last executing test programs: 4m11.727061275s ago: executing program 2 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"/11], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x24040880) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1, 0x5c, 0x100) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000300), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000380)=0xfffffffc, 0x4) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4m10.69511758s ago: executing program 2 (id=811): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f0000000dc0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) 4m5.932170649s ago: executing program 2 (id=826): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000300), 0x0, 0xc0c) pwrite64(r0, &(0x7f0000000340)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000400)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000440)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000480)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\a', 0x69, 0x1e8123) pwrite64(r0, &(0x7f0000000500)='\x00C', 0x2, 0x1e812f) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4m5.714264775s ago: executing program 2 (id=829): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf1, &(0x7f0000000ac0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) 4m4.867750465s ago: executing program 2 (id=835): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x4858f0a9d4342de8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc_mnt\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc_mnt/ioports\x00', 0x0, 0x0) pread64(r4, &(0x7f00000008c0)=""/196, 0xc4, 0xb) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001b00)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000b00), 0x1000, 0x0, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000700)}) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000a40), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000a80)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'ipvlan0\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3, 0x0, 0x20, 0x4, [0x2, 0x2, 0xfffffffe, 0x102, 0x5, 0x3, 0x0, 0x6]}}) open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 4m4.608287771s ago: executing program 2 (id=836): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f0000000dc0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) 3m59.04246376s ago: executing program 1 (id=865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000700)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='0', 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 3m57.950740997s ago: executing program 1 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r4) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000e00)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18b09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0xffffff00, 0x3}, 0x22}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000001000), 0x56) sendmsg$kcm(r10, &(0x7f0000001040)={&(0x7f0000001080)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 3m57.784420861s ago: executing program 1 (id=873): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040), 0x318, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080), 0xb54b, 0x80) epoll_pwait(r2, 0x0, 0x0, 0x4, &(0x7f00000000c0)={[0xc792]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000300)}, 0x20) 3m56.718234507s ago: executing program 1 (id=876): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0000000000000"], &(0x7f0000000100)='GPL\x00', 0xa, 0x85, &(0x7f0000000140)=""/133}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r2, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r2, 0x400c0930, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) 3m55.844272579s ago: executing program 1 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x4858f0a9d4342de8, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc_mnt\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000800)={0x20080522}, &(0x7f0000000840)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc_mnt/ioports\x00', 0x0, 0x0) pread64(r4, &(0x7f00000008c0)=""/196, 0xc4, 0xb) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001b00)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000b00), 0x1000, 0x0, 0xf}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000700)}) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000a40), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000a80)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'ipvlan0\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x3, 0x0, 0x20, 0x4, [0x2, 0x2, 0xfffffffe, 0x102, 0x5, 0x3, 0x0, 0x6]}}) open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 3m55.578829066s ago: executing program 1 (id=883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000300)="0002", 0x2, 0xc0c) pwrite64(r0, &(0x7f0000000340)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000400)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000440)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000480)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\a', 0x69, 0x1e8123) pwrite64(r0, &(0x7f0000000500)='\x00C', 0x2, 0x1e812f) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 3m49.503554417s ago: executing program 32 (id=836): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r1, &(0x7f0000000dc0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) 3m40.503061329s ago: executing program 33 (id=883): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000300)="0002", 0x2, 0xc0c) pwrite64(r0, &(0x7f0000000340)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000400)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r0, &(0x7f0000000440)="0002000b", 0x4, 0x1e800c) pwrite64(r0, &(0x7f0000000480)='12345678-1234-1234-1234-123456789612', 0x24, 0x1e8030) pwrite64(r0, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\a', 0x69, 0x1e8123) pwrite64(r0, &(0x7f0000000500)='\x00C', 0x2, 0x1e812f) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 10.515399261s ago: executing program 6 (id=1623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) r2 = socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0x9, [{{0x1, 0x2, 0x5, 0xffffffffffffffff, 0x4, 0x7, {0x0, 0x0, 0x3ff, 0xcc, 0xffffffffffffff5a, 0x3, 0x81, 0x5, 0x80, 0x6000, 0x0, 0x0, r5, 0x5, 0x34}}, {0x3, 0x80000000, 0x8, 0x7f7, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r9, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 8.552825059s ago: executing program 6 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.810757147s ago: executing program 3 (id=1639): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x3, 0x8000000000000001}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x69) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 5.773243148s ago: executing program 4 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000b00)=@ethtool_drvinfo={0x3, "d9f92f6b07166fdd87f15ed7d84270091dd2fa40db2394f144c7e253da047c02", "67d98d40203c3dc1d125cbce631f483ae997d2353b37d5e654d4bb685e4c5aa2", "5f29115e8239e36cfb525847d45869a202c3f39d2755a0bf909cdf3fed375bca", "dac45dadc89d77b2ecccc7b2665c1b3053ca929be98aadf104697d4e3748a732", "ee81a1abac84af6a6500000000d50fb848b60466404f566aa68602491b73a4ab", "24e33b1b0eb51f8b5e7f4541", 0x7ff, 0xfffffff4, 0x5, 0x8, 0x1}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 4.886074899s ago: executing program 6 (id=1643): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f00000004c0)="0000000000000000000000000000000005000000001000000300000003000000000000000100000000000000010000000300000003000000000000000000000002000000") ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r0, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r0, 0x400c0930, 0x0) 4.431147101s ago: executing program 4 (id=1644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.232089895s ago: executing program 6 (id=1645): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) close(0xffffffffffffffff) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000000dc0)='1', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 4.129483978s ago: executing program 3 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r3, 0x6f3e, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) 4.096908379s ago: executing program 4 (id=1648): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)}) syz_open_dev$vim2m(&(0x7f0000000680), 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x40002, 0x0) pselect6(0x40, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f00000004c0)={0x1ff, 0x1000000000, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) 3.66875942s ago: executing program 3 (id=1649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 3.589769091s ago: executing program 4 (id=1650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048840}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000700)={0x8, 0x0, [{0xab8, 0x0, 0x2000101}, {0x9e9, 0x0, 0x6}, {0x267, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x28b, 0x0, 0xff}, {0x373, 0x0, 0x34c3e95b}, {0x891, 0x0, 0x13}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r6, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48058}, 0x8800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x6c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{}, {0xde1}, @broadcast, @device_a, @random="4529ea1307c5"}, 0x100000, @random=0x3b, 0x5b04, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x98, 0x4}}, @val={0x25, 0x3, {0x0, 0x3}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x10}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x68}}, @void}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000003a2c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x20000800) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffff}, &(0x7f0000003c40)=0x8) 3.496417334s ago: executing program 3 (id=1652): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff7ffffffd, 0x1ea1e2) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fffffffffffffff) bind(r0, &(0x7f0000000000)=@generic={0x1f, "0000000022334440660101010100"}, 0x80) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xf8, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0xd1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@flat, @ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x43, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x110b, 0x9, 0x2}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x2, 0x0, 0x41, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0), 0x74, 0x0, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000440), 0x53, 0x0, 0x33}, @fda={0x66646185, 0x0, 0x0, 0x39}}, &(0x7f0000000800)={0x0, 0x28, 0x50}}, 0x1000}, @increfs_done={0x40106308, 0x2, 0x3}, @dead_binder_done={0x40086310, 0x2}, @release]}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000680)={0x30, 0x30, 0x30}}, 0x1000}]}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f0000000700)=[{&(0x7f0000000740)='2', 0x1}], 0x1) 2.920855348s ago: executing program 0 (id=1655): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f00000004c0)="000000000000000000000000000000000500000000100000030000000300000000000000010000000000000001000000030000000300000000000000000000000200000000") ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r0, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r0, 0x400c0930, 0x0) 2.853934689s ago: executing program 5 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000b00)=@ethtool_drvinfo={0x3, "d9f92f6b07166fdd87f15ed7d84270091dd2fa40db2394f144c7e253da047c02", "67d98d40203c3dc1d125cbce631f483ae997d2353b37d5e654d4bb685e4c5aa2", "5f29115e8239e36cfb525847d45869a202c3f39d2755a0bf909cdf3fed375bca", "dac45dadc89d77b2ecccc7b2665c1b3053ca929be98aadf104697d4e3748a732", "ee81a1abac84af6a6500000000d50fb848b60466404f566aa68602491b73a4ab", "24e33b1b0eb51f8b5e7f4541", 0x7ff, 0xfffffff4, 0x5, 0x8, 0x1}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000080)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 1.859351324s ago: executing program 5 (id=1657): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x2400c880) 1.849683344s ago: executing program 0 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r3, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 1.778818086s ago: executing program 3 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) 908.062437ms ago: executing program 0 (id=1660): r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) msgget(0x0, 0x323) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) 907.669477ms ago: executing program 3 (id=1661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) r2 = socket$kcm(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0x9, [{{0x1, 0x2, 0x5, 0xffffffffffffffff, 0x4, 0x7, {0x0, 0x0, 