denied { map } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.811764][ T36] audit: type=1400 audit(2000000680.104:72187): avc: denied { read } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.838728][ T36] audit: type=1400 audit(2000000680.114:72188): avc: denied { create } for pid=24285 comm="syz.2.7858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 581.859027][ T36] audit: type=1400 audit(2000000680.134:72189): avc: denied { map } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.908114][ T36] audit: type=1400 audit(2000000680.134:72190): avc: denied { read } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.936303][ T36] audit: type=1400 audit(2000000680.144:72191): avc: denied { setopt } for pid=24285 comm="syz.2.7858" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 581.957597][ T36] audit: type=1400 audit(2000000680.154:72192): avc: denied { map } for pid=24278 comm="syz.7.7856" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 581.961277][T24288] overlayfs: failed to clone upperpath [ 582.230504][T24294] rust_binder: Write failure EINVAL in pid:524 [ 582.512863][ T45] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 582.682637][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 582.699043][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 582.722433][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 582.741074][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.755166][ T45] usb 4-1: config 0 descriptor?? [ 583.142200][T24313] rust_binder: Error while translating object. [ 583.142249][T24313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 583.148525][T24313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261 [ 583.182821][ T45] wacom 0003:056A:033B.000C: unbalanced collection at end of report description [ 583.201396][ T45] wacom 0003:056A:033B.000C: parse failed [ 583.207325][ T45] wacom 0003:056A:033B.000C: probe with driver wacom failed with error -22 [ 583.379485][T24319] can0: slcan on ttyS3. [ 583.399338][T24296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=24296 comm=syz.3.7862 [ 583.438570][T24318] can0 (unregistered): slcan off ttyS3. [ 583.453393][ T383] usb 4-1: USB disconnect, device number 47 [ 583.690508][T24335] fuse: Bad value for 'group_id' [ 583.697670][T24335] fuse: Bad value for 'group_id' [ 583.994215][T24344] binder: Bad value for 'stats' [ 584.157266][T24353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 584.189221][T24354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 584.190108][T24354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 584.193202][T24355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 584.212764][T24354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:216 [ 584.241216][T24355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:216 [ 584.442499][ T45] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 584.604844][ T45] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 584.613105][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 584.624702][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 584.635665][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 584.646923][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.659905][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.669023][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.679058][ T45] usb 4-1: config 0 descriptor?? [ 584.694739][T24359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 585.109215][ T45] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 585.118314][ T45] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 585.129702][ T45] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 585.381562][T24359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530 [ 585.386302][ T383] usb 4-1: USB disconnect, device number 48 [ 585.917631][T24394] rust_binder: Write failure EINVAL in pid:532 [ 586.302523][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 586.464585][ T45] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.476261][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.487256][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 586.498535][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 586.507608][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.518577][T24405] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 586.728115][ T36] kauditd_printk_skb: 618 callbacks suppressed [ 586.728136][ T36] audit: type=1400 audit(2000000685.084:72811): avc: denied { ioctl } for pid=24403 comm="syz.3.7901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.780768][ T36] audit: type=1400 audit(2000000685.084:72812): avc: denied { ioctl } for pid=24403 comm="syz.3.7901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.812325][ T36] audit: type=1400 audit(2000000685.084:72813): avc: denied { ioctl } for pid=24403 comm="syz.3.7901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.847164][ T36] audit: type=1400 audit(2000000685.084:72814): avc: denied { ioctl } for pid=24403 comm="syz.3.7901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.875527][ T36] audit: type=1400 audit(2000000685.084:72815): avc: denied { ioctl } for pid=24403 comm="syz.3.7901" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.917872][ T36] audit: type=1400 audit(2000000685.164:72816): avc: denied { create } for pid=24423 comm="syz.2.