last executing test programs: 21.896931855s ago: executing program 3 (id=411): io_setup(0x5, &(0x7f0000000440)=0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x58, &(0x7f0000000180)=ANY=[@ANYBLOB="e0a5ffd0b58f486ebd58033f9dfea2aa72432975adf11eee963e"]}]}) r1 = socket(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xed, &(0x7f0000000340)=@string={0xed, 0x3, "9b9ec63fe8814c7bc2ec090d004d9e5988d3b80a1c498d7b87aab853541234a7447d9a04d8a52a2b8231031a9cea92a66f210e524992c209be2209c7e5b5ab77bab7fc87e5e273b9d09b8b428629f5c03a99e01591735cf887dcf8afce0aaf1e4fca2ef0fe64d174f3b5724ef4926cd394cdbd02197b5326f7be168245c367ffa7a5942b612c42feae782961e9b27469c0b0072edf913a5b12aaa3167e232583eb15c6c793f42bdfffe918e7eb8faddce3a3dbe89a6abc3d6fdb78dc47881d107a83864cb0e964057ab5c13476beddbf2fd8814585efd1800c0e49975376ae7a32a4b07d443abd1fde4a87"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2409}}]}) 20.652493045s ago: executing program 3 (id=422): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x22842, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1a) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x135801, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ustat(0x1, &(0x7f0000000000)) r2 = inotify_init() syz_ublk_setup_io_uring(0x2e15, &(0x7f0000000040)={0x0, 0x2806, 0x10, 0x2, 0x158}, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x3, 0x2}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8000, r4, 0x0, 0x0, 0x80000004}]) close(r3) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noxattr}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@flag='rw'}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x34, 0x31, 0x30, 0x65, 0x36, 0x34, 0x38], 0x2d, [0x33, 0x36, 0x61, 0x35], 0x2d, [0x63, 0x35, 0x64, 0x38], 0x2d, [0x33, 0x0, 0x34, 0x34], 0x2d, [0x32, 0x64, 0x37, 0x65, 0x65, 0x61, 0x39, 0x36]}}}]}}) 20.538628592s ago: executing program 3 (id=423): socket$vsock_stream(0x28, 0x1, 0x28) r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x1, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r7, 0x0, 0x37e9, 0x10001) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff5, 0x800, 0x2, 0xff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x8811) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 20.446839514s ago: executing program 3 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x701, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x9) (async) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, 0xe, 0x3) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x104000}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) eventfd2(0x0, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) 19.548950163s ago: executing program 3 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) setreuid(0xee00, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='vegas\x00', 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x100003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000cc0)=[@nested_load_code={0x12e, 0x60, {0x0, "44db500065f3416d2e650f01d166b863000f00d8660f08b9b0060000b800000100ba000000000f30b906090000b800500000ba000000000f30cd00c4c2ed99b964fb000047de7a00"}}], 0x60}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0xc, 0x80000000, 0x8, 0x0, 0x800, 0x4000000003, 0x3, 0x100000001, 0x6, 0x200000007, 0x401ff, 0xf7ec, 0x100000001, 0xffffffffffffffed, 0x12000000000000, 0x4a0b54e9], 0x50000, 0x103410}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xf, r5, 0x80000000, &(0x7f0000000500)) ptrace(0x4207, r5) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0xf3, 0x9, 0xfffffffffffffffa, 0x5, 0xd4, 0x9, 0x6, 0x1000, 0x2a, 0x81, 0x7, 0x3, 0x9, 0x4cc, 0x9], 0xdddd1000, 0x800}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.548557153s ago: executing program 3 (id=428): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x34, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10100006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b394, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x4000400) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r11, 0x403) 11.036747472s ago: executing program 1 (id=462): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14e1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x3, 0x7b, &(0x7f00000000c0)="f13b888a71dd87fa68a6a71151d58e6fafd0cc3082955e8d8f2b799963467625529e9139198ee5933b332001ee7f296dd26853741b2f4edd6030df16b4d699af12f8c6aad75fa67fa771029b771426f3b083ddbaa1b4d25ec17dd33c8ac77590106906ce5cff1a15503d59fa2ee46ed550432e8c36bfec396c1771") syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_disconnect(r0) 9.253151469s ago: executing program 1 (id=472): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x7}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a67", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 8.329979444s ago: executing program 1 (id=484): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setreuid(0xffffffffffffffff, 0xee01) fadvise64(0xffffffffffffffff, 0x8, 0x2, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000040)) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "17fbe97fa244e482", "4c8b46c6d8d4cb9737afed73e4f826d8", "6ee43c09", "98f07fcbaaa6124b"}, 0x28) setresuid(0xee00, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x7, 0xffffffff, 0x6, 0x6], [0x6, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x4, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x7, 0x6, 0x8000, 0xf45, 0x3, 0xd4fc, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x8000001, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000200)={0x7e7d, 0x8000000000000001, 0x80003ffd, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x2000008000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0xffffffffffffffff, 0x4d9, 0x3fe, 0x1fe, 0x8005, 0x4}) r8 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000005980)=[{{&(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x6b38deb179a6f499) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000600)={0x32, 0x2, 0x2, 0x1, 0x0, [@private1]}, 0x18) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r9 = socket(0x25, 0x1, 0x759) sendto$inet_nvme_pdu(r9, &(0x7f0000000100)=@rsp={{0x5, 0xa, 0x18, 0x8, 0x1}, {@u16=0x5, 0x0, 0x5, 0x5, 0x4}}, 0x80, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) mlock(&(0x7f0000dab000/0x2000)=nil, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mmap(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0xc, 0x810, r0, 0x40e03000) 7.474710524s ago: executing program 1 (id=489): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) futimesat(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000480)) sendmsg$nl_route_sched_retired(r2, 0x0, 0x9080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0xc058671e, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) mmap(&(0x7f0000a50000/0x11000)=nil, 0x11000, 0x0, 0x4000010, r1, 0xd199a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000001010100000000000000000200000208b28c400000b061240000b81400018008000100e000000108000200e00000010c0002800500010000000000763a94dbe3a0debd1614ab2ea70d8460cf5414436364ea8f08380e03a0aa66087fe3629f52b4c025b23172271bcfc3dbd87f56cc09c2420376d4ec561862d4e380737cb482f237c111bd89adc22c280f76151964"], 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) fsetxattr(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f992c604b88095ba1b62747266732e00"], &(0x7f0000000500)='\x00', 0x1, 0x1469fe5a62335bd5) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1c0) mount$incfs(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000640)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000000), 0x2002000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x64000, 0x180) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) readv(r3, 0x0, 0x0) pwrite64(r3, &(0x7f0000001000)="fc", 0xfffffdd8, 0x7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) write(r0, &(0x7f0000000080)='4', 0x1) syz_clone(0x180500, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = accept$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvfrom$unix(r6, &(0x7f0000000340)=""/147, 0x93, 0x10020, &(0x7f0000000400)=@file={0x1, './cgroup.cpu/memory.limit_in_bytes\x00'}, 0x6e) syz_open_dev$MSR(&(0x7f0000000000), 0xfff, 0x0) 6.46189197s ago: executing program 1 (id=495): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/make-it-fail\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1}, 0x0) write$make_it_fail(r0, &(0x7f0000000100)='1\x00', 0x2) 6.272858265s ago: executing program 1 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x207) stat(&(0x7f0000000040)='./file2\x00', &(0x7f00000001c0)) (async) stat(&(0x7f0000000040)='./file2\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r0, &(0x7f0000000380)={0xa30, 0x6, 0x1, 0x4}) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r0, &(0x7f0000000380)={0xa30, 0x6, 0x1, 0x4}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x800) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x800) mount$bpf(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8001}}, {@mode={'mode', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x4}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='nolazytime'}, {@appraise}]}) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) read(r3, &(0x7f0000000280)=""/240, 0xf0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000840)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "debbe9540dd804"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ccf63e859c4e3a0c4f95336ea"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f731971b9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '_1[09'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x4800) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000840)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "debbe9540dd804"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ccf63e859c4e3a0c4f95336ea"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f731971b9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '_1[09'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x4800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) getdents64(r3, &(0x7f0000000040), 0x0) timerfd_create(0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$VHOST_SET_VRING_KICK(r12, 0x4008af20, &(0x7f0000000080)={0x0, r13}) 6.210939729s ago: executing program 32 (id=496): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x207) stat(&(0x7f0000000040)='./file2\x00', &(0x7f00000001c0)) (async) stat(&(0x7f0000000040)='./file2\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r0, &(0x7f0000000380)={0xa30, 0x6, 0x1, 0x4}) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r0, &(0x7f0000000380)={0xa30, 0x6, 0x1, 0x4}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x800) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x200440c1}, 0x800) mount$bpf(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x8001}}, {@mode={'mode', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x4}}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='nolazytime'}, {@appraise}]}) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) read(r3, &(0x7f0000000280)=""/240, 0xf0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000840)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "debbe9540dd804"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ccf63e859c4e3a0c4f95336ea"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f731971b9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '_1[09'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x4800) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000840)={&(0x7f0000000480), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "debbe9540dd804"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ccf63e859c4e3a0c4f95336ea"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f731971b9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '_1[09'}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x4800) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) getdents64(r3, &(0x7f0000000040), 0x0) timerfd_create(0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$VHOST_SET_VRING_KICK(r12, 0x4008af20, &(0x7f0000000080)={0x0, r13}) 5.356909648s ago: executing program 0 (id=501): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000300)='lz', 0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) write(r0, &(0x7f0000000300)='lz', 0x2) (async) 4.918446201s ago: executing program 0 (id=502): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)) (async) clock_gettime(0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000100)) (async) timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x16c) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) (async) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) (async) ptrace$pokeuser(0x6, r7, 0x350, 0xfffffe0000000005) (async) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff00200000ff00"], 0x15) 4.189660251s ago: executing program 0 (id=503): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket(0x27, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x100, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x2200}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x4}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) 4.181398634s ago: executing program 33 (id=428): add_key$keyring(&(0x7f0000000680), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x34, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10100006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbc, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b394, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x4000400) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) fcntl$getflags(r11, 0x403) 4.113519669s ago: executing program 0 (id=505): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x0, 0xf8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x6, 0xc, 0x1, {0x22, 0xee1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0x8e, 0x44, 0x40, 0x7f}, 0x69, &(0x7f0000000100)={0x5, 0xf, 0x69, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x34, 0x5, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x6, 0xf7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "13120364be89dfa4f79fd5d943233185"}, @generic={0x3c, 0x10, 0x4, "43ed30e07b631698a9da3ded7bb231c03fd4bda548ff39b6bf21815ab04f9c7c7ff36a7cb709bf83a8f729b483ac6b86fa2c0036a8687fe1fe"}, @ptm_cap={0x3}]}, 0x1, [{0xc, &(0x7f0000000240)=@string={0xc, 0x3, "a5e6759462ae125a5dfd"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0x0, 0x0, 0xee00) fchdir(r0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.489717149s ago: executing program 2 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0xb00}, 0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x2000081, &(0x7f0000000540)=ANY=[]) r4 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='syz\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./mnt\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) fallocate(r6, 0x3, 0x9, 0x81) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x78, 0x0, 0xe292ebe, {0x0, 0x47fb, 0x0, {0x9, 0xfffffffffffffffe, 0x200003, 0x4, 0x5, 0x0, 0x9e9, 0x6, 0x3f, 0x8000, 0x5, 0x0, 0xee01, 0x3c, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000008000/0x400000)=nil) write(r7, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.219943101s ago: executing program 2 (id=508): io_setup(0x8, &(0x7f0000000100)=0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) io_submit(r0, 0x0, &(0x7f0000000580)) 1.975490878s ago: executing program 2 (id=509): socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x800, &(0x7f0000000380)={[{}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xb68, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) io_setup(0x82, &(0x7f0000000240)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4001, r4, &(0x7f0000000080)='N-5f', 0x4, 0x3, 0x0, 0x0, r4}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x2, 0x0) r5 = socket(0x15, 0x2, 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40000) r7 = socket$inet6(0xa, 0x802, 0x0) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000240)='net/tcp6\x00') close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r7], 0x20}}, 0x40816) 1.71194773s ago: executing program 2 (id=510): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000002900)=0x659c, 0x4) r1 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f3044d0700000000000109022400010000000109040008020300000009211000000122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) 1.476439315s ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 1.354057724s ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) 1.238630841s ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 1.118082039s ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) 988.514349ms ago: executing program 2 (id=511): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) pipe2$9p(&(0x7f0000000280), 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, r0, &(0x7f0000000140)) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000180)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 986.93414ms ago: executing program 0 (id=512): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x4, 0x0, 0x4}}, 0x26) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x1, 0x428, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x161}}}, &(0x7f0000000140)=0x0) r6 = syz_ublk_setup_io_uring(0x7df0, &(0x7f0000000180)={0x0, 0x1a41, 0x800, 0x2, 0xd3, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001000)="fc", 0x1, 0x1000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r10 = dup3(r9, r8, 