0x3ff, 0xcc, 0xffffffffffffff5a, 0x3, 0x81, 0x5, 0x80, 0x6000, 0x0, 0x0, r5, 0x5, 0x34}}, {0x3, 0x80000000, 0x8, 0x7f7, 'rootmode'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'fo\x00', 0x30, 0x80001, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa012102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd, 0x4}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r10, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0\x00\x00', 0x40) ioctl(r9, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") 902.098428ms ago: executing program 5 (id=1662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 837.699369ms ago: executing program 0 (id=1663): r0 = socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%/,c\xbe\xfbL:', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x2}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 736.417702ms ago: executing program 5 (id=1664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) listen(r0, 0xfff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 659.698374ms ago: executing program 5 (id=1665): socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000001c0)={0x80, 0x0, 0x0, 0x5, 0x4}) 607.480005ms ago: executing program 0 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xa, 0x1, 0xe, 0x8}, 0x27}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000840), 0x56) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f00000009c0)="88db0b9ef1cafdab", 0x8}, {&(0x7f0000000a00)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 532.499727ms ago: executing program 6 (id=1667): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x1000000) sendmsg$nl_generic(r1, 0x0, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/45) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) write(0xca, &(0x7f00000002c0)="0404e70000000004de92050000", 0xd) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="000104000000000000000000"], 0x38}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) 449.986279ms ago: executing program 4 (id=1668): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f00000004c0)="000000000000000000000000000000000500000000100000030000000300000000000000010000000000000001000000030000000300000000000000000000000200000000") ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r0, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r0, 0x400c0930, 0x0) 390.51748ms ago: executing program 5 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000019840)=0x100000000) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000001ab00)={0x0, 0x0, &(0x7f000001ab40)={&(0x7f000001ab80)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4409e) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) 159.547146ms ago: executing program 0 (id=1670): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1}, &(0x7f00000007c0)=ANY=[], 0x0, 0x0) 153.352266ms ago: executing program 6 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r2, 0x6f3e, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) 0s ago: executing program 4 (id=1672): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, 0x0, 0x2400c880) kernel console output (not intermixed with test programs): 08da7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 444.067714][ T8814] RAX: ffffffffffffffda RBX: 00007fd08faa9fa0 RCX: 00007fd08f822559 [ 444.075711][ T8814] RDX: 0000200000000200 RSI: 000000000000000a RDI: 0000000000000001 [ 444.083689][ T8814] RBP: 00007fd08f8b98b0 R08: 0000000000000000 R09: 0000000000000000 [ 444.091670][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.099668][ T8814] R13: 00007fd08faaa038 R14: 00007fd08faa9fa0 R15: 00007ffe78fae818 [ 444.107660][ T8814] [ 444.113237][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 444.140434][ T25] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 444.159960][ T8799] CPU: 1 PID: 8799 Comm: syz.4.1383 Not tainted syzkaller #0 [ 444.167482][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.177563][ T8799] Call Trace: [ 444.180846][ T8799] [ 444.183784][ T8799] dump_stack_lvl+0x188/0x250 [ 444.188484][ T8799] ? show_regs_print_info+0x20/0x20 [ 444.193700][ T8799] ? load_image+0x410/0x410 [ 444.198215][ T8799] ? prandom_u32+0x217/0x250 [ 444.202843][ T8799] should_fail+0x383/0x4b0 [ 444.207633][ T8799] should_failslab+0x5/0x20 [ 444.212152][ T8799] slab_pre_alloc_hook+0x51/0xc0 [ 444.217108][ T8799] __kmalloc+0x6b/0x340 [ 444.221271][ T8799] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 444.227016][ T8799] tomoyo_realpath_from_path+0xed/0x5e0 [ 444.232596][ T8799] tomoyo_path_number_perm+0x251/0x6b0 [ 444.238087][ T8799] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 444.243571][ T8799] ? make_qualifier+0x3b0/0x3b0 [ 444.248486][ T8799] security_file_ioctl+0x6c/0xa0 [ 444.253442][ T8799] __se_sys_ioctl+0x48/0x170 [ 444.258064][ T8799] do_syscall_64+0x4c/0xa0 [ 444.262506][ T8799] ? clear_bhb_loop+0x30/0x80 [ 444.267196][ T8799] ? clear_bhb_loop+0x30/0x80 [ 444.272702][ T8799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.278623][ T8799] RIP: 0033:0x7efe202391eb [ 444.283051][ T8799] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 444.302670][ T8799] RSP: 002b:00007efe1e48ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.311100][ T8799] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007efe202391eb [ 444.319079][ T8799] RDX: 00007efe1e48efc0 RSI: 0000000040085503 RDI: 0000000000000007 [ 444.327159][ T8799] RBP: 00007efe1e48ffd0 R08: 0000000000000012 R09: 00007efe1e48efc8 [ 444.335148][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 444.343134][ T8799] R13: 0000000800000000 R14: 0000000000000012 R15: 00007efe202ef3f9 [ 444.351138][ T8799] [ 444.355885][ T8814] syz.6.1387: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 444.380025][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.388061][ T25] usb 6-1: Product: syz [ 444.395071][ T8814] CPU: 1 PID: 8814 Comm: syz.6.1387 Not tainted syzkaller #0 [ 444.402505][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.413015][ T8814] Call Trace: [ 444.417011][ T8814] [ 444.420500][ T8814] dump_stack_lvl+0x188/0x250 [ 444.426535][ T8814] ? rcu_lock_release+0x5/0x20 [ 444.431485][ T8814] ? show_regs_print_info+0x20/0x20 [ 444.438093][ T8814] ? load_image+0x410/0x410 [ 444.443471][ T8814] warn_alloc+0x245/0x320 [ 444.448143][ T8814] ? zone_watermark_ok_safe+0x250/0x250 [ 444.454951][ T8814] ? __get_vm_area_node+0x164/0x2d0 [ 444.460790][ T8814] ? aa_get_newest_label+0xf5/0x5a0 [ 444.469456][ T8814] __vmalloc_node_range+0x2b1/0x8b0 [ 444.475161][ T8814] module_alloc+0x81/0x90 [ 444.480140][ T8814] ? bpf_jit_binary_alloc+0x120/0x240 [ 444.485565][ T8814] bpf_jit_binary_alloc+0x120/0x240 [ 444.491234][ T8814] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 444.496948][ T8814] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 444.502554][ T8814] ? kfree+0xef/0x2a0 [ 444.506669][ T8814] ? stack_trace_snprint+0xe0/0xe0 [ 444.512038][ T8814] ? emit_bpf_dispatcher+0x1050/0x1050 [ 444.517762][ T8814] bpf_prog_select_runtime+0x46f/0x7b0 [ 444.523339][ T8814] ? bpf_prog_realloc+0x142/0x1c0 [ 444.528374][ T8814] bpf_prepare_filter+0x100e/0x11b0 [ 444.533569][ T8814] ? seccomp_attach_filter+0xbb0/0xbb0 [ 444.539553][ T8814] ? bpf_prog_create+0x1f0/0x1f0 [ 444.544985][ T8814] ? kmemdup+0x3d/0x50 [ 444.549469][ T8814] ? memcpy+0x3c/0x60 [ 444.553675][ T8814] bpf_prog_create_from_user+0x2cc/0x420 [ 444.559319][ T8814] ? seccomp_attach_filter+0xbb0/0xbb0 [ 444.564778][ T8814] do_seccomp+0x808/0x16a0 [ 444.569276][ T8814] ? __lock_acquire+0x7d40/0x7d40 [ 444.574564][ T8814] ? prctl_set_seccomp+0x60/0x60 [ 444.579502][ T8814] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 444.585511][ T8814] ? lockdep_hardirqs_on+0x94/0x140 [ 444.591386][ T8814] do_syscall_64+0x4c/0xa0 [ 444.596211][ T8814] ? clear_bhb_loop+0x30/0x80 [ 444.601782][ T8814] ? clear_bhb_loop+0x30/0x80 [ 444.606652][ T8814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.612557][ T8814] RIP: 0033:0x7fd08f822559 [ 444.617393][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.637713][ T8814] RSP: 002b:00007fd08da7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 444.646322][ T8814] RAX: ffffffffffffffda RBX: 00007fd08faa9fa0 RCX: 00007fd08f822559 [ 444.654391][ T8814] RDX: 0000200000000200 RSI: 000000000000000a RDI: 0000000000000001 [ 444.662831][ T8814] RBP: 00007fd08f8b98b0 R08: 0000000000000000 R09: 0000000000000000 [ 444.670898][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.679174][ T8814] R13: 00007fd08faaa038 R14: 00007fd08faa9fa0 R15: 00007ffe78fae818 [ 444.687437][ T8814] [ 444.704256][ T25] usb 6-1: Manufacturer: syz [ 444.709001][ T25] usb 6-1: SerialNumber: syz [ 444.845806][ T25] usb 6-1: config 0 descriptor?? [ 444.870160][ T8799] FAULT_INJECTION: forcing a failure. [ 444.870160][ T8799] name failslab, interval 1, probability 5, space 0, times 8 [ 444.876994][ T8814] Mem-Info: [ 444.886821][ T8814] active_anon:365 inactive_anon:9485 isolated_anon:0 [ 444.886821][ T8814] active_file:23541 inactive_file:36798 isolated_file:0 [ 444.886821][ T8814] unevictable:768 dirty:67 writeback:0 [ 444.886821][ T8814] slab_reclaimable:24335 slab_unreclaimable:102799 [ 444.886821][ T8814] mapped:33274 shmem:4594 pagetables:798 bounce:0 [ 444.886821][ T8814] kernel_misc_reclaimable:0 [ 444.886821][ T8814] free:1339391 free_pcp:8853 free_cma:0 [ 445.001441][ T8799] CPU: 0 PID: 8799 Comm: syz.4.1383 Not tainted syzkaller #0 [ 445.008869][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 445.010379][ T8817] kAFS: unable to lookup cell '/,c¾ûL' [ 445.019052][ T8799] Call Trace: [ 445.019067][ T8799] [ 445.024778][ T8814] Node 0 active_anon:1428kB inactive_anon:37428kB active_file:93956kB inactive_file:147192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133096kB dirty:268kB writeback:0kB shmem:16296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12268kB pagetables:3192kB all_unreclaimable? no [ 445.027787][ T8799] dump_stack_lvl+0x188/0x250 [ 445.027817][ T8799] ? show_regs_print_info+0x20/0x20 [ 445.027837][ T8799] ? load_image+0x410/0x410 [ 445.034936][ T8814] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 445.061988][ T8799] ? prandom_u32+0x217/0x250 [ 445.062023][ T8799] should_fail+0x383/0x4b0 [ 445.062048][ T8799] should_failslab+0x5/0x20 [ 445.062064][ T8799] slab_pre_alloc_hook+0x51/0xc0 [ 445.062084][ T8799] __kmalloc+0x6b/0x340 [ 445.062100][ T8799] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 445.062128][ T8799] tomoyo_realpath_from_path+0xed/0x5e0 [ 445.062160][ T8799] tomoyo_path_number_perm+0x251/0x6b0 [ 445.062181][ T8799] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 445.062199][ T8799] ? make_qualifier+0x3b0/0x3b0 [ 445.062259][ T8799] security_file_ioctl+0x6c/0xa0 [ 445.062283][ T8799] __se_sys_ioctl+0x48/0x170 [ 445.062304][ T8799] do_syscall_64+0x4c/0xa0 [ 445.062320][ T8799] ? clear_bhb_loop+0x30/0x80 [ 445.062336][ T8799] ? clear_bhb_loop+0x30/0x80 [ 445.062354][ T8799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.062373][ T8799] RIP: 0033:0x7efe202391eb [ 445.062391][ T8799] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 445.062406][ T8799] RSP: 002b:00007efe1e48ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.062426][ T8799] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007efe202391eb [ 445.062439][ T8799] RDX: 00007efe1e48efc0 RSI: 0000000040085503 RDI: 0000000000000007 [ 445.062452][ T8799] RBP: 00007efe1e48ffd0 R08: 0000000000007224 R09: 00007efe1e48efc8 [ 445.062465][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 445.062477][ T8799] R13: 0000000800000000 R14: 0000000000000024 R15: 00007efe202ef3f9 [ 445.062504][ T8799] [ 445.280266][ T4249] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 445.280622][ T8813] udc-core: couldn't find an available UDC or it's busy [ 445.309334][ T4249] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 445.329855][ T8817] binder: BINDER_SET_CONTEXT_MGR already set [ 445.337203][ T4249] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 445.350079][ T8813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.363613][ T8817] binder: 8816:8817 ioctl 4018620d 200000000100 returned -16 [ 445.376834][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.405204][ T4249] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.420063][ T4530] usb 6-1: USB disconnect, device number 18 [ 445.496843][ T4249] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.535322][ T4249] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 445.555169][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.594881][ T4249] usb 5-1: config 0 descriptor?? [ 445.633214][ T4249] usb 5-1: can't set config #0, error -71 [ 445.644841][ T8821] md: couldn't update