last executing test programs: 11m58.493762557s ago: executing program 0 (id=66): prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) 11m57.528097909s ago: executing program 0 (id=70): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0x0) 11m56.336912985s ago: executing program 1 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 11m54.655743692s ago: executing program 0 (id=77): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000800) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 11m53.899752339s ago: executing program 0 (id=80): prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) 11m52.93031292s ago: executing program 1 (id=82): bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_vhci(0x0, 0x14) socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000fdc0000000000009500"/30], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x9b, 0xffffff81, 0x1, 0x10, 0x7, 0x1}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 11m48.815738661s ago: executing program 1 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 11m48.553220806s ago: executing program 1 (id=88): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11m47.206442446s ago: executing program 1 (id=91): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200076a0ec20749380000000a0304004e234e2202000100ffff00000000000100"/53, @ANYRES32=0x0, @ANYBLOB="05000000130600000800000100000000080003"], 0x54}}, 0x20004010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = getpid() syz_pidfd_open(r4, 0x0) 11m45.585044102s ago: executing program 1 (id=94): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0) tkill(0x0, 0x11) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 11m45.536726533s ago: executing program 0 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000) close_range(r1, 0xffffffffffffffff, 0x0) 11m37.554067669s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) 11m30.364478357s ago: executing program 32 (id=94): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0) tkill(0x0, 0x11) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 11m21.246312568s ago: executing program 33 (id=105): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000009}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) 8m41.489758489s ago: executing program 6 (id=438): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m38.149455513s ago: executing program 6 (id=444): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="11000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r0, @ANYRES8=r2], 0x20) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80000003, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xc, 0xb44b, 0x11, 0x4, 0xa, 0x4, 0x3, 0x6}}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) close(r2) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x3, {0x0, 0xa}, {0x1, 0x3cc}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0], 0x3}}, 0x4) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x4080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000030601020000000000000000050000080900020073797a31000000000500010007000000b8fb81721d274e74023b"], 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x10) 8m36.391362831s ago: executing program 6 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @random='K\x00'}]}, 0x40}}, 0x8000) 8m35.712086046s ago: executing program 6 (id=454): syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000001800), 0x2, 0x2) readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/237, 0xed}], 0x1) 8m34.621582371s ago: executing program 6 (id=456): ioperm(0x4, 0x8, 0x5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20882, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r5, 0x0, 0x38f9, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) write(r2, &(0x7f0000000040), 0xffffff4a) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x81}}, {@minixdf}, {@bh}, {@delalloc}, {@dioread_nolock}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r6 = creat(0x0, 0x182) r7 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) 8m32.910171018s ago: executing program 6 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 8m16.603839127s ago: executing program 34 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 21.128121095s ago: executing program 5 (id=1395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x10, 0x1, 0xa6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa704, 0x800, 0x1000002, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4020001, 0xffffffff}}], 0x1, 0x0, 0x0) 20.676150135s ago: executing program 4 (id=1398): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5000) 19.487613651s ago: executing program 4 (id=1399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 17.801466648s ago: executing program 4 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000002c0)={0x32, 0x17, 0x1, {0x29, './config/usb_gadget/g1/functions/ffs.usb0'}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) 17.691310011s ago: executing program 5 (id=1401): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_open_dev$loop(0x0, 0x2, 0x2001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) getpid() 14.027513751s ago: executing program 7 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 14.011741431s ago: executing program 3 (id=1411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x10, 0x1, 0xa6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa704, 0x800, 0x1000002, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4020001, 0xffffffff}}], 0x1, 0x0, 0x0) 12.574701053s ago: executing program 4 (id=1412): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") 12.400854327s ago: executing program 7 (id=1413): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(0xffffffffffffffff, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000001c0)={0xc, 0x0, 0xd, &(0x7f0000000240)="eb9a111903719052efc2ea8ed9"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) 11.239938033s ago: executing program 2 (id=1415): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x138, 0x0, 0xfd, [{{0x0, 0x0, 0x7d, 0xfff, 0x6, 0x3, {0x83, 0x4, 0x2b6a, 0x0, 0x4, 0x5, 0x7, 0x100, 0x6, 0x8000, 0x40, 0x0, r2, 0x0, 0x6}}, {0x1, 0x2b96, 0x8d, 0x51, '(\\\xab\x12(>D=t\v\x92\b\x9f\x8a\xf5\a\xa5\xdf\x80\xaf\x84\x83\x14(ouv\xc6\t/\xb9\x87\xfa\xa86\xbc!R\x85\x92\x13&4\xac\x81\x13\xa2[\xd4\xdd\x9c\x84#\xacAo\f\x82\x1e\x12\xb7\xd0P\x8c\x9aN1\x1f\xc8X\xc6-z(\xef\'\xbd\xe0\xadO\\\xe1\x98W\xedy\x93\xcbr\xdc\x8e\xa9\x82\xe663\xd8\xe2\xfc\x1e)\xf8\xf2 \xf6\x91}\xdb\xa1 p\xcb#\xbd\v\x93,2\x13?\xbb\x1av4[\x01\xb7\xe8\xb9\xb6\x97}g\xbb\n\xcbs&\x12\xfd\xc5'}}]}, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) 10.342196192s ago: executing program 5 (id=1416): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000020000000000000100010000000000000000000426010000010000000000001205000000040000000000001203000000000000000000000d000000000061ac045f5f5f00"], 0x0, 0x5a, 0x0, 0xb}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x14) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000540)) r1 = timerfd_create(0x9, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) r4 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0xfffffff8, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40201, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x5, 0x2, 0x6}) sendmsg$NFT_BATCH(r5, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x1a0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa4, 0x6, "5fb28d2e87959e9a095aa1717ebf5d2a63580c41cfb7a3c5d0f4510ffa4027ecc53d4207d871a97f609829dabae951dd7111806a41daae3c604e44f2b795f510ad6aa958273ca3dc8179823df029c536cd75f8c22e2b09defc07c7bb1577946e2157ca05d184160554b7bf1ed7d5bbdb165fb8cb9e3078d3c8ed6b7cfb0488b09ff72cbc28bfcb1713a8f0d467b64b1d4117226c6467e8bb273fe6d746f72b7d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "51e4a86e789a415577ef8389beb3839e0d8bf8e120ec3e4742ff6d62a0cfeac8409e731ca5ccdc588c7f0d11706c8f84ff8e72f7c4bd40d0e3bdcc1643e9358e0b57136ea3fd6e187439c3dd5d11263132ade057fdd30aeca3a4f57f1d4d64d3fba59ed1b0e40d35f5c138a8f2b3bfa69e5793e78c2b74bed6f42aed63dd8ad42e10068eacd1b21d1c235d976a85b8548ef1d9dcf78a80d8ebd627936821"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x40800}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)="ad7b3241e04c6f2e67f03fd843636a94c2f8d251bae73f2eff6ef4940ad175e6f6444855e228e1a60421d5bd074d2e5c5248df66dc7004a125aa6647668f13a062373ebc88bae96455c5f302c39d02f8d5864b35d62ddc8c32a9ed399202a5c48488", 0x62, r1}, 0x68) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r4, 0x24, &(0x7f0000000400)={0x0, 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) fallocate(r4, 0x22, 0x3, 0x6b8) 10.188134026s ago: executing program 3 (id=1417): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r5, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) 10.116152018s ago: executing program 2 (id=1418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0xffb1, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9.153628769s ago: executing program 3 (id=1419): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r4, 0x6f3e, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 9.07343204s ago: executing program 4 (id=1420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 9.008064042s ago: executing program 5 (id=1421): socket$kcm(0x10, 0x400000002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) userfaultfd(0x1) r5 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 8.986679913s ago: executing program 7 (id=1422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYRESOCT], &(0x7f0000000680)='syzkaller\x00'}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000e0000002f4900007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYBLOB], 0x50) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000300)='r:_est/event1 ./fil', 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000740)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x4, 0x2ae, &(0x7f0000000d00)="$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") 8.847019916s ago: executing program 2 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 6.795032871s ago: executing program 5 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x21e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x29}, 0x80) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 6.646861504s ago: executing program 3 (id=1425): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x101400, 0x16) finit_module(r2, 0x0, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r3, 0x3, 0x80000}) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6.582484605s ago: executing program 4 (id=1426): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_open_dev$loop(0x0, 0x2, 0x2001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) getpid() 5.704827994s ago: executing program 2 (id=1427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x9436, 0x10, 0x1, 0xa6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa704, 0x800, 0x1000002, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4020001, 0xffffffff}}], 0x1, 0x0, 0x0) 4.743542965s ago: executing program 3 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x138, 0x0, 0xfd, [{{0x0, 0x0, 0x7d, 0xfff, 0x6, 0x3, {0x83, 0x4, 0x2b6a, 0x0, 0x4, 0x5, 0x7, 0x100, 0x6, 0x8000, 0x40, 0x0, r2, 0x0, 0x6}}, {0x1, 0x2b96, 0x8d, 0x51, '(\\\xab\x12(>D=t\v\x92\b\x9f\x8a\xf5\a\xa5\xdf\x80\xaf\x84\x83\x14(ouv\xc6\t/\xb9\x87\xfa\xa86\xbc!R\x85\x92\x13&4\xac\x81\x13\xa2[\xd4\xdd\x9c\x84#\xacAo\f\x82\x1e\x12\xb7\xd0P\x8c\x9aN1\x1f\xc8X\xc6-z(\xef\'\xbd\xe0\xadO\\\xe1\x98W\xedy\x93\xcbr\xdc\x8e\xa9\x82\xe663\xd8\xe2\xfc\x1e)\xf8\xf2 \xf6\x91}\xdb\xa1 p\xcb#\xbd\v\x93,2\x13?\xbb\x1av4[\x01\xb7\xe8\xb9\xb6\x97}g\xbb\n\xcbs&\x12\xfd\xc5'}}]}, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) 4.336863204s ago: executing program 7 (id=1429): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r5, 0xde}, 0x0, &(0x7f00000008c0)="eb2bcb44032c2a3a518de900279744e05b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded6713302261b487e569f8fac402918be4ee374a4257d4bf67e86ff4beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b2081640008000000000000cd90d32ebcf5ea2c79482fb0e0cfb8bf19da10adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e5202f7f02c633d4f56361cd848e6cec9abcbf97c60de6c9d205a4e26b68f", 0x0) 4.192198168s ago: executing program 2 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='-:t', 0x3) 3.975084652s ago: executing program 2 (id=1431): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 3.18608308s ago: executing program 3 (id=1432): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x6, 0x1f, 0xfff, 0x1, 0x5]}, &(0x7f00000003c0)=0x54) read$dsp(0xffffffffffffffff, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000001c0)={0xc, 0x0, 0xd, &(0x7f0000000240)="eb9a111903719052efc2ea8ed9"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x80c000, 0x0) 3.18532271s ago: executing program 7 (id=1433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0xffb1, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.776610239s ago: executing program 7 (id=1434): socket$kcm(0x10, 0x400000002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) userfaultfd(0x1) r4 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 0s ago: executing program 5 (id=1435): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247, 0x1, @discrete={0x10000}}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ][ T5592] loop6: detected capacity change from 0 to 2048 [ 241.709062][ T4858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.765039][ T4858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.781989][ T4858] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 241.800701][ T5592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.846397][ T4858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.886871][ T4858] usb 6-1: config 0 descriptor?? [ 242.952935][ T4858] usbhid 6-1:0.0: can't add hid device: -71 [ 242.963130][ T4858] usbhid: probe of 6-1:0.0 failed with error -71 [ 243.010206][ T4858] usb 6-1: USB disconnect, device number 2 [ 243.121800][ T4358] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.310616][ T4358] usb 7-1: Using ep0 maxpacket: 16 [ 243.317521][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.384730][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.411460][ T4358] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.490633][ T4358] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 243.528609][ T4358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.598167][ T4358] usb 7-1: config 0 descriptor?? [ 243.622044][ T5606] loop3: detected capacity change from 0 to 164 [ 244.104864][ T4358] usbhid 7-1:0.0: can't add hid device: -71 [ 244.262805][ T4358] usbhid: probe of 7-1:0.0 failed with error -71 [ 244.676219][ T4358] usb 7-1: USB disconnect, device number 3 [ 245.942220][ T4318] Process accounting resumed [ 248.117268][ T5656] loop3: detected capacity change from 0 to 164 [ 249.250822][ T4358] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 249.440648][ T4358] usb 5-1: Using ep0 maxpacket: 16 [ 249.448502][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.490288][ T4358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.511523][ T5676] device syzkaller0 entered promiscuous mode [ 249.520911][ T5676] tipc: Enabled bearer , priority 0 [ 249.540693][ T4358] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.570728][ T4358] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.581406][ T5676] tipc: Resetting bearer [ 249.596940][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.630320][ T4358] usb 5-1: config 0 descriptor?? [ 249.640753][ T5674] tipc: Resetting bearer [ 249.713494][ T5674] tipc: Disabling bearer [ 250.036528][ T4864] Process accounting resumed [ 250.072509][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 