0x80000) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r12, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r12, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x200014, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r13, 0x0, 0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000000600), 0x0, 0x200) syz_ublk_setup_queues(r4, r5, &(0x7f00000002c0)={0x0, 0x8fc3, 0x40, 0x1, 0x1db, 0x0, r6}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd925, 0x8000, 0x0, 0x60, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26d, 0x2000, 0x0, 0x257, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd78c, 0x1, 0x0, 0x101, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x966e, 0x4, 0x2, 0x3be, 0x0, r12}}], 0x4, &(0x7f0000001640)={0x2e, 0x21, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x63}, 0x0, 0x0, '\x00', {0x0, 0xb9d, 0x0, &(0x7f0000000640)=@buf_4k="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"}}, &(0x7f00000016c0)) 986.8049ms ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 845.416323ms ago: executing program 0 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x2ec37000) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xeaw`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x00', 0x3) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) mmap(&(0x7f0000fed000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0xf38ae000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x800448d2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024400010100c07d090400fe1602020000052446000005240000000d240f01000000000000000000090581030000087f810905820260020400000905"], 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x28, 0x0, &(0x7f00000001c0)) socket$inet(0x2, 0x2, 0x7fb) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) munmap(&(0x7f0000007000/0x3000)=nil, 0x3000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 845.003053ms ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) 676.933102ms ago: executing program 2 (id=514): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000440)=@svm={0xa, 0x1, 0x1080, {0xa000}, {"148cccddaf631feaa8e259dc94b57eeb771aa65187b7edbb47596d6b0be896d825020f394f1d3c8c92ae2ebc12d28048da31ca9cc572f339ffe70d3280a8560a734aa542fb22f32bc20bdd5bec01ae8e3f801ffcab046c5f0e3a589284cb78ae3a7feab095c1020f4047d4e053f61e5962f704fd63f71298cf9bc1f38557d902bf6387dece3dbdc1875a6952e6175ec83040b0f3937a4ceb9c0ab8e57e5245a01771b95bcb7d036284203fc1fc910e8d91588cacafa6bacab67cb70abd9dd023fe09249e4480fe0c80b6a89545460db41fa85527bc1d2902b68745ce06b21e45480b35a2cf7e80b7d842479a37547b334d27c4abcb945cfcbafbb74626e9b859c3f5f404c34f0193f95196c24eb19a7fa9ab4242abeb1ea5e25434a2e82f00c17762636db6fd29918eb320decd8f1d4a6897303cc5639e5f890f2f950ae59d4dd63b4f7593edf1cb988059c193f3b6ae9412d9ddcd5e79765f6dc27fdb4913ab870625d4e4681908fbc685da4c3b5dc5b21555bf5c7269810b230961117610c853b0e99a7f0a3d312a438236c48ab85a852d83d0643926b239f97455e35d2bdca7514f3e8c10717c7a18a1a93133d16f8e2f46b51fac646b499a1dbe3a14b3f323143cec563e808ba76ca85e4425178bf40678ae59c15909c7ca458f25aea8fcfa3e986890fe7b583d234aabb1fc1ca579b2999455de4119c00fa6a89bb7c9081a99a10a2d8a1da3a496fb904a28ceb71504031daca5bbb3c7ef72a21d0493bfe410dbf8603e723c6253e5ddd008d4822e09f5969f1104ab6dbba53a5434daa91f594837afb7accdd56c0669a036da7c03c9b9ab075efb31cfba5a908a480dca3b61ef8940ed492258b849573459348ac62e58ad8bd2236062693190c2e31382c8c24ea5dc98fffc3039e01c3492beebfa1d4daf0d73443c18387602df1b952ca52a707ff35865e8bd1655615792eb6b5dc74dfb43f9707fb6d2ab2575aae10cee78e0dc7622bba4b21e7b71b4596d15eb28129fe468d75027695f2eb61d28d7ef7be546eb1782e164311c2ba78377d83daa322ce3dce91763f509c8fdf69d3317330d64115940c53900d1a33aaa455b60a64550b0e854d3205ba0b92d1b4bcdc039a3479daab23c697084b8e92ab9b3683a3897158a4129c4a822eb8fef4d1c8d63acc41520c8ddedb556dc8fd06828d0e30513cc0cb466c98cb32c52588f9d72f8cd7dfb08f2f482657da84125c7b6767ea39b745e932b768d5b3286351babed299c0eaab563b1138347ff1fdf2d7b1af9ff14087bf8890b60ceea01d1df95264993e09cfe3fdcbd72f909f595ca2a3e7e083edd6ccfc456809530aa6a3d7371829b32635c026b453bacf761d26f942244383d4fdfa4c6c7bc7f8ce7c522c1c6d5c292aa219a0193a9a024b86e78ad04734c4a8012c9bcdad8870089d2601f298de8bf3d54596330049f3afbcf652b635ee82d1076c5895f57be0cb7ed9e69709c939b8f3174fc3fc9bae5de45a640d338e8fc09f6b47a06afffa9669126b3f201a2c89590e27f4d0e54d3e8ab95c6cf26f801a3573989ec945ef29458d882c171ee339ee9b058fcc51dfe55210fa4a175167a22b7bbb9e3f5089badd5e4abc7517604d9e69bf67f5b6a2b3b5ab749b5e2c03c1faf61d06db9bd9c33fa894cd56330aeccb449cdf612c96f21db4ee35ee0f59a3f97300e97170284510360058b2e08492b268e287da0d7ca8adff403a2c930270487bc65d477cc6eda7455385670e914d54edcd400a8d8b31ea6b01cdf1384d005ee5eb23a0aac7f3f4e9a1dd874f23fa3e5fa87d22f39de92743dbde677882bb9add31036db2a14e4dddc54a4443a5e4fcc1a77a8dbc9736525038991823c770466819b669ff77103061c96bbb97fd4148bd718ac23dba62ddd6a635e242d86a47fa7457556d751c985dfacf9dc8b0a5be41c7389bd37999cd9b4382907c29f1cf3bdd1b49d7e4b19a1eed0de44bcb324d5f3252a67adf1c566894ce6ffe98b8f1b10609ea147f91a887745ad61a7d55ce88c4e86c4954c6c9c225a30db77fcbb801a125aa93f1cc8b179c0dc2c5df0a3318cb37414bf44a918b9d6832fc97ca7bf5205b5d8d35d00a58be12c3ed8dadc6739d0e81c77ec4e07f06f315585f190ced8e835cf93da85fe3bd76572f420cf45ca1b253313a2150978d99ce0b2d0ac72aa50076860e448d0e8af4082aaec88bb19194ce2d28be65472fe98dc818a3ef393e2342767b13987e6c95e5414e6999f68154507c3b0df7bb321090803ffe6de48b2f1332364798efd94f146e46adafee3d84a1490d3212fb1430be20a9c80206e7ccb48c9ee863a4224d5bca351d090effd9b6f825c90c0e1c208c641c5aad850fad429111483ec197b4d89c77f1b719a5d6ff2742fa5af4f466ca6634b2c967278e3e4b62aa5451fe4cb1e0e15e66cd917d877a7943dd7561a35f2a680a85eeb6fa87caf6c198ec48128f934a36343b5d1611f040eb8b7ef41c4ec7bf8893d38a789a6b8abe6d754c6d2620451a5d99bcefafe3eb4b6d3e299b75a0d33b8ff53623227b765a5750f0307a429def73b9a28f1df33ebc43dd38a7970a9ae744421ed911851ad003b8dc96f81f157d91ac8938b0cdb8657e9a4c5dce2241ad4f752a220f18603fe7a988c95fc48a7e4e0661ae22b11b6d9b74ce30b79729d17ae0e19b3742875b0fd835687464159689b98165795bc2f1489c3d4a61134a8b8522c569c92e08563ad569d7b879a565182f1fc1dafd03ff2ed5077a07b0f6cfec3b70fb346443eb5855c4923f7b0bf2f490afc361a7e5304597d48ec8ebd2a08a33d8eb456c2c1362ba8345ff2a6cb559b8315d7566e75d3a2dbaa801184c3be73a35373a8191e9730fd9da36cc2d7e0168cbf6b1ff32547093185a1495fc0d2bfebf678391b06662f93bec6144bb06544b3c877f26b617e5f4c9233d120d19d49404f01c43d33904f1f00c8514b8616ae15090a0804a0b5f1abbe1ff4738125b103fd621ee7608593c10937d103f35f9f1377d533939c0d7753356c48ccf4198f316d8342105986c1678c66b665fa5930c85afb86000eca23fb1c3208d07f4dfb7ecd3ebf46f5b7fa532228bbf8ce482068715d6043c00117ce60a57f8780349934e22f41144acdef8241be84e5e96ae19b02234419656e66c8672b2d9331e09dc5d6440009048e467e520590e08ebbf8a0d8fe37b3538117eeb0fba1b850a4a595583fe96af261ec1e29334790a03458d01345e7d7bfcee676694306b7ee6e528e6fa42249996a66edfda3b05f452cabd6c46d20ce58debc4ac9b06d94f40f50b45c44265f85f042e0748b67748315521ba26f05d2f5eb8090e3ec4349d5c34f559fb0c2b3eb7709b77d202346185ac17ffdfca1d39d34672d79644504bbf3b301459e8d9939121c7b5bd99627c32fb4b7224cb62ed4975a4be0fd0f64da3f7a1e59724d33014a57ec6a9d2460a99a168f09da19459edf5bbf2f044cd6cdc69ac28863e464423b9aa3645ced266c619ab4160d40f7ed0119d38eba3122fd9878fb4f764bbaca62f1bc4fad6c87fccd79b41d6b002f1d8e521a25643a3998e0e74e3d6bdebd1601d8b56a3895f70ad295a2b3080f285ce0b264bea442b38f63ec6784598a268c442a2f9a61f4c6e638784fc58a22764df3e8aeda8c61db67e9693a8b1a30e1058486f0a9bc5638ea8f93658cb2b29c3228cbed60850f2a32f7b9a68e4a89246926e81e3450af1b2aeb500ec1bea3e8fbf4a98e59c77fe318d846b7f73717a839cdc825f38db0f56900a77b78380aef17985eaeae2cfa68c40d7004b8e789e9be24b65a143249967b885584286277ede8f2f5150b5e10a6855a9e14f227c17aca31a065f7000740366cd91198bcf78072ba8ecf10ad28e240fb930837591d9a7eaf69a63944202c7b2d60d3f7d5775a84ed5d0def587eecd5f74b46f2dcb2f6e718e17443e05d0881b84858ac9eaf9fbe2dd0395ae9c0162ca30777d1f41c59f64b62f32242892c1e71ffee8bc973ef94f30c925bc7f525a784fd4e93c593270594713ab46a6cef965f894238c2cd84631d7337eb4a75a7dc9025eba4761ca4fe1f46f421a816b05f8ac8ccec762248f2509d52613b079d897d7abfb2e4083c5361e1a7320926c510c4af0a2517067086f51792d66022a404b9b503c09f988fdf5a78d23a16a07d7d17281273beb97fd43fb59a47587c1e59caddf434eb166265f2aa73362fa4290046da9b1193fb5eae325e19ca3c05c334ea6e1fb0255530928e35eaa8a6d4ec11f4b3b655ed87f231d8fb49a448a8fa6bf54cba46440878a5dcd9c7ab13b82787ec8655200c2250d542d811798fb72acf1b7bd0bc9002f1da58d1359548102c78c7581e8512ec0a5b101ef0ae546586c5976c4e65d6833d5186af5c3fc84ef1f320391ab994f5b1b558af969feea305cf7daec7ae1780e4853cd2dd7081427f7a7132d8f4b49f7984b0830499635ca5134cf24c25769caf8d1d8037b35501eed601cc3f4ad45b56303b10bc3493e48dae7afe3a2555f90bf50de6c14e2d990d34971f42b5733ccbb8ab47d8584a40d37536bdb65dfde223a6bd5de9eaf673a60aaad89fb2d8d311560f81033ab613bd0147fed2d3293b342c775752a77b326fc4db66e758ba156dc8f13de317a20f99fa82f96c9ddfd74616e7320f7ceddf2482c07a741cbd31f06a9af2e526bcb93e822500787de186ed8276a8d01281d0ed97a82d138cb31175ac6928e1e2be2a50280bcf9078a3ad6abac4b65734cf80e0b4256a6323dd31082aaf949fb5bdb524e83e672bf76c8adcc997ccf277fcf724bd18d65a655db63e1155752dc630986e2381e904cd100e95c4e6a4a64722907a16133b7d15986531a299afdbfea97ba873d3506005ddfb60eba176c426a1837bed38bc37fdf2da5c286844d20cc3d4759e5a83c4b8d2173aeafe9f68816efa9f5d3d03a92c8045d473430fbf24f294fd24856a8b84bb15277238b7b30d607b2381b15223ead99ac22a43092eb3ca20362979df2686f04af4c741c378f9b8208cb023956c2a575fab86cb827968f80c38ee60b5ae60321f96e3150d2814cbe6ba855cc1120c7840351fe190720d184405d705c8dd39e2e4a404e153d188b7ab3c45dbc1257dff95de43b50e5aa0ddcaecd600dfb1a82c55d6e4047740b36ee53d106f94873719bd601fa1a946822f26c64038e992eb684f9097e28b0a75d75c10357b9f6e17b91b69a6e3d753faaca955128362a05499d6b7b852f6efa44d9a6ec9acee0af4fa8fb1b89a3815b3caa653f89bff6a4e7ed75f99fa46b5534e434fe7d1327778574b9ceb6e0339ccdd140eec50892820c92fd2f2f37ac31525e06afff0c5b460df11456283f4eb47f1ee2a9d80ec7779e3e590cf1005575b4cd854ce48bc9599c3bc029f0f1a1bc23a8b95c36ed9f36a0c7a0568e3b46c70db9f16e3c7006786344376a6641848df2789e702832e943b47ac6cad773337ee3f8708e13ded21984e4fad9542c56a739750a5bf3e485f055546abc676c48b487f014cad5075fc6ed91dc070d7ea9dfd6dac676211e81169be073fd6c771bcc7531cbd6f6d4c7646fdddfbfabfc46dc9a028851c050b1711c424d52e5d3a0b227b8d5d7b7de7857d85a101664cf1abac5a7183ad30d7e6767fd75849858db012abef646bcff665c704bce8b50e280ce5ecbd66d0d0d5008887ed10838f144a5b5d572a2227cd9fc185fbd16ca1cf796c91ce543e4f50ca925c40fce7d9471b8c"}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x9080) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f0000000000)=[{r0, 0xd108}, {r1, 0x400}, {r0}, {r0, 0x2112}], 0x4, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) futex(&(0x7f0000000240), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) lseek(r0, 0x4, 0x1) fcntl$setlease(r0, 0x400, 0x1) 676.602532ms ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 599.53775ms ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) 467.712541ms ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 282.166114ms ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) 156.785963ms ago: executing program 5 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) fallocate(r1, 0x10, 0x6, 0x7000000) 0s ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x44885}, 0x40) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) kernel console output (not intermixed with test programs): 0 [ 54.275147][ T1188] R13: 00007ff130a26038 R14: 00007ff130a25fa0 R15: 00007fff76b4c5d8 [ 54.275162][ T1188] [ 54.275172][ T1188] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 54.547250][ T333] usb 1-1: device descriptor read/64, error -71 [ 54.577041][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 54.583650][ T31] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 54.593201][ T31] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 54.606562][ T31] usb 2-1: config 32 has no interface number 0 [ 54.612942][ T31] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 54.622392][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.631827][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 54.787091][ T333] usb 1-1: device descriptor read/64, error -71 [ 54.832376][ T10] usb 2-1: USB disconnect, device number 10 [ 54.957099][ T62] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 55.037095][ T333] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 55.107053][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 55.113351][ T62] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.121516][ T62] usb 4-1: config 0 has no interface number 0 [ 55.129251][ T62] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.138378][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.146426][ T62] usb 4-1: Product: syz [ 55.150641][ T62] usb 4-1: Manufacturer: syz [ 55.155249][ T62] usb 4-1: SerialNumber: syz [ 55.160713][ T62] usb 4-1: config 0 descriptor?? [ 55.166563][ T62] smsc95xx v2.0.0 [ 55.177046][ T333] usb 1-1: device descriptor read/64, error -71 can't open /dev/ttyS0: No such file or directory [ 55.417048][ T333] usb 1-1: device descriptor read/64, error -71 [ 55.486958][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 55.503539][ T36] audit: type=1400 audit(2000000005.820:300): avc: denied { connect } for pid=1217 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.523424][ T36] audit: type=1400 audit(2000000005.830:301): avc: denied { write } for pid=1217 comm="syz.2.289" path="socket:[13521]" dev="sockfs" ino=13521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.549839][ T333] usb usb1-port1: attempt power cycle [ 55.555759][ T36] audit: type=1400 audit(2000000005.830:302): avc: denied { read } for pid=1217 comm="syz.2.289" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.579607][ T1223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 55.887068][ T333] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 55.918220][ T333] usb 1-1: device descriptor read/8, error -71 [ 55.992886][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 56.005628][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.016735][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 56.027992][ T62] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 56.038066][ T62] usb 4-1: USB disconnect, device number 16 [ 56.055542][ T333] usb 1-1: device descriptor read/8, error -71 can't open /dev/ttyS0: No such file or directory [ 56.233535][ T36] audit: type=1400 audit(2000000006.570:303): avc: denied { setopt } for pid=1233 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.254009][ T1234] overlayfs: failed to clone upperpath [ 56.299617][ T36] audit: type=1400 audit(2000000006.640:304): avc: denied { remount } for pid=1240 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.327086][ T333] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 56.374197][ T333] usb 1-1: device descriptor read/8, error -71 [ 56.475190][ T36] audit: type=1400 audit(2000000006.810:305): avc: denied { getopt } for pid=1247 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.507077][ T1252] futex_wake_op: syz.1.299 tries to shift op by 144; fix this program [ 56.532321][ T333] usb 1-1: device descriptor read/8, error -71 [ 56.549875][ T36] audit: type=1400 audit(2000000006.890:306): avc: denied { read } for pid=1254 comm="syz.3.300" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.574309][ T36] audit: type=1400 audit(2000000006.890:307): avc: denied { open } for pid=1254 comm="syz.3.300" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.647176][ T333] usb usb1-port1: unable to enumerate USB device [ 56.714037][ T36] audit: type=1400 audit(2000000007.050:308): avc: denied { write } for pid=1266 comm="syz.1.302" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 56.738827][ T333] kernel read not supported for file 244/task/245/stat (pid: 333 comm: kworker/1:3) [ 56.748523][ T36] audit: type=1400 audit(2000000007.060:309): avc: denied { create } for pid=1268 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.785208][ T1271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 56.796727][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 56.930216][ T1287] netlink: 96 bytes leftover after parsing attributes in process `syz.1.307'. [ 56.957182][ T62] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 56.972332][ T1296] veth1: entered allmulticast mode [ 56.996038][ T1295] veth1: left allmulticast mode [ 57.114969][ T1302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=1302 comm=syz.0.312 [ 57.135271][ T62] usb 4-1: Using ep0 maxpacket: 16 [ 57.156129][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.180719][ T62] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.209545][ T62] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 can't open /dev[ 57.220671][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 /ttyS0: No such file or directory [ 57.235324][ T62] usb 4-1: config 0 descriptor?? [ 57.238619][ T1302] SELinux: policydb version 2008831898 does not match my version range 15-33 [ 57.258171][ T1302] SELinux: failed to load policy [ 57.323459][ T1305] : renamed from vlan0 (while UP) [ 57.653336][ T62] thrustmaster 0003:044F:B654.0004: unknown main item tag 0x0 [ 57.668714][ T62] input: HID 044f:b654 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:044F:B654.0004/input/input6 [ 57.688892][ T62] thrustmaster 0003:044F:B654.0004: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.3-1/input0 [ 57.705394][ T1331] udevd[1331]: open /dev/null failed: No such file or directory [ 57.713685][ T62] thrustmaster 0003:044F:B654.0004: force feedback for ThrustMaster devices by Zinx Verituse [ 57.857661][ T1269] tipc: Started in network mode [ 57.862897][ T1269] tipc: Node identity ae5381907001, cluster identity 