array info. -22 [ 445.653894][ T4249] usb 5-1: USB disconnect, device number 46 [ 445.664708][ T8821] md: could not open device unknown-block(1,1). [ 445.689124][ T8821] md: md_import_device returned -16 [ 445.707737][ T8821] md: could not open device unknown-block(1,2). [ 445.726784][ T8823] binder: BINDER_SET_CONTEXT_MGR already set [ 445.743459][ T8821] md: md_import_device returned -16 [ 445.770480][ T8823] binder: 8822:8823 ioctl 4018620d 200000004a80 returned -16 [ 445.978017][ T8832] binder: 8831:8832 ioctl c0306201 200000000080 returned -14 [ 445.985939][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1393'. [ 446.004100][ T8832] binder: 8831:8832 ioctl 4018620d 0 returned -22 [ 446.284447][ T8814] Node 0 DMA free:15352kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.376721][ T8814] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 446.398962][ T8814] Node 0 DMA32 free:1415088kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1428kB inactive_anon:38060kB active_file:93964kB inactive_file:147192kB unevictable:1536kB writepending:268kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:35620kB local_pcp:16876kB free_cma:0kB [ 446.436376][ T4249] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 446.498046][ T8814] lowmem_reserve[]: 0 0 0 0 0 [ 446.508731][ T8814] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.541219][ T8814] lowmem_reserve[]: 0 0 0 0 0 [ 446.546283][ T8814] Node 1 Normal free:3926840kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:1212kB local_pcp:796kB free_cma:0kB [ 446.582225][ T8814] lowmem_reserve[]: 0 0 0 0 0 [ 446.588295][ T8814] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 446.611026][ T8814] Node 0 DMA32: 1210*4kB (UME) 89*8kB (UME) 534*16kB (UME) 597*32kB (ME) 262*64kB (ME) 161*128kB (UME) 66*256kB (UME) 37*512kB (ME) 32*1024kB (ME) 9*2048kB (M) 307*4096kB (M) = 1415088kB [ 446.635445][ T8814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.647525][ T8814] Node 1 Normal: 132*4kB (UME) 37*8kB (UME) 32*16kB (UME) 172*32kB (UME) 76*64kB (UME) 23*128kB (UE) 10*256kB (UME) 8*512kB (U) 0*1024kB 1*2048kB (M) 953*4096kB (M) = 3926840kB [ 446.671008][ T8814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.685173][ T8814] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.716255][ T8814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.747708][ T8814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.763883][ T8814] 64935 total pagecache pages [ 446.769250][ T8814] 0 pages in swap cache [ 446.783587][ T8814] Swap cache stats: add 6812, delete 6812, find 2/77 [ 446.794715][ T8814] Free swap = 124608kB [ 446.818516][ T8814] Total swap = 124996kB [ 446.818688][ T8838] device syzkaller0 entered promiscuous mode [ 446.829564][ T8814] 2097051 pages RAM [ 446.848042][ T8814] 0 pages HighMem/MovableOnly [ 446.858480][ T4249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.869821][ T8814] 415313 pages reserved [ 446.879491][ T4249] usb 4-1: config 0 has no interfaces? [ 446.886019][ T8814] 0 pages cma reserved [ 446.941954][ T8843] md: couldn't update array info. -22 [ 446.966374][ T8843] md: could not open device unknown-block(1,1). [ 446.980071][ T8843] md: md_import_device returned -16 [ 447.007224][ T8843] md: could not open device unknown-block(1,2). [ 447.027119][ T8843] md: md_import_device returned -16 [ 447.040403][ T4249] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 447.060839][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.087592][ T4249] usb 4-1: Product: syz [ 447.099717][ T4249] usb 4-1: Manufacturer: syz [ 447.115442][ T4249] usb 4-1: SerialNumber: syz [ 447.137415][ T4249] usb 4-1: config 0 descriptor?? [ 447.155408][ T4253] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 447.274508][ T8849] kAFS: unable to lookup cell '/,c¾ûL' [ 447.385336][ T8836] udc-core: couldn't find an available UDC or it's busy [ 447.407256][ T8836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.564308][ T4253] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 447.584450][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.613823][ T4253] usb 6-1: config 0 descriptor?? [ 447.646940][ T8855] FAULT_INJECTION: forcing a failure. [ 447.646940][ T8855] name failslab, interval 1, probability 5, space 0, times 7 [ 447.661144][ T8855] CPU: 0 PID: 8855 Comm: syz.0.1402 Not tainted syzkaller #0 [ 447.664018][ T4253] pwc: Samsung MPC-C10 USB webcam detected. [ 447.668547][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 447.668565][ T8855] Call Trace: [ 447.687796][ T8855] [ 447.690740][ T8855] dump_stack_lvl+0x188/0x250 [ 447.695435][ T8855] ? show_regs_print_info+0x20/0x20 [ 447.700688][ T8855] ? load_image+0x410/0x410 [ 447.705211][ T8855] ? prandom_u32+0x217/0x250 [ 447.709828][ T8855] should_fail+0x383/0x4b0 [ 447.714313][ T8855] should_failslab+0x5/0x20 [ 447.718871][ T8855] slab_pre_alloc_hook+0x51/0xc0 [ 447.723827][ T8855] ? __d_alloc+0x27/0x6d0 [ 447.728178][ T8855] kmem_cache_alloc+0x3d/0x280 [ 447.732976][ T8855] __d_alloc+0x27/0x6d0 [ 447.737143][ T8855] ? d_alloc_pseudo+0xe/0x70 [ 447.741746][ T8855] d_alloc_pseudo+0x19/0x70 [ 447.746283][ T8855] alloc_file_pseudo+0xe0/0x200 [ 447.751159][ T8855] ? alloc_empty_file_noaccount+0x80/0x80 [ 447.756903][ T8855] ? shmem_get_inode+0x87b/0xa40 [ 447.761874][ T8855] __shmem_file_setup+0x1cf/0x290 [ 447.766920][ T8855] ? shmem_file_setup+0x13/0x30 [ 447.771842][ T8855] __se_sys_memfd_create+0x290/0x450 [ 447.777173][ T8855] ? __x64_sys_memfd_create+0x60/0x60 [ 447.782574][ T8855] ? lockdep_hardirqs_on+0x94/0x140 [ 447.787909][ T8855] do_syscall_64+0x4c/0xa0 [ 447.792343][ T8855] ? clear_bhb_loop+0x30/0x80 [ 447.797035][ T8855] ? clear_bhb_loop+0x30/0x80 [ 447.801733][ T8855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.807640][ T8855] RIP: 0033:0x7f3e1e8d2559 [ 447.812083][ T8855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.831082][ T4249] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 447.831700][ T8855] RSP: 002b:00007f3e1cb29e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 447.847664][ T8855] RAX: ffffffffffffffda RBX: 00000000000055a8 RCX: 00007f3e1e8d2559 [ 447.855663][ T8855] RDX: 00007f3e1cb29ee0 RSI: 0000000000000000 RDI: 00007f3e1e969a90 [ 447.863654][ T8855] RBP: 00002000000010c0 R08: 00000000ffffffff R09: 0000000000000000 [ 447.871644][ T8855] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000e40 [ 447.880463][ T4253] pwc: send_video_command error -71 [ 447.882667][ T8855] R13: 00007f3e1cb29ee0 R14: 00007f3e1cb29ea0 R15: 0000200000000e80 [ 447.893316][ T4253] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 447.895840][ T8855] [ 447.927154][ T4253] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 447.946192][ T8859] md: couldn't update array info. -22 [ 447.954024][ T4253] usb 6-1: USB disconnect, device number 19 [ 447.967286][ T8859] md: could not open device unknown-block(1,1). [ 447.978333][ T8859] md: md_import_device returned -16 [ 447.991748][ T8859] md: could not open device unknown-block(1,2). [ 447.998055][ T8859] md: md_import_device returned -16 [ 448.190113][ T7] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 448.220159][ T8855] FAULT_INJECTION: forcing a failure. [ 448.220159][ T8855] name failslab, interval 1, probability 5, space 0, times 6 [ 448.241664][ T8855] CPU: 0 PID: 8855 Comm: syz.0.1402 Not tainted syzkaller #0 [ 448.249173][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 448.259272][ T8855] Call Trace: [ 448.260177][ T4249] usb 7-1: unable to get BOS descriptor or descriptor too short [ 448.262570][ T8855] [ 448.262581][ T8855] dump_stack_lvl+0x188/0x250 [ 448.278352][ T8855] ? show_regs_print_info+0x20/0x20 [ 448.283661][ T8855] ? load_image+0x410/0x410 [ 448.288199][ T8855] ? prandom_u32+0x217/0x250 [ 448.292819][ T8855] should_fail+0x383/0x4b0 [ 448.297282][ T8855] should_failslab+0x5/0x20 [ 448.301803][ T8855] slab_pre_alloc_hook+0x51/0xc0 [ 448.306781][ T8855] __kmalloc+0x6b/0x340 [ 448.310956][ T8855] ? tomoyo_encode+0x28a/0x550 [ 448.316099][ T8855] tomoyo_encode+0x28a/0x550 [ 448.320986][ T8855] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 448.326685][ T8855] tomoyo_path_number_perm+0x251/0x6b0 [ 448.332464][ T8855] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 448.338330][ T8855] ? make_qualifier+0x3b0/0x3b0 [ 448.343292][ T8855] security_file_ioctl+0x6c/0xa0 [ 448.348264][ T8855] __se_sys_ioctl+0x48/0x170 [ 448.352964][ T8855] do_syscall_64+0x4c/0xa0 [ 448.357406][ T8855] ? clear_bhb_loop+0x30/0x80 [ 448.360179][ T4249] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.362271][ T8855] ? clear_bhb_loop+0x30/0x80 [ 448.377639][ T8855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.380037][ T4249] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.383725][ T8855] RIP: 0033:0x7f3e1e8d21eb [ 448.397319][ T8855] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 448.419289][ T8855] RSP: 002b:00007f3e1cb27f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.428618][ T8855] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3e1e8d21eb [ 448.436962][ T8855] RDX: 00007f3e1cb27fc0 RSI: 0000000040085503 RDI: 0000000000000006 [ 448.446524][ T8855] RBP: 00007f3e1cb28fd0 R08: 0000000000000040 R09: 00007f3e1cb27fc8 [ 448.455483][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 448.464973][ T8855] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f3e1e9883f9 [ 448.475862][ T8855] [ 448.483197][ T8855] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.549985][ T4530] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 448.570338][ T4249] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 448.579822][ T4249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.589827][ T4249] usb 7-1: Product: syz [ 448.594322][ T4249] usb 7-1: Manufacturer: syz [ 448.599197][ T4249] usb 7-1: SerialNumber: syz [ 448.642717][ T4249] usb 7-1: selecting invalid altsetting 1 [ 448.651166][ T4249] usb 7-1: unit 6 not found! [ 448.740127][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 448.823896][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1406'. [ 448.880390][ T8855] FAULT_INJECTION: forcing a failure. [ 448.880390][ T8855] name failslab, interval 1, probability 5, space 0, times 5 [ 448.900144][ T8855] CPU: 1 PID: 8855 Comm: syz.0.1402 Not tainted syzkaller #0 [ 448.907577][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 448.918163][ T8855] Call Trace: [ 448.921459][ T8855] [ 448.924409][ T8855] dump_stack_lvl+0x188/0x250 [ 448.929347][ T8855] ? show_regs_print_info+0x20/0x20 [ 448.934588][ T8855] ? load_image+0x410/0x410 [ 448.939120][ T8855] ? prandom_u32+0x217/0x250 [ 448.943826][ T8855] should_fail+0x383/0x4b0 [ 448.948464][ T8855] should_failslab+0x5/0x20 [ 448.952992][ T8855] slab_pre_alloc_hook+0x51/0xc0 [ 448.958736][ T8855] __kmalloc+0x6b/0x340 [ 448.963265][ T8855] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 448.969199][ T8855] tomoyo_realpath_from_path+0xed/0x5e0 [ 448.974786][ T8855] tomoyo_path_number_perm+0x251/0x6b0 [ 448.980275][ T8855] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 448.985748][ T8855] ? make_qualifier+0x3b0/0x3b0 [ 448.990667][ T8855] security_file_ioctl+0x6c/0xa0 [ 448.995622][ T8855] __se_sys_ioctl+0x48/0x170 [ 449.000349][ T8855] do_syscall_64+0x4c/0xa0 [ 449.004788][ T8855] ? clear_bhb_loop+0x30/0x80 [ 449.009510][ T8855] ? clear_bhb_loop+0x30/0x80 [ 449.014207][ T8855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.020117][ T8855] RIP: 0033:0x7f3e1e8d21eb [ 449.024575][ T8855] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 449.045022][ T8855] RSP: 002b:00007f3e1cb27f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.054266][ T8855] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3e1e8d21eb [ 449.062483][ T8855] RDX: 00007f3e1cb27fc0 RSI: 0000000040085503 RDI: 0000000000000006 [ 449.070481][ T8855] RBP: 00007f3e1cb28fd0 R08: 0000000000007224 R09: 00007f3e1cb27fc8 [ 449.078558][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 449.086545][ T8855] R13: 0000000800000000 R14: 0000000000000024 R15: 00007f3e1e9883f9 [ 449.094585][ T8855] [ 449.106106][ T4530] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.112780][ T8870] FAULT_INJECTION: forcing a failure. [ 449.112780][ T8870] name failslab, interval 1, probability 5, space 0, times 5 [ 449.128458][ T8870] CPU: 1 PID: 8870 Comm: syz.5.1408 Not tainted syzkaller #0 [ 449.135652][ T7] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 449.135846][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.149522][ T7] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 449.154843][ T8870] Call Trace: [ 449.154857][ T8870] [ 449.154866][ T8870] dump_stack_lvl+0x188/0x250 [ 449.154893][ T8870] ? show_regs_print_info+0x20/0x20 [ 449.154912][ T8870] ? load_image+0x410/0x410 [ 449.154931][ T8870] ? prandom_u32+0x217/0x250 [ 449.178220][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 449.179601][ T8870] should_fail+0x383/0x4b0 [ 449.179634][ T8870] should_failslab+0x5/0x20 [ 449.196678][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.197617][ T8870] slab_pre_alloc_hook+0x51/0xc0 [ 449.208978][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 449.216265][ T8870] kmem_cache_alloc_trace+0x47/0x290 [ 449.216295][ T8870] ? raw_ioctl+0x19a0/0x3750 [ 449.216318][ T8870] raw_ioctl+0x19a0/0x3750 [ 449.216340][ T8870] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 449.216363][ T8870] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 449.216383][ T8870] ? make_qualifier+0x3b0/0x3b0 [ 449.216439][ T8870] ? bpf_lsm_file_ioctl+0x5/0x10 [ 449.240113][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 449.240889][ T8870] ? security_file_ioctl+0x7c/0xa0 [ 449.251171][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 449.256353][ T8870] ? make_qualifier+0x3b0/0x3b0 [ 449.256383][ T8870] __se_sys_ioctl+0xfa/0x170 [ 449.256404][ T8870] do_syscall_64+0x4c/0xa0 [ 449.256424][ T8870] ? clear_bhb_loop+0x30/0x80 [ 449.256442][ T8870] ? clear_bhb_loop+0x30/0x80 [ 449.271640][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.279140][ T8870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.279173][ T8870] RIP: 0033:0x7f16a1c2b1eb [ 449.279191][ T8870] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 449.279204][ T8870] RSP: 002b:00007f169fe80f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.363969][ T8870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f16a1c2b1eb [ 449.371955][ T8870] RDX: 00007f169fe81fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 449.379945][ T8870] RBP: 00007f169fe81fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 449.387048][ T7] usb 1-1: config 0 descriptor?? [ 449.387926][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169fe80fa0 [ 449.387942][ T8870] R13: 000020000000afc0 R14: 0000000000000000 R15: 0000000000000000 [ 449.387968][ T8870] [ 449.409062][ T8870] FAULT_INJECTION: forcing a failure. [ 449.409062][ T8870] name failslab, interval 1, probability 5, space 0, times 3 [ 449.430347][ T8855] FAULT_INJECTION: forcing a failure. [ 449.430347][ T8855] name failslab, interval 1, probability 5, space 0, times 3 [ 449.433657][ T8870] CPU: 1 PID: 8870 Comm: syz.5.1408 Not tainted syzkaller #0 [ 449.450538][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.460693][ T8870] Call Trace: [ 449.463983][ T8870] [ 449.467108][ T8870] dump_stack_lvl+0x188/0x250 [ 449.471935][ T8870] ? show_regs_print_info+0x20/0x20 [ 449.477144][ T8870] ? load_image+0x410/0x410 [ 449.481649][ T8870] ? prandom_u32+0x217/0x250 [ 449.486248][ T8870] should_fail+0x383/0x4b0 [ 449.490451][ T4530] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 449.490712][ T8870] should_failslab+0x5/0x20 [ 449.499797][ T4530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.504224][ T8870] slab_pre_alloc_hook+0x51/0xc0 [ 449.504256][ T8870] kmem_cache_alloc_node+0x47/0x2c0 [ 449.504272][ T8870] ? __alloc_skb+0xf4/0x750 [ 449.504294][ T8870] __alloc_skb+0xf4/0x750 [ 449.504314][ T8870] netlink_sendmsg+0x654/0xbe0 [ 449.536070][ T8870] ? netlink_getsockopt+0x570/0x570 [ 449.540267][ T4530] usb 5-1: Product: syz [ 449.541296][ T8870] ? aa_sock_msg_perm+0x94/0x150 [ 449.545448][ T4530] usb 5-1: Manufacturer: syz [ 449.550371][ T8870] ? apparmor_socket_sendmsg+0x88/0x230 [ 449.550397][ T8870] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.550416][ T8870] ? security_socket_sendmsg+0x7c/0xa0 [ 449.550434][ T8870] ? netlink_getsockopt+0x570/0x570 [ 449.550454][ T8870] ____sys_sendmsg+0x5be/0x8f0 [ 449.550482][ T8870] ? __sys_sendmsg_sock+0x30/0x30 [ 449.579942][ T4530] usb 5-1: SerialNumber: syz [ 449.581237][ T8870] ? import_iovec+0x6f/0xa0 [ 449.581268][ T8870] ___sys_sendmsg+0x236/0x2e0 [ 449.581297][ T8870] ? __sys_sendmsg+0x290/0x290 [ 449.605426][ T8870] __se_sys_sendmsg+0x1b7/0x2a0 [ 449.608932][ T4530] usb 5-1: config 0 descriptor?? [ 449.610311][ T8870] ? __x64_sys_sendmsg+0x80/0x80 [ 449.610335][ T8870] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 449.626176][ T8870] ? lockdep_hardirqs_on+0x94/0x140 [ 449.631401][ T8870] do_syscall_64+0x4c/0xa0 [ 449.635833][ T8870] ? clear_bhb_loop+0x30/0x80 [ 449.640551][ T8870] ? clear_bhb_loop+0x30/0x80 [ 449.645246][ T8870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.649763][ T8853] udc-core: couldn't find an available UDC or it's busy [ 449.651154][ T8870] RIP: 0033:0x7f16a1c2b559 [ 449.651175][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.651189][ T8870] RSP: 002b:00007f169fe83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.658125][ T8853] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 449.662521][ T8870] RAX: ffffffffffffffda RBX: 00007f16a1eb2fa0 RCX: 00007f16a1c2b559 [ 449.706371][ T8870] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 449.714386][ T8870] RBP: 00007f16a1cc28b0 R08: 0000000000000000 R09: 0000000000000000 [ 449.722379][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.730359][ T8870] R13: 00007f16a1eb3038 R14: 00007f16a1eb2fa0 R15: 00007ffd80476bc8 [ 449.738347][ T8870] [ 449.750746][ T8855] CPU: 0 PID: 8855 Comm: syz.0.1402 Not tainted syzkaller #0 [ 449.758181][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.768253][ T8855] Call Trace: [ 449.771543][ T8855] [ 449.774480][ T8855] dump_stack_lvl+0x188/0x250 [ 449.778482][ T25] usb 4-1: USB disconnect, device number 54 [ 449.779357][ T8855] ? show_regs_print_info+0x20/0x20 [ 449.790428][ T8855] ? load_image+0x410/0x410 [ 449.794960][ T8855] ? prandom_u32+0x217/0x250 [ 449.799575][ T8855] should_fail+0x383/0x4b0 [ 449.804020][ T8855] should_failslab+0x5/0x20 [ 449.808540][ T8855] slab_pre_alloc_hook+0x51/0xc0 [ 449.813491][ T8855] __kmalloc+0x6b/0x340 [ 449.817660][ T8855] ? tomoyo_encode+0x28a/0x550 [ 449.822447][ T8855] tomoyo_encode+0x28a/0x550 [ 449.827057][ T8855] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 449.832720][ T8855] tomoyo_path_number_perm+0x251/0x6b0 [ 449.838208][ T8855] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 449.843687][ T8855] ? make_qualifier+0x3b0/0x3b0 [ 449.848952][ T8855] security_file_ioctl+0x6c/0xa0 [ 449.854000][ T8855] __se_sys_ioctl+0x48/0x170 [ 449.858631][ T8855] do_syscall_64+0x4c/0xa0 [ 449.863071][ T8855] ? clear_bhb_loop+0x30/0x80 [ 449.867768][ T8855] ? clear_bhb_loop+0x30/0x80 [ 449.872511][ T8855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.878434][ T8855] RIP: 0033:0x7f3e1e8d21eb [ 449.882866][ T8855] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 449.900428][ T4249] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 449.902566][ T8855] RSP: 002b:00007f3e1cb27ea0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.902592][ T8855] RAX: ffffffffffffffda RBX: 00007f3e1ec84320 RCX: 00007f3e1e8d21eb [ 449.902605][ T8855] RDX: 00007f3e1ec8435c RSI: 0000000040095505 RDI: 0000000000000006 [ 449.902616][ T8855] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 449.902628][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.902639][ T8855] R13: 00007f3e1ec84530 R14: 00000000ffffffff R15: 00007f3e1ec8435e [ 449.902668][ T8855] [ 449.990277][ T4249] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 450.003245][ T8863] udc-core: couldn't find an available UDC or it's busy [ 450.017132][ T8873] device syzkaller0 entered promiscuous mode [ 450.017398][ T4249] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 450.033849][ T8863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 450.052880][ T4249] usb 7-1: USB disconnect, device number 25 [ 450.058910][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 450.058922][ T26] audit: type=1326 audit(1792180507.313:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.061094][ T7404] usb 5-1: USB disconnect, device number 47 [ 450.069996][ T26] audit: type=1326 audit(1792180507.313:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.163017][ T26] audit: type=1326 audit(1792180507.313:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.188891][ T26] audit: type=1326 audit(1792180507.313:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.214222][ T26] audit: type=1326 audit(1792180507.313:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.245735][ T26] audit: type=1326 audit(1792180507.313:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.280299][ T26] audit: type=1326 audit(1792180507.313:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.305315][ T26] audit: type=1326 audit(1792180507.313:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.341038][ T26] audit: type=1326 audit(1792180507.313:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.365994][ T8875] md: couldn't update array info. -22 [ 450.371804][ T26] audit: type=1326 audit(1792180507.313:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.5.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 450.398420][ T8855] FAULT_INJECTION: forcing a failure. [ 450.398420][ T8855] name failslab, interval 1, probability 5, space 0, times 1 [ 450.411947][ T7] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 450.413659][ T8875] md: could not open device unknown-block(1,1). [ 450.423287][ T8855] CPU: 0 PID: 8855 Comm: syz.0.1402 Not tainted syzkaller #0 [ 450.430479][ T8875] md: md_import_device returned -16 [ 450.436371][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 450.451925][ T8855] Call Trace: [ 450.455626][ T8855] [ 450.458574][ T8855] dump_stack_lvl+0x188/0x250 [ 450.463286][ T8855] ? show_regs_print_info+0x20/0x20 [ 450.468534][ T8855] ? load_image+0x410/0x410 [ 450.473340][ T8855] ? prandom_u32+0x217/0x250 [ 450.477960][ T8855] should_fail+0x383/0x4b0 [ 450.482409][ T8855] should_failslab+0x5/0x20 [ 450.487573][ T8855] slab_pre_alloc_hook+0x51/0xc0 [ 450.492545][ T8855] ? audit_log_start+0x12c/0x870 [ 450.497551][ T8855] kmem_cache_alloc+0x3d/0x280 [ 450.502476][ T8855] audit_log_start+0x12c/0x870 [ 450.507273][ T8855] ? audit_serial+0x30/0x30 [ 450.511821][ T8855] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 450.517531][ T8855] ? mutex_unlock+0x10/0x10 [ 450.522054][ T8855] ? __cant_sleep+0x220/0x220 [ 450.527714][ T8855] ? rcu_is_watching+0x11/0xa0 [ 450.532507][ T8855] audit_seccomp+0x5f/0x180 [ 450.537038][ T8855] __seccomp_filter+0x164b/0x1a00 [ 450.542128][ T8855] ? rcu_lock_release+0x9/0x20 [ 450.546947][ T8855] ? __secure_computing+0x2f0/0x2f0 [ 450.552464][ T8855] ? __lock_acquire+0x7d40/0x7d40 [ 450.557520][ T8855] ? lock_chain_count+0x20/0x20 [ 450.562400][ T8855] ? __secure_computing+0x10d/0x2f0 [ 450.567626][ T8855] syscall_trace_enter+0xd0/0x180 [ 450.572674][ T8855] do_syscall_64+0x24/0xa0 [ 450.577117][ T8855] ? clear_bhb_loop+0x30/0x80 [ 450.581828][ T8855] ? clear_bhb_loop+0x30/0x80 [ 450.586544][ T8855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.592497][ T8855] RIP: 0033:0x7f3e1e8d2559 [ 450.596943][ T8855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.618215][ T8855] RSP: 002b:00007f3e1cb2a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 450.626826][ T8855] RAX: ffffffffffffffda RBX: 00007f3e1eb59fa8 RCX: 00007f3e1e8d2559 [ 450.634997][ T8855] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e1eb59fa8 [ 450.643351][ T8855] RBP: 00007f3e1eb59fa0 R08: 0000000000000000 R09: 0000000000000000 [ 450.643997][ T8875] md: could not open device unknown-block(1,2). [ 450.651997][ T8855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.652020][ T8855] R13: 00007f3e1eb5a038 R14: 00007fffc1d8a230 R15: 00007fffc1d8a318 [ 450.652044][ T8855] [ 450.690931][ T7] usb 1-1: USB disconnect, device number 53 [ 450.750882][ T7] usblp0: removed [ 450.756100][ T8875] md: md_import_device returned -16 [ 450.873803][ T8878] kAFS: unable to lookup cell '/,c¾ûL' [ 450.891270][ T7404] Bluetooth: hci4: command 0x0409 tx timeout [ 450.909564][ T8881] binder: 8880:8881 ioctl c0306201 0 returned -14 [ 450.991003][ T8885] binder_alloc: 8880: binder_alloc_buf, no vma [ 452.507251][ T8887] md: couldn't update array info. -22 [ 452.530843][ T8887] md: could not open device unknown-block(1,1). [ 452.549150][ T8892] binder: 8891:8892 ioctl c0306201 200000000080 returned -14 [ 452.579003][ T8892] binder: 8891:8892 ioctl 4018620d 0 returned -22 [ 452.579962][ T8887] md: md_import_device returned -16 [ 452.647142][ T8893] md: could not open device unknown-block(1,2). [ 452.656601][ T8893] md: md_import_device returned -16 [ 452.707249][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1419'. [ 452.763107][ T8908] device syzkaller0 entered promiscuous mode [ 452.880260][ T7] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 452.940187][ T7404] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 453.070110][ T1108] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 453.140104][ T13] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 453.260382][ T7] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 453.279942][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.300059][ T7] usb 1-1: config 0 descriptor?? [ 453.330243][ T1108] usb 7-1: Using ep0 maxpacket: 32 [ 453.350473][ T7404] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.364124][ T7] pwc: Samsung MPC-C10 USB webcam detected. [ 453.390853][ T7404] usb 5-1: config 0 has no interfaces? [ 453.414800][ T8914] md: couldn't update array info. -22 [ 453.425450][ T8914] md: could not open device unknown-block(1,1). [ 453.433740][ T8914] md: md_import_device returned -16 [ 453.439549][ T8914] md: could not open device unknown-block(1,2). [ 453.452814][ T8914] md: md_import_device returned -16 [ 453.480472][ T1108] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 453.499106][ T1108] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 453.521953][ T1108] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 453.531049][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 453.541544][ T1108] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 453.553156][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 453.566672][ T7] pwc: send_video_command error -71 [ 453.571980][ T7] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 453.579589][ T7] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 453.587535][ T7404] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 453.597170][ T1108] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 453.608570][ T7] usb 1-1: USB disconnect, device number 54 [ 453.615157][ T7404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.624625][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.634366][ T7404] usb 5-1: Product: syz [ 453.638561][ T7404] usb 5-1: Manufacturer: syz [ 453.644440][ T7404] usb 5-1: SerialNumber: syz [ 453.651100][ T1108] usb 7-1: config 0 descriptor?? [ 453.657454][ T7404] usb 5-1: config 0 descriptor?? [ 453.750210][ T13] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 453.759310][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.760730][ T4249] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 453.769967][ T13] usb 4-1: Product: syz [ 453.779102][ T13] usb 4-1: Manufacturer: syz [ 453.784204][ T13] usb 4-1: SerialNumber: syz [ 453.791333][ T13] usb 4-1: config 0 descriptor?? [ 453.841876][ T13] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 453.926105][ T8902] udc-core: couldn't find an available UDC or it's busy [ 453.939209][ T8902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 454.017604][ T1108] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 454.032974][ T1108] usb 7-1: USB disconnect, device number 26 [ 454.049198][ T1108] usblp0: removed [ 454.063076][ T13] gspca_stk1135: reg_w 0x2 err -71 [ 454.074153][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.085153][ T13] gspca_stk1135: Sensor write failed [ 454.094863][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.104085][ T13] gspca_stk1135: Sensor write failed [ 454.113813][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.123853][ T13] gspca_stk1135: Sensor read failed [ 454.129094][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.140546][ T13] gspca_stk1135: Sensor read failed [ 454.145773][ T13] gspca_stk1135: Detected sensor type unknown (0x0) [ 454.158898][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.167129][ T13] gspca_stk1135: Sensor read failed [ 454.173190][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.180778][ T13] gspca_stk1135: Sensor read failed [ 454.186894][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.195030][ T4249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 454.195240][ T13] gspca_stk1135: Sensor write failed [ 454.209620][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 454.216482][ T13] gspca_stk1135: Sensor write failed [ 454.222647][ T13] stk1135: probe of 4-1:0.0 failed with error -71 [ 454.232040][ T13] usb 4-1: USB disconnect, device number 55 [ 454.301253][ T4249] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.322922][ T4249] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.664115][ T4249] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 454.866825][ T4249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.071150][ T4249] usb 6-1: Product: syz [ 455.301222][ T4249] usb 6-1: Manufacturer: syz [ 455.327997][ T4249] usb 6-1: SerialNumber: syz [ 455.402641][ T4249] usb 6-1: selecting invalid altsetting 1 [ 455.424898][ T4249] usb 6-1: unit 6 not found! [ 455.699023][ T8926] loop3: detected capacity change from 0 to 128 [ 455.954889][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 456.121801][ T7] usb 5-1: USB disconnect, device number 48 [ 456.128145][ T8931] kAFS: unable to lookup cell '/,c¾ûL' [ 456.134092][ T8926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 456.142344][ T8926] EXT4-fs (loop3): inline encryption not supported [ 456.150838][ T8926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 456.157961][ T8926] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 456.251312][ T8916] udc-core: couldn't find an available UDC or it's busy [ 456.258302][ T8916] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 456.310112][ T4249] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 456.322299][ T8937] md: couldn't update array info. -22 [ 456.328794][ T8937] md: could not open device unknown-block(1,1). [ 456.335523][ T8937] md: md_import_device returned -16 [ 456.341665][ T8937] md: could not open device unknown-block(1,2). [ 456.348174][ T8937] md: md_import_device returned -16 [ 456.350282][ T4249] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 456.436345][ T4249] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 456.436781][ T8939] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1432'. [ 456.478646][ T4249] usb 6-1: USB disconnect, device number 20 [ 456.535970][ T8943] device syzkaller0 entered promiscuous mode [ 456.565370][ T8945] md: couldn't update array info. -22 [ 456.597456][ T8945] md: could not open device unknown-block(1,1). [ 456.604563][ T8945] md: md_import_device returned -16 [ 456.616323][ T8945] md: could not open device unknown-block(1,2). [ 456.633760][ T8945] md: md_import_device returned -16 [ 456.670681][ T8947] binder: 8946:8947 ioctl c0306201 200000000080 returned -14 [ 456.696000][ T8947] binder: 8946:8947 ioctl c0306201 0 returned -14 [ 457.084458][ T8926] loop3: detected capacity change from 0 to 40427 [ 458.778035][ T8968] md: couldn't update array info. -22 [ 458.797937][ T8968] md: could not open device unknown-block(1,1). [ 458.821286][ T8968] md: md_import_device returned -16 [ 458.837761][ T8968] md: could not open device unknown-block(1,2). [ 458.857409][ T8968] md: md_import_device returned -16 [ 458.915404][ T4249] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 459.125721][ T8926] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 459.126338][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 459.213620][ T8926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 459.240207][ T4249] usb 7-1: Using ep0 maxpacket: 32 [ 459.277551][ T8926] F2FS-fs (loop3): invalid crc value [ 459.322541][ T8926] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 459.364407][ T4249] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 459.390700][ T5920] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 459.429842][ T4249] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 459.440525][ T4249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 459.449534][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 459.460116][ T4249] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 459.469791][ T4249] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 459.486610][ T4249] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 459.497251][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.507286][ T4249] usb 7-1: config 0 descriptor?? [ 459.595893][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1446'. [ 459.643526][ T8981] device syzkaller0 entered promiscuous mode [ 459.707885][ T8983] binder: 8982:8983 ioctl c0306201 0 returned -14 [ 459.733671][ T8985] md: couldn't update array info. -22 [ 459.739845][ T8985] md: could not open device unknown-block(1,1). [ 459.746448][ T8985] md: md_import_device returned -16 [ 459.756081][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.775236][ T8986] binder_alloc: 8982: binder_alloc_buf, no vma [ 459.775771][ T5920] usb 1-1: config 0 has no interfaces? [ 459.806876][ T8987] md: could not open device unknown-block(1,2). [ 459.830300][ T26] kauditd_printk_skb: 2644 callbacks suppressed [ 459.830316][ T26] audit: type=1326 audit(1792180517.083:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 459.830775][ T8987] md: md_import_device returned -16 [ 459.836619][ T26] audit: type=1326 audit(1792180517.083:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 459.836654][ T26] audit: type=1326 audit(1792180517.083:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 459.922656][ T4249] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 459.937064][ T4249] usb 7-1: USB disconnect, device number 27 [ 459.952072][ T4249] usblp0: removed [ 459.966399][ T26] audit: type=1326 audit(1792180517.083:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 459.991367][ T26] audit: type=1326 audit(1792180517.083:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.017000][ T26] audit: type=1326 audit(1792180517.083:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.051312][ T26] audit: type=1326 audit(1792180517.083:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.059109][ T8991] binder: BINDER_SET_CONTEXT_MGR already set [ 460.076030][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 460.091969][ T26] audit: type=1326 audit(1792180517.083:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.118103][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.126560][ T5920] usb 1-1: Product: syz [ 460.130791][ T8992] binder: 8990:8992 ioctl c0306201 200000000080 returned -14 [ 460.132302][ T8992] binder: BINDER_SET_CONTEXT_MGR already set [ 460.138850][ T5920] usb 1-1: Manufacturer: syz [ 460.150025][ T5920] usb 1-1: SerialNumber: syz [ 460.154877][ T26] audit: type=1326 audit(1792180517.083:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.156403][ T5920] usb 1-1: config 0 descriptor?? [ 460.184878][ T8991] binder: 8990:8991 ioctl 4018620d 200000000100 returned -16 [ 460.196640][ T8992] binder: 8990:8992 ioctl 4018620d 200000004a80 returned -16 [ 460.204634][ T26] audit: type=1326 audit(1792180517.083:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 460.231104][ T8991] binder: 8990:8991 ioctl c0306201 0 returned -14 [ 460.340071][ T4249] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 460.494947][ T8969] udc-core: couldn't find an available UDC or it's busy [ 460.537323][ T8969] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.614598][ T8999] md: couldn't update array info. -22 [ 460.622644][ T8999] md: could not open device unknown-block(1,1). [ 460.629090][ T8999] md: md_import_device returned -16 [ 460.636223][ T8999] md: could not open device unknown-block(1,2). [ 460.642835][ T8999] md: md_import_device returned -16 [ 461.111030][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 461.211259][ T4249] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.256006][ T4249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 461.700507][ T4249] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 461.720157][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.738942][ T4249] usb 5-1: Product: syz [ 461.744107][ T4249] usb 5-1: Manufacturer: syz [ 461.751352][ T4249] usb 5-1: SerialNumber: syz [ 461.822855][ T4249] usb 5-1: selecting invalid altsetting 1 [ 461.838540][ T4249] usb 5-1: unit 6 not found! [ 461.901243][ T5920] usb 1-1: USB disconnect, device number 55 [ 462.368709][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 462.475145][ T9017] loop5: detected capacity change from 0 to 128 [ 462.481706][ T9019] kAFS: unable to lookup cell '/,c¾ûL' [ 462.535897][ T9021] md: couldn't update array info. -22 [ 462.541408][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1460'. [ 462.591574][ T9021] md: could not open device unknown-block(1,1). [ 462.598200][ T9021] md: md_import_device returned -16 [ 462.620803][ T9021] md: could not open device unknown-block(1,2). [ 462.625801][ T9025] device syzkaller0 