250.080417][ T4358] usbhid 5-1:0.0: can't add hid device: -71 [ 250.086512][ T4358] usbhid: probe of 5-1:0.0 failed with error -71 [ 250.809928][ T4358] usb 5-1: USB disconnect, device number 6 [ 252.421493][ T5710] loop6: detected capacity change from 0 to 164 [ 253.868811][ T5720] loop2: detected capacity change from 0 to 512 [ 253.877162][ T5720] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 253.976219][ T4563] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.322458][ T4858] Process accounting resumed [ 255.553005][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.559544][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.740683][ T4318] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 255.930644][ T4318] usb 6-1: Using ep0 maxpacket: 16 [ 255.942077][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.983808][ T4318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.014150][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.084276][ T4318] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.110692][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.151610][ T4318] usb 6-1: config 0 descriptor?? [ 256.234566][ T5767] loop4: detected capacity change from 0 to 164 [ 256.421065][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 256.604141][ T4318] usbhid 6-1:0.0: can't add hid device: -71 [ 256.620937][ T4320] usb 4-1: Using ep0 maxpacket: 16 [ 256.705689][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.723864][ T4318] usbhid: probe of 6-1:0.0 failed with error -71 [ 256.899689][ T4318] usb 6-1: USB disconnect, device number 3 [ 256.907400][ T4320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.084536][ T4320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.158935][ T4320] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.185401][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.254438][ T4320] usb 4-1: config 0 descriptor?? [ 257.930158][ T4320] usbhid 4-1:0.0: can't add hid device: -71 [ 257.952771][ T4320] usbhid: probe of 4-1:0.0 failed with error -71 [ 258.154241][ T4320] usb 4-1: USB disconnect, device number 2 [ 258.871740][ T4864] Process accounting resumed [ 259.716638][ T5795] tipc: Started in network mode [ 259.752484][ T5795] tipc: Node identity 32ec692ed348, cluster identity 4711 [ 259.759959][ T5795] tipc: Enabled bearer , priority 0 [ 259.869421][ T5794] tipc: Disabling bearer [ 262.720825][ T5810] loop6: detected capacity change from 0 to 164 [ 263.980791][ T4320] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 264.186725][ T5824] device syzkaller0 entered promiscuous mode [ 264.192926][ T4320] usb 7-1: Using ep0 maxpacket: 16 [ 264.208896][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.265019][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.279881][ T5829] tipc: Enabled bearer , priority 0 [ 264.290810][ T4320] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.320708][ T4320] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.329816][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.398571][ T4320] usb 7-1: config 0 descriptor?? [ 264.417587][ T5831] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 264.796474][ T4358] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 264.853320][ T4320] usbhid 7-1:0.0: can't add hid device: -71 [ 264.862683][ T4320] usbhid: probe of 7-1:0.0 failed with error -71 [ 264.875383][ T4320] usb 7-1: USB disconnect, device number 4 [ 264.906617][ T5829] tipc: Resetting bearer [ 264.990681][ T4358] usb 3-1: Using ep0 maxpacket: 16 [ 265.007537][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.235431][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.367177][ T4358] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 265.565273][ T4322] Process accounting resumed [ 266.311006][ T4358] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.320807][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.343983][ T4358] usb 3-1: config 0 descriptor?? [ 266.415066][ T5822] tipc: Resetting bearer [ 266.964912][ T4358] usbhid 3-1:0.0: can't add hid device: -71 [ 267.427919][ T4358] usbhid: probe of 3-1:0.0 failed with error -71 [ 267.436196][ T4358] usb 3-1: USB disconnect, device number 9 [ 267.632729][ T5822] tipc: Disabling bearer [ 267.744384][ T5857] loop6: detected capacity change from 0 to 164 [ 267.820111][ T5854] tipc: Started in network mode [ 267.970837][ T5854] tipc: Node identity fa0c93679bf6, cluster identity 4711 [ 267.978696][ T5854] tipc: Enabled bearer , priority 0 [ 268.952703][ T5853] tipc: Disabling bearer [ 269.193591][ T5873] loop2: detected capacity change from 0 to 2048 [ 269.316821][ T5873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.463928][ T5886] loop6: detected capacity change from 0 to 512 [ 271.553829][ T5886] EXT4-fs: Ignoring removed bh option [ 271.620272][ T5886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.814908][ T5886] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 271.860772][ T5886] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.020671][ T4863] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 273.250767][ T4863] usb 3-1: Using ep0 maxpacket: 16 [ 273.268234][ T4863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.448042][ T4863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.638810][ T4863] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.839901][ T4863] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.930590][ T4863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.972053][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 274.017068][ T4863] usb 3-1: config 0 descriptor?? [ 274.135631][ T4834] EXT4-fs (loop6): unmounting filesystem. [ 274.683142][ T4863] usbhid 3-1:0.0: can't add hid device: -71 [ 274.689720][ T4863] usbhid: probe of 3-1:0.0 failed with error -71 [ 275.195986][ T4863] usb 3-1: USB disconnect, device number 10 [ 275.298037][ T5914] loop3: detected capacity change from 0 to 164 [ 276.558750][ T5933] tipc: Enabling of bearer rejected, failed to enable media [ 276.778403][ T5937] loop2: detected capacity change from 0 to 2048 [ 276.846306][ T5937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.101622][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 278.267592][ T5964] loop6: detected capacity change from 0 to 512 [ 278.278282][ T5964] EXT4-fs: Ignoring removed bh option [ 278.314026][ T5964] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.857020][ T5964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 278.866343][ T5964] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.064365][ T4834] EXT4-fs (loop6): unmounting filesystem. [ 279.311935][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.360'. [ 280.497084][ T5981] loop6: detected capacity change from 0 to 164 [ 280.610681][ T4864] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 280.691994][ T4563] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.820678][ T4864] usb 6-1: Using ep0 maxpacket: 16 [ 280.834855][ T4864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.966931][ T4864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.599171][ T4864] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 281.670653][ T4864] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 281.710418][ T4864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.788589][ T4864] usb 6-1: config 0 descriptor?? [ 282.006357][ T5992] Bluetooth: MGMT ver 1.22 [ 282.412034][ T4864] usbhid 6-1:0.0: can't add hid device: -71 [ 282.418089][ T4864] usbhid: probe of 6-1:0.0 failed with error -71 [ 283.220803][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 284.316050][ T4864] usb 6-1: USB disconnect, device number 4 [ 284.433038][ T5996] loop5: detected capacity change from 0 to 2048 [ 284.464510][ T5996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.674304][ T6008] loop6: detected capacity change from 0 to 512 [ 285.681895][ T6008] EXT4-fs: Ignoring removed bh option [ 285.690865][ T6008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 286.067547][ T6008] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 286.076598][ T6008] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.406881][ T4834] EXT4-fs (loop6): unmounting filesystem. [ 286.657809][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.5.373'. [ 288.026147][ T6038] loop5: detected capacity change from 0 to 164 [ 288.985119][ T4563] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.550696][ T4358] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 289.743364][ T4358] usb 7-1: Using ep0 maxpacket: 16 [ 289.751288][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.800601][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.915004][ T4358] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.010603][ T4358] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.019715][ T4358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.110099][ T4358] usb 7-1: config 0 descriptor?? [ 290.742497][ T4358] usbhid 7-1:0.0: can't add hid device: -71 [ 290.754489][ T4358] usbhid: probe of 7-1:0.0 failed with error -71 [ 291.113635][ T6069] loop3: detected capacity change from 0 to 512 [ 291.122501][ T6069] EXT4-fs: Ignoring removed bh option [ 291.132262][ T6069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.201447][ T4358] usb 7-1: USB disconnect, device number 5 [ 291.478073][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.487568][ T6069] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.846015][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 293.130624][ T4358] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 293.324570][ T4358] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 293.354825][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.407046][ T4358] usb 7-1: Product: syz [ 293.431430][ T4358] usb 7-1: Manufacturer: syz [ 293.456481][ T4358] usb 7-1: SerialNumber: syz [ 293.477658][ T4358] usb 7-1: config 0 descriptor?? [ 293.803617][ T6091] loop3: detected capacity change from 0 to 512 [ 293.810959][ T6091] FAT-fs (loop3): Unrecognized mount option "./tracing" or missing value [ 293.819959][ T6096] loop4: detected capacity change from 0 to 164 [ 293.892933][ T4563] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.927124][ T4358] usb 7-1: Firmware version (0.0) predates our first public release. [ 293.955785][ T4358] usb 7-1: Please update to version 0.2 or newer [ 294.201642][ T4358] usb 7-1: USB disconnect, device number 6 [ 294.784989][ T4861] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 295.231960][ T4861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.517410][ T4861] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.526919][ T4861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.541323][ T4861] usb 4-1: config 0 descriptor?? [ 295.550156][ T4861] pwc: Askey VC010 type 2 USB webcam detected. [ 297.401125][ T4861] pwc: recv_control_msg error -71 req 02 val 2700 [ 297.468314][ T4861] pwc: recv_control_msg error -71 req 02 val 2c00 [ 297.568178][ T4861] pwc: recv_control_msg error -71 req 04 val 1000 [ 297.654191][ T4861] pwc: recv_control_msg error -71 req 04 val 1300 [ 297.744872][ T4861] pwc: recv_control_msg error -71 req 04 val 1400 [ 297.828143][ T4861] pwc: recv_control_msg error -71 req 02 val 2000 [ 297.948601][ T4861] pwc: recv_control_msg error -71 req 02 val 2100 [ 298.056030][ T4861] pwc: recv_control_msg error -71 req 04 val 1500 [ 298.101549][ T4861] pwc: recv_control_msg error -71 req 02 val 2500 [ 298.138975][ T4861] pwc: recv_control_msg error -71 req 02 val 2400 [ 298.192009][ T4861] pwc: recv_control_msg error -71 req 02 val 2600 [ 298.230732][ T38] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 298.258632][ T4861] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.285930][ T4861] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.350329][ T4861] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.460774][ T38] usb 6-1: Using ep0 maxpacket: 16 [ 299.373685][ T4861] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.385934][ T4861] pwc: Registered as video103. [ 299.392260][ T4861] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 299.406489][ T4861] usb 4-1: USB disconnect, device number 3 [ 299.529671][ T38] usb 6-1: device descriptor read/all, error -71 [ 300.560165][ T6154] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 301.433929][ T6156] xt_CT: No such helper "syz1" [ 305.038585][ T6185] syz.3.402 (6185): drop_caches: 2 [ 305.300523][ C0] sched: RT throttling activated [ 306.240731][ T6191] loop5: detected capacity change from 0 to 164 [ 306.604367][ T6197] device syzkaller0 entered promiscuous mode [ 306.633943][ T4861] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 306.698360][ T6197] tipc: Enabled bearer , priority 0 [ 306.705281][ T4563] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.944028][ T4861] usb 7-1: Using ep0 maxpacket: 16 [ 307.168549][ T4861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.187096][ T6197] tipc: Resetting bearer [ 307.199636][ T4861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.286126][ T4861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 308.244730][ T4861] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 308.254749][ T4861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.301455][ T6196] tipc: Resetting bearer [ 308.351548][ T6208] loop2: detected capacity change from 0 to 512 [ 308.360647][ T6208] EXT4-fs: Ignoring removed bh option [ 308.367940][ T4861] usb 7-1: config 0 descriptor?? [ 308.373395][ T6208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.689266][ T6208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 308.699981][ T6208] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.704628][ T6196] tipc: Disabling bearer [ 308.896117][ T6215] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 309.496877][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 310.311189][ T4861] usbhid 7-1:0.0: can't add hid device: -71 [ 310.317251][ T4861] usbhid: probe of 7-1:0.0 failed with error -71 [ 310.369884][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 310.379110][ T4861] usb 7-1: USB disconnect, device number 7 [ 310.860751][ T22] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 311.164707][ T22] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.180641][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.966853][ T22] usb 5-1: Product: syz [ 311.971355][ T22] usb 5-1: Manufacturer: syz [ 311.976299][ T22] usb 5-1: SerialNumber: syz [ 311.984496][ T22] usb 5-1: config 0 descriptor?? [ 312.408167][ T22] usb 5-1: Firmware version (0.0) predates our first public release. [ 312.421220][ T22] usb 5-1: Please update to version 0.2 or newer [ 312.961547][ T22] usb 5-1: USB disconnect, device number 7 [ 313.016316][ T6257] loop6: detected capacity change from 0 to 164 [ 316.985003][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.991793][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.783867][ T6292] bond0: Error: Cannot enslave bond to itself. [ 319.919410][ T6308] loop2: detected capacity change from 0 to 164 [ 321.271790][ T6320] loop5: detected capacity change from 0 to 512 [ 321.280067][ T6320] EXT4-fs: Ignoring removed bh option [ 321.290462][ T6320] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.465749][ T6320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 321.475151][ T6320] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.562685][ T4768] EXT4-fs (loop5): unmounting filesystem. [ 322.917637][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.970788][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.017323][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.076504][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.106302][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.176652][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.220382][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.029219][ T6372] loop6: detected capacity change from 0 to 512 [ 325.041521][ T6372] EXT4-fs: Ignoring removed bh option [ 325.076105][ T6372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.050578][ T4322] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 326.109240][ T6372] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 326.119725][ T6372] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.273471][ T4834] EXT4-fs (loop6): unmounting filesystem. [ 326.290628][ T4322] usb 5-1: Using ep0 maxpacket: 16 [ 326.306721][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.361529][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.411601][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.482343][ T4322] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.544994][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.584745][ T4322] usb 5-1: config 0 descriptor?? [ 327.209608][ T4322] usbhid 5-1:0.0: can't add hid device: -71 [ 327.244424][ T4322] usbhid: probe of 5-1:0.0 failed with error -71 [ 327.282915][ T4322] usb 5-1: USB disconnect, device number 8 [ 327.439375][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 329.084109][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.110734][ T22] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 329.131903][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.150381][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.158652][ T22] usb 4-1: Product: syz [ 329.162908][ T22] usb 4-1: Manufacturer: syz [ 329.168060][ T22] usb 4-1: SerialNumber: syz [ 329.511646][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.458'. [ 329.550771][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'. [ 329.734806][ T6422] Disabled LAPIC found during irq injection [ 331.362774][ T4322] usb 4-1: USB disconnect, device number 4 [ 334.289603][ T6434] ip_tables: iptables: counters copy to user failed while replacing table [ 336.976716][ T6445] binder_alloc: 6444: binder_alloc_buf size 69664 failed, no address space [ 337.018854][ T6445] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 337.423063][ T6448] loop2: detected capacity change from 0 to 512 [ 337.432369][ T6448] EXT4-fs: Ignoring removed bh option [ 337.721274][ T6448] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 337.769418][ T6448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 337.778534][ T6448] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.160873][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 339.335506][ T4358] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 339.992531][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.475'. [ 340.002083][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.475'. [ 340.850599][ T4358] usb 4-1: Using ep0 maxpacket: 16 [ 340.857864][ T4358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.882187][ T4358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.902208][ T4358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.928991][ T4358] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 340.944979][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.958477][ T4358] usb 4-1: config 0 descriptor?? [ 340.980751][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 340.987621][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.595761][ T4358] usbhid 4-1:0.0: can't add hid device: -71 [ 342.604090][ T4358] usbhid: probe of 4-1:0.0 failed with error -71 [ 342.661837][ T4358] usb 4-1: USB disconnect, device number 5 [ 343.152139][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.175723][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.183756][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.197823][ T6420] bonding: unable to delete non-existent b [ 343.205078][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.213039][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.220428][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.321946][ T6490] IPVS: Error connecting to the multicast addr [ 344.015108][ T6502] loop4: detected capacity change from 0 to 512 [ 344.029107][ T6502] EXT4-fs: Ignoring removed bh option [ 344.264138][ T6502] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 344.338858][ T6502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 344.347992][ T6502] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.301560][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 345.575168][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 345.946512][ T4412] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.004822][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 346.090656][ T4322] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 346.107178][ T4412] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.222188][ T6529] block device autoloading is deprecated and will be removed. [ 346.292391][ T4322] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 346.309255][ T4412] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.323389][ T4322] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 346.357832][ T4322] usb 5-1: config 0 has no interface number 0 [ 346.374154][ T4322] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 346.397503][ T4322] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 346.422351][ T4322] usb 5-1: config 0 interface 255 has no altsetting 0 [ 346.436061][ T4322] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 346.453096][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.497459][ T4322] usb 5-1: config 0 descriptor?? [ 346.581198][ T4412] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.647304][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 347.660146][ T4322] usb 5-1: string descriptor 0 read error: -71 [ 347.669736][ T4322] smsusb:smsusb_probe: board id=8, interface number 255 [ 347.687525][ T4322] usb 5-1: USB disconnect, device number 9 [ 347.862155][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.881626][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.911041][ T6488] device bridge_slave_0 entered promiscuous mode [ 347.942104][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.949630][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.958457][ T6545] input: syz0 as /devices/virtual/input/input11 [ 347.974650][ T6488] device bridge_slave_1 entered promiscuous mode [ 348.064474][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.100149][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.209306][ T6488] team0: Port device team_slave_0 added [ 348.255482][ T6488] team0: Port device team_slave_1 added [ 348.375689][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.400774][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.472852][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.545960][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.576880][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.720373][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.092090][ T6488] device hsr_slave_0 entered promiscuous mode [ 349.139755][ T6488] device hsr_slave_1 entered promiscuous mode [ 349.200728][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.208405][ T6488] Cannot create hsr debugfs directory [ 349.640612][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 349.701352][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 349.870845][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 349.872280][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.872304][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.872343][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.872373][ T4320] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.872392][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.873980][ T4320] usb 3-1: config 0 descriptor?? [ 350.171314][ T6488] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 350.252942][ T6488] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 350.265997][ T6488] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 350.269180][ T6488] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 350.489627][ T4320] usbhid 3-1:0.0: can't add hid device: -71 [ 350.489730][ T4320] usbhid: probe of 3-1:0.0 failed with error -71 [ 350.496251][ T4320] usb 3-1: USB disconnect, device number 11 [ 350.499352][ T6436] udevd[6436]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory [ 351.005226][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.488128][ T4282] Bluetooth: hci5: command 0x0419 tx timeout [ 352.761102][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.761726][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.771128][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.833014][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.833720][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.834198][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.834309][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.847089][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.847755][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.848389][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.858564][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.858632][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.871236][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.872174][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.873088][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.874160][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.874944][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.915435][ T4412] device hsr_slave_0 left promiscuous mode [ 352.916124][ T4412] device hsr_slave_1 left promiscuous mode [ 352.917034][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.918479][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.918510][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.919182][ T4412] device bridge_slave_1 left promiscuous mode [ 352.919307][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.938733][ T4412] device bridge_slave_0 left promiscuous mode [ 352.938864][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.021339][ T4412] device veth1_macvtap left promiscuous mode [ 353.021446][ T4412] device veth0_macvtap left promiscuous mode [ 353.021576][ T4412] device veth1_vlan left promiscuous mode [ 353.021670][ T4412] device veth0_vlan left promiscuous mode [ 355.216417][ T6601] loop3: detected capacity change from 0 to 512 [ 355.224114][ T6601] EXT4-fs: Ignoring removed bh option [ 355.431079][ T6601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.492506][ T6601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 355.501571][ T6601] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.814641][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 355.992620][ T6616] FAULT_INJECTION: forcing a failure. [ 355.992620][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 356.010131][ T6616] CPU: 1 PID: 6616 Comm: syz.3.499 Not tainted syzkaller #0 [ 356.017492][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.027599][ T6616] Call Trace: [ 356.030924][ T6616] [ 356.033905][ T6616] dump_stack_lvl+0x188/0x24e [ 356.038755][ T6616] ? show_regs_print_info+0x12/0x12 [ 356.044114][ T6616] ? load_image+0x410/0x410 [ 356.048712][ T6616] ? __might_sleep+0xd0/0xd0 [ 356.053438][ T6616] ? __lock_acquire+0x7c40/0x7c40 [ 356.058561][ T6616] should_fail_ex+0x390/0x4c0 [ 356.063367][ T6616] should_failslab+0x5/0x20 [ 356.067967][ T6616] slab_pre_alloc_hook+0x59/0x300 [ 356.073102][ T6616] ? v4l2_m2m_ctx_init+0x57/0x2a0 [ 356.078235][ T6616] __kmem_cache_alloc_node+0x4f/0x270 [ 356.083665][ T6616] ? v4l2_m2m_ctx_init+0x57/0x2a0 [ 356.088782][ T6616] kmalloc_trace+0x26/0xe0 [ 356.093307][ T6616] ? vicodec_release+0x110/0x110 [ 356.098389][ T6616] v4l2_m2m_ctx_init+0x57/0x2a0 [ 356.103293][ T6616] vicodec_open+0x7fe/0xc30 [ 356.107859][ T6616] v4l2_open+0x201/0x340 [ 356.112162][ T6616] chrdev_open+0x585/0x5f0 [ 356.116737][ T6616] ? cd_forget+0x160/0x160 [ 356.121303][ T6616] ? fsnotify_perm+0x39b/0x550 [ 356.126187][ T6616] ? cd_forget+0x160/0x160 [ 356.130657][ T6616] do_dentry_open+0x7dd/0x10b0 [ 356.135487][ T6616] path_openat+0x2674/0x2f10 [ 356.140153][ T6616] ? verify_lock_unused+0x140/0x140 [ 356.145509][ T6616] ? do_sys_openat2+0xdd/0x4f0 [ 356.150337][ T6616] ? do_filp_open+0x420/0x420 [ 356.155117][ T6616] do_filp_open+0x1ee/0x420 [ 356.159683][ T6616] ? vfs_tmpfile+0x470/0x470 [ 356.164346][ T6616] ? _raw_spin_unlock+0x24/0x40 [ 356.169356][ T6616] ? alloc_fd+0x590/0x640 [ 356.173774][ T6616] do_sys_openat2+0x14b/0x4f0 [ 356.178517][ T6616] ? do_sys_open+0xe0/0xe0 [ 356.182990][ T6616] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.189032][ T6616] ? lock_chain_count+0x20/0x20 [ 356.193947][ T6616] __x64_sys_openat+0x135/0x160 [ 356.198858][ T6616] do_syscall_64+0x4c/0xa0 [ 356.203339][ T6616] ? clear_bhb_loop+0x60/0xb0 [ 356.208079][ T6616] ? clear_bhb_loop+0x60/0xb0 [ 356.212820][ T6616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.218769][ T6616] RIP: 0033:0x7fde2075e98e [ 356.223248][ T6616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.242910][ T6616] RSP: 002b:00007fde216e7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.251382][ T6616] RAX: ffffffffffffffda RBX: 00007fde216e86c0 RCX: 00007fde2075e98e [ 356.259404][ T6616] RDX: 0000000000000002 RSI: 00007fde216e7c00 RDI: ffffffffffffff9c [ 356.267426][ T6616] RBP: 00007fde216e7c00 R08: 0000000000000000 R09: 0000000000000000 [ 356.275442][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 356.283456][ T6616] R13: 00007fde20a26038 R14: 00007fde20a25fa0 R15: 00007ffe48c88088 [ 356.291573][ T6616] [ 357.122474][ T6624] futex_wake_op: syz.4.502 tries to shift op by 144; fix this program [ 358.080035][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 358.224510][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 358.282757][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.397006][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.293715][ T4412] bond0 (unregistering): Released all slaves [ 359.382087][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.392520][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.404398][ T6610] tipc: Cannot configure node identity twice [ 361.451011][ T6654] loop3: detected capacity change from 0 to 512 [ 361.463910][ T6654] EXT4-fs: Ignoring removed bh option [ 361.472126][ T6654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.645461][ T6654] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 361.654650][ T6654] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.093968][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 362.856136][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.863544][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.784081][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.154771][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.852865][ T6638] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.870681][ T6638] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.879767][ T6638] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.891040][ T6638] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.172655][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.207734][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.239114][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.274660][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.371321][ T6698] tipc: Enabled bearer , priority 0 [ 367.378724][ T6694] device syzkaller0 entered promiscuous mode [ 367.454447][ T6488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.686075][ T6719] loop2: detected capacity change from 0 to 512 [ 367.695260][ T6719] EXT4-fs: Ignoring removed bh option [ 367.702734][ T6719] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 367.879080][ T6719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.888437][ T6719] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.019382][ T6694] tipc: Resetting bearer [ 368.103977][ T6694] tipc: Disabling bearer [ 368.302153][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 368.587859][ T6739] FAULT_INJECTION: forcing a failure. [ 368.587859][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 368.628602][ T6739] CPU: 1 PID: 6739 Comm: syz.4.525 Not tainted syzkaller #0 [ 368.635993][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.646102][ T6739] Call Trace: [ 368.649427][ T6739] [ 368.652402][ T6739] dump_stack_lvl+0x188/0x24e [ 368.657145][ T6739] ? show_regs_print_info+0x12/0x12 [ 368.662413][ T6739] ? load_image+0x410/0x410 [ 368.666984][ T6739] ? __might_sleep+0xd0/0xd0 [ 368.671635][ T6739] ? __lock_acquire+0x7c40/0x7c40 [ 368.676732][ T6739] should_fail_ex+0x390/0x4c0 [ 368.681480][ T6739] should_failslab+0x5/0x20 [ 368.686039][ T6739] slab_pre_alloc_hook+0x59/0x300 [ 368.691119][ T6739] ? alloc_workqueue+0x175/0x14a0 [ 368.696289][ T6739] __kmem_cache_alloc_node+0x4f/0x270 [ 368.701720][ T6739] ? alloc_workqueue+0x175/0x14a0 [ 368.706803][ T6739] __kmalloc+0xa3/0x240 [ 368.711053][ T6739] alloc_workqueue+0x175/0x14a0 [ 368.715973][ T6739] ? vsnprintf+0x1b22/0x1c20 [ 368.720617][ T6739] ? snprintf+0xe5/0x140 [ 368.724895][ T6739] ? lockdep_init_map_type+0x98/0x8d0 [ 368.730393][ T6739] ? apply_workqueue_attrs+0x180/0x180 [ 368.735886][ T6739] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 368.741823][ T6739] nci_register_device+0x229/0x9f0 [ 368.747049][ T6739] ? _raw_spin_unlock+0x40/0x40 [ 368.751938][ T6739] ? nci_free_device+0x90/0x90 [ 368.756732][ T6739] ? nci_hci_allocate+0x1dd/0x2a0 [ 368.761844][ T6739] ? nci_allocate_device+0x241/0x350 [ 368.767164][ T6739] virtual_ncidev_open+0x55/0xc0 [ 368.772187][ T6739] ? virtual_ncidev_ioctl+0x90/0x90 [ 368.777421][ T6739] misc_open+0x31f/0x390 [ 368.781728][ T6739] chrdev_open+0x585/0x5f0 [ 368.786218][ T6739] ? cd_forget+0x160/0x160 [ 368.790669][ T6739] ? fsnotify_perm+0x39b/0x550 [ 368.795467][ T6739] ? cd_forget+0x160/0x160 [ 368.799923][ T6739] do_dentry_open+0x7dd/0x10b0 [ 368.804772][ T6739] path_openat+0x2674/0x2f10 [ 368.809411][ T6739] ? verify_lock_unused+0x140/0x140 [ 368.814672][ T6739] ? do_sys_openat2+0xdd/0x4f0 [ 368.819475][ T6739] ? do_filp_open+0x420/0x420 [ 368.824205][ T6739] do_filp_open+0x1ee/0x420 [ 368.828743][ T6739] ? vfs_tmpfile+0x470/0x470 [ 368.833388][ T6739] ? _raw_spin_unlock+0x24/0x40 [ 368.838297][ T6739] ? alloc_fd+0x590/0x640 [ 368.842671][ T6739] do_sys_openat2+0x14b/0x4f0 [ 368.847390][ T6739] ? do_sys_open+0xe0/0xe0 [ 368.851848][ T6739] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 368.857875][ T6739] ? lock_chain_count+0x20/0x20 [ 368.862787][ T6739] __x64_sys_openat+0x135/0x160 [ 368.867687][ T6739] do_syscall_64+0x4c/0xa0 [ 368.872144][ T6739] ? clear_bhb_loop+0x60/0xb0 [ 368.876890][ T6739] ? clear_bhb_loop+0x60/0xb0 [ 368.881605][ T6739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.887549][ T6739] RIP: 0033:0x7fb4b8f9e159 [ 368.892008][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.911659][ T6739] RSP: 002b:00007fb4b9ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.920102][ T6739] RAX: ffffffffffffffda RBX: 00007fb4b9225fa0 RCX: 00007fb4b8f9e159 [ 368.928103][ T6739] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 368.936135][ T6739] RBP: 00007fb4b903503b R08: 0000000000000000 R09: 0000000000000000 [ 368.944146][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.952149][ T6739] R13: 00007fb4b9226038 R14: 00007fb4b9225fa0 R15: 00007ffc73457598 [ 368.960166][ T6739] [ 369.124133][ T4863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 369.186362][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.220888][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.252453][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.336274][ T4863] usb 3-1: Using ep0 maxpacket: 8 [ 369.346230][ T4863] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.396172][ T4863] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.506022][ T4863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.550796][ T4863] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 369.559929][ T4863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.686178][ T4863] usb 3-1: config 0 descriptor?? [ 370.156899][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x3 [ 370.220762][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.277606][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.315589][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.370813][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.437131][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.467637][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.646093][ T4863] konepure 0003:1E7D:2DBE.0001: unknown main item tag 0x0 [ 370.923820][ T4863] konepure 0003:1E7D:2DBE.0001: hidraw0: USB HID vff.ff Device [HID 1e7d:2dbe] on usb-dummy_hcd.2-1/input0 [ 371.062711][ T4863] usb 3-1: USB disconnect, device number 12 [ 372.342529][ T26] audit: type=1800 audit(1789007594.646:2): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.528" name="addr_trtype" dev="configfs" ino=43990 res=0 errno=0 [ 372.369812][ T6754] nvmet: Invalid value 'tc' for trtype [ 372.668857][ T6754] nvmet: transport type 0 not supported [ 372.953617][ T6786] loop2: detected capacity change from 0 to 512 [ 373.135488][ T6775] fido_id[6775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 373.153793][ T6786] EXT4-fs: Ignoring removed bh option [ 373.161274][ T6786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 373.264012][ T6786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 373.273158][ T6786] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.667359][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 374.394276][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.435698][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.559974][ T6804] device syzkaller0 entered promiscuous mode [ 374.597470][ T6812] FAULT_INJECTION: forcing a failure. [ 374.597470][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 374.626694][ T6488] device veth0_vlan entered promiscuous mode [ 374.631309][ T6812] CPU: 1 PID: 6812 Comm: syz.5.537 Not tainted syzkaller #0 [ 374.640083][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.650179][ T6812] Call Trace: [ 374.653487][ T6812] [ 374.656448][ T6812] dump_stack_lvl+0x188/0x24e [ 374.661169][ T6812] ? show_regs_print_info+0x12/0x12 [ 374.666423][ T6812] ? load_image+0x410/0x410 [ 374.670966][ T6812] ? __might_sleep+0xd0/0xd0 [ 374.675589][ T6812] ? __lock_acquire+0x7c40/0x7c40 [ 374.680661][ T6812] should_fail_ex+0x390/0x4c0 [ 374.685393][ T6812] should_failslab+0x5/0x20 [ 374.689924][ T6812] slab_pre_alloc_hook+0x59/0x300 [ 374.694986][ T6812] ? tomoyo_encode+0x28a/0x550 [ 374.699867][ T6812] __kmem_cache_alloc_node+0x4f/0x270 [ 374.705286][ T6812] ? tomoyo_encode+0x28a/0x550 [ 374.710082][ T6812] __kmalloc+0xa3/0x240 [ 374.714281][ T6812] tomoyo_encode+0x28a/0x550 [ 374.718905][ T6812] tomoyo_realpath_from_path+0x578/0x5c0 [ 374.724574][ T6812] ? tomoyo_domain+0xd2/0x120 [ 374.729289][ T6812] ? tomoyo_path_number_perm+0x205/0x650 [ 374.734960][ T6812] tomoyo_path_number_perm+0x22f/0x650 [ 374.740463][ T6812] ? tomoyo_path_number_perm+0x205/0x650 [ 374.746136][ T6812] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 374.751637][ T6812] ? make_qualifier+0x3b0/0x3b0 [ 374.756638][ T6812] ? __fget_files+0x28/0x460 [ 374.761277][ T6812] security_file_ioctl+0x6c/0xa0 [ 374.766248][ T6812] __se_sys_ioctl+0x48/0x170 [ 374.770875][ T6812] do_syscall_64+0x4c/0xa0 [ 374.775327][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 374.780042][ T6812] ? clear_bhb_loop+0x60/0xb0 [ 374.784765][ T6812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.790693][ T6812] RIP: 0033:0x7fc61df9ddeb [ 374.795141][ T6812] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 374.814789][ T6812] RSP: 002b:00007fc61edd0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.823235][ T6812] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc61df9ddeb [ 374.831242][ T6812] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 374.839240][ T6812] RBP: 00007fc61edd1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 374.847244][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.855247][ T6812] R13: 0000200000000540 R14: 0000000000000002 R15: 0000000000000000 [ 374.863281][ T6812] [ 374.876466][ T6488] device veth1_vlan entered promiscuous mode [ 374.885051][ T6804] tipc: Enabled bearer , priority 0 [ 374.918070][ T6488] device veth0_macvtap entered promiscuous mode [ 374.924673][ T6812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.963839][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.980366][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.995258][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 375.005459][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 375.029906][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.045899][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.058526][ T6488] device veth1_macvtap entered promiscuous mode [ 375.096455][ T6803] tipc: Resetting bearer [ 375.183513][ T6803] tipc: Disabling bearer [ 375.201913][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.210200][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.223617][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.236856][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.309579][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.340841][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.357873][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.379318][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.400656][ T4322] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 375.420342][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.446718][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.468210][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.575131][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.685924][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.823364][ T6488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.980229][ T6488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.176661][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.272593][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.318694][ T4322] usb 6-1: config 0 has no interfaces? [ 376.326183][ T4322] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 376.341280][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.359603][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 376.372020][ T4322] usb 6-1: Product: syz [ 376.376244][ T4322] usb 6-1: SerialNumber: syz [ 376.385042][ T4322] usb 6-1: config 0 descriptor?? [ 376.395579][ T6488] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.405138][ T6488] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.414410][ T6488] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.423548][ T6488] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.720191][ T3600] usb 6-1: USB disconnect, device number 7 [ 377.373493][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.408682][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.471658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.921931][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.928300][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.042453][ T4647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.068376][ T4647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.095068][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.651063][ T4864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 383.866152][ T4864] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.889707][ T4864] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.939869][ T6895] device syzkaller0 entered promiscuous mode [ 384.035607][ T4864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.123152][ T6895] tipc: Started in network mode [ 384.149195][ T4864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 384.193479][ T6895] tipc: Node identity b66da0bba60b, cluster identity 4711 [ 384.296800][ T6895] tipc: Enabled bearer , priority 0 [ 384.307074][ T4864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 384.450050][ T4864] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.582142][ T4864] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.702069][ T4864] usb 4-1: Product: syz [ 384.760872][ T4864] usb 4-1: Manufacturer: syz [ 384.780935][ T6894] tipc: Resetting bearer [ 384.819471][ T4864] cdc_wdm 4-1:1.0: skipping garbage [ 384.854115][ T4864] cdc_wdm 4-1:1.0: skipping garbage [ 386.361828][ T4864] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 386.367824][ T4864] cdc_wdm 4-1:1.0: Unknown control protocol [ 386.439889][ T4319] usb 4-1: USB disconnect, device number 6 [ 386.496475][ T6894] tipc: Disabling bearer [ 386.583647][ T2121] tipc: Node number set to 275161275 [ 387.398219][ T6933] loop2: detected capacity change from 0 to 512 [ 387.405664][ T6933] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 388.610785][ T6941] SET target dimension over the limit! [ 393.726859][ T6968] device syzkaller0 entered promiscuous mode [ 393.782453][ T6968] tipc: Enabled bearer , priority 0 [ 393.956359][ T6967] tipc: Resetting bearer [ 394.137693][ T6975] block device autoloading is deprecated and will be removed. [ 394.144836][ T6967] tipc: Disabling bearer [ 394.153542][ T6982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.837294][ T6975] syz.5.573: attempt to access beyond end of device [ 394.837294][ T6975] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 395.763797][ T6991] loop3: detected capacity change from 0 to 512 [ 395.771022][ T6991] FAT-fs (loop3): Unrecognized mount option "./tracing" or missing value [ 396.170806][ T4858] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 397.756679][ T4858] usb 6-1: device descriptor read/all, error -71 [ 399.963782][ T7025] device syzkaller0 entered promiscuous mode [ 400.035942][ T7025] tipc: Enabled bearer , priority 0 [ 401.307998][ T7020] tipc: Resetting bearer [ 401.444941][ T7020] tipc: Disabling bearer [ 401.493454][ T4358] tipc: Node number set to 1643811687 [ 401.637181][ T7046] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input12 [ 403.582052][ T7055] CIFS: Attempting to mount \\127.0.0.1\share [ 404.488639][ T7055] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 404.518718][ T7055] CIFS: VFS: cifs_mount failed w/return code = -112 [ 404.601589][ T26] audit: type=1800 audit(1789007626.916:3): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.598" name="addr_trtype" dev="configfs" ino=46233 res=0 errno=0 [ 405.333827][ T7068] nvmet: transport type 0 not supported [ 407.025640][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 411.042469][ T126] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 411.254832][ T126] usb 8-1: Using ep0 maxpacket: 8 [ 411.260578][ T2121] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 411.270330][ T126] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.306411][ T126] usb 8-1: config 0 has no interfaces? [ 411.332382][ T126] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 411.370522][ T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.378615][ T126] usb 8-1: Product: syz [ 411.390570][ T126] usb 8-1: Manufacturer: syz [ 411.405955][ T126] usb 8-1: SerialNumber: syz [ 411.428351][ T126] usb 8-1: config 0 descriptor?? [ 411.460886][ T2121] usb 3-1: Using ep0 maxpacket: 16 [ 411.470056][ T2121] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 411.504119][ T2121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.525417][ T2121] usb 