4711 [ 57.870500][ T1261] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.876523][ T1269] tipc: Enabled bearer , priority 10 [ 58.168304][ T314] udevd[314]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory can't open /dev/ttyS0: No such file or directory [ 58.772123][ T1368] netlink: 'syz.2.320': attribute type 7 has an invalid length. [ 58.805935][ T1368] netlink: 'syz.2.320': attribute type 32 has an invalid length. [ 58.987104][ T333] tipc: Node number set to 3729949072 can't open /dev/ttyS0: No such file or directory [ 59.346458][ T1377] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.346483][ T1377] rust_binder: Read failure Err(EFAULT) in pid:194 [ 59.381843][ T1374] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.397201][ T1375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.411841][ T1374] rust_binder: Read failure Err(EFAULT) in pid:194 [ 59.574110][ T1385] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 59.877016][ T1337] Bluetooth: hci0: command 0x1003 tx timeout [ 59.877016][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.894592][ T333] usb 4-1: USB disconnect, device number 17 can't open /dev/ttyS0: No such file or directory [ 60.319369][ T1419] SELinux: failed to load policy [ 60.599538][ T1319] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 60.653943][ T1319] CPU: 0 UID: 0 PID: 1319 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 60.654009][ T1319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.654024][ T1319] Call Trace: [ 60.654032][ T1319] [ 60.654040][ T1319] __dump_stack+0x21/0x30 [ 60.654078][ T1319] dump_stack_lvl+0x140/0x1c0 [ 60.654109][ T1319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.654141][ T1319] ? ___ratelimit+0x41c/0x5c0 [ 60.654167][ T1319] ? __kasan_check_write+0x18/0x20 [ 60.654192][ T1319] dump_stack+0x19/0x20 [ 60.654225][ T1319] dump_header+0xd9/0x460 [ 60.654275][ T1319] oom_kill_process+0x35d/0x640 [ 60.654310][ T1319] ? __pv_queued_spin_lock_slowpath+0x22e/0xe90 [ 60.654340][ T1319] out_of_memory+0x5d1/0xa20 [ 60.654367][ T1319] ? __cfi_out_of_memory+0x10/0x10 [ 60.654394][ T1319] ? mutex_lock_killable+0x97/0x1d0 [ 60.654424][ T1319] ? __cfi_mutex_lock_killable+0x10/0x10 [ 60.654457][ T1319] mem_cgroup_out_of_memory+0x2c5/0x390 [ 60.654484][ T1319] ? css_next_descendant_pre+0x1ec/0x210 [ 60.654514][ T1319] ? __kasan_check_write+0x18/0x20 [ 60.654539][ T1319] ? drain_obj_stock+0xec0/0xec0 [ 60.654566][ T1319] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 60.654592][ T1319] try_charge_memcg+0x925/0xe10 [ 60.654625][ T1319] ? static_key_count+0x45/0x70 [ 60.654657][ T1319] ? lruvec_init+0x1f1/0x280 [ 60.654684][ T1319] ? __cfi_try_charge_memcg+0x10/0x10 [ 60.654719][ T1319] ? __alloc_pages_noprof+0x35a/0x7e0 [ 60.654755][ T1319] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.654791][ T1319] __mem_cgroup_charge+0xfc/0x420 [ 60.654815][ T1319] ? folio_add_lru+0x116/0x400 [ 60.654846][ T1319] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 60.654872][ T1319] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 60.654904][ T1319] ? shmem_replace_folio+0x9b0/0x9b0 [ 60.654935][ T1319] ? shmem_huge_global_enabled+0x2da/0x360 [ 60.654963][ T1319] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 60.654995][ T1319] ? __kasan_check_write+0x18/0x20 [ 60.655019][ T1319] ? _raw_spin_lock+0x92/0x120 [ 60.655043][ T1319] shmem_get_folio_gfp+0x5cd/0x12e0 [ 60.655078][ T1319] ? shmem_get_folio+0xc0/0xc0 [ 60.655103][ T1319] ? follow_page_pte+0x8fb/0xba0 [ 60.655137][ T1319] ? inode_to_bdi+0x6d/0x100 [ 60.655171][ T1319] shmem_write_begin+0xf4/0x260 [ 60.655202][ T1319] generic_perform_write+0x32c/0x970 [ 60.655237][ T1319] ? __cfi_generic_perform_write+0x10/0x10 [ 60.655270][ T1319] ? generic_write_checks_count+0x426/0x540 [ 60.655311][ T1319] ? file_update_time+0xa3/0x210 [ 60.655332][ T1319] shmem_file_write_iter+0x105/0x130 [ 60.655366][ T1319] __kernel_write_iter+0x462/0x900 [ 60.655393][ T1319] ? __cfi___kernel_write_iter+0x10/0x10 [ 60.655418][ T1319] ? get_dump_page+0x165/0x220 [ 60.655451][ T1319] ? __asan_memset+0x39/0x50 [ 60.655474][ T1319] ? iov_iter_bvec+0xc0/0x180 [ 60.655509][ T1319] dump_user_range+0xb8b/0xe60 [ 60.655537][ T1319] ? __cfi_dump_user_range+0x10/0x10 [ 60.655564][ T1319] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 60.655601][ T1319] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 60.655638][ T1319] ? elf_core_dump+0x23cf/0x3840 [ 60.655670][ T1319] elf_core_dump+0x2d61/0x3840 [ 60.655704][ T1319] ? __cfi_elf_core_dump+0x10/0x10 [ 60.655735][ T1319] ? mas_next_slot+0xf01/0xfd0 [ 60.655774][ T1319] ? dump_interrupted+0xf0/0xf0 [ 60.655798][ T1319] ? filp_open+0x199/0x1f0 [ 60.655832][ T1319] ? 0xffffffffff600000 [ 60.655851][ T1319] do_coredump+0x20d2/0x3050 [ 60.655879][ T1319] ? __cfi_do_coredump+0x10/0x10 [ 60.655903][ T1319] ? asm_exc_page_fault+0x2b/0x30 [ 60.655941][ T1319] ? __kasan_slab_free+0x6a/0x80 [ 60.655971][ T1319] ? get_signal+0xa2a/0x1490 [ 60.656003][ T1319] get_signal+0x11bf/0x1490 [ 60.656039][ T1319] arch_do_signal_or_restart+0xbc/0x700 [ 60.656063][ T1319] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 60.656089][ T1319] ? __bad_area_nosemaphore+0x2fb/0x680 [ 60.656113][ T1319] irqentry_exit_to_user_mode+0x4d/0xb0 [ 60.656147][ T1319] irqentry_exit+0x16/0x60 [ 60.656178][ T1319] exc_page_fault+0x65/0xc0 [ 60.656208][ T1319] asm_exc_page_fault+0x2b/0x30 [ 60.656236][ T1319] RIP: 0033:0x7fef4239e161 [ 60.656255][ T1319] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 60.656275][ T1319] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 60.656304][ T1319] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 60.656322][ T1319] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 60.656338][ T1319] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 60.656353][ T1319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 60.656368][ T1319] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 60.656388][ T1319] [ 60.707801][ T1319] memory: usage 307200kB, limit 307200kB, failcnt 19567 [ 60.709236][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 60.713263][ T1319] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 60.867070][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 60.874582][ T1319] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.886934][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.890468][ T1319] Memory cgroup stats for /syz2 [ 60.896932][ T9] usb 2-1: config 0 has no interfaces? [ 60.905530][ T1319] : [ 60.907370][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 60.917710][ T1319] cache 314507264 [ 60.923161][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.937190][ T1319] rss 40960 [ 61.038514][ T9] usb 2-1: config 0 descriptor?? [ 61.039446][ T1319] rss_huge 0 [ 61.215889][ T1319] shmem 314396672 [ 61.219872][ T1319] mapped_file 0 [ 61.223444][ T1319] dirty 0 [ 61.226439][ T1319] writeback 0 can't open /dev[ 61.230764][ T1319] workingset_refault_anon 14 /ttyS0: No such [ 61.236878][ T1319] workingset_refault_file 494 file or director[ 61.243099][ T1319] swap 127971328 y [ 61.248028][ T1319] swapcached 24576 [ 61.251829][ T1319] pgpgin 210314 [ 61.255374][ T1319] pgpgout 134025 [ 61.262200][ T1409] netlink: 236 bytes leftover after parsing attributes in process `syz.1.334'. [ 61.271915][ T1319] pgfault 59203 [ 61.275449][ T1319] pgmajfault 10 [ 61.278861][ T1409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.282985][ T1319] inactive_anon 147091456 [ 61.291810][ T1319] active_anon 167370752 [ 61.296074][ T1319] inactive_file 0 [ 61.297492][ T1409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.300570][ T1319] active_file 110592 [ 61.312375][ T1319] unevictable 0 [ 61.315917][ T1319] hierarchical_memory_limit 314572800 [ 61.319479][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 61.319521][ T36] audit: type=1400 audit(2000000011.660:349): avc: denied { read } for pid=1408 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.322349][ T1319] hierarchical_memsw_limit 9223372036854771712 [ 61.355336][ T1319] total_cache 314507264 [ 61.359786][ T1319] total_rss 40960 [ 61.363482][ T1319] total_rss_huge 0 [ 61.367517][ T1319] total_shmem 314396672 [ 61.372080][ T1319] total_mapped_file 0 [ 61.376123][ T1319] total_dirty 0 [ 61.379931][ T1319] total_writeback 0 [ 61.383799][ T1319] total_workingset_refault_anon 14 [ 61.389181][ T1319] total_workingset_refault_file 494 [ 61.394453][ T1319] total_swap 127971328 [ 61.398771][ T1319] total_swapcached 24576 [ 61.403077][ T1319] total_pgpgin 210314 [ 61.407360][ T1319] total_pgpgout 134025 [ 61.411488][ T1319] total_pgfault 59203 [ 61.415520][ T1319] total_pgmajfault 10 [ 61.419818][ T1319] total_inactive_anon 147091456 [ 61.424751][ T1319] total_active_anon 167370752 [ 61.430031][ T1319] total_inactive_file 0 [ 61.434242][ T1319] total_active_file 110592 [ 61.438951][ T1319] total_unevictable 0 [ 61.442996][ T1319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1317,uid=0 [ 61.458040][ T1319] Memory cgroup out of memory: Killed process 1317 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53544kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 61.659920][ T1318] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 61.714005][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 61.714044][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.714059][ T1318] Call Trace: [ 61.714066][ T1318] [ 61.714075][ T1318] __dump_stack+0x21/0x30 [ 61.714114][ T1318] dump_stack_lvl+0x140/0x1c0 [ 61.714146][ T1318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.714177][ T1318] ? ___ratelimit+0x41c/0x5c0 [ 61.714204][ T1318] ? __kasan_check_write+0x18/0x20 [ 61.714230][ T1318] dump_stack+0x19/0x20 [ 61.714260][ T1318] dump_header+0xd9/0x460 [ 61.714292][ T1318] oom_kill_process+0x35d/0x640 [ 61.714320][ T1318] out_of_memory+0x5d1/0xa20 [ 61.714346][ T1318] ? __cfi_out_of_memory+0x10/0x10 [ 61.714372][ T1318] ? mutex_lock_killable+0x97/0x1d0 [ 61.714403][ T1318] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.714435][ T1318] mem_cgroup_out_of_memory+0x2c5/0x390 [ 61.714461][ T1318] ? css_next_descendant_pre+0x1ec/0x210 [ 61.714490][ T1318] ? __kasan_check_write+0x18/0x20 [ 61.714514][ T1318] ? drain_obj_stock+0xec0/0xec0 [ 61.714541][ T1318] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 61.714566][ T1318] try_charge_memcg+0x925/0xe10 [ 61.714598][ T1318] ? static_key_count+0x45/0x70 [ 61.714628][ T1318] ? lruvec_init+0x1f1/0x280 [ 61.714655][ T1318] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.714688][ T1318] ? __alloc_pages_noprof+0x35a/0x7e0 [ 61.714722][ T1318] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.714765][ T1318] __mem_cgroup_charge+0xfc/0x420 [ 61.714789][ T1318] ? folio_add_lru+0x116/0x400 [ 61.714819][ T1318] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.714844][ T1318] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 61.714876][ T1318] ? shmem_replace_folio+0x9b0/0x9b0 [ 61.714905][ T1318] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.714933][ T1318] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.714960][ T1318] ? __kasan_check_write+0x18/0x20 [ 61.714983][ T1318] ? _raw_spin_lock+0x92/0x120 [ 61.715006][ T1318] shmem_get_folio_gfp+0x5cd/0x12e0 [ 61.715040][ T1318] ? shmem_get_folio+0xc0/0xc0 [ 61.715065][ T1318] ? follow_page_pte+0x8fb/0xba0 [ 61.715099][ T1318] ? inode_to_bdi+0x6d/0x100 [ 61.715134][ T1318] shmem_write_begin+0xf4/0x260 [ 61.715163][ T1318] generic_perform_write+0x32c/0x970 [ 61.715198][ T1318] ? __cfi_generic_perform_write+0x10/0x10 [ 61.715230][ T1318] ? generic_write_checks_count+0x426/0x540 [ 61.715263][ T1318] ? file_update_time+0xa3/0x210 [ 61.715285][ T1318] shmem_file_write_iter+0x105/0x130 [ 61.715318][ T1318] __kernel_write_iter+0x462/0x900 [ 61.715344][ T1318] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.715369][ T1318] ? get_dump_page+0x165/0x220 [ 61.715401][ T1318] ? __asan_memset+0x39/0x50 [ 61.715424][ T1318] ? iov_iter_bvec+0xc0/0x180 [ 61.715458][ T1318] dump_user_range+0xb8b/0xe60 [ 61.715486][ T1318] ? __cfi_dump_user_range+0x10/0x10 [ 61.715513][ T1318] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 61.715549][ T1318] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.715585][ T1318] ? elf_core_dump+0x23cf/0x3840 [ 61.715616][ T1318] elf_core_dump+0x2d61/0x3840 [ 61.715650][ T1318] ? __cfi_elf_core_dump+0x10/0x10 [ 61.715680][ T1318] ? mas_next_slot+0xf01/0xfd0 [ 61.715717][ T1318] ? dump_interrupted+0xf0/0xf0 [ 61.715741][ T1318] ? filp_open+0x199/0x1f0 [ 61.715788][ T1318] ? 0xffffffffff600000 [ 61.715807][ T1318] do_coredump+0x20d2/0x3050 [ 61.715834][ T1318] ? __cfi_do_coredump+0x10/0x10 [ 61.715858][ T1318] ? asm_exc_page_fault+0x2b/0x30 [ 61.715895][ T1318] ? __kasan_slab_free+0x6a/0x80 [ 61.715924][ T1318] ? get_signal+0xa2a/0x1490 [ 61.715956][ T1318] get_signal+0x11bf/0x1490 [ 61.715991][ T1318] arch_do_signal_or_restart+0xbc/0x700 [ 61.716015][ T1318] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.716039][ T1318] ? __bad_area_nosemaphore+0x2fb/0x680 [ 61.716064][ T1318] irqentry_exit_to_user_mode+0x4d/0xb0 [ 61.716097][ T1318] irqentry_exit+0x16/0x60 [ 61.716127][ T1318] exc_page_fault+0x65/0xc0 [ 61.716157][ T1318] asm_exc_page_fault+0x2b/0x30 [ 61.716184][ T1318] RIP: 0033:0x7fef4239e161 [ 61.716203][ T1318] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.716223][ T1318] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 61.716244][ T1318] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 61.716261][ T1318] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 61.716277][ T1318] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 61.716291][ T1318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.716305][ T1318] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 61.716325][ T1318] [ 61.757134][ T1318] memory: usage 303808kB, limit 307200kB, failcnt 20719 [ 61.931432][ T1432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.995980][ T1318] memory+swap: usage 426680kB, limit 9007199254740988kB, failcnt 0 [ 62.059192][ T1432] rust_binder: 1431:1432 got transaction to invalid handle 1 [ 62.063792][ T1318] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.078333][ T1432] rust_binder: 1431:1432 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 62.085873][ T1318] Memory cgroup stats for /syz2: [ 62.227314][ T1318] cache 305283072 [ 62.235965][ T1318] rss 40960 [ 62.239363][ T1318] rss_huge 0 [ 62.242626][ T1318] shmem 304050176 [ 62.246327][ T1318] mapped_file 1044480 can't open /dev[ 62.250715][ T1318] dirty 0 /ttyS0: No such [ 62.254984][ T1318] writeback 286720 file or directory [ 62.262961][ T1318] workingset_refault_anon 14 [ 62.278694][ T1318] workingset_refault_file 989 [ 62.294431][ T1318] swap 124280832 [ 62.304659][ T1318] swapcached 315392 [ 62.317006][ T1318] pgpgin 213385 [ 62.329220][ T1318] pgpgout 139277 [ 62.337328][ T1318] pgfault 59384 [ 62.345260][ T1318] pgmajfault 28 [ 62.354250][ T1318] inactive_anon 104153088 [ 62.368922][ T1318] active_anon 200065024 [ 62.383157][ T1318] inactive_file 0 [ 62.394609][ T1318] active_file 1232896 [ 62.407003][ T1318] unevictable 0 [ 62.419429][ T1318] hierarchical_memory_limit 314572800 [ 62.434764][ T1318] hierarchical_memsw_limit 9223372036854771712 [ 62.455427][ T1318] total_cache 305283072 [ 62.468487][ T1318] total_rss 40960 [ 62.481127][ T1318] total_rss_huge 0 [ 62.491552][ T1318] total_shmem 304050176 [ 62.504532][ T1318] total_mapped_file 1044480 [ 62.523318][ T1318] total_dirty 0 [ 62.535990][ T1318] total_writeback 286720 [ 62.548807][ T333] rust_binder: 1431: undelivered TRANSACTION_ERROR: 29201 [ 62.567891][ T1318] total_workingset_refault_anon 14 [ 62.573101][ T1318] total_workingset_refault_file 989 [ 62.578610][ T1318] total_swap 124280832 [ 62.582748][ T1318] total_swapcached 315392 [ 62.587389][ T1318] total_pgpgin 213385 [ 62.591469][ T1318] total_pgpgout 139277 [ 62.595597][ T1318] total_pgfault 59384 [ 62.600558][ T1318] total_pgmajfault 28 [ 62.604608][ T1318] total_inactive_anon 104153088 [ 62.609741][ T1318] total_active_anon 200065024 [ 62.622334][ T1318] total_inactive_file 0 [ 62.626818][ T1318] total_active_file 1232896 [ 62.649415][ T1318] total_unevictable 0 [ 62.654278][ T1318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1325,uid=0 [ 62.670950][ T1318] Memory cgroup out of memory: Killed process 1325 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 62.818280][ T1444] syz.0.344(1444): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 62.842412][ T36] audit: type=1400 audit(2000000013.180:350): avc: denied { ioctl } for pid=1442 comm="syz.0.344" path="socket:[19778]" dev="sockfs" ino=19778 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.869538][ T1319] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 62.880608][ T36] audit: type=1400 audit(2000000013.220:351): avc: denied { read } for pid=1442 comm="syz.0.344" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.987048][ T1319] CPU: 1 UID: 0 PID: 1319 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 62.987087][ T1319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.987102][ T1319] Call Trace: [ 62.987110][ T1319] [ 62.987119][ T1319] __dump_stack+0x21/0x30 [ 62.987156][ T1319] dump_stack_lvl+0x140/0x1c0 [ 62.987187][ T1319] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.987217][ T1319] ? ___ratelimit+0x41c/0x5c0 [ 62.987243][ T1319] ? __kasan_check_write+0x18/0x20 [ 62.987269][ T1319] dump_stack+0x19/0x20 [ 62.987299][ T1319] dump_header+0xd9/0x460 [ 