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.940472][ T36] audit: type=1400 audit(2000000685.164:72817): avc: denied { write } for pid=24423 comm="syz.2.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.968443][ T36] audit: type=1400 audit(2000000685.164:72818): avc: denied { read } for pid=24423 comm="syz.2.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 586.988988][ T36] audit: type=1400 audit(2000000685.164:72819): avc: denied { create } for pid=24423 comm="syz.2.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.015021][ T36] audit: type=1400 audit(2000000685.164:72820): avc: denied { write } for pid=24423 comm="syz.2.7908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.038842][T24428] 9pnet_fd: Insufficient options for proto=fd [ 587.090624][T24431] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 587.090624][T24431] C<+ [ 587.452664][ T45] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 587.479816][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input30 [ 587.522839][ T45] usb 4-1: USB disconnect, device number 49 [ 587.522898][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 587.664070][T24461] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 587.756128][T24463] input: syz0 as /devices/virtual/input/input31 [ 587.957498][T24468] overlay: filesystem on ./bus not supported as upperdir [ 588.476396][T24482] rust_binder: Write failure EINVAL in pid:563 [ 588.477865][T24482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 588.644754][T24492] rust_binder: Write failure EINVAL in pid:295 [ 588.722432][T11834] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 588.754931][T24500] binder: Unknown parameter 'VY89MKgdwU_kۦ١Oiˊ#&ufW~) bU[w40sd#1TP1:' [ 588.922610][T11834] usb 4-1: Using ep0 maxpacket: 16 [ 588.938457][T11834] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 588.949040][T11834] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 1023 [ 588.959036][T11834] usb 4-1: config 1 interface 0 has no altsetting 0 [ 588.964992][T24505] 9pnet_fd: Insufficient options for proto=fd [ 589.021674][T24508] rust_binder: Write failure EFAULT in pid:241 [ 589.067085][T11834] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.084930][T11834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.096300][T11834] usb 4-1: Product: syz [ 589.100551][T11834] usb 4-1: Manufacturer: syz [ 589.105230][T11834] usb 4-1: SerialNumber: syz [ 589.114968][T24482] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 589.123431][T24482] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 589.282433][T24513] rust_binder: Write failure EINVAL in pid:304 [ 589.348355][T24482] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 589.366412][T11834] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 589.417037][T11834] usb 4-1: USB disconnect, device number 50 [ 589.429945][T18018] udevd[18018]: setting owner of /dev/bus/usb/004/050 to uid=0, gid=0 failed: No such file or directory [ 589.776042][ T5672] bridge_slave_1: left allmulticast mode [ 589.782030][ T5672] bridge_slave_1: left promiscuous mode [ 589.788816][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.798471][ T5672] bridge_slave_0: left allmulticast mode [ 589.804284][ T5672] bridge_slave_0: left promiscuous mode [ 589.809996][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.939855][ T5672] veth1_macvtap: left promiscuous mode [ 589.948178][ T5672] veth0_vlan: left promiscuous mode [ 590.131071][T24551] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.143640][T24551] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.150846][T24551] bridge_slave_0: entered allmulticast mode [ 590.157948][T24551] bridge_slave_0: entered promiscuous mode [ 590.167952][T24551] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.176249][T24551] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.184279][T24551] bridge_slave_1: entered allmulticast mode [ 590.191015][T24551] bridge_slave_1: entered promiscuous mode [ 590.212679][T24565] rust_binder: Error while translating object. [ 590.212739][T24565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 590.223588][T24565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 590.330538][T24551] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.346807][T24551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.354149][T24551] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.361194][T24551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.414528][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.421821][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.436716][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.443834][ T5687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.455400][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.462533][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.543409][T24551] veth0_vlan: entered promiscuous mode [ 590.580456][T24551] veth1_macvtap: entered promiscuous mode [ 590.789148][T24580] netlink: 'syz.2.7961': attribute type 30 has an invalid length. [ 590.962453][T11834] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 591.008209][T24594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7967'. [ 591.112843][T11834] usb 9-1: Using ep0 maxpacket: 8 [ 591.127451][T11834] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.149833][T11834] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.158581][T11834] usb 9-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 591.170782][T11834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.195192][T11834] usb 9-1: config 0 descriptor?? [ 591.224496][T24609] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 591.432421][ T383] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 591.582454][ T383] usb 4-1: Using ep0 maxpacket: 8 [ 591.590182][ T383] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 591.599334][ T383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.609159][ T383] usb 4-1: config 0 descriptor?? [ 591.636342][T11834] uclogic 0003:5543:0042.000E: unbalanced delimiter at end of report description [ 591.646600][T11834] uclogic 0003:5543:0042.000E: parse failed [ 591.658531][T11834] uclogic 0003:5543:0042.000E: probe with driver uclogic failed with error -22 [ 591.819531][ T36] kauditd_printk_skb: 711 callbacks suppressed [ 591.819552][ T36] audit: type=1400 audit(2000000691.174:73532): avc: denied { ioctl } for pid=24604 comm="syz.3.7971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 591.851384][ T36] audit: type=1400 audit(2000000691.204:73533): avc: denied { create } for pid=24614 comm="syz.2.7975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 591.871886][ T36] audit: type=1326 audit(2000000691.204:73534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24614 comm="syz.2.7975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb3b8e929 code=0x0 [ 591.895488][ T36] audit: type=1400 audit(2000000691.204:73535): avc: denied { ioctl } for pid=24604 comm="syz.3.7971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 591.921183][ T36] audit: type=1400 audit(2000000691.214:73536): avc: denied { create } for pid=24577 comm="syz.8.7960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 591.942243][ T36] audit: type=1400 audit(2000000691.214:73537): avc: denied { mounton } for pid=24577 comm="syz.8.7960" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 591.967097][ T36] audit: type=1400 audit(2000000691.214:73538): avc: denied { mount } for pid=24577 comm="syz.8.7960" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 591.991458][ T36] audit: type=1400 audit(2000000691.214:73539): avc: denied { mounton } for pid=24577 comm="syz.8.7960" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 592.015157][ T36] audit: type=1400 audit(2000000691.214:73540): avc: denied { mount } for pid=24577 comm="syz.8.7960" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 592.038680][ T36] audit: type=1400 audit(2000000691.224:73541): avc: denied { read write } for pid=24577 comm="syz.8.7960" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 592.257364][T11834] usb 9-1: USB disconnect, device number 15 [ 592.711493][T24624] tmpfs: Unknown parameter 'usrquota' [ 592.951798][T24626] overlayfs: failed to clone upperpath [ 592.987862][T24637] binder: Bad value for 'max' [ 593.082736][ T383] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 593.108684][ T383] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 593.130621][ T383] asix 4-1:0.0: probe with driver asix failed with error -71 [ 593.139165][ T383] usb 4-1: USB disconnect, device number 51 [ 593.469289][T24649] overlayfs: failed to resolve './bus': -2 [ 593.953710][T24680] SELinux: security_context_str_to_sid () failed with errno=-22 [ 594.023806][T24683] tap0: tun_chr_ioctl cmd 1074025677 [ 594.035306][T24683] tap0: linktype set to 776 [ 594.053334][T24683] __vm_enough_memory: pid: 24683, comm: syz.8.7997, bytes: 70373039144960 not enough memory for the allocation [ 594.069103][T24671] binder: Unknown parameter '' [ 594.385263][T24706] /dev/rnullb0: Can't lookup blockdev [ 594.432448][T24363] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 594.601161][T24363] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.622415][T24363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 594.633457][T24363] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 594.643259][T24363] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.656284][T24363] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.665391][T24363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.676448][T24363] usb 