3-1: Product: syz [ 411.529644][ T2121] usb 3-1: Manufacturer: syz [ 411.557168][ T2121] usb 3-1: SerialNumber: syz [ 412.983517][ T2121] usb 3-1: config 0 descriptor?? [ 412.993411][ T2121] hub 3-1:0.0: bad descriptor, ignoring hub [ 412.999386][ T2121] hub: probe of 3-1:0.0 failed with error -5 [ 413.008955][ T126] usb 8-1: USB disconnect, device number 2 [ 413.018782][ T2121] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 413.043565][ T4366] usb 3-1: Failed to submit usb control message: -71 [ 413.147227][ T4366] usb 3-1: unable to send the bmi data to the device: -71 [ 413.154685][ T4366] usb 3-1: unable to get target info from device [ 413.161187][ T4366] usb 3-1: could not get target info (-71) [ 413.167208][ T4366] usb 3-1: could not probe fw (-71) [ 413.275385][ T7160] device syzkaller0 entered promiscuous mode [ 413.285774][ T7160] tipc: Enabled bearer , priority 0 [ 413.311359][ T7160] tipc: Resetting bearer [ 413.320673][ T4858] usb 3-1: USB disconnect, device number 13 [ 413.335987][ T7158] tipc: Resetting bearer [ 413.419828][ T7158] tipc: Disabling bearer [ 414.630563][ T4358] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 415.467220][ T4358] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 415.486772][ T4358] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.510507][ T4358] usb 8-1: Product: syz [ 415.514730][ T4358] usb 8-1: Manufacturer: syz [ 415.540233][ T4358] usb 8-1: SerialNumber: syz [ 415.745138][ T4358] usb 8-1: config 0 descriptor?? [ 416.617426][ T7186] comedi comedi1: reset error (fatal) [ 416.630734][ T4358] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 417.126484][ T7197] SET target dimension over the limit! [ 418.087779][ T4358] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 418.169980][ T4358] usb 8-1: USB disconnect, device number 3 [ 423.764455][ T7245] SET target dimension over the limit! [ 425.483918][ T7253] device syzkaller0 entered promiscuous mode [ 425.666456][ T7253] tipc: Enabled bearer , priority 0 [ 425.869667][ T7256] tipc: Resetting bearer [ 426.010137][ T7252] tipc: Resetting bearer [ 427.753202][ T7252] tipc: Disabling bearer [ 430.030755][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 430.039664][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 430.440722][ T126] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 430.652406][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 430.659599][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.705388][ T7304] binder_alloc: 7303: binder_alloc_buf, no vma [ 430.714830][ T126] usb 6-1: config 0 has no interfaces? [ 430.722958][ T126] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 430.765327][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.780826][ T126] usb 6-1: Product: syz [ 430.785214][ T126] usb 6-1: Manufacturer: syz [ 430.804417][ T126] usb 6-1: SerialNumber: syz [ 430.818866][ T126] usb 6-1: config 0 descriptor?? [ 430.946974][ T26] audit: type=1800 audit(1789007653.256:4): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.662" name="addr_trtype" dev="configfs" ino=46809 res=0 errno=0 [ 430.974691][ T7311] nvmet: Invalid value 'tc' for trtype [ 431.939826][ T2121] usb 6-1: USB disconnect, device number 10 [ 432.105440][ T26] audit: type=1800 audit(1789007654.416:5): pid=7317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.663" name="addr_trtype" dev="configfs" ino=46814 res=0 errno=0 [ 432.130784][ T7317] nvmet: Invalid value 'tc' for trtype [ 432.853067][ T7315] SET target dimension over the limit! [ 434.065253][ T7328] binder: BINDER_SET_CONTEXT_MGR already set [ 434.149564][ T7328] binder: 7327:7328 ioctl 4018620d 200000000040 returned -16 [ 434.870794][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.668'. [ 434.879799][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.668'. [ 437.337527][ T26] audit: type=1800 audit(1789007659.646:6): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.674" name="addr_trtype" dev="configfs" ino=46864 res=0 errno=0 [ 437.360206][ T7353] nvmet: Invalid value 'tc' for trtype [ 438.338096][ T26] audit: type=1800 audit(1789007660.646:7): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.677" name="addr_trtype" dev="configfs" ino=47185 res=0 errno=0 [ 438.362569][ T7361] nvmet: Invalid value 'tc' for trtype [ 438.431005][ T38] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 439.380710][ T38] usb 5-1: Using ep0 maxpacket: 8 [ 439.399115][ T38] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.427812][ T38] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.473923][ T38] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 439.525370][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.565359][ T38] usb 5-1: Product: syz [ 439.569608][ T38] usb 5-1: Manufacturer: syz [ 439.590730][ T38] usb 5-1: SerialNumber: syz [ 439.633309][ T38] usb 5-1: config 0 descriptor?? [ 439.864504][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.874154][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.028176][ T3600] usb 5-1: USB disconnect, device number 10 [ 440.600802][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 440.609771][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 441.426026][ T7386] binder: BINDER_SET_CONTEXT_MGR already set [ 441.449469][ T7386] binder: 7385:7386 ioctl 4018620d 200000000040 returned -16 [ 443.125364][ T26] audit: type=1800 audit(1789007665.436:8): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.687" name="addr_trtype" dev="configfs" ino=46924 res=0 errno=0 [ 443.148097][ T7404] nvmet: Invalid value 'tc' for trtype [ 446.745194][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.692'. [ 446.754181][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 450.688091][ T26] audit: type=1800 audit(1789007672.996:9): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.699" name="addr_trtype" dev="configfs" ino=47316 res=0 errno=0 [ 451.424526][ T7456] nvmet: transport type 0 not supported [ 453.101929][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 453.110974][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 456.200603][ T4858] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 456.420689][ T4858] usb 5-1: Using ep0 maxpacket: 32 [ 456.434353][ T4858] usb 5-1: config 247 has an invalid interface number: 221 but max is 0 [ 457.120552][ T4858] usb 5-1: config 247 has no interface number 0 [ 457.126886][ T4858] usb 5-1: config 247 interface 221 has no altsetting 0 [ 457.242646][ T4858] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55 [ 457.277778][ T4858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.314761][ T4858] usb 5-1: Product: syz [ 457.319005][ T4858] usb 5-1: Manufacturer: syz [ 457.350563][ T4858] usb 5-1: SerialNumber: syz [ 457.397138][ T4858] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:247.221/input/input13 [ 457.854243][ T26] audit: type=1800 audit(1789007680.166:10): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="addr_trtype" dev="configfs" ino=47405 res=0 errno=0 [ 458.338329][ T7541] nvmet: transport type 0 not supported [ 458.818144][ T7552] SET target dimension over the limit! [ 458.895911][ T26] audit: type=1800 audit(1789007681.206:11): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.718" name="addr_trtype" dev="configfs" ino=47439 res=0 errno=0 [ 458.917320][ T3625] bcm5974 5-1:247.221: could not read from device [ 458.931757][ T7556] nvmet_tcp: address family 255 not supported [ 460.746130][ T3625] bcm5974 5-1:247.221: could not read from device [ 460.762553][ T4858] usb 5-1: USB disconnect, device number 11 [ 462.721916][ T7585] nvmet_tcp: address family 255 not supported [ 463.633907][ T26] audit: type=1800 audit(1789007685.946:12): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.730" name="addr_trtype" dev="configfs" ino=47481 res=0 errno=0 [ 463.666436][ T7588] nvmet_tcp: address family 255 not supported [ 467.710607][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 468.973083][ T7612] device syzkaller0 entered promiscuous mode [ 469.930727][ T4864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 470.884327][ T7635] device syzkaller0 entered promiscuous mode [ 470.962532][ T4864] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 470.980720][ T4864] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 471.032331][ T26] audit: type=1800 audit(1789007693.346:13): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.744" name="addr_trtype" dev="configfs" ino=48339 res=0 errno=0 [ 471.057127][ T7640] nvmet: Invalid value 'tc' for trtype [ 471.065283][ T7640] nvmet_tcp: address family 255 not supported [ 471.125036][ T7635] tipc: Enabled bearer , priority 0 [ 471.155339][ T4864] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 471.252640][ T7641] tipc: Resetting bearer [ 471.273772][ T4864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.802728][ T4864] usb 6-1: probing VID:PID(0424:012C) [ 471.825295][ T7634] tipc: Resetting bearer [ 471.844392][ T4864] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 471.862702][ T4864] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 471.869196][ T4864] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 473.357338][ T4864] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 473.364131][ T4864] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 474.779924][ T4864] vub300: probe of 6-1:1.0 failed with error -110 [ 474.858891][ T7634] tipc: Disabling bearer [ 474.860023][ T4863] usb 6-1: USB disconnect, device number 11 [ 475.278465][ T7665] device syzkaller0 entered promiscuous mode [ 475.601464][ T7669] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 475.631816][ T7669] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 478.848988][ T7696] xt_nfacct: accounting object `' does not exist [ 481.816272][ T7707] device syzkaller0 entered promiscuous mode [ 481.954864][ T7707] tipc: Enabled bearer , priority 0 [ 482.714341][ T7705] tipc: Resetting bearer [ 482.992064][ T7705] tipc: Disabling bearer [ 483.424893][ T7726] device syzkaller0 entered promiscuous mode [ 486.296649][ T26] audit: type=1800 audit(1789007708.606:14): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="addr_trtype" dev="configfs" ino=48632 res=0 errno=0 [ 486.322892][ T7769] nvmet_tcp: address family 255 not supported [ 488.084537][ T7779] device syzkaller0 entered promiscuous mode [ 488.125849][ T7779] tipc: Enabled bearer , priority 0 [ 488.375870][ T7785] device syzkaller0 entered promiscuous mode [ 488.580261][ T7779] tipc: Resetting bearer [ 489.059637][ T7778] tipc: Resetting bearer [ 489.141696][ T7778] tipc: Disabling bearer [ 489.620959][ T4864] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 491.122420][ T4864] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.140592][ T4864] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 491.175788][ T4864] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 491.232379][ T4864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.506265][ T4864] cxacru 6-1:1.0: invalid response length to cm 0x90: 48 [ 491.516747][ T4864] cxacru 6-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 491.538475][ T4864] cxacru: probe of 6-1:1.0 failed with error -22 [ 491.727619][ T4864] usb 6-1: USB disconnect, device number 12 [ 494.403379][ T7853] device syzkaller0 entered promiscuous mode [ 494.768445][ T7864] SET target dimension over the limit! [ 496.290194][ T7860] device syzkaller0 entered promiscuous mode [ 496.421430][ T7863] tipc: Enabled bearer , priority 0 [ 496.566764][ T7860] tipc: Resetting bearer [ 496.702960][ T7859] tipc: Resetting bearer [ 498.979226][ T7859] tipc: Disabling bearer [ 498.989033][ T2121] tipc: Node number set to 3785648430 [ 499.138337][ T26] audit: type=1800 audit(1789007721.446:15): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.797" name="addr_trtype" dev="configfs" ino=48884 res=0 errno=0 [ 499.162981][ T7874] nvmet: Invalid value 'tc' for trtype [ 499.170724][ T7874] nvmet_tcp: address family 255 not supported [ 500.733074][ T7884] syz.5.801 (7884): drop_caches: 2 [ 501.406525][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.412930][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.516902][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 501.605138][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 503.016966][ T7912] device syzkaller0 entered promiscuous mode [ 505.132087][ T7919] tipc: Enabled bearer , priority 0 [ 505.172975][ T7919] tipc: Resetting bearer [ 505.334116][ T7918] tipc: Disabling bearer [ 505.396523][ T7941] SET target dimension over the limit! [ 509.270647][ T2121] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 511.425434][ T2121] usb 5-1: device descriptor read/all, error -71 [ 514.395589][ T7985] device syzkaller0 entered promiscuous mode [ 518.858072][ T126] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 519.184752][ T126] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 519.223263][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.270493][ T126] usb 3-1: Product: syz [ 519.287691][ T126] usb 3-1: Manufacturer: syz [ 519.315555][ T126] usb 3-1: SerialNumber: syz [ 520.185861][ T126] usb 3-1: config 0 descriptor?? [ 520.401887][ T126] usb 3-1: can't set config #0, error -71 [ 520.430111][ T126] usb 3-1: USB disconnect, device number 14 [ 521.464493][ T8052] device syzkaller0 entered promiscuous mode [ 522.380900][ T8060] xt_nfacct: accounting object `' does not exist [ 525.600609][ T126] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 525.830722][ T4322] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 526.625277][ T4322] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 527.174592][ T8095] rtc_cmos 00:00: Alarms can be up to one day in the future [ 527.376826][ T8097] dns_resolver: Unsupported server list version (0) [ 528.070499][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.078577][ T4322] usb 5-1: Product: syz [ 528.083322][ T4322] usb 5-1: Manufacturer: syz [ 528.087977][ T4322] usb 5-1: SerialNumber: syz [ 528.094956][ T4322] usb 5-1: config 0 descriptor?? [ 528.140504][ T2121] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 529.241218][ T126] usb 8-1: unable to get BOS descriptor or descriptor too short [ 529.265921][ T2121] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 529.279315][ T126] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 529.297561][ T126] usb 8-1: can't read configurations, error -71 [ 529.311670][ T2121] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 529.358490][ T2121] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 529.397303][ T2121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.430478][ T2121] usb 4-1: Product: syz [ 529.434707][ T2121] usb 4-1: Manufacturer: syz [ 529.439347][ T2121] usb 4-1: SerialNumber: syz [ 530.919361][ T3600] usb 5-1: USB disconnect, device number 14 [ 531.041198][ T2121] usb 4-1: can't set config #2, error -71 [ 531.051977][ T2121] usb 4-1: USB disconnect, device number 7 [ 531.132695][ T8113] device syzkaller0 entered promiscuous mode [ 534.897586][ T8145] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 537.693000][ T8184] device syzkaller0 entered promiscuous mode [ 537.740619][ T4863] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 537.940501][ T4863] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 537.962978][ T4863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.986711][ T4863] usb 4-1: Product: syz [ 537.998797][ T4863] usb 4-1: Manufacturer: syz [ 538.014833][ T4863] usb 4-1: SerialNumber: syz [ 538.030228][ T4863] usb 4-1: config 0 descriptor?? [ 539.052568][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.872'. [ 539.061569][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 541.521399][ T2121] usb 4-1: USB disconnect, device number 8 [ 543.281740][ T8222] SET target dimension