62.987330][ T1319] oom_kill_process+0x35d/0x640 [ 62.987358][ T1319] out_of_memory+0x5d1/0xa20 [ 62.987384][ T1319] ? __cfi_out_of_memory+0x10/0x10 [ 62.987410][ T1319] ? mutex_lock_killable+0x97/0x1d0 [ 62.987439][ T1319] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.987470][ T1319] mem_cgroup_out_of_memory+0x2c5/0x390 [ 62.987497][ T1319] ? css_next_descendant_pre+0x1ec/0x210 [ 62.987526][ T1319] ? __kasan_check_write+0x18/0x20 [ 62.987549][ T1319] ? drain_obj_stock+0xec0/0xec0 [ 62.987576][ T1319] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 62.987601][ T1319] try_charge_memcg+0x925/0xe10 [ 62.987640][ T1319] ? static_key_count+0x45/0x70 [ 62.987672][ T1319] ? lruvec_init+0x1f1/0x280 [ 62.987698][ T1319] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.987731][ T1319] ? __alloc_pages_noprof+0x35a/0x7e0 [ 62.987783][ T1319] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.987818][ T1319] __mem_cgroup_charge+0xfc/0x420 [ 62.987841][ T1319] ? folio_add_lru+0x116/0x400 [ 62.987870][ T1319] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.987896][ T1319] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 62.987929][ T1319] ? shmem_replace_folio+0x9b0/0x9b0 [ 62.987958][ T1319] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.987987][ T1319] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.988015][ T1319] ? __kasan_check_write+0x18/0x20 [ 62.988039][ T1319] ? _raw_spin_lock+0x92/0x120 [ 62.988062][ T1319] shmem_get_folio_gfp+0x5cd/0x12e0 [ 62.988092][ T1319] ? shmem_get_folio+0xc0/0xc0 [ 62.988115][ T1319] ? follow_page_pte+0x8fb/0xba0 [ 62.988160][ T1319] ? inode_to_bdi+0x6d/0x100 [ 62.988194][ T1319] shmem_write_begin+0xf4/0x260 [ 62.988225][ T1319] generic_perform_write+0x32c/0x970 [ 62.988260][ T1319] ? __cfi_generic_perform_write+0x10/0x10 [ 62.988294][ T1319] ? generic_write_checks_count+0x426/0x540 [ 62.988328][ T1319] ? file_update_time+0xa3/0x210 [ 62.988349][ T1319] shmem_file_write_iter+0x105/0x130 [ 62.988383][ T1319] __kernel_write_iter+0x462/0x900 [ 62.988410][ T1319] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.988435][ T1319] ? get_dump_page+0x165/0x220 [ 62.988467][ T1319] ? __asan_memset+0x39/0x50 [ 62.988491][ T1319] ? iov_iter_bvec+0xc0/0x180 [ 62.988524][ T1319] dump_user_range+0xb8b/0xe60 [ 62.988552][ T1319] ? __cfi_dump_user_range+0x10/0x10 [ 62.988579][ T1319] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 62.988615][ T1319] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.988658][ T1319] ? elf_core_dump+0x23cf/0x3840 [ 62.988690][ T1319] elf_core_dump+0x2d61/0x3840 [ 62.988724][ T1319] ? __cfi_elf_core_dump+0x10/0x10 [ 62.988755][ T1319] ? mas_next_slot+0xf01/0xfd0 [ 62.988792][ T1319] ? dump_interrupted+0xf0/0xf0 [ 62.988816][ T1319] ? filp_open+0x199/0x1f0 [ 62.988850][ T1319] ? 0xffffffffff600000 [ 62.988869][ T1319] do_coredump+0x20d2/0x3050 [ 62.988898][ T1319] ? __cfi_do_coredump+0x10/0x10 [ 62.988922][ T1319] ? asm_exc_page_fault+0x2b/0x30 [ 62.988964][ T1319] ? __kasan_slab_free+0x6a/0x80 [ 62.988994][ T1319] ? get_signal+0xa2a/0x1490 [ 62.989026][ T1319] get_signal+0x11bf/0x1490 [ 62.989062][ T1319] arch_do_signal_or_restart+0xbc/0x700 [ 62.989086][ T1319] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.989111][ T1319] ? __bad_area_nosemaphore+0x2fb/0x680 [ 62.989135][ T1319] irqentry_exit_to_user_mode+0x4d/0xb0 [ 62.989168][ T1319] irqentry_exit+0x16/0x60 [ 62.989197][ T1319] exc_page_fault+0x65/0xc0 [ 62.989227][ T1319] asm_exc_page_fault+0x2b/0x30 [ 62.989254][ T1319] RIP: 0033:0x7fef4239e161 [ 62.989282][ T1319] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.989303][ T1319] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 62.989326][ T1319] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 62.989343][ T1319] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 62.989359][ T1319] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 62.989374][ T1319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.989388][ T1319] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 62.989408][ T1319] [ 63.460425][ T1319] memory: usage 300952kB, limit 307200kB, failcnt 21779 [ 63.480067][ T62] usb 2-1: USB disconnect, device number 11 can't open /dev/ttyS0: No such file or directory [ 63.518432][ T36] audit: type=1400 audit(2000000013.840:352): avc: denied { write } for pid=1453 comm="syz.0.347" name="igmp6" dev="proc" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 63.543566][ T1319] memory+swap: usage 430572kB, limit 9007199254740988kB, failcnt 0 [ 63.551617][ T1319] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.558597][ T1319] Memory cgroup stats for /syz2: [ 63.558750][ T1319] cache 312897536 [ 63.577144][ T1319] rss 77824 [ 63.580306][ T1319] rss_huge 0 [ 63.583523][ T1319] shmem 308703232 [ 63.658140][ T1319] mapped_file 4124672 [ 63.734089][ T1319] dirty 0 [ 63.782392][ T1319] writeback 0 [ 63.861792][ T1319] workingset_refault_anon 23 [ 64.014280][ T1319] workingset_refault_file 2873 [ 64.042672][ T1485] tipc: Enabling of bearer rejected, failed to enable media [ 64.112894][ T1319] swap 127918080 [ 64.116501][ T1319] swapcached 45056 [ 64.247029][ T1319] pgpgin 227370 [ 64.280281][ T1319] pgpgout 151468 [ 64.319016][ T1319] pgfault 60109 [ 64.360133][ T1319] pgmajfault 46 [ 64.363656][ T1319] inactive_anon 291520512 [ 64.377028][ T62] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 64.416936][ T1319] active_anon 16257024 [ 64.438734][ T1319] inactive_file 458752 [ 64.453004][ T1319] active_file 3735552 [ 64.463115][ T1319] unevictable 0 [ 64.466623][ T1319] hierarchical_memory_limit 314572800 [ 64.502498][ T1319] hierarchical_memsw_limit 9223372036854771712 can't open /dev/ttyS0: No such file or directory [ 64.537014][ T1319] total_cache 312897536 [ 64.537039][ T62] usb 1-1: Using ep0 maxpacket: 32 [ 64.547450][ T62] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 64.555660][ T62] usb 1-1: config 0 has no interface number 0 [ 64.561767][ T1319] total_rss 77824 [ 64.565435][ T1319] total_rss_huge 0 [ 64.575647][ T62] usb 1-1: config 0 interface 184 has no altsetting 0 [ 64.589493][ T1319] total_shmem 308703232 [ 64.594299][ T62] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 64.607021][ T1319] total_mapped_file 4124672 [ 64.611598][ T1319] total_dirty 0 [ 64.613629][ T62] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.633265][ T62] usb 1-1: Product: syz [ 64.645604][ T1319] total_writeback 0 [ 64.647066][ T62] usb 1-1: Manufacturer: syz [ 64.654082][ T62] usb 1-1: SerialNumber: syz [ 64.655913][ T1319] total_workingset_refault_anon 23 [ 64.667834][ T62] usb 1-1: config 0 descriptor?? [ 64.674180][ T1319] total_workingset_refault_file 2873 [ 64.687477][ T62] smsc75xx v1.0.0 [ 64.689109][ T1319] total_swap 127918080 [ 64.703267][ T1319] total_swapcached 45056 [ 64.713337][ T1319] total_pgpgin 227370 [ 64.720962][ T1319] total_pgpgout 151468 [ 64.725064][ T1319] total_pgfault 60109 [ 64.736049][ T1319] total_pgmajfault 46 [ 64.745750][ T1319] total_inactive_anon 291520512 [ 64.757035][ T1319] total_active_anon 16257024 [ 64.761732][ T1319] total_inactive_file 458752 [ 64.766353][ T1319] total_active_file 3735552 [ 64.771170][ T1319] total_unevictable 0 [ 64.775243][ T1319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1322,uid=0 [ 64.790313][ T1319] Memory cgroup out of memory: Killed process 1322 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53580kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 64.827125][ T1320] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 64.847025][ T1320] CPU: 0 UID: 0 PID: 1320 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 64.847064][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.847079][ T1320] Call Trace: [ 64.847086][ T1320] [ 64.847094][ T1320] __dump_stack+0x21/0x30 [ 64.847132][ T1320] dump_stack_lvl+0x140/0x1c0 [ 64.847163][ T1320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.847194][ T1320] ? ___ratelimit+0x41c/0x5c0 [ 64.847220][ T1320] ? __kasan_check_write+0x18/0x20 [ 64.847245][ T1320] dump_stack+0x19/0x20 [ 64.847275][ T1320] dump_header+0xd9/0x460 [ 64.847306][ T1320] oom_kill_process+0x35d/0x640 [ 64.847334][ T1320] out_of_memory+0x5d1/0xa20 [ 64.847361][ T1320] ? __cfi_out_of_memory+0x10/0x10 [ 64.847386][ T1320] ? mutex_lock_killable+0x115/0x1d0 [ 64.847416][ T1320] ? __cfi_mutex_lock_killable+0x10/0x10 [ 64.847448][ T1320] mem_cgroup_out_of_memory+0x2c5/0x390 [ 64.847473][ T1320] ? css_next_descendant_pre+0x1ec/0x210 [ 64.847502][ T1320] ? __kasan_check_write+0x18/0x20 [ 64.847525][ T1320] ? drain_obj_stock+0xec0/0xec0 [ 64.847558][ T1320] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 64.847583][ T1320] try_charge_memcg+0x925/0xe10 [ 64.847615][ T1320] ? static_key_count+0x45/0x70 [ 64.847646][ T1320] ? lruvec_init+0x1f1/0x280 [ 64.847672][ T1320] ? __cfi_try_charge_memcg+0x10/0x10 [ 64.847705][ T1320] ? __alloc_pages_noprof+0x35a/0x7e0 [ 64.847740][ T1320] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 64.847792][ T1320] __mem_cgroup_charge+0xfc/0x420 [ 64.847815][ T1320] ? folio_add_lru+0x116/0x400 [ 64.847845][ T1320] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 64.847871][ T1320] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 64.847903][ T1320] ? shmem_replace_folio+0x9b0/0x9b0 [ 64.847933][ T1320] ? shmem_huge_global_enabled+0x2da/0x360 [ 64.847962][ T1320] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 64.847990][ T1320] ? __kasan_check_write+0x18/0x20 [ 64.848014][ T1320] ? _raw_spin_lock+0x92/0x120 [ 64.848037][ T1320] shmem_get_folio_gfp+0x5cd/0x12e0 [ 64.848068][ T1320] ? shmem_get_folio+0xc0/0xc0 [ 64.848093][ T1320] ? follow_page_pte+0x8fb/0xba0 [ 64.848127][ T1320] ? inode_to_bdi+0x6d/0x100 [ 64.848162][ T1320] shmem_write_begin+0xf4/0x260 [ 64.848192][ T1320] generic_perform_write+0x32c/0x970 [ 64.848227][ T1320] ? __cfi_generic_perform_write+0x10/0x10 [ 64.848260][ T1320] ? generic_write_checks_count+0x426/0x540 [ 64.848294][ T1320] ? file_update_time+0xa3/0x210 [ 64.848316][ T1320] shmem_file_write_iter+0x105/0x130 [ 64.848350][ T1320] __kernel_write_iter+0x462/0x900 [ 64.848377][ T1320] ? __cfi___kernel_write_iter+0x10/0x10 [ 64.848401][ T1320] ? get_dump_page+0x165/0x220 [ 64.848434][ T1320] ? __asan_memset+0x39/0x50 [ 64.848457][ T1320] ? iov_iter_bvec+0xc0/0x180 [ 64.848492][ T1320] dump_user_range+0xb8b/0xe60 [ 64.848521][ T1320] ? __cfi_dump_user_range+0x10/0x10 [ 64.848555][ T1320] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 64.848592][ T1320] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 64.848628][ T1320] ? elf_core_dump+0x23cf/0x3840 [ 64.848660][ T1320] elf_core_dump+0x2d61/0x3840 [ 64.848695][ T1320] ? __cfi_elf_core_dump+0x10/0x10 [ 64.848726][ T1320] ? mas_next_slot+0xf01/0xfd0 [ 64.848763][ T1320] ? dump_interrupted+0xf0/0xf0 [ 64.848787][ T1320] ? filp_open+0x199/0x1f0 [ 64.848819][ T1320] ? 0xffffffffff600000 [ 64.848838][ T1320] do_coredump+0x20d2/0x3050 [ 64.848866][ T1320] ? __cfi_do_coredump+0x10/0x10 [ 64.848890][ T1320] ? asm_exc_page_fault+0x2b/0x30 [ 64.848927][ T1320] ? __kasan_slab_free+0x6a/0x80 [ 64.848956][ T1320] ? get_signal+0xa2a/0x1490 [ 64.848988][ T1320] get_signal+0x11bf/0x1490 [ 64.849023][ T1320] arch_do_signal_or_restart+0xbc/0x700 [ 64.849048][ T1320] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 64.849073][ T1320] ? __bad_area_nosemaphore+0x2fb/0x680 [ 64.849099][ T1320] irqentry_exit_to_user_mode+0x4d/0xb0 [ 64.849131][ T1320] irqentry_exit+0x16/0x60 [ 64.849161][ T1320] exc_page_fault+0x65/0xc0 [ 64.849191][ T1320] asm_exc_page_fault+0x2b/0x30 [ 64.849219][ T1320] RIP: 0033:0x7fef4239e161 [ 64.849237][ T1320] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 64.849257][ T1320] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 64.849278][ T1320] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 64.849295][ T1320] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 64.849311][ T1320] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 64.849325][ T1320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.849339][ T1320] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 64.849359][ T1320] [ 64.849385][ T1320] memory: usage 307192kB, limit 307200kB, failcnt 22266 [ 65.321857][ T1320] memory+swap: usage 394108kB, limit 9007199254740988kB, failcnt 0 [ 65.329865][ T1320] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 65.336883][ T1320] Memory cgroup stats for /syz2: [ 65.337145][ T1320] cache 283283456 [ 65.345837][ T1320] rss 77824 [ 65.349036][ T1320] rss_huge 0 [ 65.352268][ T1320] shmem 283283456 [ 65.355938][ T1320] mapped_file 0 [ 65.359480][ T1320] dirty 0 [ 65.362475][ T1320] writeback 0 [ 65.365796][ T1320] workingset_refault_anon 26 [ 65.370680][ T1320] workingset_refault_file 2873 [ 65.375654][ T1320] swap 120184832 [ 65.379285][ T1320] swapcached 45056 [ 65.383161][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 65.383830][ T1503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.394185][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.411577][ T1320] pgpgin 230495 [ 65.415062][ T1320] pgpgout 161821 [ 65.419470][ T1320] pgfault 60145 [ 65.423091][ T1320] pgmajfault 48 [ 65.426694][ T1320] inactive_anon 9506816 [ 65.431107][ T1320] active_anon 273874944 [ 65.435355][ T1320] inactive_file 0 [ 65.439292][ T1320] active_file 0 [ 65.442784][ T1320] unevictable 0 [ 65.446334][ T1320] hierarchical_memory_limit 314572800 [ 65.447465][ T1503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.453961][ T1320] hierarchical_memsw_limit 9223372036854771712 [ 65.465990][ T1320] total_cache 283283456 [ 65.470306][ T1320] total_rss 77824 [ 65.473987][ T1320] total_rss_huge 0 [ 65.478224][ T1320] total_shmem 283283456 [ 65.482433][ T1320] total_mapped_file 0 [ 65.486880][ T1320] total_dirty 0 [ 65.491041][ T1320] total_writeback 0 [ 65.494884][ T1320] total_workingset_refault_anon 26 [ 65.500271][ T1320] total_workingset_refault_file 2873 [ 65.505660][ T1320] total_swap 120184832 can't open /dev/ttyS0: No such file or directory [ 65.526011][ T1320] total_swapcached 45056 [ 65.530537][ T1320] total_pgpgin 230495 [ 65.534571][ T1320] total_pgpgout 161821 [ 65.546153][ T1320] total_pgfault 60145 [ 65.550234][ T1320] total_pgmajfault 48 [ 65.554275][ T1320] total_inactive_anon 9506816 [ 65.559552][ T1320] total_active_anon 273874944 [ 65.564295][ T1320] total_inactive_file 0 [ 65.568545][ T1320] total_active_file 0 [ 65.572622][ T1320] total_unevictable 0 [ 65.576662][ T1320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1316,uid=0 [ 65.597068][ T1320] Memory cgroup out of memory: Killed process 1316 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53820kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 65.638122][ T1508] netlink: 'syz.1.360': attribute type 27 has an invalid length. [ 65.659898][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 65.670825][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 65.691000][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 65.707603][ T62] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 65.727090][ T62] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 65.742209][ T62] usb 1-1: USB disconnect, device number 12 [ 65.758849][ T1515] FAULT_INJECTION: forcing a failure. [ 65.758849][ T1515] name failslab, interval 1, probability 0, space 0, times 0 [ 65.791895][ T1515] CPU: 1 UID: 0 PID: 1515 Comm: syz.1.361 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 65.791936][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.791952][ T1515] Call Trace: [ 65.791960][ T1515] [ 65.791971][ T1515] __dump_stack+0x21/0x30 [ 65.792013][ T1515] dump_stack_lvl+0x140/0x1c0 [ 65.792047][ T1515] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.792081][ T1515] ? __kasan_check_write+0x18/0x20 [ 65.792108][ T1515] ? _raw_spin_lock_irq+0x93/0x120 [ 65.792132][ T1515] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 65.792157][ T1515] dump_stack+0x19/0x20 [ 65.792189][ T1515] should_fail_ex+0x3c2/0x510 [ 65.792218][ T1515] ? copy_net_ns+0x122/0xa20 [ 65.792241][ T1515] should_failslab+0xac/0x100 [ 65.792272][ T1515] __kmalloc_noprof+0x69/0x510 [ 65.792298][ T1515] ? __kasan_check_write+0x18/0x20 [ 65.792323][ T1515] ? copy_net_ns+0x122/0xa20 [ 65.792345][ T1515] ? inc_ucount+0x1c3/0x2c0 [ 65.792367][ T1515] copy_net_ns+0x122/0xa20 [ 65.792388][ T1515] ? copy_cgroup_ns+0x97/0x590 [ 65.792417][ T1515] create_new_namespaces+0x390/0x6f0 [ 65.792454][ T1515] unshare_nsproxy_namespaces+0x124/0x180 [ 65.792493][ T1515] ksys_unshare+0x4f9/0x920 [ 65.792526][ T1515] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 65.792562][ T1515] ? __cfi_ksys_unshare+0x10/0x10 [ 65.792597][ T1515] ? __kasan_check_write+0x18/0x20 [ 65.792623][ T1515] __x64_sys_unshare+0x3c/0x50 [ 65.792668][ T1515] x64_sys_call+0x2998/0x2ee0 [ 65.792690][ T1515] do_syscall_64+0x57/0xf0 [ 65.792721][ T1515] ? clear_bhb_loop+0x50/0xa0 [ 65.792752][ T1515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.792782][ T1515] RIP: 0033:0x7f5e0599e159 [ 65.792802][ T1515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.792832][ T1515] RSP: 002b:00007f5e067cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.792858][ T1515] RAX: ffffffffffffffda RBX: 00007f5e05c25fa0 RCX: 00007f5e0599e159 [ 65.792877][ T1515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 65.792892][ T1515] RBP: 00007f5e05a3506b R08: 0000000000000000 R09: 0000000000000000 [ 65.792925][ T1515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.792941][ T1515] R13: 00007f5e05c26038 R14: 00007f5e05c25fa0 R15: 