entered promiscuous mode [ 462.678414][ T8989] udc-core: couldn't find an available UDC or it's busy [ 462.686058][ T9017] EXT4-fs (loop5): Test dummy encryption mode enabled [ 462.692052][ T9021] md: md_import_device returned -16 [ 462.693096][ T8989] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 462.728741][ T9017] EXT4-fs (loop5): inline encryption not supported [ 462.750125][ T4249] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 462.763124][ T9017] EXT4-fs (loop5): Test dummy encryption mode enabled [ 462.773095][ T9017] EXT4-fs (loop5): Project quota feature not enabled. Cannot enable project quota enforcement. [ 462.780237][ T4249] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 462.803108][ T4249] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 462.818554][ T4249] usb 5-1: USB disconnect, device number 49 [ 462.857870][ T9029] binder: 9028:9029 ioctl c0306201 200000000080 returned -14 [ 462.868444][ T9029] binder: 9028:9029 ioctl c0306201 0 returned -14 [ 462.941415][ T9033] binder_alloc: 9030: binder_alloc_buf, no vma [ 463.000016][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 463.250110][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 463.263166][ T9017] loop5: detected capacity change from 0 to 40427 [ 463.292220][ T9035] md: couldn't update array info. -22 [ 463.298215][ T9035] md: could not open device unknown-block(1,1). [ 463.304924][ T9035] md: md_import_device returned -16 [ 463.311037][ T9035] md: could not open device unknown-block(1,2). [ 463.317407][ T9035] md: md_import_device returned -16 [ 463.327322][ T9017] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 463.342068][ T9017] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 463.358089][ T9017] F2FS-fs (loop5): invalid crc value [ 463.381305][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 463.405120][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 463.419216][ T9017] F2FS-fs (loop5): Found nat_bits in checkpoint [ 463.424676][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 463.441476][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.471958][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.490354][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 463.523241][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 463.542832][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.548786][ T9017] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 463.559119][ T9017] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 463.567201][ T25] usb 4-1: config 0 descriptor?? [ 463.870079][ T13] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 464.031107][ T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 464.048016][ T25] usb 4-1: USB disconnect, device number 56 [ 464.057792][ T25] usblp0: removed [ 464.260681][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 465.259071][ T26] kauditd_printk_skb: 839 callbacks suppressed [ 465.259087][ T26] audit: type=1326 audit(1792180521.793:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 465.400927][ T26] audit: type=1326 audit(1792180522.513:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 465.869992][ T13] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 465.879814][ T13] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 465.888654][ T13] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 465.897851][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.977593][ T9061] kAFS: unable to lookup cell '/,c¾ûL' [ 466.024672][ T1108] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 466.054724][ T13] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 466.139215][ T26] audit: type=1326 audit(1792180522.513:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.170363][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 466.262281][ T13] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 466.330539][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.348072][ T26] audit: type=1326 audit(1792180522.513:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.437623][ T13] usb 6-1: config 0 descriptor?? [ 466.460558][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.494516][ T26] audit: type=1326 audit(1792180522.513:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.495111][ T9063] device syzkaller0 entered promiscuous mode [ 466.519019][ T26] audit: type=1326 audit(1792180522.513:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.525644][ T13] usb 6-1: can't set config #0, error -71 [ 466.549348][ T26] audit: type=1326 audit(1792180522.513:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.565357][ T1108] usb 1-1: config 0 has no interfaces? [ 466.580915][ T26] audit: type=1326 audit(1792180522.513:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.611365][ T26] audit: type=1326 audit(1792180522.513:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.625576][ T13] usb 6-1: USB disconnect, device number 21 [ 466.636133][ T26] audit: type=1326 audit(1792180522.513:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9026 comm="syz.3.1463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 466.684628][ T9066] md: couldn't update array info. -22 [ 466.691595][ T9066] md: could not open device unknown-block(1,1). [ 466.697908][ T9066] md: md_import_device returned -16 [ 466.714556][ T9066] md: could not open device unknown-block(1,2). [ 466.730090][ T9066] md: md_import_device returned -16 [ 466.746900][ T9068] binder: BINDER_SET_CONTEXT_MGR already set [ 466.760580][ T9068] binder: 9067:9068 ioctl 4018620d 200000000100 returned -16 [ 466.811418][ T1108] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 466.837232][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.865633][ T1108] usb 1-1: Product: syz [ 466.869930][ T1108] usb 1-1: Manufacturer: syz [ 466.885979][ T1108] usb 1-1: SerialNumber: syz [ 466.897318][ T1108] usb 1-1: config 0 descriptor?? [ 466.917475][ T9075] binder_alloc: 9071: binder_alloc_buf, no vma [ 466.966055][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1474'. [ 466.985459][ T9079] binder: 9078:9079 ioctl c0306201 200000000080 returned -14 [ 467.090283][ T4249] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 467.224872][ T9054] udc-core: couldn't find an available UDC or it's busy [ 467.296190][ T9054] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 467.630420][ T4249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 467.730661][ T4249] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.748679][ T4249] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.950754][ T4249] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 467.983041][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.046438][ T4249] usb 4-1: Product: syz [ 468.079288][ T4249] usb 4-1: Manufacturer: syz [ 468.118964][ T4249] usb 4-1: SerialNumber: syz [ 468.285212][ T4249] usb 4-1: selecting invalid altsetting 1 [ 468.291454][ T4249] usb 4-1: unit 6 not found! [ 468.329210][ T9094] loop4: detected capacity change from 0 to 128 [ 468.470747][ T9094] EXT4-fs (loop4): Test dummy encryption mode enabled [ 468.544080][ T9094] EXT4-fs (loop4): inline encryption not supported [ 468.673153][ T9094] EXT4-fs (loop4): Test dummy encryption mode enabled [ 469.900885][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 469.935231][ T9094] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 469.960137][ T4249] usb 4-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 470.006854][ T4251] usb 1-1: USB disconnect, device number 56 [ 470.020329][ T4249] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 470.080114][ T4249] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 470.132493][ T4249] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 470.191575][ T4249] usb 4-1: USB disconnect, device number 57 [ 470.358713][ T9107] md: couldn't update array info. -22 [ 470.365904][ T9107] md: could not open device unknown-block(1,1). [ 470.390407][ T9107] md: md_import_device returned -16 [ 470.414372][ T9107] md: could not open device unknown-block(1,2). [ 470.431008][ T9107] md: md_import_device returned -16 [ 470.445300][ T9109] kAFS: unable to lookup cell '/,c¾ûL' [ 470.670004][ T4249] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 471.406675][ T9112] device syzkaller0 entered promiscuous mode [ 471.466956][ T9116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1492'. [ 471.530063][ T4249] usb 4-1: Using ep0 maxpacket: 32 [ 471.650335][ T4249] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 471.734686][ T9125] binder_alloc: 9120: binder_alloc_buf, no vma [ 471.780328][ T4249] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 471.976415][ T4249] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 472.194699][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 472.354126][ T4249] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 472.449209][ T4249] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.491739][ T9129] binder: 9128:9129 ioctl c0306201 200000000080 returned -14 [ 472.518984][ T9129] binder: BINDER_SET_CONTEXT_MGR already set [ 472.520104][ T4249] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 472.525623][ T9129] binder: 9128:9129 ioctl 4018620d 200000004a80 returned -16 [ 472.555007][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.566188][ T4249] usb 4-1: config 0 descriptor?? [ 472.820580][ T9140] program syz.4.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.911140][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 472.911156][ T26] audit: type=1326 audit(1792180530.163:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 472.945817][ T4249] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 473.003149][ T4249] usb 4-1: USB disconnect, device number 58 [ 473.035892][ T4249] usblp0: removed [ 473.064840][ T26] audit: type=1326 audit(1792180530.163:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.142517][ T26] audit: type=1326 audit(1792180530.173:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.167992][ T26] audit: type=1326 audit(1792180530.173:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.193102][ T26] audit: type=1326 audit(1792180530.173:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.221269][ T1108] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 473.229429][ T26] audit: type=1326 audit(1792180530.173:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.255093][ T26] audit: type=1326 audit(1792180530.173:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.279702][ T26] audit: type=1326 audit(1792180530.173:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.334978][ T26] audit: type=1326 audit(1792180530.173:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 473.361360][ T26] audit: type=1326 audit(1792180530.173:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.3.1487" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 474.357177][ T9150] md: couldn't update array info. -22 [ 474.384703][ T9150] md: could not open device unknown-block(1,1). [ 474.416198][ T9150] md: md_import_device returned -16 [ 474.441567][ T9154] md: could not open device unknown-block(1,2). [ 474.475915][ T9154] md: md_import_device returned -16 [ 474.940925][ T9155] kAFS: unable to lookup cell '/,c¾ûL' [ 474.947077][ T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 475.548461][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'. [ 475.620332][ T1108] usb 7-1: unable to get BOS descriptor or descriptor too short [ 475.642831][ T9161] device syzkaller0 entered promiscuous mode [ 475.730585][ T1108] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 475.750129][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.760726][ T1108] usb 7-1: can't read configurations, error -71 [ 476.146181][ T9169] binder_alloc: 9167: binder_alloc_buf, no vma [ 476.649507][ T25] usb 6-1: config 0 has no interfaces? [ 476.810401][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 477.760016][ T1108] Bluetooth: hci5: command 0x0406 tx timeout [ 478.031517][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.106949][ T25] usb 6-1: Product: syz [ 478.138755][ T25] usb 6-1: Manufacturer: syz [ 478.182370][ T25] usb 6-1: SerialNumber: syz [ 478.198316][ T9184] binder: 9181:9184 ioctl c0306201 200000000080 returned -14 [ 478.212130][ T9183] program syz.6.