over the limit! [ 545.901191][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 546.611008][ T8250] device syzkaller0 entered promiscuous mode [ 549.846263][ T8272] SET target dimension over the limit! [ 554.510200][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.7.896'. [ 554.538627][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.896'. [ 555.830882][ T8310] xt_nfacct: accounting object `' does not exist [ 556.486153][ T2121] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 556.687854][ T2121] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 556.768457][ T2121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.859164][ T2121] usb 6-1: Product: syz [ 556.925373][ T2121] usb 6-1: Manufacturer: syz [ 557.009213][ T2121] usb 6-1: SerialNumber: syz [ 557.190231][ T2121] usb 6-1: config 0 descriptor?? [ 557.430554][ T8274] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 557.644738][ T8274] usb 3-1: Using ep0 maxpacket: 16 [ 557.653700][ T8274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.692256][ T8274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.735791][ T8274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.779348][ T8274] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.804335][ T8274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.848467][ T8274] usb 3-1: config 0 descriptor?? [ 557.923639][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.908'. [ 558.080275][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.908'. [ 560.177713][ T8274] usbhid 3-1:0.0: can't add hid device: -71 [ 560.202108][ T4320] usb 6-1: USB disconnect, device number 13 [ 560.208303][ T8274] usbhid: probe of 3-1:0.0 failed with error -71 [ 560.230624][ T8274] usb 3-1: USB disconnect, device number 15 [ 562.540766][ T8380] xt_nfacct: accounting object `' does not exist [ 562.954214][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970690][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.443988][ T8385] loop2: detected capacity change from 0 to 512 [ 563.451259][ T8385] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 564.060525][ T8371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 564.300536][ T3600] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 565.900640][ T3600] usb 5-1: Using ep0 maxpacket: 16 [ 565.908653][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.956212][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.960699][ T8274] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 565.990487][ T3600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 566.030544][ T3600] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 566.070269][ T3600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.100232][ T3600] usb 5-1: config 0 descriptor?? [ 566.267472][ T8274] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 566.286268][ T8274] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.295953][ T8274] usb 8-1: Product: syz [ 566.300171][ T8274] usb 8-1: Manufacturer: syz [ 566.314209][ T8274] usb 8-1: SerialNumber: syz [ 566.351254][ T8274] usb 8-1: config 0 descriptor?? [ 566.728471][ T3600] usbhid 5-1:0.0: can't add hid device: -71 [ 566.745288][ T3600] usbhid: probe of 5-1:0.0 failed with error -71 [ 566.844745][ T3600] usb 5-1: USB disconnect, device number 15 [ 566.865563][ T8413] FAULT_INJECTION: forcing a failure. [ 566.865563][ T8413] name failslab, interval 1, probability 0, space 0, times 0 [ 566.899921][ T8413] CPU: 0 PID: 8413 Comm: syz.3.920 Not tainted syzkaller #0 [ 566.907276][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.917449][ T8413] Call Trace: [ 566.920737][ T8413] [ 566.923679][ T8413] dump_stack_lvl+0x188/0x24e [ 566.928392][ T8413] ? show_regs_print_info+0x12/0x12 [ 566.933616][ T8413] ? load_image+0x410/0x410 [ 566.938173][ T8413] ? __might_sleep+0xd0/0xd0 [ 566.942786][ T8413] ? __lock_acquire+0x7c40/0x7c40 [ 566.947826][ T8413] should_fail_ex+0x390/0x4c0 [ 566.952522][ T8413] should_failslab+0x5/0x20 [ 566.957033][ T8413] slab_pre_alloc_hook+0x59/0x300 [ 566.962072][ T8413] ? __lock_acquire+0x138a/0x7c40 [ 566.967117][ T8413] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 566.972850][ T8413] __kmem_cache_alloc_node+0x4f/0x270 [ 566.978235][ T8413] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 566.983983][ T8413] __kmalloc+0xa3/0x240 [ 566.988176][ T8413] tomoyo_realpath_from_path+0xe2/0x5c0 [ 566.993749][ T8413] ? tomoyo_domain+0xd2/0x120 [ 566.998441][ T8413] ? tomoyo_path_number_perm+0x205/0x650 [ 567.004088][ T8413] tomoyo_path_number_perm+0x22f/0x650 [ 567.009566][ T8413] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 567.015065][ T8413] ? __fget_files+0x28/0x460 [ 567.019687][ T8413] security_file_ioctl+0x6c/0xa0 [ 567.024644][ T8413] __se_sys_ioctl+0x48/0x170 [ 567.029248][ T8413] do_syscall_64+0x4c/0xa0 [ 567.033683][ T8413] ? clear_bhb_loop+0x60/0xb0 [ 567.038378][ T8413] ? clear_bhb_loop+0x60/0xb0 [ 567.043078][ T8413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.048994][ T8413] RIP: 0033:0x7fde2079e159 [ 567.053421][ T8413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.073040][ T8413] RSP: 002b:00007fde216e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.081470][ T8413] RAX: ffffffffffffffda RBX: 00007fde20a25fa0 RCX: 00007fde2079e159 [ 567.089453][ T8413] RDX: 0000000000000000 RSI: 0000000000008924 RDI: 0000000000000003 [ 567.097447][ T8413] RBP: 00007fde2083503b R08: 0000000000000000 R09: 0000000000000000 [ 567.105439][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.113420][ T8413] R13: 00007fde20a26038 R14: 00007fde20a25fa0 R15: 00007ffe48c88088 [ 567.121417][ T8413] [ 567.156404][ T8413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.500767][ T8435] xt_nfacct: accounting object `' does not exist [ 569.056787][ T126] usb 8-1: USB disconnect, device number 6 [ 571.927180][ T8458] FAULT_INJECTION: forcing a failure. [ 571.927180][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 571.976491][ T8458] CPU: 0 PID: 8458 Comm: syz.2.938 Not tainted syzkaller #0 [ 571.983850][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.993946][ T8458] Call Trace: [ 571.997260][ T8458] [ 572.000225][ T8458] dump_stack_lvl+0x188/0x24e [ 572.004971][ T8458] ? show_regs_print_info+0x12/0x12 [ 572.010223][ T8458] ? load_image+0x410/0x410 [ 572.014783][ T8458] ? __might_sleep+0xd0/0xd0 [ 572.019418][ T8458] ? __lock_acquire+0x7c40/0x7c40 [ 572.024501][ T8458] should_fail_ex+0x390/0x4c0 [ 572.029241][ T8458] should_failslab+0x5/0x20 [ 572.033788][ T8458] slab_pre_alloc_hook+0x59/0x300 [ 572.038861][ T8458] ? __lock_acquire+0x138a/0x7c40 [ 572.043944][ T8458] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 572.049750][ T8458] __kmem_cache_alloc_node+0x4f/0x270 [ 572.055182][ T8458] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 572.060963][ T8458] __kmalloc+0xa3/0x240 [ 572.065180][ T8458] tomoyo_realpath_from_path+0xe2/0x5c0 [ 572.070782][ T8458] ? tomoyo_domain+0xd2/0x120 [ 572.075518][ T8458] ? tomoyo_path_number_perm+0x205/0x650 [ 572.081211][ T8458] tomoyo_path_number_perm+0x22f/0x650 [ 572.086722][ T8458] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 572.092356][ T8458] ? __fget_files+0x28/0x460 [ 572.097012][ T8458] security_file_ioctl+0x6c/0xa0 [ 572.102004][ T8458] __se_sys_ioctl+0x48/0x170 [ 572.106688][ T8458] do_syscall_64+0x4c/0xa0 [ 572.111161][ T8458] ? clear_bhb_loop+0x60/0xb0 [ 572.115891][ T8458] ? clear_bhb_loop+0x60/0xb0 [ 572.120624][ T8458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.126582][ T8458] RIP: 0033:0x7f7d2839e159 [ 572.131045][ T8458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.150694][ T8458] RSP: 002b:00007f7d29276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.159160][ T8458] RAX: ffffffffffffffda RBX: 00007f7d28625fa0 RCX: 00007f7d2839e159 [ 572.167184][ T8458] RDX: 0000000000000000 RSI: 0000000000008924 RDI: 0000000000000003 [ 572.175198][ T8458] RBP: 00007f7d2843503b R08: 0000000000000000 R09: 0000000000000000 [ 572.183217][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.191229][ T8458] R13: 00007f7d28626038 R14: 00007f7d28625fa0 R15: 00007ffe747a9028 [ 572.199267][ T8458] [ 572.241723][ T8458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 573.350618][ T4320] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 573.540585][ T4320] usb 8-1: Using ep0 maxpacket: 16 [ 574.834954][ T4320] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.471097][ T4320] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.570649][ T4320] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 575.690605][ T4320] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 575.779164][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.932346][ T4320] usb 8-1: config 0 descriptor?? [ 576.246128][ T4320] usbhid 8-1:0.0: can't add hid device: -71 [ 576.259558][ T4320] usbhid: probe of 8-1:0.0 failed with error -71 [ 576.321274][ T4320] usb 8-1: USB disconnect, device number 7 [ 576.616280][ T8494] SET target dimension over the limit! [ 577.450654][ T2121] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 577.685112][ T2121] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 578.730794][ T8502] xt_nfacct: accounting object `' does not exist [ 579.140135][ T2121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.148533][ T2121] usb 4-1: Product: syz [ 580.629317][ T2121] usb 4-1: Manufacturer: syz [ 580.634060][ T2121] usb 4-1: SerialNumber: syz [ 580.640655][ T2121] usb 4-1: config 0 descriptor?? [ 581.083022][ T2121] usb 4-1: can't set config #0, error -71 [ 581.137449][ T2121] usb 4-1: USB disconnect, device number 9 [ 584.252010][ T38] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 584.470706][ T38] usb 4-1: Using ep0 maxpacket: 16 [ 585.231164][ T38] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.250478][ T38] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.260284][ T38] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 585.278964][ T38] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 585.293635][ T38] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.303893][ T38] usb 4-1: config 0 descriptor?? [ 585.948534][ T38] usbhid 4-1:0.0: can't add hid device: -71 [ 585.990601][ T38] usbhid: probe of 4-1:0.0 failed with error -71 [ 585.999412][ T38] usb 4-1: USB disconnect, device number 10 [ 587.080092][ T8568] xt_nfacct: accounting object `' does not exist [ 587.230753][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 587.685360][ T14] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 587.720452][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.728965][ T14] usb 5-1: Product: syz [ 587.790545][ T14] usb 5-1: Manufacturer: syz [ 587.795395][ T14] usb 5-1: SerialNumber: syz [ 587.871890][ T14] usb 5-1: config 0 descriptor?? [ 588.045043][ T8575] loop5: detected capacity change from 0 to 512 [ 588.052065][ T8575] FAT-fs (loop5): Unrecognized mount option "./tracing" or missing value [ 589.710815][ T26] audit: type=1800 audit(1789007812.016:16): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.966" name="addr_trtype" dev="configfs" ino=50989 res=0 errno=0 [ 589.731914][ T8601] nvmet: Invalid value 'tc' for trtype [ 589.741112][ T8601] nvmet_tcp: address family 255 not supported [ 589.875859][ T4322] usb 5-1: USB disconnect, device number 16 [ 590.306338][ T8617] device syzkaller0 entered promiscuous mode [ 591.337979][ T8630] loop5: detected capacity change from 0 to 512 [ 591.345285][ T8630] FAT-fs (loop5): Unrecognized mount option "./tracing" or missing value [ 594.167847][ T26] audit: type=1800 audit(1789007816.476:17): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.978" name="addr_trtype" dev="configfs" ino=51596 res=0 errno=0 [ 594.210674][ T8647] nvmet: Invalid value 'tc' for trtype [ 594.218439][ T8647] nvmet_tcp: address family 255 not supported [ 594.550531][ T4358] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 594.754850][ T4358] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 594.778646][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.814737][ T4358] usb 5-1: Product: syz [ 594.833202][ T4358] usb 5-1: Manufacturer: syz [ 594.853405][ T4358] usb 5-1: SerialNumber: syz [ 594.881456][ T4358] usb 5-1: config 0 descriptor?? [ 595.330309][ T4358] usb 5-1: Firmware version (0.0) predates our first public release. [ 595.349672][ T4358] usb 5-1: Please update to version 0.2 or newer [ 595.474992][ T8673] SET target dimension over the limit! [ 596.778612][ T4358] usb 5-1: USB disconnect, device number 17 [ 597.415198][ T8676] device syzkaller0 entered promiscuous mode [ 603.928674][ T8693] loop4: detected capacity change from 0 to 512 [ 603.957574][ T8693] FAT-fs (loop4): Unrecognized mount option "./tracing" or missing value [ 607.172161][ T8721] device syzkaller0 entered promiscuous mode [ 607.643860][ T4358] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 607.993809][ T4358] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 608.010674][ T4358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.018864][ T4358] usb 4-1: Product: syz [ 608.024029][ T4358] usb 4-1: Manufacturer: syz [ 608.028698][ T4358] usb 4-1: SerialNumber: syz [ 608.431993][ T4358] usb 4-1: config 0 descriptor?? [ 609.742819][ T8736] xt_nfacct: accounting object `' does not exist [ 609.785142][ T4358] usb 4-1: Firmware version (0.0) predates our first public release. [ 609.824320][ T4358] usb 4-1: Please update to version 0.2 or newer [ 609.938877][ T4358] usb 4-1: USB disconnect, device number 11 [ 610.186100][ T8753] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 612.588652][ T26] audit: type=1800 audit(1789007834.896:18): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1008" name="addr_trtype" dev="configfs" ino=51883 res=0 errno=0 [ 613.079284][ T8771] loop7: detected capacity change from 0 to 512 [ 613.145862][ T8771] FAT-fs (loop7): Unrecognized mount option "./tracing" or missing value [ 613.684977][ T8780] device syzkaller0 entered promiscuous mode [ 616.412565][ T8798] xt_nfacct: accounting object `' does not exist [ 621.757443][ T26] audit: type=1800 audit(1789007844.066:19): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1021" name="addr_trtype" dev="configfs" ino=51923 res=0 errno=0 [ 624.383744][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.395497][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.428442][ T8838] loop7: detected capacity change from 0 to 512 [ 626.614058][ T8838] FAT-fs (loop7): Unrecognized mount option "./tracing" or missing value [ 626.842902][ T8848] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 627.852881][ T8861] xt_nfacct: accounting object `' does not exist [ 628.602361][ T8864] device syzkaller0 entered promiscuous mode [ 633.780279][ T8903] SET target dimension over the limit! [ 635.223879][ T26] audit: type=1800 audit(1789007857.536:20): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1039" name="addr_trtype" dev="configfs" ino=52389 res=0 errno=0 [ 635.276487][ T8900] nvmet: Invalid value 'tc' for trtype [ 635.354564][ T8905] nvmet_tcp: address family 255 not supported [ 637.259752][ T8913] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 639.436164][ T8928] device syzkaller0 entered promiscuous mode [ 639.468189][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 642.070174][ T26] audit: type=1800 audit(1789007864.376:21): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1049" name="addr_trtype" dev="configfs" ino=52438 res=0 errno=0 [ 642.362474][ T8946] SET target dimension over the limit! [ 644.582062][ T26] audit: type=1800 audit(1789007866.896:22): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1050" name="addr_trtype" dev="configfs" ino=52218 res=0 errno=0 [ 644.611253][ T8953] nvmet: Invalid value 'tc' for trtype [ 644.658714][ T8953] nvmet_tcp: address family 255 not supported [ 645.250471][ T4358] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 645.490523][ T4358] usb 4-1: Using ep0 maxpacket: 16 [ 645.500133][ T4358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.632591][ T4358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.753310][ T4358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 645.954054][ T4358] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.267056][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.344637][ T4358] usb 4-1: config 0 descriptor?? [ 646.478721][ T8969] SET target dimension over the limit! [ 648.182766][ T4358] usbhid 4-1:0.0: can't add hid device: -71 [ 648.217406][ T4358] usbhid: probe of 4-1:0.0 failed with error -71 [ 648.328065][ T4358] usb 4-1: USB disconnect, device number 12 [ 648.862764][ T8977] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 655.231560][ T9015] tipc: Enabling of bearer rejected, failed to enable media [ 655.840939][ T126] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 655.872762][ T9040] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 656.110505][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 656.125064][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.378738][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.436083][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 656.538055][ T126] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 656.573997][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.606823][ T126] usb 3-1: config 0 descriptor?? [ 657.785267][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 657.799724][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 657.830860][ T126] usb 3-1: USB disconnect, device number 16 [ 658.262167][ T26] audit: type=1800 audit(1789007880.576:23): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1072" name="addr_trtype" dev="configfs" ino=52624 res=0 errno=0 [ 658.285855][ T9063] nvmet: Invalid value 'tc' for trtype [ 659.299354][ T9065] nvmet_tcp: address family 255 not supported [ 660.173791][ T9077] device syzkaller0 entered promiscuous mode [ 660.183699][ T9077] tipc: Enabling of bearer rejected, failed to enable media [ 661.579310][ T9089] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 664.787542][ T9122] SET target dimension over the limit! [ 666.429394][ T26] audit: type=1800 audit(1789007888.736:24): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1088" name="addr_trtype" dev="configfs" ino=52743 res=0 errno=0 [ 666.486263][ T9124] nvmet: Invalid value 'tc' for trtype [ 667.631163][ T9127] nvmet_tcp: address family 255 not supported [ 670.200469][ T2121] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 671.670639][ T2121] usb 5-1: Using ep0 maxpacket: 16 [ 671.678450][ T2121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.710236][ T2121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.730831][ T2121] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.746014][ T9145] device syzkaller0 entered promiscuous mode [ 671.755339][ T9145] tipc: Enabling of bearer rejected, failed to enable media [ 671.764382][ T2121] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.775273][ T2121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.811156][ T2121] usb 5-1: config 0 descriptor?? [ 672.175162][ T9149] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 672.559902][ T2121] usbhid 5-1:0.0: can't add hid device: -71 [ 672.611625][ T2121] usbhid: probe of 5-1:0.0 failed with error -71 [ 672.702487][ T2121] usb 5-1: USB disconnect, device number 18 [ 675.438439][ T26] audit: type=1800 audit(1789007897.746:25): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1100" name="addr_trtype" dev="configfs" ino=52806 res=0 errno=0 [ 675.469600][ T9172] nvmet: Invalid value 'tc' for trtype [ 675.486077][ T9172] nvmet_tcp: address family 255 not supported [ 678.215315][ T9186] device syzkaller0 entered promiscuous mode [ 678.310955][ T26] audit: type=1800 audit(1789007900.626:26): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1105" name="addr_trtype" dev="configfs" ino=53608 res=0 errno=0 [ 678.334625][ T9189] nvmet_tcp: address family 255 not supported [ 679.083366][ T9190] tipc: Enabling of bearer rejected, failed to enable media [ 682.637476][ T26] audit: type=1800 audit(1789007904.946:27): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1114" name="addr_trtype" dev="configfs" ino=52924 res=0 errno=0 [ 682.664583][ T9215] nvmet: Invalid value 'tc' for trtype [ 682.670819][ T9215] nvmet_tcp: address family 255 not supported [ 684.094795][ T26] audit: type=1800 audit(1789007906.406:28): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1116" name="addr_trtype" dev="configfs" ino=52946 res=0 errno=0 [ 684.116305][ T9225] nvmet: Invalid value 'tc' for trtype [ 685.622571][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.628961][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.724839][ T9227] nvmet_tcp: address family 255 not supported [ 688.883581][ T9236] xt_nfacct: accounting object `' does not exist [ 689.415784][ T26] audit: type=1800 audit(1789007911.726:29): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1122" name="addr_trtype" dev="configfs" ino=53732 res=0 errno=0 [ 689.445317][ T9244] nvmet_tcp: address family 255 not supported [ 690.565302][ T26] audit: type=1800 audit(1789007912.876:30): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1126" name="addr_trtype" dev="configfs" ino=52975 res=0 errno=0 [ 690.567133][ T9252] nvmet: Invalid value 'tc' for trtype [ 692.540204][ T9251] nvmet_tcp: address family 255 not supported [ 694.184754][ T26] audit: type=1800 audit(1789007916.496:31): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1129" name="addr_trtype" dev="configfs" ino=53775 res=0 errno=0 [ 694.186575][ T9266] nvmet: Invalid value 'tc' for trtype [ 696.398621][ T9265] nvmet_tcp: address family 255 not supported [ 696.537721][ T9272] device syzkaller0 entered promiscuous mode [ 696.548927][ T9272] tipc: Enabling of bearer rejected, failed to enable media [ 699.141282][ T26] audit: type=1800 audit(1789007921.456:32): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1140" name="addr_trtype" dev="configfs" ino=53092 res=0 errno=0 [ 699.195259][ T9303] nvmet: Invalid value 'tc' for trtype [ 699.248178][ T9307] nvmet_tcp: address family 255 not supported [ 699.375268][ T9311] FAULT_INJECTION: forcing a failure. [ 699.375268][ T9311] name failslab, interval 1, probability 0, space 0, times 0 [ 699.419338][ T9311] CPU: 1 PID: 9311 Comm: syz.4.1142 Not tainted syzkaller #0 [ 699.426803][ T9311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.436909][ T9311] Call Trace: [ 699.440241][ T9311] [ 699.443229][ T9311] dump_stack_lvl+0x188/0x24e [ 699.447975][ T9311] ? show_regs_print_info+0x12/0x12 [ 699.453237][ T9311] ? load_image+0x410/0x410 [ 699.457794][ T9311] ? __might_sleep+0xd0/0xd0 [ 699.462437][ T9311] ? __lock_acquire+0x7c40/0x7c40 [ 699.467524][ T9311] should_fail_ex+0x390/0x4c0 [ 699.472259][ T9311] should_failslab+0x5/0x20 [ 699.476800][ T9311] slab_pre_alloc_hook+0x59/0x300 [ 699.481868][ T9311] ? x509_get_sig_params+0x125/0x4c0 [ 699.487279][ T9311] __kmem_cache_alloc_node+0x4f/0x270 [ 699.492709][ T9311] ? x509_get_sig_params+0x125/0x4c0 [ 699.498050][ T9311] __kmalloc_node_track_caller+0xa0/0x240 [ 699.503852][ T9311] kmemdup+0x27/0x60 [ 699.507886][ T9311] x509_get_sig_params+0x125/0x4c0 [ 699.513058][ T9311] x509_cert_parse+0x4ab/0x7a0 [ 699.517870][ T9311] x509_key_preparse+0x60/0x660 [ 699.522769][ T9311] ? down_read+0x1a8/0x2d0 [ 699.527236][ T9311] asymmetric_key_preparse+0xa5/0x140 [ 699.532728][ T9311] key_create_or_update+0x432/0xa40 [ 699.538020][ T9311] ? security_key_permission+0x7c/0xa0 [ 699.543555][ T9311] ? key_type_put+0x20/0x20 [ 699.548115][ T9311] ? lookup_user_key_possessed+0x40/0x40 [ 699.553818][ T9311] ? __might_fault+0xc2/0x120 [ 699.558610][ T9311] ? __might_fault+0xa6/0x120 [ 699.563346][ T9311] __se_sys_add_key+0x34b/0x410 [ 699.568246][ T9311] ? __x64_sys_add_key+0xc0/0xc0 [ 699.573241][ T9311] ? lockdep_hardirqs_on+0x94/0x140 [ 699.578546][ T9311] ? __x64_sys_add_key+0x1c/0xc0 [ 699.583538][ T9311] do_syscall_64+0x4c/0xa0 [ 699.588017][ T9311] ? clear_bhb_loop+0x60/0xb0 [ 699.592790][ T9311] ? clear_bhb_loop+0x60/0xb0 [ 699.597525][ T9311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.603472][ T9311] RIP: 0033:0x7fb4b8f9e159 [ 699.607934][ T9311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.627583][ T9311] RSP: 002b:00007fb4b9ed5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 699.636040][ T9311] RAX: ffffffffffffffda RBX: 00007fb4b9225fa0 RCX: 00007fb4b8f9e159 [ 699.644053][ T9311] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 699.652067][ T9311] RBP: 00007fb4b903503b R08: ffffffffffffffff R09: 0000000000000000 [ 699.660079][ T9311] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 699.668100][ T9311] R13: 00007fb4b9226038 R14: 00007fb4b9225fa0 R15: 00007ffc73457598 [ 699.676137][ T9311] [ 700.111957][ T9319] device syzkaller0 entered promiscuous mode [ 700.133922][ T9319] tipc: Enabling of bearer rejected, failed to enable media [ 703.869691][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 703.879081][ T9336] netlink: 'syz.2.1137': attribute type 30 has an invalid length. [ 703.887041][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 705.068305][ T26] audit: type=1800 audit(1789007927.366:33): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1153" name="addr_trtype" dev="configfs" ino=53143 res=0 errno=0 [ 705.114966][ T9342] nvmet: Invalid value 'tc' for trtype [ 705.186547][ T9345] nvmet_tcp: address family 255 not supported [ 706.082912][ T9355] 9pnet_fd: Insufficient options for proto=fd [ 707.400716][ T9365] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 714.814065][ T9409] 9pnet_fd: Insufficient options for proto=fd [ 714.847014][ T9404] Can't find ip_set type hash:ip,po [ 715.359803][ T9413] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 716.975841][ T9417] device-mapper: ioctl: Unable to rename non-existent device, to ú#™ [ 717.223307][ T9423] netlink: 496 bytes leftover after parsing attributes in process `syz.5.1176'. [ 720.301018][ T9448] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 722.619796][ T9468] syz.3.1185 (9468): drop_caches: 2 [ 727.260507][ T8274] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 727.463252][ T8274] usb 3-1: unable to get BOS descriptor or descriptor too short [ 727.494705][ T8274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.552331][ T8274] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 727.586601][ T8274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 727.618234][ T8274] usb 3-1: Product: syz [ 727.622751][ T8274] usb 3-1: Manufacturer: syz [ 727.677245][ T8274] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 728.066159][ T8274] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 728.685116][ T8274] videodev: could not get a free minor [ 728.698228][ T8274] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 728.712143][ T8274] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 728.884278][ T22] usb 3-1: USB disconnect, device number 17 [ 730.103764][ T9517] FAULT_INJECTION: forcing a failure. [ 730.103764][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 730.118088][ T9517] CPU: 1 PID: 9517 Comm: syz.2.1198 Not tainted syzkaller #0 [ 730.125535][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 730.135634][ T9517] Call Trace: [ 730.138952][ T9517] [ 730.141954][ T9517] dump_stack_lvl+0x188/0x24e [ 730.146662][ T9517] ? show_regs_print_info+0x12/0x12 [ 730.151880][ T9517] ? load_image+0x410/0x410 [ 730.156418][ T9517] ? __might_sleep+0xd0/0xd0 [ 730.161036][ T9517] ? __lock_acquire+0x7c40/0x7c40 [ 730.166132][ T9517] should_fail_ex+0x390/0x4c0 [ 730.170878][ T9517] should_failslab+0x5/0x20 [ 730.175420][ T9517] slab_pre_alloc_hook+0x59/0x300 [ 730.180479][ T9517] ? _raw_spin_unlock+0x40/0x40 [ 730.185370][ T9517] ? rfkill_fop_open+0x18c/0x570 [ 730.190445][ T9517] __kmem_cache_alloc_node+0x4f/0x270 [ 730.195878][ T9517] ? rfkill_fop_open+0x18c/0x570 [ 730.200847][ T9517] kmalloc_trace+0x26/0xe0 [ 730.205299][ T9517] rfkill_fop_open+0x18c/0x570 [ 730.210103][ T9517] ? rfkill_fop_ioctl+0x230/0x230 [ 730.215157][ T9517] misc_open+0x31f/0x390 [ 730.219437][ T9517] chrdev_open+0x585/0x5f0 [ 730.223886][ T9517] ? cd_forget+0x160/0x160 [ 730.228338][ T9517] ? fsnotify_perm+0x39b/0x550 [ 730.233139][ T9517] ? cd_forget+0x160/0x160 [ 730.237589][ T9517] do_dentry_open+0x7dd/0x10b0 [ 730.242399][ T9517] path_openat+0x2674/0x2f10 [ 730.247040][ T9517] ? verify_lock_unused+0x140/0x140 [ 730.252270][ T9517] ? do_sys_openat2+0xdd/0x4f0 [ 730.257075][ T9517] ? do_filp_open+0x420/0x420 [ 730.261799][ T9517] do_filp_open+0x1ee/0x420 [ 730.266347][ T9517] ? vfs_tmpfile+0x470/0x470 [ 730.270996][ T9517] ? _raw_spin_unlock+0x24/0x40 [ 730.275882][ T9517] ? alloc_fd+0x590/0x640 [ 730.280270][ T9517] do_sys_openat2+0x14b/0x4f0 [ 730.284990][ T9517] ? do_sys_open+0xe0/0xe0 [ 730.289437][ T9517] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 730.295475][ T9517] ? lock_chain_count+0x20/0x20 [ 730.300374][ T9517] __x64_sys_openat+0x135/0x160 [ 730.305273][ T9517] do_syscall_64+0x4c/0xa0 [ 730.309734][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 730.314443][ T9517] ? clear_bhb_loop+0x60/0xb0 [ 730.319156][ T9517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.325084][ T9517] RIP: 0033:0x7f7d2839e159 [ 730.329527][ T9517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.349163][ T9517] RSP: 002b:00007f7d29276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.357604][ T9517] RAX: ffffffffffffffda RBX: 00007f7d28625fa0 RCX: 00007f7d2839e159 [ 730.365799][ T9517] RDX: 0000000000022883 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 730.373802][ T9517] RBP: 00007f7d2843503b R08: 0000000000000000 R09: 0000000000000000 [ 730.381891][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.389891][ T9517] R13: 00007f7d28626038 R14: 00007f7d28625fa0 R15: 00007ffe747a9028 [ 730.397942][ T9517] [ 731.049661][ T9526] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 733.633324][ T26] audit: type=1800 audit(1789007955.946:34): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1200" name="addr_trtype" dev="configfs" ino=54672 res=0 errno=0 [ 733.714499][ T9524] nvmet: Invalid value 'tc' for trtype [ 734.260007][ T9524] nvmet_tcp: address family 255 not supported [ 734.556701][ T9539] binder: 9538:9539 ioctl 4018620d 0 returned -22 [ 739.570690][ T9566] nvmet_tcp: address family 255 not supported [ 741.682521][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1219'. [ 745.385378][ T9600] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 745.392590][ T9600] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 745.400783][ T9600] udc dummy_udc.0: failed to start g1: -22 [ 745.406690][ T9600] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 745.415777][ T9600] UDC core: g1: couldn't find an available UDC or it's busy [ 746.564769][ T9610] tmpfs: Unknown parameter 'usrquota' [ 747.063834][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.070267][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.003936][ T9618] binder: 9617:9618 ioctl c0306201 0 returned -14 [ 755.312302][ T9648] file system registered [ 755.371342][ T9648] ffs_data_put(): freeing [ 755.528079][ T4273] ffs_data_put(): freeing [ 756.540760][ T4858] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 756.764927][ T4858] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 756.781985][ T4858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.797390][ T4858] usb 8-1: Product: syz [ 756.803078][ T4858] usb 8-1: Manufacturer: syz [ 756.807802][ T4858] usb 8-1: SerialNumber: syz [ 756.829678][ T4858] usb 8-1: config 0 descriptor?? [ 