00007ffce0a9bc48 [ 65.792962][ T1515] [ 66.167045][ T403] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 66.197040][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.297026][ T403] usb 2-1: device descriptor read/64, error -71 [ 66.320026][ T1320] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 66.381603][ T1320] CPU: 1 UID: 0 PID: 1320 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 66.381639][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.381655][ T1320] Call Trace: [ 66.381663][ T1320] [ 66.381672][ T1320] __dump_stack+0x21/0x30 [ 66.381711][ T1320] dump_stack_lvl+0x140/0x1c0 [ 66.381743][ T1320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.381776][ T1320] ? ___ratelimit+0x41c/0x5c0 [ 66.381802][ T1320] ? __kasan_check_write+0x18/0x20 [ 66.381828][ T1320] dump_stack+0x19/0x20 [ 66.381859][ T1320] dump_header+0xd9/0x460 [ 66.381890][ T1320] oom_kill_process+0x35d/0x640 [ 66.381917][ T1320] out_of_memory+0x5d1/0xa20 [ 66.381944][ T1320] ? __cfi_out_of_memory+0x10/0x10 [ 66.381970][ T1320] ? mutex_lock_killable+0x97/0x1d0 [ 66.382000][ T1320] ? __cfi_mutex_lock_killable+0x10/0x10 [ 66.382032][ T1320] mem_cgroup_out_of_memory+0x2c5/0x390 [ 66.382058][ T1320] ? css_next_descendant_pre+0x1ec/0x210 [ 66.382087][ T1320] ? __kasan_check_write+0x18/0x20 [ 66.382110][ T1320] ? drain_obj_stock+0xec0/0xec0 [ 66.382137][ T1320] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 66.382164][ T1320] try_charge_memcg+0x925/0xe10 [ 66.382195][ T1320] ? static_key_count+0x45/0x70 [ 66.382227][ T1320] ? lruvec_init+0x1f1/0x280 [ 66.382278][ T1320] ? __cfi_try_charge_memcg+0x10/0x10 [ 66.382312][ T1320] ? __alloc_pages_noprof+0x35a/0x7e0 can't open /dev[ 66.382346][ T1320] ? __cfi___alloc_pages_noprof+0x10/0x10 /ttyS0: No such [ 66.382381][ T1320] __mem_cgroup_charge+0xfc/0x420 [ 66.382403][ T1320] ? folio_add_lru+0x116/0x400 file or director[ 66.382432][ T1320] ? __cfi___mem_cgroup_charge+0x10/0x10 y [ 66.382458][ T1320] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 66.382491][ T1320] ? shmem_replace_folio+0x9b0/0x9b0 [ 66.382521][ T1320] ? shmem_huge_global_enabled+0x2da/0x360 [ 66.382550][ T1320] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 66.382577][ T1320] ? __kasan_check_write+0x18/0x20 [ 66.382602][ T1320] ? _raw_spin_lock+0x92/0x120 [ 66.382624][ T1320] shmem_get_folio_gfp+0x5cd/0x12e0 [ 66.382658][ T1320] ? shmem_get_folio+0xc0/0xc0 [ 66.382683][ T1320] ? follow_page_pte+0x8fb/0xba0 [ 66.382716][ T1320] ? inode_to_bdi+0x6d/0x100 [ 66.382751][ T1320] shmem_write_begin+0xf4/0x260 [ 66.382780][ T1320] generic_perform_write+0x32c/0x970 [ 66.382816][ T1320] ? __cfi_generic_perform_write+0x10/0x10 [ 66.382848][ T1320] ? generic_write_checks_count+0x426/0x540 [ 66.382882][ T1320] ? file_update_time+0xa3/0x210 [ 66.382904][ T1320] shmem_file_write_iter+0x105/0x130 [ 66.382938][ T1320] __kernel_write_iter+0x462/0x900 [ 66.382964][ T1320] ? __cfi___kernel_write_iter+0x10/0x10 [ 66.382989][ T1320] ? get_dump_page+0x165/0x220 [ 66.383021][ T1320] ? __asan_memset+0x39/0x50 [ 66.383044][ T1320] ? iov_iter_bvec+0xc0/0x180 [ 66.383078][ T1320] dump_user_range+0xb8b/0xe60 [ 66.383107][ T1320] ? __cfi_dump_user_range+0x10/0x10 [ 66.383133][ T1320] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 66.383170][ T1320] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 66.383206][ T1320] ? elf_core_dump+0x23cf/0x3840 [ 66.383238][ T1320] elf_core_dump+0x2d61/0x3840 [ 66.383278][ T1320] ? __cfi_elf_core_dump+0x10/0x10 [ 66.383308][ T1320] ? mas_next_slot+0xf01/0xfd0 [ 66.383346][ T1320] ? dump_interrupted+0xf0/0xf0 [ 66.383370][ T1320] ? filp_open+0x199/0x1f0 [ 66.383404][ T1320] ? 0xffffffffff600000 [ 66.383422][ T1320] do_coredump+0x20d2/0x3050 [ 66.383450][ T1320] ? __cfi_do_coredump+0x10/0x10 [ 66.383474][ T1320] ? asm_exc_page_fault+0x2b/0x30 [ 66.383510][ T1320] ? __kasan_slab_free+0x6a/0x80 [ 66.383540][ T1320] ? get_signal+0xa2a/0x1490 [ 66.383573][ T1320] get_signal+0x11bf/0x1490 [ 66.383608][ T1320] arch_do_signal_or_restart+0xbc/0x700 [ 66.383632][ T1320] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 66.383657][ T1320] ? __bad_area_nosemaphore+0x2fb/0x680 [ 66.383682][ T1320] irqentry_exit_to_user_mode+0x4d/0xb0 [ 66.383715][ T1320] irqentry_exit+0x16/0x60 [ 66.383745][ T1320] exc_page_fault+0x65/0xc0 [ 66.383775][ T1320] asm_exc_page_fault+0x2b/0x30 [ 66.383803][ T1320] RIP: 0033:0x7fef4239e161 [ 66.383822][ T1320] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 66.383842][ T1320] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 66.383863][ T1320] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 66.383880][ T1320] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 66.383896][ T1320] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 66.383911][ T1320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 66.383925][ T1320] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 66.383945][ T1320] [ 66.440124][ T1320] memory: usage 305812kB, limit 307200kB, failcnt 25833 [ 66.587080][ T403] usb 2-1: device descriptor read/64, error -71 [ 66.717118][ T62] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 66.907505][ T1320] memory+swap: usage 427036kB, limit 9007199254740988kB, failcnt 0 [ 66.915496][ T1320] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 66.922452][ T1320] Memory cgroup stats for /syz2: [ 66.922684][ T1320] cache 310018048 [ 66.931445][ T1320] rss 90112 [ 66.934649][ T1320] rss_huge 0 [ 66.938720][ T1320] shmem 309055488 [ 66.942614][ T1320] mapped_file 905216 [ 66.946534][ T1320] dirty 0 [ 66.959572][ T1320] writeback 0 [ 66.964384][ T1320] workingset_refault_anon 27 [ 66.969885][ T1320] workingset_refault_file 4578 [ 66.975345][ T1538] rust_binder: 1537:1538 got transaction to invalid handle 1 [ 66.985522][ T1320] swap 127094784 [ 66.989200][ T1320] swapcached 53248 [ 66.989634][ T1538] rust_binder: 1537:1538 transaction call to 0:0 failed ENOENT, code 0 size 88-24 [ 66.992942][ T1320] pgpgin 247123 [ 66.992952][ T1320] pgpgout 171902 [ 66.992961][ T1320] pgfault 62245 [ 66.992970][ T1320] pgmajfault 76 [ 67.002550][ T403] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 67.037614][ T1538] kvm: user requested TSC rate below hardware speed [ 67.046174][ T1538] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 67.067056][ T62] usb 4-1: device descriptor read/64, error -71 [ 67.081350][ T1320] inactive_anon 281477120 [ 67.085742][ T1320] active_anon 27570176 [ 67.117495][ T1320] inactive_file 0 [ 67.121238][ T1320] active_file 430080 [ 67.125151][ T1320] unevictable 0 [ 67.137598][ T1320] hierarchical_memory_limit 314572800 [ 67.147036][ T1320] hierarchical_memsw_limit 9223372036854771712 [ 67.153217][ T1320] total_cache 310018048 [ 67.167024][ T10] rust_binder: 1537: undelivered TRANSACTION_ERROR: 29201 [ 67.167027][ T403] usb 2-1: device descriptor read/64, error -71 [ 67.201073][ T1320] total_rss 90112 [ 67.204773][ T1320] total_rss_huge 0 [ 67.227132][ T1320] total_shmem 309055488 [ 67.257192][ T1320] total_mapped_file 905216 [ 67.281916][ T1320] total_dirty 0 [ 67.285425][ T1320] total_writeback 0 [ 67.317041][ T62] usb 4-1: device descriptor read/64, error -71 [ 67.327010][ T1320] total_workingset_refault_anon 27 [ 67.332155][ T1320] total_workingset_refault_file 4578 [ 67.367045][ T1320] total_swap 127094784 [ 67.387006][ T1320] total_swapcached 53248 [ 67.391305][ T1320] total_pgpgin 247123 [ 67.407059][ T403] usb 2-1: device descriptor read/64, error -71 [ 67.427020][ T333] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 67.430529][ T1320] total_pgpgout 171902 [ 67.448682][ T1320] total_pgfault 62245 [ 67.457081][ T1320] total_pgmajfault 76 [ 67.461091][ T1320] total_inactive_anon 281477120 [ 67.476172][ T1320] total_active_anon 27570176 [ 67.486253][ T1320] total_inactive_file 0 [ 67.496411][ T1320] total_active_file 430080 [ 67.506540][ T1320] total_unevictable 0 [ 67.510682][ T1320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1318,uid=0 [ 67.527180][ T403] usb usb2-port1: attempt power cycle [ 67.540169][ T1320] Memory cgroup out of memory: Killed process 1318 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53812kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 can't open /dev[ 67.557693][ T62] usb 4-1: new full-speed USB device number 19 using dummy_hcd /ttyS0: No such file or directory [ 67.578191][ T333] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 67.588765][ T333] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.604980][ T333] usb 1-1: config 1 interface 0 has no altsetting 0 [ 67.616847][ T333] usb 1-1: string descriptor 0 read error: -22 [ 67.623176][ T333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 67.632272][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.648761][ T1552] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 67.697033][ T62] usb 4-1: device descriptor read/64, error -71 [ 67.786048][ T296] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 67.816140][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 67.816181][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.816197][ T296] Call Trace: [ 67.816205][ T296] [ 67.816214][ T296] __dump_stack+0x21/0x30 [ 67.816252][ T296] dump_stack_lvl+0x140/0x1c0 [ 67.816283][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.816315][ T296] ? ___ratelimit+0x41c/0x5c0 [ 67.816342][ T296] ? __kasan_check_write+0x18/0x20 [ 67.816367][ T296] dump_stack+0x19/0x20 [ 67.816397][ T296] dump_header+0xd9/0x460 [ 67.816428][ T296] oom_kill_process+0x35d/0x640 [ 67.816455][ T296] out_of_memory+0x5d1/0xa20 [ 67.816482][ T296] ? __cfi_out_of_memory+0x10/0x10 [ 67.816507][ T296] ? mutex_lock_killable+0x97/0x1d0 [ 67.816537][ T296] ? __cfi_mutex_lock_killable+0x10/0x10 [ 67.816568][ T296] mem_cgroup_out_of_memory+0x2c5/0x390 [ 67.816594][ T296] ? css_next_descendant_pre+0x1ec/0x210 [ 67.816621][ T296] ? __kasan_check_write+0x18/0x20 [ 67.816645][ T296] ? drain_obj_stock+0xec0/0xec0 [ 67.816672][ T296] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 67.816706][ T296] try_charge_memcg+0x925/0xe10 [ 67.816739][ T296] ? static_key_count+0x45/0x70 [ 67.816770][ T296] ? lruvec_init+0x1f1/0x280 [ 67.816798][ T296] ? __cfi_try_charge_memcg+0x10/0x10 [ 67.816832][ T296] ? __alloc_pages_noprof+0x35a/0x7e0 [ 67.816867][ T296] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.816901][ T296] ? kvm_sched_clock_read+0x15/0x30 [ 67.816933][ T296] __mem_cgroup_charge+0xfc/0x420 [ 67.816957][ T296] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 67.816984][ T296] folio_prealloc+0x67/0x220 [ 67.817024][ T296] do_wp_page+0x187e/0x2e80 [ 67.817052][ T296] ? folio_put+0x90/0x90 [ 67.817078][ T296] ? __cfi__raw_spin_lock+0x10/0x10 [ 67.817100][ T296] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 67.817123][ T296] handle_mm_fault+0x1017/0x1ba0 [ 67.817155][ T296] ? __cfi_handle_mm_fault+0x10/0x10 [ 67.817198][ T296] ? lock_vma_under_rcu+0x4cf/0x590 [ 67.817230][ T296] ? __cfi___x64_sys_clone+0x10/0x10 [ 67.817262][ T296] ? __se_sys_rt_sigprocmask+0x237/0x2a0 [ 67.817300][ T296] do_user_addr_fault+0x951/0x1230 [ 67.817324][ T296] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 67.817357][ T296] exc_page_fault+0x58/0xc0 [ 67.817387][ T296] asm_exc_page_fault+0x2b/0x30 [ 67.817415][ T296] RIP: 0033:0x7fef423c6c1e [ 67.817434][ T296] Code: 00 66 48 0f 6e c7 66 0f 6c c0 0f 11 80 d8 02 00 00 b8 11 01 00 00 0f 05 48 83 3d 84 53 22 00 00 74 05 e8 e5 9a f7 ff 48 89 df 5d 8b f7 ff 48 8b 44 24 08 64 48 2b 04 25 28 00 00 00 75 20 48 [ 67.817455][ T296] RSP: 002b:00007ffe58e09120 EFLAGS: 00010202 [ 67.817476][ T296] RAX: 000000000000017c RBX: 00007ffe58e09120 RCX: 00007fef423c6bd2 [ 67.817493][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffe58e09120 [ 67.817509][ T296] RBP: 000000000000017c R08: 0000000000000000 R09: 0000000000000001 [ 67.817523][ T296] R10: 000055555e0817d0 R11: 0000000000000246 R12: 0000000000000000 [ 67.817537][ T296] R13: 00000000000927c0 R14: 0000000000010623 R15: 00007ffe58e09300 [ 67.817557][ T296] [ 67.937189][ T62] usb 4-1: device descriptor read/64, error -71 [ 67.940099][ T403] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 68.047387][ T62] usb usb4-port1: attempt power cycle [ 68.088445][ T403] usb 2-1: device descriptor read/8, error -71 [ 68.102224][ T296] memory: usage 300588kB, limit 307200kB, failcnt 28821 [ 68.155352][ T296] memory+swap: usage 425828kB, limit 9007199254740988kB, failcnt 0 [ 68.163346][ T296] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 68.170390][ T296] Memory cgroup stats for /syz2: [ 68.170555][ T296] cache 307851264 [ 68.179187][ T296] rss 77824 [ 68.182535][ T296] rss_huge 0 [ 68.185762][ T296] shmem 307851264 [ 68.189472][ T296] mapped_file 0 [ 68.193127][ T296] dirty 0 [ 68.196094][ T296] writeback 778240 [ 68.199910][ T296] workingset_refault_anon 27 [ 68.204705][ T296] workingset_refault_file 5136 [ 68.209556][ T296] swap 127197184 [ 68.213199][ T296] swapcached 798720 [ 68.217544][ T296] pgpgin 254079 [ 68.221039][ T296] pgpgout 179222 [ 68.224600][ T296] pgfault 62670 [ 68.228269][ T296] pgmajfault 79 [ 68.231750][ T296] inactive_anon 6193152 [ 68.236118][ T296] active_anon 301867008 [ 68.243315][ T296] inactive_file 0 [ 68.255611][ T10] usb 1-1: USB disconnect, device number 13 [ 68.258424][ T403] usb 2-1: device descriptor read/8, error -71 [ 68.280628][ T296] active_file 0 [ 68.290735][ T296] unevictable 0 [ 68.300829][ T296] hierarchical_memory_limit 314572800 [ 68.321017][ T296] hierarchical_memsw_limit 9223372036854771712 [ 68.341198][ T296] total_cache 307851264 [ 68.345401][ T296] total_rss 77824 [ 68.361375][ T296] total_rss_huge 0 [ 68.365147][ T296] total_shmem 307851264 [ 68.389760][ T296] total_mapped_file 0 [ 68.396087][ T296] total_dirty 0 [ 68.409949][ T296] total_writeback 778240 [ 68.424387][ T296] total_workingset_refault_anon 27 [ 68.437920][ T296] total_workingset_refault_file 5136 [ 68.453458][ T296] total_swap 127197184 [ 68.463593][ T296] total_swapcached 798720 [ 68.471334][ T296] total_pgpgin 254079 [ 68.478278][ T296] total_pgpgout 179222 [ 68.482385][ T296] total_pgfault 62670 [ 68.487042][ T62] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 68.504797][ T296] total_pgmajfault 79 [ 68.509921][ T62] usb 4-1: device descriptor read/8, error -71 [ 68.516796][ T296] total_inactive_anon 6193152 [ 68.517114][ T403] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 68.522586][ T296] total_active_anon 301867008 [ 68.534152][ T296] total_inactive_file 0 [ 68.538659][ T296] total_active_file 0 [ 68.542794][ T296] total_unevictable 0 [ 68.547233][ T296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1314,uid=0 [ 68.548582][ T403] usb 2-1: device descriptor read/8, error -71 [ 68.563183][ T296] Memory cgroup out of memory: Killed process 1314 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:53808kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 can't open /dev/ttyS0: No such file or directory [ 68.638058][ T62] usb 4-1: device descriptor read/8, error -71 [ 68.653004][ T1321] syz.2.314 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 68.697055][ T1321] CPU: 1 UID: 0 PID: 1321 Comm: syz.2.314 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 68.697102][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.697117][ T1321] Call Trace: [ 68.697125][ T1321] [ 68.697133][ T1321] __dump_stack+0x21/0x30 [ 68.697176][ T1321] dump_stack_lvl+0x140/0x1c0 [ 68.697208][ T1321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.697240][ T1321] ? ___ratelimit+0x41c/0x5c0 [ 68.697266][ T1321] ? __kasan_check_write+0x18/0x20 [ 68.697292][ T1321] dump_stack+0x19/0x20 [ 68.697322][ T1321] dump_header+0xd9/0x460 [ 68.697354][ T1321] oom_kill_process+0x35d/0x640 [ 68.697382][ T1321] out_of_memory+0x5d1/0xa20 [ 68.697409][ T1321] ? __cfi_out_of_memory+0x10/0x10 [ 68.697435][ T1321] ? mutex_lock_killable+0x97/0x1d0 [ 68.697465][ T1321] ? __cfi_mutex_lock_killable+0x10/0x10 [ 68.697497][ T1321] mem_cgroup_out_of_memory+0x2c5/0x390 [ 68.697523][ T1321] ? css_next_descendant_pre+0x1ec/0x210 [ 68.697552][ T1321] ? __kasan_check_write+0x18/0x20 [ 68.697573][ T1321] ? drain_obj_stock+0xec0/0xec0 [ 68.697600][ T1321] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 68.697627][ T1321] try_charge_memcg+0x925/0xe10 [ 68.697659][ T1321] ? static_key_count+0x45/0x70 [ 68.697690][ T1321] ? lruvec_init+0x1f1/0x280 [ 68.697716][ T1321] ? __cfi_try_charge_memcg+0x10/0x10 [ 68.697749][ T1321] ? __alloc_pages_noprof+0x35a/0x7e0 [ 68.697783][ T1321] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 68.697819][ T1321] __mem_cgroup_charge+0xfc/0x420 [ 68.697841][ T1321] ? folio_add_lru+0x116/0x400 [ 68.697870][ T1321] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 68.697895][ T1321] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 68.697927][ T1321] ? shmem_replace_folio+0x9b0/0x9b0 [ 68.697957][ T1321] ? shmem_huge_global_enabled+0x2da/0x360 [ 68.697985][ T1321] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 68.698011][ T1321] ? __kasan_check_write+0x18/0x20 [ 68.698034][ T1321] ? _raw_spin_lock+0x92/0x120 [ 68.698056][ T1321] shmem_get_folio_gfp+0x5cd/0x12e0 [ 68.698116][ T1321] ? shmem_get_folio+0xc0/0xc0 [ 68.698141][ T1321] ? __kasan_check_write+0x18/0x20 [ 68.698163][ T1321] ? inode_to_bdi+0x6d/0x100 [ 68.698196][ T1321] shmem_write_begin+0xf4/0x260 [ 68.698225][ T1321] generic_perform_write+0x32c/0x970 [ 68.698258][ T1321] ? inode_update_timestamps+0x4d1/0x6e0 [ 68.698295][ T1321] ? __cfi_generic_perform_write+0x10/0x10 [ 68.698326][ T1321] ? generic_write_checks_count+0x426/0x540 [ 68.698357][ T1321] ? mnt_get_write_access_file+0x1af/0x3b0 [ 68.698391][ T1321] ? mnt_put_write_access_file+0xc2/0x100 [ 68.698425][ T1321] ? file_update_time+0x1de/0x210 [ 68.698446][ T1321] shmem_file_write_iter+0x105/0x130 [ 68.698479][ T1321] __kernel_write_iter+0x462/0x900 [ 68.698505][ T1321] ? __cfi___kernel_write_iter+0x10/0x10 [ 68.698529][ T1321] ? get_dump_page+0x165/0x220 [ 68.698561][ T1321] ? __asan_memset+0x39/0x50 [ 68.698584][ T1321] ? iov_iter_bvec+0xc0/0x180 [ 68.698618][ T1321] dump_user_range+0xb8b/0xe60 [ 68.698645][ T1321] ? __cfi_dump_user_range+0x10/0x10 [ 68.698672][ T1321] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 68.698707][ T1321] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 68.698742][ T1321] ? elf_core_dump+0x23cf/0x3840 [ 68.698772][ T1321] elf_core_dump+0x2d61/0x3840 [ 68.698805][ T1321] ? __cfi_elf_core_dump+0x10/0x10 [ 68.698835][ T1321] ? mas_next_slot+0xf01/0xfd0 [ 68.698873][ T1321] ? dump_interrupted+0xf0/0xf0 [ 68.698896][ T1321] ? filp_open+0x199/0x1f0 [ 68.698927][ T1321] ? 