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.223760][ T25] usb 6-1: config 0 descriptor?? [ 478.280150][ T25] usb 6-1: can't set config #0, error -71 [ 478.292052][ T9184] binder: BINDER_SET_CONTEXT_MGR already set [ 478.317812][ T25] usb 6-1: USB disconnect, device number 22 [ 478.330197][ T9184] binder: 9181:9184 ioctl 4018620d 200000004a80 returned -16 [ 479.695746][ T4249] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 479.962119][ T9198] md: couldn't update array info. -22 [ 479.968555][ T9198] md: could not open device unknown-block(1,1). [ 479.993715][ T9198] md: md_import_device returned -16 [ 480.017535][ T9198] md: could not open device unknown-block(1,2). [ 480.038896][ T9198] md: md_import_device returned -16 [ 480.048377][ T9200] md: couldn't update array info. -22 [ 480.056743][ T9200] md: could not open device unknown-block(1,1). [ 480.080220][ T9200] md: md_import_device returned -16 [ 480.099411][ T9200] md: could not open device unknown-block(1,2). [ 480.114171][ T9200] md: md_import_device returned -16 [ 480.219984][ T4249] usb 7-1: Using ep0 maxpacket: 32 [ 480.581286][ T9204] kAFS: unable to lookup cell '/,c¾ûL' [ 480.935910][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1519'. [ 481.179682][ T9214] device syzkaller0 entered promiscuous mode [ 481.215290][ T9216] binder: BINDER_SET_CONTEXT_MGR already set [ 481.221909][ T9216] binder: 9215:9216 ioctl 4018620d 200000000100 returned -16 [ 481.239205][ T9216] binder: BINDER_SET_CONTEXT_MGR already set [ 481.245595][ T1108] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 481.260454][ T9216] binder: 9215:9216 ioctl 4018620d 200000004a80 returned -16 [ 481.260505][ T4249] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 481.298772][ T4249] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 481.305849][ T13] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 481.319110][ T4249] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 483.046423][ T4249] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.686446][ T4249] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 483.733923][ T4249] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 483.779723][ T1108] usb 6-1: unable to get BOS descriptor or descriptor too short [ 483.787655][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.935749][ T13] usb 1-1: config 0 has no interfaces? [ 483.964212][ T4249] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 483.980260][ T13] usb 1-1: string descriptor 0 read error: -71 [ 483.990092][ T1108] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 483.998180][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 484.001857][ T9231] md: couldn't update array info. -22 [ 484.012446][ T1108] usb 6-1: can't read configurations, error -71 [ 484.022057][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.056585][ T9234] md: couldn't update array info. -22 [ 484.062838][ T9234] md: could not open device unknown-block(1,1). [ 484.069696][ T9234] md: md_import_device returned -16 [ 484.075791][ T9234] md: could not open device unknown-block(1,2). [ 484.084004][ T13] usb 1-1: config 0 descriptor?? [ 484.089241][ T9234] md: md_import_device returned -16 [ 484.100206][ T13] usb 1-1: can't set config #0, error -71 [ 484.113866][ T13] usb 1-1: USB disconnect, device number 57 [ 484.153762][ T9231] md: could not open device unknown-block(1,1). [ 484.162202][ T4249] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.166512][ T9231] md: md_import_device returned -16 [ 484.194152][ T9231] md: could not open device unknown-block(1,2). [ 484.211205][ T4249] usb 7-1: config 0 descriptor?? [ 484.214820][ T9231] md: md_import_device returned -16 [ 484.240427][ T4249] usb 7-1: can't set config #0, error -71 [ 485.878125][ T4249] usb 7-1: USB disconnect, device number 30 [ 486.585299][ T9244] kAFS: unable to lookup cell '/,c¾ûL' [ 486.598877][ T9244] binder: BINDER_SET_CONTEXT_MGR already set [ 486.605339][ T9244] binder: 9243:9244 ioctl 4018620d 200000000100 returned -16 [ 486.798797][ T9254] binder: 9253:9254 ioctl c0306201 200000000080 returned -14 [ 486.806951][ T1108] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 486.992395][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1535'. [ 487.066010][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 487.151667][ T9247] loop4: detected capacity change from 0 to 40427 [ 487.185621][ T9261] device syzkaller0 entered promiscuous mode [ 487.190084][ T1108] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 487.197693][ T9247] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 487.208757][ T9262] binder_alloc: 9258: binder_alloc_buf, no vma [ 487.211761][ T9247] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 487.222563][ T1108] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 487.231869][ T9247] F2FS-fs (loop4): invalid crc value [ 487.249241][ T1108] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 487.265528][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 487.277339][ T1108] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 487.293925][ T9247] F2FS-fs (loop4): Found nat_bits in checkpoint [ 487.293964][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 487.321093][ T1108] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 487.333982][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.354267][ T1108] usb 6-1: config 0 descriptor?? [ 487.388537][ T9247] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 487.401582][ T9247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 487.727143][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 487.727158][ T26] audit: type=1326 audit(1792180544.983:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 487.765978][ T1108] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 487.812938][ T1111] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 487.838935][ T1108] usb 6-1: USB disconnect, device number 24 [ 487.904727][ T1108] usblp0: removed [ 487.938196][ T26] audit: type=1326 audit(1792180545.043:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.077097][ T25] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 488.132224][ T26] audit: type=1326 audit(1792180545.043:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.305773][ T26] audit: type=1326 audit(1792180545.043:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.426293][ T26] audit: type=1326 audit(1792180545.043:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.549099][ T26] audit: type=1326 audit(1792180545.043:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.600239][ T7] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 488.678551][ T26] audit: type=1326 audit(1792180545.043:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.743662][ T26] audit: type=1326 audit(1792180545.043:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.768771][ T26] audit: type=1326 audit(1792180545.043:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.794505][ T26] audit: type=1326 audit(1792180545.053:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.5.1534" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a1c2b559 code=0x7fc00000 [ 488.876676][ T9279] md: couldn't update array info. -22 [ 488.885805][ T9279] md: could not open device unknown-block(1,1). [ 488.892248][ T9279] md: md_import_device returned -16 [ 488.911750][ T9279] md: could not open device unknown-block(1,2). [ 488.918922][ T9279] md: md_import_device returned -16 [ 489.150537][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.306637][ T1108] Bluetooth: hci5: command 0x0409 tx timeout [ 489.345104][ T7] usb 7-1: unable to get BOS descriptor or descriptor too short [ 489.611039][ T25] usb 5-1: device not accepting address 50, error -71 [ 489.673424][ T1111] usb 4-1: config 0 has no interfaces? [ 489.840306][ T1111] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 489.988858][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.009288][ T1111] usb 4-1: Product: syz [ 490.042362][ T1111] usb 4-1: Manufacturer: syz [ 490.069547][ T1111] usb 4-1: SerialNumber: syz [ 490.134830][ T1111] usb 4-1: config 0 descriptor?? [ 490.142061][ T9287] program syz.0.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.200201][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.219962][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.279049][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1546'. [ 490.355102][ T1111] usb 4-1: USB disconnect, device number 59 [ 490.390235][ T7] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 490.403191][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.433266][ T7] usb 7-1: Product: syz [ 490.443262][ T7] usb 7-1: Manufacturer: syz [ 490.452542][ T7] usb 7-1: SerialNumber: syz [ 490.518447][ T7] usb 7-1: selecting invalid altsetting 1 [ 490.542760][ T9303] kAFS: unable to lookup cell '/,c¾ûL' [ 490.561155][ T7] usb 7-1: unit 6 not found! [ 490.567014][ T9301] md: couldn't update array info. -22 [ 490.575669][ T9303] binder: BINDER_SET_CONTEXT_MGR already set [ 490.615568][ T9301] md: could not open device unknown-block(1,1). [ 490.697454][ T9303] binder: 9297:9303 ioctl 4018620d 200000000100 returned -16 [ 490.717590][ T9301] md: md_import_device returned -16 [ 490.740219][ T9304] device syzkaller0 entered promiscuous mode [ 490.783288][ T9305] md: could not open device unknown-block(1,2). [ 490.828109][ T9305] md: md_import_device returned -16 [ 491.042996][ T9317] binder_alloc: 9309: binder_alloc_buf, no vma [ 491.250004][ T1108] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 491.391013][ T9274] udc-core: couldn't find an available UDC or it's busy [ 491.398406][ T9274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.430056][ T7] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 491.460152][ T7] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 491.486817][ T7] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 491.501609][ T7] usb 7-1: USB disconnect, device number 31 [ 491.591579][ T9325] md: couldn't update array info. -22 [ 491.607565][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 491.609340][ T9325] md: could not open device unknown-block(1,1). [ 491.632077][ T9325] md: md_import_device returned -16 [ 491.649629][ T9325] md: could not open device unknown-block(1,2). [ 491.666025][ T9325] md: md_import_device returned -16 [ 491.730953][ T1108] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 491.739347][ T1108] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 491.769985][ T1108] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 491.925901][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.943641][ T1108] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.953869][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 491.967462][ T1108] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 491.976987][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.209290][ T1108] usb 4-1: config 0 descriptor?? [ 492.218261][ T9321] loop4: detected capacity change from 0 to 40427 [ 492.365815][ T9321] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 492.408211][ T9321] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 492.490071][ T7] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 492.496271][ T9321] F2FS-fs (loop4): invalid crc value [ 492.616074][ T9321] F2FS-fs (loop4): Found nat_bits in checkpoint [ 492.731575][ T26] kauditd_printk_skb: 118 callbacks suppressed [ 492.731589][ T26] audit: type=1326 audit(1792180549.983:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 492.734750][ T1108] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 492.758302][ T26] audit: type=1326 audit(1792180549.993:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 492.935306][ T1108] usb 4-1: USB disconnect, device number 60 [ 492.943185][ T1108] usblp0: removed [ 492.950104][ T26] audit: type=1326 audit(1792180549.993:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 492.975641][ T26] audit: type=1326 audit(1792180549.993:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 492.977166][ T9321] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 493.000678][ T26] audit: type=1326 audit(1792180549.993:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.032769][ T9341] program syz.0.1559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.032972][ T26] audit: type=1326 audit(1792180549.993:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.053274][ T9321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 493.068017][ T26] audit: type=1326 audit(1792180549.993:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.110367][ T26] audit: type=1326 audit(1792180549.993:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.172162][ T9347] md: couldn't update array info. -22 [ 493.178300][ T9347] md: could not open device unknown-block(1,1). [ 493.186606][ T26] audit: type=1326 audit(1792180549.993:6355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.214307][ T9347] md: md_import_device returned -16 [ 493.220129][ T9347] md: could not open device unknown-block(1,2). [ 493.226626][ T9347] md: md_import_device returned -16 [ 493.227400][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1560'. [ 