757.058055][ T4858] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 008 [ 758.632315][ T9674] i2c i2c-1: failure reading status [ 758.653572][ T4863] usb 8-1: USB disconnect, device number 8 [ 764.870099][ T9721] SET target dimension over the limit! [ 766.343720][ T9732] loop2: detected capacity change from 0 to 512 [ 766.351009][ T9732] FAT-fs (loop2): Unrecognized mount option "./tracing" or missing value [ 766.965761][ T4322] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 767.298002][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 767.322736][ T4322] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 767.330217][ T4322] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 767.341953][ T4322] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.353443][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 767.630622][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 767.644576][ T4322] usb 3-1: config 168 interface 0 has no altsetting 0 [ 767.676007][ T4322] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 767.690577][ T4322] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 767.702214][ T4322] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.713944][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 767.725124][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 767.757753][ T4322] usb 3-1: config 168 interface 0 has no altsetting 0 [ 767.787585][ T4322] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 767.812456][ T4322] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 767.831320][ T4322] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.849434][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 767.897287][ T4322] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 767.916535][ T4322] usb 3-1: config 168 interface 0 has no altsetting 0 [ 767.936985][ T4322] usb 3-1: string descriptor 0 read error: -22 [ 767.949545][ T4322] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 767.958990][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.029709][ T4322] adutux 3-1:168.0: interrupt endpoints not found [ 768.529971][ T126] usb 3-1: USB disconnect, device number 18 [ 769.247552][ T9764] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 775.514724][ T9808] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 778.031303][ T26] audit: type=1800 audit(1789008000.346:35): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1291" name="addr_trtype" dev="configfs" ino=55867 res=0 errno=0 [ 778.055087][ T9840] nvmet_tcp: address family 255 not supported [ 780.277562][ T9852] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 780.855953][ T9859] SET target dimension over the limit! [ 780.867023][ T26] audit: type=1800 audit(1789008003.176:36): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1297" name="addr_trtype" dev="configfs" ino=55254 res=0 errno=0 [ 780.888354][ T9858] nvmet: Invalid value 'tc' for trtype [ 780.896503][ T9858] nvmet_tcp: address family 255 not supported [ 782.888365][ T9881] device syzkaller1 entered promiscuous mode [ 785.098166][ T26] audit: type=1800 audit(1789008007.406:37): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1305" name="addr_trtype" dev="configfs" ino=56333 res=0 errno=0 [ 785.122266][ T9898] nvmet_tcp: address family 255 not supported [ 785.999876][ T9905] ffs_data_put(): freeing [ 786.248106][ T4275] ffs_data_put(): freeing [ 786.550748][ T126] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 787.467231][ T9927] SET target dimension over the limit! [ 787.517554][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 787.546519][ T126] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 787.793240][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 788.640540][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.700741][ T126] usb 3-1: Product: syz [ 788.706523][ T126] usb 3-1: Manufacturer: syz [ 788.711532][ T126] usb 3-1: SerialNumber: syz [ 789.244544][ T126] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 789.298516][ T9938] binder: 9937:9938 ioctl 4018620d 0 returned -22 [ 789.970505][ T26] audit: type=1800 audit(1789008012.276:38): pid=9950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1323" name="addr_trtype" dev="configfs" ino=56088 res=0 errno=0 [ 789.978962][ T126] usb 3-1: failed to enable PITCH for EP 0x82 [ 790.000209][ T9950] nvmet_tcp: address family 255 not supported [ 790.805101][ T126] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 790.984843][ T126] usb 3-1: clock source 0 is not valid, cannot use [ 791.000607][ T126] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 791.008380][ T126] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 791.082069][ T126] usb 3-1: USB disconnect, device number 19 [ 792.959121][ T9221] udevd[9221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.052712][ T9984] binder: 9981:9984 ioctl 4018620d 0 returned -22 [ 794.086243][T10001] SET target dimension over the limit! [ 794.454500][ T26] audit: type=1800 audit(1789008016.766:39): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1337" name="addr_trtype" dev="configfs" ino=56541 res=0 errno=0 [ 794.479426][T10008] nvmet_tcp: address family 255 not supported [ 798.021109][T10029] binder: 10025:10029 ioctl 4018620d 0 returned -22 [ 798.735637][ T26] audit: type=1800 audit(1789008021.046:40): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1350" name="addr_trtype" dev="configfs" ino=56607 res=0 errno=0 [ 798.759390][T10049] nvmet_tcp: address family 255 not supported [ 800.756087][T10067] SET target dimension over the limit! [ 802.070487][ T126] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 802.280709][ T126] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 802.298860][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.319376][ T126] usb 5-1: Product: syz [ 802.326139][ T126] usb 5-1: Manufacturer: syz [ 802.340708][ T126] usb 5-1: SerialNumber: syz [ 802.373759][ T126] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 802.425221][ T126] scsi host1: usb-storage 5-1:1.0 [ 802.976331][T10085] binder: 10084:10085 ioctl c0306201 0 returned -14 [ 803.272694][ T126] ums_eneub6250: probe of 5-1:1.0 failed with error 3 [ 803.313960][ T126] usb 5-1: USB disconnect, device number 19 [ 803.783126][ T26] audit: type=1800 audit(1789008026.096:41): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1364" name="addr_trtype" dev="configfs" ino=56666 res=0 errno=0 [ 803.808015][T10100] nvmet_tcp: address family 255 not supported [ 806.157225][T10121] binder: 10119:10121 ioctl c0306201 0 returned -14 [ 808.504319][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.519543][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.414138][T10180] binder: 10179:10180 ioctl c0306201 0 returned -14 [ 812.607634][T10185] process 'syz.7.1384' launched './cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 813.070602][ T14] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 813.272711][ T14] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.321146][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 813.439789][ T14] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 813.581393][ T14] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.738951][ T14] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 813.813855][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.675997][ T4858] usb 8-1: USB disconnect, device number 9 [ 818.330400][ T4863] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 818.530390][ T4863] usb 3-1: Using ep0 maxpacket: 16 [ 818.540043][ T4863] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 818.641525][ T4863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.658929][ T4863] usb 3-1: Product: syz [ 818.675142][ T4863] usb 3-1: Manufacturer: syz [ 818.753696][ T4863] usb 3-1: SerialNumber: syz [ 819.710525][ T3600] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 821.448272][ T4863] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 821.499700][ T4863] usb 3-1: USB disconnect, device number 20 [ 821.620981][ T3600] usb 8-1: device descriptor read/all, error -71 [ 821.818941][T10264] fuse: Bad value for 'fd' [ 823.003026][T10273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 826.425935][T10301] ffs_data_put(): freeing [ 826.572734][ T4275] ffs_data_put(): freeing [ 827.171267][ T4858] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 827.984160][ T4858] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 828.008332][ T4858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.045110][ T4858] usb 5-1: Product: syz [ 828.074125][ T4858] usb 5-1: Manufacturer: syz [ 828.092360][ T4858] usb 5-1: SerialNumber: syz [ 828.123837][ T4858] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 828.151566][ T4858] scsi host1: usb-storage 5-1:1.0 [ 828.796552][ T4858] ums_eneub6250: probe of 5-1:1.0 failed with error 3 [ 828.854795][ T4858] usb 5-1: USB disconnect, device number 20 [ 830.707934][T10354] ubi0: attaching mtd0 [ 830.722945][T10354] ubi0: scanning is finished [ 830.727654][T10354] ubi0: empty MTD device detected [ 832.361422][T10354] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 832.391383][T10351] tty tty1: ldisc open failed (-12), clearing slot 0 [ 833.456919][T10358] loop7: detected capacity change from 0 to 512 [ 833.464048][T10358] FAT-fs (loop7): Unrecognized mount option "./tracing" or missing value [ 834.112690][ T9503] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 834.222499][ T26] audit: type=1326 audit(1789008056.536:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.3.1425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2079e159 code=0x7fc00000 [ 836.080850][ T4322] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 836.294880][ T4322] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 836.310317][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.330339][ T4322] usb 3-1: Product: syz [ 836.334562][ T4322] usb 3-1: Manufacturer: syz [ 836.379424][ T4322] usb 3-1: SerialNumber: syz [ 836.437788][ T4322] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 836.577339][ T4322] scsi host1: usb-storage 3-1:1.0 [ 839.122838][ T14] ------------[ cut here ]------------ [ 839.128586][ T14] URB ffff8880625d6500 submitted while active [ 839.160013][ T14] WARNING: CPU: 0 PID: 14 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 839.169605][ T14] Modules linked in: [ 839.173614][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 839.181032][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.191145][ T14] Workqueue: events_freezable usb_stor_scan_dwork [ 839.197695][ T14] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 839.203289][ T14] Code: 2e 8b 44 89 ea e8 a9 99 fe 03 e9 bb fb ff ff e8 ae c2 56 fb c6 05 9b 34 e1 07 01 48 c7 c7 20 f2 2e 8b 48 89 de e8 e8 49 22 fb <0f> 0b e9 be f0 ff ff e8 8c c2 56 fb eb 1f e8 85 c2 56 fb 44 8b 64 [ 839.223371][ T14] RSP: 0018:ffffc900001379d8 EFLAGS: 00010246 [ 839.229467][ T14] RAX: 914da80ad3d18000 RBX: ffff8880625d6500 RCX: ffff88813fef1e00 [ 839.237475][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 839.245474][ T14] RBP: ffffc90000137b98 R08: ffffc90000137667 R09: 1ffff92000026ecc [ 839.253483][ T14] R10: dffffc0000000000 R11: fffff52000026ecd R12: 0000000000000c00 [ 839.261481][ T14] R13: ffff888052744ee0 R14: ffff8880625d6508 R15: dffffc0000000000 [ 839.269465][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 839.278446][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 839.285084][ T14] CR2: 000000110c2a2b1d CR3: 00000000542b9000 CR4: 00000000003506f0 [ 839.293096][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 839.301105][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 839.309084][ T14] Call Trace: [ 839.312398][ T14] [ 839.315342][ T14] ? __init_swait_queue_head+0xa4/0x140 [ 839.320960][ T14] usb_stor_msg_common+0x29f/0x500 [ 839.326174][ T14] ? trace_contention_end+0x5f/0x170 [ 839.331503][ T14] ? usb_stor_blocking_completion+0x40/0x40 [ 839.337423][ T14] ? mutex_lock_nested+0x10/0x10 [ 839.342395][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 839.348502][ T14] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 839.353825][ T14] usb_stor_scan_dwork+0xf0/0x260 [ 839.358860][ T14] ? process_one_work+0x7b4/0x1160 [ 839.364022][ T14] process_one_work+0x8ab/0x1160 [ 839.369032][ T14] ? worker_detach_from_pool+0x240/0x240 [ 839.374720][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 839.379764][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 839.385355][ T14] ? wq_worker_running+0x97/0x190 [ 839.390503][ T14] worker_thread+0xaf5/0x12a0 [ 839.395216][ T14] kthread+0x29d/0x330 [ 839.399339][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 839.404395][ T14] ? kthread_blkcg+0xd0/0xd0 [ 839.408999][ T14] ret_from_fork+0x1f/0x30 [ 839.413492][ T14] [ 839.416530][ T14] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 839.423812][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 839.431101][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.441189][ T14] Workqueue: events_freezable usb_stor_scan_dwork [ 839.447617][ T14] Call Trace: [ 839.450904][ T14] [ 839.453841][ T14] dump_stack_lvl+0x188/0x24e [ 839.458530][ T14] ? memcpy+0x3c/0x60 [ 839.462581][ T14] ? show_regs_print_info+0x12/0x12 [ 839.467796][ T14] ? load_image+0x410/0x410 [ 839.472319][ T14] panic+0x2d3/0x710 [ 839.476226][ T14] ? bpf_jit_dump+0xd0/0xd0 [ 839.480741][ T14] ? ret_from_fork+0x1f/0x30 [ 839.485364][ T14] __warn+0x2f8/0x4f0 [ 839.489354][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 839.494298][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 839.499242][ T14] report_bug+0x2ba/0x4f0 [ 839.503659][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 839.508611][ T14] handle_bug+0x3a/0x70 [ 839.512780][ T14] exc_invalid_op+0x16/0x40 [ 839.517299][ T14] asm_exc_invalid_op+0x16/0x20 [ 839.522163][ T14] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 839.527713][ T14] Code: 2e 8b 44 89 ea e8 a9 99 fe 03 e9 bb fb ff ff e8 ae c2 56 fb c6 05 9b 34 e1 07 01 48 c7 c7 20 f2 2e 8b 48 89 de e8 e8 49 22 fb <0f> 0b e9 be f0 ff ff e8 8c c2 56 fb eb 1f e8 85 c2 56 fb 44 8b 64 [ 839.547347][ T14] RSP: 0018:ffffc900001379d8 EFLAGS: 00010246 [ 839.553427][ T14] RAX: 914da80ad3d18000 RBX: ffff8880625d6500 RCX: ffff88813fef1e00 [ 839.561404][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 839.569377][ T14] RBP: ffffc90000137b98 R08: ffffc90000137667 R09: 1ffff92000026ecc [ 839.577354][ T14] R10: dffffc0000000000 R11: fffff52000026ecd R12: 0000000000000c00 [ 839.585331][ T14] R13: ffff888052744ee0 R14: ffff8880625d6508 R15: dffffc0000000000 [ 839.593342][ T14] ? usb_submit_urb+0xfb8/0x18d0 [ 839.598293][ T14] ? __init_swait_queue_head+0xa4/0x140 [ 839.603853][ T14] usb_stor_msg_common+0x29f/0x500 [ 839.608996][ T14] ? trace_contention_end+0x5f/0x170 [ 839.614296][ T14] ? usb_stor_blocking_completion+0x40/0x40 [ 839.620208][ T14] ? mutex_lock_nested+0x10/0x10 [ 839.625156][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 839.631159][ T14] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 839.636459][ T14] usb_stor_scan_dwork+0xf0/0x260 [ 839.641492][ T14] ? process_one_work+0x7b4/0x1160 [ 839.646614][ T14] process_one_work+0x8ab/0x1160 [ 839.651570][ T14] ? worker_detach_from_pool+0x240/0x240 [ 839.657216][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 839.662261][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 839.667837][ T14] ? wq_worker_running+0x97/0x190 [ 839.672979][ T14] worker_thread+0xaf5/0x12a0 [ 839.677684][ T14] kthread+0x29d/0x330 [ 839.681759][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 839.686808][ T14] ? kthread_blkcg+0xd0/0xd0 [ 839.691495][ T14] ret_from_fork+0x1f/0x30 [ 839.695932][ T14] [ 839.699551][ T14] Kernel Offset: disabled [ 839.703973][ T14] Rebooting in 86400 seconds..