0xffffffffff600000 [ 68.698945][ T1321] do_coredump+0x20d2/0x3050 [ 68.698973][ T1321] ? __cfi_do_coredump+0x10/0x10 [ 68.698995][ T1321] ? asm_exc_page_fault+0x2b/0x30 [ 68.699032][ T1321] ? __kasan_slab_free+0x6a/0x80 [ 68.699068][ T1321] ? get_signal+0xa2a/0x1490 [ 68.699100][ T1321] get_signal+0x11bf/0x1490 [ 68.699134][ T1321] arch_do_signal_or_restart+0xbc/0x700 [ 68.699156][ T1321] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 68.699181][ T1321] ? __bad_area_nosemaphore+0x2fb/0x680 [ 68.699206][ T1321] irqentry_exit_to_user_mode+0x4d/0xb0 [ 68.699238][ T1321] irqentry_exit+0x16/0x60 [ 68.699269][ T1321] exc_page_fault+0x65/0xc0 [ 68.699299][ T1321] asm_exc_page_fault+0x2b/0x30 [ 68.699325][ T1321] RIP: 0033:0x7fef4239e161 [ 68.699344][ T1321] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 68.699363][ T1321] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 68.699384][ T1321] RAX: 0000000000000000 RBX: 00007fef42626090 RCX: 00007fef4239e159 [ 68.699401][ T1321] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 68.699416][ T1321] RBP: 00007fef4243506b R08: 0000000000000000 R09: 0000000000000000 [ 68.699431][ T1321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 68.699444][ T1321] R13: 00007fef42626128 R14: 00007fef42626090 R15: 00007ffe58e08f08 [ 68.699464][ T1321] [ 68.699559][ T1321] memory: usage 306448kB, limit 307200kB, failcnt 30364 [ 68.877233][ T62] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 68.883921][ T1321] memory+swap: usage 421804kB, limit 9007199254740988kB, failcnt 0 [ 68.918878][ T62] usb 4-1: device descriptor read/8, error -71 [ 68.920622][ T403] usb 2-1: device descriptor read/8, error -71 [ 69.058649][ T62] usb 4-1: device descriptor read/8, error -71 [ 69.123831][ T1321] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 69.259064][ T403] usb usb2-port1: unable to enumerate USB device [ 69.298199][ T36] audit: type=1400 audit(2000000019.640:353): avc: denied { map } for pid=1566 comm="syz.1.372" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.317479][ T62] usb usb4-port1: unable to enumerate USB device [ 69.337231][ T1321] Memory cgroup stats for /syz2: [ 69.337402][ T1321] cache 302448640 [ 69.346039][ T1321] rss 151552 [ 69.413393][ T1321] rss_huge 0 [ 69.441087][ T1321] shmem 302448640 [ 69.464334][ T1321] mapped_file 0 [ 69.483947][ T1321] dirty 0 [ 69.490894][ T36] audit: type=1400 audit(2000000019.830:354): avc: denied { write } for pid=1571 comm="syz.3.374" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.519578][ T1321] writeback 0 [ 69.522999][ T36] audit: type=1400 audit(2000000019.830:355): avc: denied { open } for pid=1571 comm="syz.3.374" path="/89/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.557326][ T1321] workingset_refault_anon 48 [ 69.566696][ T36] audit: type=1400 audit(2000000019.830:356): avc: denied { ioctl } for pid=1571 comm="syz.3.374" path="/89/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.572911][ T1321] workingset_refault_file 6144 can't open /dev/ttyS0: No such file or directory [ 69.659235][ T333] wiimote 0005:057E:0330.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 69.667075][ T36] audit: type=1400 audit(2000000019.990:357): avc: denied { read write } for pid=1581 comm="syz.0.376" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.669244][ T333] wiimote 0005:057E:0330.0005: New device registered [ 69.707753][ T1584] udevd[1584]: open /dev/null failed: No such file or directory [ 69.727151][ T36] audit: type=1400 audit(2000000019.990:358): avc: denied { open } for pid=1581 comm="syz.0.376" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 69.766086][ T1587] netlink: 104 bytes leftover after parsing attributes in process `syz.3.377'. [ 69.777816][ T1321] swap 127889408 [ 69.787231][ T1321] swapcached 106496 [ 69.791091][ T1321] pgpgin 265874 [ 69.794577][ T1321] pgpgout 192475 [ 69.807008][ T1321] pgfault 62930 [ 69.810563][ T1321] pgmajfault 101 [ 69.814136][ T1321] inactive_anon 299139072 [ 69.827067][ T1321] active_anon 3067904 [ 69.831183][ T1321] inactive_file 0 [ 69.838178][ T1321] active_file 0 [ 69.844980][ T1321] unevictable 0 [ 69.852898][ T1321] hierarchical_memory_limit 314572800 [ 69.873969][ T1321] hierarchical_memsw_limit 9223372036854771712 [ 69.877467][ T1581] wiimote 0005:057E:0330.0005: Device removed [ 69.895009][ T1321] total_cache 302448640 [ 69.907005][ T1321] total_rss 151552 [ 69.919584][ T1321] total_rss_huge 0 [ 69.928026][ T1321] total_shmem 302448640 [ 69.932301][ T1321] total_mapped_file 0 [ 69.936282][ T1321] total_dirty 0 [ 69.939834][ T1321] total_writeback 0 [ 69.943656][ T1321] total_workingset_refault_anon 48 [ 69.948842][ T1321] total_workingset_refault_file 6144 [ 69.954167][ T1321] total_swap 127889408 [ 69.958467][ T1321] total_swapcached 106496 [ 69.962934][ T1321] total_pgpgin 265874 [ 69.967007][ T1321] total_pgpgout 192475 [ 69.971143][ T1321] total_pgfault 62930 [ 69.975157][ T1321] total_pgmajfault 101 [ 69.979276][ T1321] total_inactive_anon 299139072 [ 69.984130][ T1321] total_active_anon 3067904 [ 69.988667][ T1321] total_inactive_file 0 [ 69.992832][ T1321] total_active_file 0 [ 69.996805][ T1321] total_unevictable 0 [ 70.000841][ T1321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1315,uid=0 [ 70.015697][ T1321] Memory cgroup out of memory: Killed process 1315 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:56332kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 70.037018][ T62] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 70.127352][ T1554] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 70.187494][ T1594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.196183][ T62] usb 4-1: device descriptor read/64, error -71 [ 70.212788][ T1594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.221149][ T1554] CPU: 0 UID: 0 PID: 1554 Comm: syz-executor Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 70.221182][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.221196][ T1554] Call Trace: [ 70.221204][ T1554] [ 70.221213][ T1554] __dump_stack+0x21/0x30 [ 70.221251][ T1554] dump_stack_lvl+0x140/0x1c0 [ 70.221283][ T1554] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.221320][ T1554] ? ___ratelimit+0x41c/0x5c0 [ 70.221347][ T1554] ? __kasan_check_write+0x18/0x20 [ 70.221380][ T1554] dump_stack+0x19/0x20 [ 70.221410][ T1554] dump_header+0xd9/0x460 [ 70.221441][ T1554] oom_kill_process+0x35d/0x640 [ 70.221468][ T1554] out_of_memory+0x5d1/0xa20 [ 70.221495][ T1554] ? __cfi_out_of_memory+0x10/0x10 [ 70.221521][ T1554] ? mutex_lock_killable+0x97/0x1d0 [ 70.221549][ T1554] ? __cfi_mutex_lock_killable+0x10/0x10 [ 70.221580][ T1554] mem_cgroup_out_of_memory+0x2c5/0x390 [ 70.221606][ T1554] ? css_next_descendant_pre+0x1ec/0x210 [ 70.221634][ T1554] ? __kasan_check_write+0x18/0x20 [ 70.221658][ T1554] ? drain_obj_stock+0xec0/0xec0 [ 70.221684][ T1554] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 70.221709][ T1554] try_charge_memcg+0x925/0xe10 [ 70.221741][ T1554] ? static_key_count+0x45/0x70 [ 70.221771][ T1554] ? lruvec_init+0x1f1/0x280 [ 70.221797][ T1554] ? __cfi_try_charge_memcg+0x10/0x10 [ 70.221830][ T1554] ? __alloc_pages_noprof+0x35a/0x7e0 [ 70.221882][ T1554] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 70.221918][ T1554] __mem_cgroup_charge+0xfc/0x420 [ 70.221941][ T1554] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 70.221963][ T1554] ? folio_unlock+0x137/0x1b0 [ 70.221989][ T1554] ? vma_data_pages+0x105/0x140 [ 70.222012][ T1554] folio_prealloc+0x67/0x220 [ 70.222042][ T1554] do_wp_page+0x187e/0x2e80 [ 70.222071][ T1554] ? folio_put+0x90/0x90 [ 70.222097][ T1554] ? __cfi__raw_spin_lock+0x10/0x10 [ 70.222120][ T1554] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 70.222144][ T1554] handle_mm_fault+0x1017/0x1ba0 [ 70.222175][ T1554] ? __cfi_handle_mm_fault+0x10/0x10 [ 70.222201][ T1554] ? lock_vma_under_rcu+0x4cf/0x590 [ 70.222232][ T1554] ? __se_sys_rt_sigprocmask+0x230/0x2a0 [ 70.222268][ T1554] do_user_addr_fault+0x951/0x1230 [ 70.222290][ T1554] ? __kasan_check_read+0x15/0x20 [ 70.222315][ T1554] exc_page_fault+0x58/0xc0 [ 70.222344][ T1554] asm_exc_page_fault+0x2b/0x30 [ 70.222378][ T1554] RIP: 0033:0x7fef42397af0 [ 70.222402][ T1554] Code: 0d fc ff 8b 00 f6 c4 80 75 d8 48 89 df e8 68 0d fc ff 48 8b 80 88 00 00 00 48 c7 00 00 00 00 00 48 c7 40 08 00 00 00 00 eb b8 <48> 83 05 48 4c dc 00 04 48 8b 05 29 5a dc 00 66 0f ef c0 48 c7 05 [ 70.222421][ T1554] RSP: 002b:00007ffe58e09150 EFLAGS: 00010246 [ 70.222442][ T1554] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fef4233f7a7 [ 70.222458][ T1554] RDX: 0000000000000000 RSI: 00007ffe58e09120 RDI: 0000000000000002 [ 70.222472][ T1554] RBP: 00007ffe58e092ac R08: 00007fef43158060 R09: 0000000000000000 [ 70.222487][ T1554] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 70.222501][ T1554] R13: 00000000000927c0 R14: 0000000000010623 R15: 00007ffe58e09300 [ 70.222520][ T1554] [ 70.222528][ T1554] memory: usage 292040kB, limit 307200kB, failcnt 31581 [ 70.397944][ T333] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 70.508218][ T1554] memory+swap: usage 401108kB, limit 9007199254740988kB, failcnt 0 [ 70.550405][ T62] usb 4-1: device descriptor read/64, error -71 can't open /dev/ttyS0: No such file or directory [ 70.613665][ T1554] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 70.633957][ T1554] Memory cgroup stats for /syz2: [ 70.634126][ T1554] cache 273408000 [ 70.662662][ T1554] rss 86016 [ 70.672357][ T1554] rss_huge 0 [ 70.682145][ T1554] shmem 273408000 [ 70.688195][ T333] usb 2-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 70.700444][ T1554] mapped_file 0 [ 70.703039][ T333] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 70.714812][ T333] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 70.719869][ T1554] dirty 0 [ 70.724556][ T333] usb 2-1: config 1 interface 0 has no altsetting 0 [ 70.734210][ T333] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 70.743315][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.751192][ T1554] writeback 1638400 [ 70.755882][ T1589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 70.763288][ T403] wiimote 0005:057E:0330.0005: detected device: Nintendo Wii Remote Plus (Gen 2) [ 70.769901][ T1554] workingset_refault_anon 48 [ 70.777188][ T1589] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 70.786039][ T403] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input8 [ 70.798047][ T333] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 70.807056][ T62] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 70.810365][ T1554] workingset_refault_file 6144 [ 70.820396][ T403] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input9 [ 70.831096][ T1554] swap 124092416 [ 70.835246][ T403] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0005/input/input7 [ 70.845896][ T1554] swapcached 1961984 [ 70.850011][ T1554] pgpgin 275202 [ 70.853563][ T1554] pgpgout 208464 [ 70.857479][ T1554] pgfault 62958 [ 70.861083][ T1554] pgmajfault 101 [ 70.864722][ T1554] inactive_anon 133775360 [ 70.869718][ T1554] active_anon 141492224 [ 70.873916][ T1554] inactive_file 0 [ 70.879377][ T1554] active_file 0 [ 70.882886][ T1554] unevictable 0 [ 70.886369][ T1554] hierarchical_memory_limit 314572800 [ 70.907025][ T1554] hierarchical_memsw_limit 9223372036854771712 [ 70.917180][ T1554] total_cache 273408000 [ 70.921377][ T1554] total_rss 86016 [ 70.935184][ T1554] total_rss_huge 0 [ 70.947009][ T1554] total_shmem 273408000 [ 70.947238][ T62] usb 4-1: device descriptor read/64, error -71 [ 70.951199][ T1554] total_mapped_file 0 [ 70.951211][ T1554] total_dirty 0 [ 70.987011][ T1554] total_writeback 1638400 [ 70.991398][ T1554] total_workingset_refault_anon 48 [ 71.006796][ T1554] total_workingset_refault_file 6144 [ 71.028686][ T1554] total_swap 124092416 [ 71.033459][ T1554] total_swapcached 1961984 [ 71.038394][ T1554] total_pgpgin 275202 [ 71.039663][ T442] usb 2-1: USB disconnect, device number 16 [ 71.042910][ T1554] total_pgpgout 208464 [ 71.057022][ T1554] total_pgfault 62958 [ 71.061048][ T1554] total_pgmajfault 101 [ 71.066561][ T1554] total_inactive_anon 133775360 [ 71.072211][ T1554] total_active_anon 141492224 [ 71.077397][ T1554] total_inactive_file 0 [ 71.081865][ T1554] total_active_file 0 [ 71.085876][ T1554] total_unevictable 0 [ 71.090239][ T1554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.314,pid=1319,uid=0 [ 71.105377][ T1554] Memory cgroup out of memory: Killed process 1319 (syz.2.314) total-vm:90528kB, anon-rss:1244kB, file-rss:56296kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 71.169568][ T1596] ./dev/sda1: Can't lookup blockdev [ 71.197499][ T1596] ./dev/sda1: Can't lookup blockdev [ 71.202875][ T1596] ./dev/sda1: Can't lookup blockdev [ 71.217026][ T62] usb 4-1: device descriptor read/64, error -71 [ 71.327130][ T62] usb usb4-port1: attempt power cycle can't open /dev/ttyS0: No such file or directory[ 71.612467][ T1601] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 71.638555][ T36] audit: type=1400 audit(2000000021.980:359): avc: denied { read write } for pid=1600 comm="syz.1.379" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.667068][ T62] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 71.678051][ T36] audit: type=1400 audit(2000000021.980:360): avc: denied { open } for pid=1600 comm="syz.1.379" path="/88/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.707794][ T62] usb 4-1: device descriptor read/8, error -71 [ 71.717415][ T36] audit: type=1400 audit(2000000021.980:361): avc: denied { ioctl } for pid=1600 comm="syz.1.379" path="/88/file0" dev="tmpfs" ino=516 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.838027][ T62] usb 4-1: device descriptor read/8, error -71 [ 72.087022][ T62] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 72.108044][ T62] usb 4-1: device descriptor read/8, error -71 [ 72.248138][ T62] usb 4-1: device descriptor read/8, error -71 [ 72.357179][ T62] usb usb4-port1: unable to enumerate USB device can't open /dev/ttyS0: No such file or directory [ 72.939562][ T36] audit: type=1400 audit(2000000023.280:362): avc: denied { sqpoll } for pid=1617 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.127116][ T311] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 73.277061][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 73.283466][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.293673][ T311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.304625][ T311] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.314398][ T311] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 73.327230][ T311] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.333854][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 73.342941][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.351665][ T311] usb 4-1: config 0 descriptor?? [ 73.547302][ T1630] netlink: 80 bytes leftover after parsing attributes in process `syz.2.386'. [ 73.556281][ T1631] netlink: 80 bytes leftover after parsing attributes in process `syz.2.386'. [ 73.566461][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 73.578731][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.586937][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.595186][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.603714][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.611947][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.620137][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.628365][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 can't open /dev[ 73.637240][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 /ttyS0: No such [ 73.646722][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 file or director[ 73.656407][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 y [ 73.665770][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.674156][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.682320][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.690489][ T311] logitech-djreceiver 0003:046D:C53A.0006: unknown main item tag 0x0 [ 73.698607][ T311] logitech-djreceiver 0003:046D:C53A.0006: unbalanced collection at end of report description [ 73.709085][ T311] logitech-djreceiver 0003:046D:C53A.0006: logi_dj_probe: parse failed [ 73.717391][ T311] logitech-djreceiver 0003:046D:C53A.0006: probe with driver logitech-djreceiver failed with error -22 [ 73.767762][ T62] usb 4-1: USB disconnect, device number 26 [ 74.309665][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 