4-1: config 0 descriptor?? [ 595.091431][T24363] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 595.105305][T24363] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 595.146385][T24363] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 595.169510][T24723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:41 [ 595.227258][T24725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8015'. [ 595.468151][ T5687] tipc: Subscription rejected, illegal request [ 595.545115][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.545594][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.556000][ T64] usb 4-1: USB disconnect, device number 52 [ 595.557333][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.569067][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.582614][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.589729][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.596608][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.604199][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.611093][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.642834][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.649669][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.670183][T24743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.011765][T24757] netlink: 'syz.2.8025': attribute type 4 has an invalid length. [ 596.029898][T24757] netlink: 'syz.2.8025': attribute type 4 has an invalid length. [ 596.039697][T24363] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 596.120744][T24761] netlink: 'syz.3.8027': attribute type 4 has an invalid length. [ 596.212431][T24363] usb 9-1: Using ep0 maxpacket: 8 [ 596.213237][T24770] can0: slcan on ttyS3. [ 596.225037][T24363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.271780][T24363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.312208][T24363] usb 9-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 596.333503][T24363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.362790][T24363] usb 9-1: config 0 descriptor?? [ 596.381428][T24776] binder: Bad value for 'stats' [ 596.386505][T24770] can0 (unregistered): slcan off ttyS3. [ 596.429638][T24777] batadv_slave_0: entered promiscuous mode [ 596.654108][T24789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.682726][T24789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.830545][ T36] kauditd_printk_skb: 706 callbacks suppressed [ 596.830566][ T36] audit: type=1400 audit(2000000696.184:74248): avc: denied { mounton } for pid=24792 comm="syz.0.8036" path="/104/file0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 596.871502][ T36] audit: type=1400 audit(2000000696.194:74249): avc: denied { mount } for pid=24792 comm="syz.0.8036" name="/" dev="incremental-fs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 596.871832][T24363] wacom 0003:056A:0002.0010: unknown main item tag 0x0 [ 596.902457][ T45] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 596.914861][ T36] audit: type=1400 audit(2000000696.194:74250): avc: denied { ioctl } for pid=24787 comm="syz.3.8035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.933115][T24363] wacom 0003:056A:0002.0010: Unknown device_type for 'HID 056a:0002'. Ignoring. [ 596.944672][ T36] audit: type=1400 audit(2000000696.214:74251): avc: denied { ioctl } for pid=24749 comm="syz.8.8023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 596.970256][T24777] batadv_slave_0: left promiscuous mode [ 596.975676][ T36] audit: type=1400 audit(2000000696.214:74252): avc: denied { write } for pid=24799 comm="syz.0.8036" name="/" dev="incremental-fs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.003337][ T36] audit: type=1400 audit(2000000696.214:74253): avc: denied { ioctl } for pid=24749 comm="syz.8.8023" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 597.075683][ T36] audit: type=1400 audit(2000000696.214:74254): avc: denied { add_name } for pid=24799 comm="syz.0.8036" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 597.097214][ T45] usb 4-1: device descriptor read/64, error -71 [ 597.106819][ T36] audit: type=1400 audit(2000000696.224:74255): avc: denied { create } for pid=24799 comm="syz.0.8036" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 597.134855][ T64] usb 9-1: USB disconnect, device number 16 [ 597.161295][ T36] audit: type=1400 audit(2000000696.224:74256): avc: denied { associate } for pid=24799 comm="syz.0.8036" name="core" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 597.241343][ T36] audit: type=1400 audit(2000000696.274:74257): avc: denied { ioctl } for pid=24787 comm="syz.3.8035" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 598.177747][ T5674] bridge_slave_1: left allmulticast mode [ 598.183645][ T5674] bridge_slave_1: left promiscuous mode [ 598.189314][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.227238][ T5674] bridge_slave_0: left allmulticast mode [ 598.263321][ T5674] bridge_slave_0: left promiscuous mode [ 598.272975][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.448030][ T5674] veth1_macvtap: left promiscuous mode [ 598.474847][ T5674] veth0_vlan: left promiscuous mode [ 598.794019][ T5674] bridge_slave_1: left allmulticast mode [ 598.801042][ T5674] bridge_slave_1: left promiscuous mode [ 598.812149][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.826719][ T5674] bridge_slave_0: left allmulticast mode [ 598.843678][ T5674] bridge_slave_0: left promiscuous mode [ 598.849387][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.974295][ T5674] tipc: Disabling bearer [ 598.979714][ T5674] tipc: Disabling bearer [ 598.986489][ T5674] tipc: Left network mode [ 598.996240][ T5674] veth1_macvtap: left promiscuous mode [ 599.003505][ T5674] veth0_vlan: left promiscuous mode [ 602.586091][ T36] kauditd_printk_skb: 223 callbacks suppressed [ 602.586113][ T36] audit: type=1400 audit(2000000701.944:74481): avc: denied { execmem } for pid=24926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 602.621240][ T36] audit: type=1400 audit(2000000701.954:74482): avc: denied { create } for pid=24928 comm="syz.2.8077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 602.641114][ T36] audit: type=1400 audit(2000000701.964:74483): avc: denied { block_suspend } for pid=24928 comm="syz.2.8077" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 602.663040][ T36] audit: type=1400 audit(2000000701.974:74484): avc: denied { execmem } for pid=24927 comm="syz.3.8076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 602.682564][ T36] audit: type=1400 audit(2000000701.974:74485): avc: denied { create } for pid=24927 comm="syz.3.8076" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 602.704257][ T36] audit: type=1400 audit(2000000701.974:74486): avc: denied { name_bind } for pid=24927 comm="syz.3.8076" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 602.726224][ T36] audit: type=1400 audit(2000000702.034:74487): avc: denied { read write } for pid=21637 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 602.750516][ T36] audit: type=1400 audit(2000000702.064:74488): avc: denied { read write } for pid=24551 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 603.597970][ T36] audit: type=1400 audit(2000000702.954:74489): avc: denied { execmem } for pid=24936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 603.630157][ T36] audit: type=1400 audit(2000000702.974:74490): avc: denied { name_bind } for pid=24937 comm="syz.2.8080" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 603.696583][T24945] 8021q: VLANs not supported on lo [ 608.695207][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 608.695228][ T36] audit: type=1400 audit(2000000708.054:74536): avc: denied { execmem } for pid=24975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 608.729560][ T36] audit: type=1400 audit(2000000708.054:74537): avc: denied { create } for pid=24977 comm="syz.2.8092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 608.752278][ T36] audit: type=1400 audit(2000000708.084:74538): avc: denied { read } for pid=24979 comm="syz.8.8093" dev="nsfs" ino=4026532471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 608.782451][ T36] audit: type=1400 audit(2000000708.134:74539): avc: denied { read } for pid=24976 comm="syz.3.8091" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 608.805527][ T36] audit: type=1400 audit(2000000708.144:74540): avc: denied { read write } for pid=24551 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 608.829885][ T36] audit: type=1400 audit(2000000708.144:74541): avc: denied { read } for pid=24976 comm="syz.3.8091" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 608.904320][ T36] audit: type=1400 audit(2000000708.264:74542): avc: denied { read write } for pid=21637 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 610.235202][ T36] audit: type=1400 audit(2000000709.594:74543): avc: denied { execmem } for pid=24985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 610.266350][ T36] audit: type=1400 audit(2000000709.624:74544): avc: denied { create } for pid=24986 comm="syz.2.