74.309683][ T36] audit: type=1400 audit(2000000024.650:365): avc: denied { nlmsg_write } for pid=1655 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.395324][ T1657] udevd[1657]: open /dev/null failed: No such file or directory [ 74.422602][ T314] udevd[314]: inotify_add_watch(7, /dev/sda, 10) failed: No such file or directory [ 74.435940][ T314] udevd[314]: inotify_add_watch(7, /dev/sda1, 10) failed: No such file or directory [ 74.481143][ T36] audit: type=1400 audit(2000000024.820:366): avc: denied { read write } for pid=1658 comm="syz.3.393" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 74.482051][ T1659] mtrr: base(0x10000) is not aligned on a size(0x91010000) boundary [ 74.504565][ T36] audit: type=1400 audit(2000000024.820:367): avc: denied { open } for pid=1658 comm="syz.3.393" path="/95/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 74.535843][ T36] audit: type=1400 audit(2000000024.820:368): avc: denied { ioctl } for pid=1658 comm="syz.3.393" path="/95/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 can't open /dev/ttyS0: No such file or directory [ 74.702580][ T1670] ./dev/sda1: Can't lookup blockdev [ 74.757066][ T311] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 74.762583][ T1685] overlayfs: failed to clone upperpath [ 74.846124][ T36] audit: type=1326 audit(2000000025.180:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1686 comm="syz.1.401" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0599e159 code=0x0 [ 74.898285][ T36] audit: type=1326 audit(2000000025.240:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1686 comm="syz.1.401" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0599e159 code=0x7ffe0000 [ 74.924907][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 74.934297][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.061207][ T1693] rust_binder: 1692:1693 got reply transaction with no transaction stack [ 75.069828][ T1693] rust_binder: 1692:1693 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 [ 75.155749][ T311] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 75.327032][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 75.477070][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 75.485265][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.494080][ T31] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 75.504596][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.515058][ T31] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 75.524408][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.532584][ T31] usb 1-1: Product: syz [ 75.536822][ T31] usb 1-1: Manufacturer: syz [ 75.541508][ T31] usb 1-1: SerialNumber: syz [ 75.544482][ T1699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.555323][ T1699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 can't open /dev/ttyS0: No such file or directory [ 75.757057][ T62] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 75.809567][ T10] rust_binder: 1692: undelivered TRANSACTION_ERROR: 29201 [ 75.817309][ T31] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 75.825625][ T31] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 75.834135][ T31] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 75.842407][ T31] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 75.852194][ T31] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 75.860476][ T31] usb 1-1: 3:0: cannot get min/max values for control 8 (id 3) [ 75.868685][ T31] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 75.876120][ T31] usb 1-1: 3:0: failed to get current value for ch 2 (-71) [ 75.884073][ T31] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 75.891904][ T31] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 75.900214][ T31] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 75.911170][ T31] usb 1-1: USB disconnect, device number 14 [ 75.917187][ T62] usb 2-1: Using ep0 maxpacket: 32 [ 75.927140][ T62] usb 2-1: unable to get BOS descriptor or descriptor too short [ 75.929183][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.936092][ T62] usb 2-1: config 178 has an invalid interface number: 183 but max is 0 [ 75.959434][ T62] usb 2-1: config 178 has no interface number 0 [ 75.965789][ T62] usb 2-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 75.977827][ T62] usb 2-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 75.987032][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.995076][ T62] usb 2-1: Product: syz [ 76.000723][ T62] usb 2-1: Manufacturer: syz [ 76.005394][ T62] usb 2-1: SerialNumber: syz [ 76.013793][ T1698] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 76.047782][ T10] usb 4-1: USB disconnect, device number 27 [ 76.340619][ T1713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=1713 comm=syz.0.407 [ 76.353122][ T1713] netlink: 88 bytes leftover after parsing attributes in process `syz.0.407'. [ 76.607057][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd can't open /dev/ttyS0: No such file or directory [ 76.759168][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.767354][ T10] usb 1-1: config 0 has no interface number 0 [ 76.773600][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.785240][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.795477][ T10] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.808841][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 76.816247][ T10] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 76.834295][ T10] usb 1-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 76.848275][ T10] usb 1-1: Manufacturer: syz [ 76.849930][ T1722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.865297][ T10] usb 1-1: config 0 descriptor?? [ 76.871022][ T1726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.872184][ T62] usb 2-1: USB disconnect, device number 17 [ 76.898336][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.021595][ T36] audit: type=1400 audit(2000000027.360:371): avc: denied { map } for pid=1731 comm="syz.1.413" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.207045][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 77.337037][ T62] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 77.358493][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.367047][ T31] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 77.375437][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.385607][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.394621][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 77.405448][ T31] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 77.417001][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 77.426680][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 77.441372][ T31] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 77.450489][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.458532][ T31] usb 4-1: Product: syz [ 77.462721][ T31] usb 4-1: Manufacturer: ␉ [ 77.467368][ T31] usb 4-1: SerialNumber: syz [ 77.497052][ T10] uclogic 0003:145F:0212.0007: failed retrieving string descriptor #100: -71 [ 77.506331][ T10] uclogic 0003:145F:0212.0007: failed retrieving pen parameters: -71 [ 77.515108][ T10] uclogic 0003:145F:0212.0007: pen probing failed: -71 [ 77.522325][ T10] uclogic 0003:145F:0212.0007: failed probing parameters: -71 [ 77.524638][ T1738] netlink: 220 bytes leftover after parsing attributes in process `syz.2.416'. [ 77.530950][ T62] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.550641][ T10] uclogic 0003:145F:0212.0007: probe with driver uclogic failed with error -71 [ 77.560908][ T10] usb 1-1: USB disconnect, device number 15 [ 77.567022][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 77.579354][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 77.591234][ T62] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 77.600359][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.610627][ T62] usb 2-1: config 0 descriptor?? [ 77.615935][ T1734] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 can't open /dev/ttyS0: No such file or directory [ 77.676049][ T31] usb 4-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 77.685886][ T31] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 77.696198][ T31] usb 4-1: USB disconnect, device number 28 [ 77.710958][ T620] udevd[620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.025924][ T1734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.034659][ T1734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.061419][ T62] usbhid 2-1:0.0: can't add hid device: -71 [ 78.067961][ T62] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 78.079644][ T62] usb 2-1: USB disconnect, device number 18 [ 78.287025][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 78.320935][ T1755] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 78.366921][ T36] audit: type=1400 audit(2000000028.700:372): avc: denied { mount } for pid=1756 comm="syz.3.423" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.396776][ T36] audit: type=1400 audit(2000000028.730:373): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.438214][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.449606][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.459755][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.472794][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 78.481947][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.494089][ T10] usb 1-1: config 0 descriptor?? can't open /dev/ttyS0: No such file or directory [ 78.901678][ T1741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.907175][ T404] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 78.910600][ T1741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.068058][ T404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.079738][ T404] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 79.088896][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.096920][ T404] usb 2-1: Product: syz [ 79.101170][ T404] usb 2-1: Manufacturer: syz [ 79.105796][ T404] usb 2-1: SerialNumber: syz [ 79.112926][ T404] usb-storage 2-1:1.0: USB Mass Storage device detected [ 79.120760][ T404] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 79.129157][ T404] scsi host1: usb-storage 2-1:1.0 [ 79.134659][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 79.142481][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 79.151578][ T10] usb 1-1: USB disconnect, device number 16 can't open /dev/ttyS0: No such file or directory [ 79.824044][ T31] usb 2-1: USB disconnect, device number 19 [ 80.177051][ T31] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 80.328213][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.339904][ T31] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 80.349264][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.357910][ T31] usb 2-1: Product: syz [ 80.362146][ T31] usb 2-1: Manufacturer: syz [ 80.366795][ T31] usb 2-1: SerialNumber: syz [ 80.374162][ T31] usb 2-1: config 0 descriptor?? [ 80.380626][ T31] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 80.585332][ T1785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.595232][ T1785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.611514][ T31] usb 2-1: USB disconnect, device number 20 can't open /dev/ttyS0: No such file or directory [ 80.957041][ T46] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 81.117012][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 81.123978][ T46] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.159979][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.184410][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.40 [ 81.201212][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.220301][ T46] usb 1-1: Product: 蓌㈌ꛢႬ啘ꭉ粿䄹㢤ὥ阓▅峰᭮섧㬙篮㤉侪咵푄ဒ膭ۅ㭘痴㞂讔饿줵䭎雃䪘谖٣땧⚟㛂鎑铨싮 [ 81.257011][ T46] usb 1-1: Manufacturer: ќ [ 81.437042][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 81.467702][ T46] usbhid 1-1:1.0: can't add hid device: -71 [ 81.473749][ T46] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 81.484936][ T46] usb 1-1: USB disconnect, device number 17 [ 81.598229][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.609298][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 81.620792][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.634060][ T31] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 81.643232][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.653799][ T31] usb 2-1: config 0 descriptor?? can't open /dev/ttyS0: No such file or directory [ 81.864608][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 81.871586][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 81.884711][ T31] usb 2-1: USB disconnect, device number 21 [ 82.007913][ T36] audit: type=1326 audit(2000000032.350:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.0.435" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd473b9e159 code=0x0 [ 82.183924][ T1803] netlink: 'syz.2.436': attribute type 11 has an invalid length. [ 82.192005][ T1803] netlink: 'syz.2.436': attribute type 11 has an invalid length. [ 82.445062][ T36] audit: type=1400 audit(2000000032.780:375): avc: denied { read } for pid=1818 comm="syz.1.439" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.492441][ T36] audit: type=1400 audit(2000000032.830:376): avc: denied { mounton } for pid=1820 comm="syz.1.440" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.515709][ T36] audit: type=1400 audit(2000000032.830:377): avc: denied { mounton } for pid=1820 comm="syz.1.440" path="/selinux/avc/cache_stats" dev="selinuxfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 can't open /dev/ttyS0: No such file or directory [ 82.717067][ T442] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 82.887007][ T442] usb 2-1: Using ep0 maxpacket: 16 [ 82.899989][ T442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.918568][ T442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.928822][ T442] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.948143][ T442] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.963058][ T442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.981284][ T442] usb 2-1: config 0 descriptor?? [ 83.230294][ T442] usbhid 2-1:0.0: can't add hid device: -71 [ 83.236317][ T442] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 83.247158][ T442] usb 2-1: USB disconnect, device number 22 [ 83.357057][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 83.517048][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 83.523485][ T46] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 83.531875][ T46] usb 1-1: config 0 has no interface number 0 [ 83.538206][ T46] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 83.548458][ T46] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 83.560228][ T46] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 83.576546][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.590716][ T46] usb 1-1: Product: syz [ 83.595173][ T46] usb 1-1: Manufacturer: syz [ 83.600083][ T46] usb 1-1: SerialNumber: syz [ 83.606180][ T46] usb 1-1: config 0 descriptor?? [ 83.612678][ T1843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.620282][ T1843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 can't open /dev/ttyS0: No such file or directory [ 83.753784][ T36] audit: type=1400 audit(2000000034.090:378): avc: denied { read write } for pid=1847 comm="syz.1.448" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.778932][ T36] audit: type=1400 audit(2000000034.090:379): avc: denied { open } for pid=1847 comm="syz.1.448" path="/105/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.803762][ T36] audit: type=1400 audit(2000000034.090:380): avc: denied { ioctl } for pid=1847 comm="syz.1.448" path="/105/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 83.838167][ T1843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.845389][ T1843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.927075][ T1850] FAULT_INJECTION: forcing a failure. [ 83.927075][ T1850] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.942028][ T1848] FAULT_INJECTION: forcing a failure. [ 83.942028][ T1848] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.015574][ T1850] CPU: 1 UID: 0 PID: 1850 Comm: syz.1.448 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 84.015616][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.015632][ T1850] Call Trace: [ 84.015640][ T1850] [ 84.015649][ T1850] __dump_stack+0x21/0x30 [ 84.015687][ T1850] dump_stack_lvl+0x140/0x1c0 [ 84.015719][ T1850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.015752][ T1850] ? restore_altstack+0x2d5/0x500 [ 84.015777][ T1850] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 84.015802][ T1850] dump_stack+0x19/0x20 [ 84.015833][ T1850] should_fail_ex+0x3c2/0x510 [ 84.015863][ T1850] should_fail+0xf/0x20 [ 84.015890][ T1850] should_fail_usercopy+0x1e/0x30 [ 84.015920][ T1850] _copy_from_user+0x20/0xa0 [ 84.015954][ T1850] __ia32_sys_rt_sigreturn+0x272/0x830 [ 84.015978][ T1850] ? _raw_spin_unlock_irq+0x45/0x70 [ 84.016002][ T1850] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 84.016031][ T1850] ? __kasan_check_read+0x15/0x20 [ 84.016058][ T1850] x64_sys_call+0x2c14/0x2ee0 [ 84.016080][ T1850] do_syscall_64+0x57/0xf0 [ 84.016103][ T1850] ? clear_bhb_loop+0x50/0xa0 [ 84.016133][ T1850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.016162][ T1850] RIP: 0033:0x7f5e0593f4d9 [ 84.016182][ T1850] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 84.016202][ T1850] RSP: 002b:00007f5e0678ab40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 84.016227][ T1850] RAX: ffffffffffffffda RBX: 00007f5e05c26188 RCX: 00007f5e0593f4d9 [ 84.016246][ T1850] RDX: 00007f5e0678ab40 RSI: 00007f5e0678ac70 RDI: 0000000000000021 [ 84.016262][ T1850] RBP: 00007f5e05c26180 R08: 0000000000000000 R09: 0000000000000000 [ 84.016278][ T1850] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.016292][ T1850] R13: 00007f5e05c26218 R14: 00007ffce0a9bb60 R15: 00007ffce0a9bc48 [ 84.016312][ T1850] [ 84.069593][ T1848] CPU: 0 UID: 0 PID: 1848 Comm: syz.1.448 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 84.069698][ T1848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.069745][ T1848] Call Trace: [ 84.069771][ T1848] [ 84.069793][ T1848] __dump_stack+0x21/0x30 [ 84.069886][ T1848] dump_stack_lvl+0x140/0x1c0 [ 84.069967][ T1848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.070060][ T1848] ? get_sigframe+0x60d/0x830 [ 84.070120][ T1848] dump_stack+0x19/0x20 [ 84.070193][ T1848] should_fail_ex+0x3c2/0x510 [ 84.070271][ T1848] should_fail+0xf/0x20 [ 84.070333][ T1848] should_fail_usercopy+0x1e/0x30 [ 84.070405][ T1848] _copy_to_user+0x24/0xa0 [ 84.070495][ T1848] copy_siginfo_to_user+0x26/0xb0 [ 84.070580][ T1848] x64_setup_rt_frame+0x774/0xc20 [ 84.070643][ T1848] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 84.070704][ T1848] arch_do_signal_or_restart+0x328/0x700 [ 84.070765][ T1848] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 84.070826][ T1848] ? __kasan_check_read+0x15/0x20 [ 84.070887][ T1848] syscall_exit_to_user_mode+0x57/0xb0 [ 84.070969][ T1848] do_syscall_64+0x63/0xf0 [ 84.071021][ T1848] ? clear_bhb_loop+0x50/0xa0 [ 84.071130][ T1848] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.071221][ T1848] RIP: 0033:0x7f5e0599e157 [ 84.071271][ T1848] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 84.071315][ T1848] RSP: 002b:00007f5e067cd028 EFLAGS: 00000246 [ 84.071367][ T1848] RAX: 0000000000000113 RBX: 00007f5e05c25fa0 RCX: 00007f5e0599e159 [ 84.071408][ T1848] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000009 [ 84.071449][ T1848] RBP: 00007f5e05a3506b R08: 0000000000039000 R09: 0000000000000000 [ 84.071489][ T1848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.071528][ T1848] R13: 00007f5e05c26038 R14: 00007f5e05c25fa0 R15: 00007ffce0a9bc48 [ 84.071567][ T1848] [ 84.409017][ T46] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 84.467483][ T36] audit: type=1326 audit(2000000034.810:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.1.450" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0599e159 code=0x0 [ 84.578329][ T46] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 80 can't open /dev/ttyS0: No such file or directory [ 84.782832][ T46] usb 1-1: USB disconnect, device number 18 [ 85.557095][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd can't open /dev/ttyS0: No such file or directory [ 85.707073][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 85.713759][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.722467][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.732831][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.743360][ T46] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 85.752629][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.762173][ T46] usb 2-1: Product: syz [ 85.766422][ T46] usb 2-1: Manufacturer: syz [ 85.771233][ T46] usb 2-1: SerialNumber: syz [ 85.980782][ T1872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.999083][ T1872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.011917][ T46] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 86.020445][ T46] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 86.029001][ T46] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 86.037592][ T46] usb 2-1: 3:0: cannot get min/max values for control 3 (id 3) [ 86.045941][ T46] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 86.054747][ T46] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 86.064804][ T46] usb 2-1: 3:0: failed to get current value for ch 2 (-71) [ 86.075591][ T46] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 86.085944][ T46] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 86.094136][ T46] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 86.102808][ T46] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 86.119273][ T46] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 86.131642][ T46] usb 2-1: USB disconnect, device number 23 can't open /dev/ttyS0: No such file or directory [ 86.767061][ T442] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 86.920018][ T442] usb 2-1: Using ep0 maxpacket: 16 [ 86.929730][ T442] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.941701][ T442] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.952453][ T442] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.970370][ T442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.978807][ T442] usb 2-1: Product: syz [ 86.983077][ T442] usb 2-1: Manufacturer: syz [ 86.988777][ T442] usb 2-1: SerialNumber: syz [ 87.195910][ T1882] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 87.300310][ T442] usb 2-1: 0:2 : does not exist [ 87.309436][ T442] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 87.317262][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 87.328891][ T442] usb 2-1: USB disconnect, device number 24 [ 87.348991][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.497026][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 87.503407][ T46] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.514655][ T46] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 87.527840][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.534523][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 87.543917][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.557277][ T46] usb 1-1: config 0 descriptor?? can't open /dev/ttyS0: No such file or directory [ 87.765376][ T10] usb 1-1: USB disconnect, device number 19 [ 88.077044][ T46] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 88.228253][ T46] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.239319][ T46] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.253895][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.260706][ T46] usb 2-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 88.269994][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.312573][ T46] usb 2-1: config 0 descriptor?? [ 88.320913][ T36] audit: type=1400 audit(2000000038.660:382): avc: denied { accept } for pid=1903 comm="syz.0.464" lport=57730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 88.392295][ T36] audit: type=1400 audit(2000000038.730:383): avc: denied { read } for pid=1901 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.667051][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd can't open /dev/ttyS0: No such file or directory [ 88.722238][ T46] input: HID 14e1:6000 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:14E1:6000.0008/input/input12 [ 88.745866][ T46] hid-penmount 0003:14E1:6000.0008: input,hidraw0: USB HID v36.2c Joystick [HID 14e1:6000] on usb-dummy_hcd.1-1/input0 [ 88.762742][ T1969] udevd[1969]: open /dev/null failed: No such file or directory [ 88.817049][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 88.823809][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.832593][ T10] usb 1-1: config 3 has an invalid interface number: 67 but max is 0 [ 88.840889][ T10] usb 1-1: config 3 has no interface number 0 [ 88.847237][ T10] usb 1-1: config 3 interface 67 has no altsetting 0 [ 88.856282][ T10] usb 1-1: string descriptor 0 read error: -22 [ 88.862836][ T10] usb 1-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28 [ 88.872104][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.893088][ T10] uvcvideo 1-1:3.67: Found multiple Units with ID 1 [ 88.902836][ T10] usb 1-1: Found UVC 0.00 device (13d3:5103) [ 88.909790][ T10] usb 1-1: No valid video chain found. [ 88.921707][ T10] usb 2-1: USB disconnect, device number 25 [ 89.092233][ T442] usb 1-1: USB disconnect, device number 20 [ 89.136521][ T1980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. can't open /dev/ttyS0: No such file or directory [ 89.732370][ T36] audit: type=1400 audit(2000000040.070:384): avc: denied { name_bind } for pid=1988 comm="syz.2.474" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 89.797932][ T1999] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 89.805823][ T1999] netlink: 'syz.2.477': attribute type 32 has an invalid length. [ 90.137332][ T2014] loop8: detected capacity change from 0 to 16384 [ 90.158497][ T314] udevd[314]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 90.219635][ T2014] I/O error, dev loop8, sector 5632 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 90.247764][ T2014] I/O error, dev loop8, sector 5888 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 90.273635][ T2014] I/O error, dev loop8, sector 5632 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.287025][ T2014] buffer_io_error: 153 callbacks suppressed [ 90.287045][ T2014] Buffer I/O error on dev loop8, logical block 704, async page read [ 90.457075][ T442] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 90.589076][ T36] audit: type=1400 audit(2000000040.930:385): avc: denied { read } for pid=2017 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.628259][ T442] usb 1-1: not running at top speed; connect to a high speed hub [ 90.636766][ T442] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 90.657046][ T442] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 90.669911][ T36] audit: type=1400 audit(2000000041.010:386): avc: denied { create } for pid=2017 comm="syz.1.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.672102][ T442] usb 1-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 90.698775][ T442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.707002][ T442] usb 1-1: Product: syz [ 90.711234][ T442] usb 1-1: Manufacturer: syz [ 90.715891][ T442] usb 1-1: SerialNumber: syz can't open /dev/ttyS0: No such file or directory [ 90.929795][ T442] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.932297][ T2013] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 90.947241][ T442] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 90.948724][ T2013] Buffer I/O error on dev loop8, logical block 0, lost async page write [ 90.962981][ T2013] Buffer I/O error on dev loop8, logical block 1, lost async page write [ 90.971947][ T2013] Buffer I/O error on dev loop8, logical block 2, lost async page write [ 90.980998][ T2013] Buffer I/O error on dev loop8, logical block 3, lost async page write [ 90.981825][ T442] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 90.998449][ T2013] Buffer I/O error on dev loop8, logical block 4, lost async page write [ 91.006845][ T2013] Buffer I/O error on dev loop8, logical block 5, lost async page write [ 91.017291][ T442] usb 1-1: USB disconnect, device number 21 [ 91.023450][ T2013] Buffer I/O error on dev loop8, logical block 6, lost async page write [ 91.033139][ T2013] Buffer I/O error on dev loop8, logical block 7, lost async page write [ 91.051145][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.067004][ T2013] Buffer I/O error on dev loop8, logical block 8, lost async page write [ 91.081925][ T2013] I/O error, dev loop8, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 91.106270][ T2013] I/O error, dev loop8, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 91.121039][ T2013] I/O error, dev loop8, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 91.135561][ T2013] I/O error, dev loop8, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 91.149432][ T2013] I/O error, dev loop8, sector 5120 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 2 [ 91.172998][ T314] udevd[314]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 91.201836][ T314] udevd[314]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 91.428822][ T36] audit: type=1400 audit(2000000041.770:387): avc: denied { map } for pid=2033 comm="syz.1.489" path="socket:[24774]" dev="sockfs" ino=24774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 91.429334][ T2034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.489'. [ 91.482340][ T36] audit: type=1400 audit(2000000041.800:388): avc: denied { mounton } for pid=2033 comm="syz.1.489" path="/syzcgroup/cpu/syz1/memory.limit_in_bytes" dev="cgroup" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 can't open /dev/ttyS0: No such file or directory [ 92.087019][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 92.247041][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 92.258858][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 92.281028][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 92.307025][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.313780][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 92.333043][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.343366][ T10] usb 1-1: config 0 descriptor?? can't open /dev/ttyS0: No such file or directory [ 92.779933][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 92.790091][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 92.797912][ T36] audit: type=1400 audit(2000000043.130:389): avc: denied { mounton } for pid=2057 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.820608][ T10] usb 1-1: USB disconnect, device number 22 [ 93.329003][ T2067] netlink: 'syz.0.499': attribute type 16 has an invalid length. can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory [ 95.000035][ T1930] bridge_slave_1: left allmulticast mode [ 95.017061][ T1930] bridge_slave_1: left promiscuous mode [ 95.023890][ T1930] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.037006][ T10] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 95.044786][ T1930] bridge_slave_0: left allmulticast mode [ 95.053803][ T1930] bridge_slave_0: left promiscuous mode [ 95.059772][ T1930] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.068059][ T1930] tipc: Resetting bearer [ 95.087440][ T1930] tipc: Disabling bearer [ 95.197029][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.209707][ T1930] tipc: Left network mode [ 95.218545][ T1930] veth1_macvtap: left promiscuous mode [ 95.224095][ T1930] veth0_vlan: left promiscuous mode [ 95.339848][ T10] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 95.497004][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 95.508218][ T10] usb usb1-port1: attempt power cycle can't open /dev/ttyS0: No such file or directory [ 95.857039][ T10] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 95.877362][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 96.017045][ T10] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 96.048577][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 96.054065][ T10] usb usb1-port1: unable to enumerate USB device [ 96.413442][ T2133] ./mnt: Can't lookup blockdev [ 96.417063][ T36] audit: type=1400 audit(2000000046.750:390): avc: denied { mounton } for pid=2132 comm="syz.2.507" path="/181/file0" dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 can't open /dev/ttyS0: No such file or directory [ 96.925837][ T36] audit: type=1400 audit(2000000047.260:391): avc: denied { create } for pid=2145 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.945549][ T2146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. can't open /dev/ttyS0: No such file or directory [ 97.935846][ T2171] rust_binder: Write failure EFAULT in pid:355 [ 98.297066][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 98.467025][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 98.473400][ T46] usb 1-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.483803][ T46] usb 1-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 608 [ 98.494206][ T46] usb 1-1: config 1 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 98.505366][ T46] usb 1-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 98.518877][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 98.526381][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.535738][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.543938][ T46] usb 1-1: SerialNumber: syz [ 98.550385][ T2175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 can't open /dev/ttyS0: No such file or directory [ 98.850233][ T46] usb 1-1: USB disconnect, device number 27 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=497 state=3 status=67 (errno 32: Broken pipe) [ 98.894632][ T36] audit: type=1400 audit(2000000049.230:392): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1779]" dev="pipefs" ino=1779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 99.219051][ T1960] bridge_slave_1: left allmulticast mode [ 99.224727][ T1960] bridge_slave_1: left promiscuous mode [ 99.230408][ T1960] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.238043][ T1960] bridge_slave_0: left allmulticast mode [ 99.243699][ T1960] bridge_slave_0: left promiscuous mode [ 99.249425][ T1960] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.257385][ T1960] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.264843][ T1960] bridge_slave_0: left allmulticast mode [ 99.270608][ T1960] bridge_slave_0: left promiscuous mode [ 99.276219][ T1960] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.441094][ T1960] veth1_macvtap: left promiscuous mode [ 99.446630][ T1960] veth0_vlan: left promiscuous mode [ 99.452240][ T1960] veth1_macvtap: left promiscuous mode [ 99.457827][ T1960] veth0_vlan: left promiscuous mode can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory can't open /dev/ttyS0: No such file or directory