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 610.287128][ T36] audit: type=1400 audit(2000000709.624:74545): avc: denied { create } for pid=24986 comm="syz.2.8094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 615.418907][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 615.418927][ T36] audit: type=1400 audit(2000000714.774:74574): avc: denied { execmem } for pid=25022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 615.449203][ T36] audit: type=1400 audit(2000000714.804:74575): avc: denied { read } for pid=25023 comm="syz.3.8103" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 615.477429][ T36] audit: type=1400 audit(2000000714.804:74576): avc: denied { read write } for pid=25027 comm="syz.8.8105" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:mnt_t:s0" [ 615.504362][ T36] audit: type=1400 audit(2000000714.804:74577): avc: denied { read write } for pid=25027 comm="syz.8.8105" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 trawcon="system_u:object_r:console_device_t:s0" [ 615.531902][ T36] audit: type=1400 audit(2000000714.834:74578): avc: denied { read write } for pid=25023 comm="syz.3.8103" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 615.555609][ T36] audit: type=1400 audit(2000000714.834:74579): avc: denied { read write } for pid=24551 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 615.579923][ T36] audit: type=1400 audit(2000000714.834:74580): avc: denied { read } for pid=25023 comm="syz.3.8103" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 615.602854][ T36] audit: type=1400 audit(2000000714.834:74581): avc: denied { create } for pid=25023 comm="syz.3.8103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 615.623510][ T36] audit: type=1400 audit(2000000714.834:74582): avc: denied { create } for pid=25023 comm="syz.3.8103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 615.990321][ T36] audit: type=1400 audit(2000000715.344:74583): avc: denied { read write } for pid=21637 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 619.419103][T25044] can0: slcan on ttyS3. [ 619.474367][T25040] can0 (unregistered): slcan off ttyS3. [ 619.685398][ T5687] bridge_slave_1: left allmulticast mode [ 619.692009][ T5687] bridge_slave_1: left promiscuous mode [ 619.705056][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.727240][ T5687] bridge_slave_0: left allmulticast mode [ 619.750438][ T5687] bridge_slave_0: left promiscuous mode [ 619.777463][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.988001][ T5687] veth1_macvtap: left promiscuous mode [ 619.993689][ T5687] veth0_vlan: left promiscuous mode [ 620.245194][ T5687] bridge_slave_1: left allmulticast mode [ 620.251079][ T5687] bridge_slave_1: left promiscuous mode [ 620.257999][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.266770][ T5687] bridge_slave_0: left allmulticast mode [ 620.272562][ T5687] bridge_slave_0: left promiscuous mode [ 620.278225][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.287185][ T5687] bridge_slave_1: left allmulticast mode [ 620.292936][ T5687] bridge_slave_1: left promiscuous mode [ 620.298604][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.308234][ T5687] bridge_slave_0: left allmulticast mode [ 620.314030][ T5687] bridge_slave_0: left promiscuous mode [ 620.319783][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.422816][ T36] kauditd_printk_skb: 1504 callbacks suppressed [ 620.422837][ T36] audit: type=1400 audit(2000000719.784:76088): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.453008][ T36] audit: type=1400 audit(2000000719.784:76089): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.463503][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 620.475155][ T36] audit: type=1400 audit(2000000719.784:76090): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.481037][ T148] audit: audit_lost=85 audit_rate_limit=0 audit_backlog_limit=64 [ 620.507078][ T36] audit: type=1400 audit(2000000719.784:76091): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.510034][ T148] audit: backlog limit exceeded [ 620.531725][ T36] audit: type=1400 audit(2000000719.784:76092): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.538439][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 620.557753][ T36] audit: type=1400 audit(2000000719.784:76093): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 620.585055][ T5687] tipc: Left network mode [ 620.591286][ T5687] veth1_macvtap: left promiscuous mode [ 620.597756][ T5687] veth0_vlan: left promiscuous mode [ 620.615454][ T5687] veth1_macvtap: left promiscuous mode [ 620.621032][ T5687] veth0_vlan: left promiscuous mode [ 625.432767][ T36] kauditd_printk_skb: 12084 callbacks suppressed [ 625.432789][ T36] audit: type=1400 audit(2000000724.794:88050): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 625.460257][ T36] audit: type=1400 audit(2000000724.794:88051): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 625.474392][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 625.481407][ T36] audit: type=1400 audit(2000000724.794:88052): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 625.489258][ T148] audit: audit_lost=129 audit_rate_limit=0 audit_backlog_limit=64 [ 625.509828][ T36] audit: type=1400 audit(2000000724.794:88053): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 625.517013][ T148] audit: backlog limit exceeded [ 625.538888][ T36] audit: type=1400 audit(2000000724.794:88054): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 625.545564][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 625.564774][ T36] audit: type=1400 audit(2000000724.794:88055): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0