493.242958][ T26] audit: type=1326 audit(1792180549.993:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.3.1552" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 493.296011][ T9350] kAFS: unable to lookup cell '/,c¾ûL' [ 493.302185][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.326137][ T7] usb 7-1: config 0 has no interfaces? [ 493.393229][ T9353] device syzkaller0 entered promiscuous mode [ 493.432143][ T1108] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 493.491030][ T7] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 493.674913][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.683225][ T7] usb 7-1: Product: syz [ 493.687429][ T7] usb 7-1: Manufacturer: syz [ 493.692463][ T7] usb 7-1: SerialNumber: syz [ 493.699305][ T7] usb 7-1: config 0 descriptor?? [ 493.890329][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 493.977444][ T9365] md: couldn't update array info. -22 [ 493.986955][ T9334] udc-core: couldn't find an available UDC or it's busy [ 494.001634][ T9334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 494.030239][ T1108] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 494.038711][ T1108] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 494.049294][ T9365] md: could not open device unknown-block(1,1). [ 494.058325][ T9365] md: md_import_device returned -16 [ 494.065240][ T1108] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 494.065466][ T9368] binder_alloc: 9366: binder_alloc_buf, no vma [ 494.082611][ T9365] md: could not open device unknown-block(1,2). [ 494.089035][ T9365] md: md_import_device returned -16 [ 494.097217][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.126902][ T1108] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 494.140566][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 494.158507][ T1108] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 494.169688][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.186526][ T1108] usb 5-1: config 0 descriptor?? [ 494.218589][ T1108] usb 5-1: can't set config #0, error -71 [ 494.247958][ T1108] usb 5-1: USB disconnect, device number 52 [ 494.255882][ T9372] binder: BINDER_SET_CONTEXT_MGR already set [ 494.262685][ T9372] binder: 9370:9372 ioctl 4018620d 200000000040 returned -16 [ 494.274126][ T9372] binder: BINDER_SET_CONTEXT_MGR already set [ 494.280471][ T9372] binder: 9370:9372 ioctl 4018620d 200000000180 returned -16 [ 494.501282][ T4251] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 495.200828][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2304, setting to 64 [ 495.243644][ T4251] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 495.428695][ T9385] md: couldn't update array info. -22 [ 495.457546][ T9385] md: could not open device unknown-block(1,1). [ 495.480740][ T4251] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9f.49 [ 495.528852][ T9385] md: md_import_device returned -16 [ 495.547730][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.612311][ T9386] md: could not open device unknown-block(1,2). [ 495.623586][ T4251] usb 1-1: Product: syz [ 495.657362][ T4251] usb 1-1: Manufacturer: syz [ 495.700797][ T4251] usb 1-1: SerialNumber: syz [ 495.761281][ T9386] md: md_import_device returned -16 [ 495.782583][ T4251] usb 1-1: config 0 descriptor?? [ 495.938367][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1573'. [ 495.951848][ T4251] usb 7-1: USB disconnect, device number 32 [ 496.034904][ T9397] kAFS: unable to lookup cell '/,c¾ûL' [ 496.088323][ T4530] usb 1-1: USB disconnect, device number 58 [ 496.139793][ T9401] device syzkaller0 entered promiscuous mode [ 496.182892][ T9402] program syz.5.1576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.280404][ T1108] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 496.341923][ T9407] md: couldn't update array info. -22 [ 496.348364][ T9407] md: could not open device unknown-block(1,1). [ 496.557527][ T9407] md: md_import_device returned -16 [ 496.566496][ T9408] md: could not open device unknown-block(1,2). [ 496.579974][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 496.661543][ T9408] md: md_import_device returned -16 [ 496.790481][ T1108] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 496.822711][ T9417] binder: BINDER_SET_CONTEXT_MGR already set [ 496.830791][ T1108] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 496.855339][ T9417] binder: 9415:9417 ioctl 4018620d 200000000100 returned -16 [ 496.868057][ T1108] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 496.884521][ T9417] binder: BINDER_SET_CONTEXT_MGR already set [ 496.895622][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 496.907613][ T9417] binder: 9415:9417 ioctl 4018620d 200000004a80 returned -16 [ 496.920503][ T1108] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 496.957111][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 496.994538][ T1108] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 497.018226][ T9421] binder: BINDER_SET_CONTEXT_MGR already set [ 497.021110][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.060733][ T1108] usb 5-1: config 0 descriptor?? [ 497.156583][ T9421] binder: 9420:9421 ioctl 4018620d 200000000180 returned -16 [ 497.402413][ T1108] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 497.442982][ T1108] usb 5-1: USB disconnect, device number 53 [ 497.481067][ T1108] usblp0: removed [ 497.503442][ T9431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 497.620090][ T4249] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 497.741915][ T26] kauditd_printk_skb: 585 callbacks suppressed [ 497.741931][ T26] audit: type=1326 audit(1792180555.003:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 497.996188][ T26] audit: type=1326 audit(1792180555.033:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.093407][ T4251] Bluetooth: hci1: command 0x0409 tx timeout [ 498.248579][ T26] audit: type=1326 audit(1792180555.033:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.340208][ T4249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.542573][ T4249] usb 1-1: config 0 has no interfaces? [ 498.559300][ T26] audit: type=1326 audit(1792180555.043:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.561235][ T9440] kAFS: unable to lookup cell '/,c¾ûL' [ 498.599765][ T26] audit: type=1326 audit(1792180555.043:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.720275][ T4249] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 498.725636][ T26] audit: type=1326 audit(1792180555.043:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.739689][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.763874][ T9441] device syzkaller0 entered promiscuous mode [ 498.796481][ T9449] md: couldn't update array info. -22 [ 498.800703][ T26] audit: type=1326 audit(1792180555.053:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.806646][ T4249] usb 1-1: Product: syz [ 498.848462][ T9449] md: could not open device unknown-block(1,1). [ 498.870939][ T9449] md: md_import_device returned -16 [ 498.886723][ T4249] usb 1-1: Manufacturer: syz [ 498.888357][ T26] audit: type=1326 audit(1792180555.053:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.896970][ T4249] usb 1-1: SerialNumber: syz [ 498.936396][ T9450] md: could not open device unknown-block(1,2). [ 498.949954][ T26] audit: type=1326 audit(1792180555.053:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 498.992550][ T9450] md: md_import_device returned -16 [ 498.993038][ T4249] usb 1-1: config 0 descriptor?? [ 499.010163][ T26] audit: type=1326 audit(1792180555.053:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.4.1575" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe20239559 code=0x7fc00000 [ 499.108358][ T9454] binder_alloc: 9453: binder_alloc_buf, no vma [ 499.140099][ T4251] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 499.280253][ T1108] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 499.341003][ T9429] udc-core: couldn't find an available UDC or it's busy [ 499.375298][ T9429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 499.442315][ T9464] FAULT_INJECTION: forcing a failure. [ 499.442315][ T9464] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 499.457068][ T9464] CPU: 0 PID: 9464 Comm: syz.6.1596 Not tainted syzkaller #0 [ 499.464471][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 499.474540][ T9464] Call Trace: [ 499.477830][ T9464] [ 499.480771][ T9464] dump_stack_lvl+0x188/0x250 [ 499.485464][ T9464] ? show_regs_print_info+0x20/0x20 [ 499.490861][ T9464] ? load_image+0x410/0x410 [ 499.495382][ T9464] ? uncharge_page+0x490/0x490 [ 499.500158][ T9464] should_fail+0x383/0x4b0 [ 499.504645][ T9464] prepare_alloc_pages+0x1e3/0x5b0 [ 499.509775][ T9464] __alloc_pages+0x11b/0x480 [ 499.514384][ T9464] ? zone_statistics+0x170/0x170 [ 499.519362][ T9464] ? rcu_lock_acquire+0x30/0x30 [ 499.524235][ T9464] ? alloc_pages+0x452/0x560 [ 499.528959][ T9464] __get_free_pages+0x8/0x30 [ 499.533573][ T9464] __tlb_remove_page_size+0x1f2/0x3f0 [ 499.538965][ T9464] unmap_page_range+0xfcf/0x2410 [ 499.543960][ T9464] unmap_vmas+0x131/0x250 [ 499.548321][ T9464] ? unmap_page_range+0x2410/0x2410 [ 499.553531][ T9464] ? __mutex_lock_common+0x435/0x2400 [ 499.558916][ T9464] ? exit_mm_release+0x16/0x30 [ 499.563698][ T9464] exit_mmap+0x3b9/0x640 [ 499.567955][ T9464] ? vm_brk+0x20/0x20 [ 499.571976][ T9464] ? uprobe_clear_state+0x2f6/0x460 [ 499.572015][ T4251] usb 4-1: Using ep0 maxpacket: 16 [ 499.577186][ T9464] __mmput+0x115/0x390 [ 499.586540][ T9464] exit_mm+0x632/0x7b0 [ 499.590620][ T9464] ? perf_pmu_migrate_context+0xb70/0xb70 [ 499.596352][ T9464] ? do_exit+0x2110/0x2110 [ 499.600776][ T9464] ? __ia32_sys_timer_delete+0x40/0x40 [ 499.606242][ T9464] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 499.611722][ T9464] ? tty_audit_exit+0x149/0x1f0 [ 499.616587][ T9464] do_exit+0x5b8/0x2110 [ 499.620760][ T9464] ? put_task_struct+0x80/0x80 [ 499.625528][ T9464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 499.631522][ T9464] ? _raw_spin_lock_irq+0xb7/0xf0 [ 499.636558][ T9464] do_group_exit+0x12c/0x2f0 [ 499.641158][ T9464] ? lockdep_hardirqs_on+0x94/0x140 [ 499.646369][ T9464] get_signal+0x7eb/0x12e0 [ 499.650813][ T9464] arch_do_signal_or_restart+0xe6/0x12a0 [ 499.656458][ T9464] ? aa_af_perm+0x340/0x340 [ 499.660987][ T9464] ? futex_exit_release+0x1c0/0x1c0 [ 499.666810][ T9464] ? get_sigframe_size+0x10/0x10 [ 499.671786][ T9464] ? __context_tracking_exit+0x4c/0x80 [ 499.677269][ T9464] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 499.683276][ T9464] ? exit_to_user_mode_loop+0x3b/0x130 [ 499.688752][ T9464] exit_to_user_mode_loop+0x9e/0x130 [ 499.694053][ T9464] exit_to_user_mode_prepare+0xee/0x180 [ 499.699615][ T9464] syscall_exit_to_user_mode+0x16/0x40 [ 499.705089][ T9464] do_syscall_64+0x58/0xa0 [ 499.709519][ T9464] ? clear_bhb_loop+0x30/0x80 [ 499.714213][ T9464] ? clear_bhb_loop+0x30/0x80 [ 499.718995][ T9464] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.726664][ T9464] RIP: 0033:0x7fd08f822559 [ 499.731297][ T9464] Code: Unable to access opcode bytes at RIP 0x7fd08f82252f. [ 499.738840][ T9464] RSP: 002b:00007fd08da7a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 499.747923][ T9464] RAX: 0000000000000001 RBX: 00007fd08faa9fa8 RCX: 00007fd08f822559 [ 499.755958][ T9464] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd08faa9fac [ 499.764041][ T9464] RBP: 00007fd08faa9fa0 R08: 0016bc4c9bf0ea34 R09: 0000000000000000 [ 499.772126][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.780116][ T9464] R13: 00007fd08faaa038 R14: 00007ffe78fae730 R15: 00007ffe78fae818 [ 499.788714][ T9464] [ 499.796356][ T4251] usb 4-1: config 0 interface 0 has no altsetting 0 [ 499.809513][ T4251] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 499.836497][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.847554][ T9468] binder: 9465:9468 ioctl c0306201 200000000400 returned -11 [ 499.875091][ T4251] usb 4-1: config 0 descriptor?? [ 500.350573][ T1111] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 500.414011][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2304, setting to 64 [ 500.499949][ T1108] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 500.650308][ T1111] usb 7-1: Using ep0 maxpacket: 32 [ 501.777205][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.784933][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.810123][ T1111] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 501.850245][ T1108] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9f.49 [ 501.851602][ T1111] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 501.875301][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.899224][ T1108] usb 5-1: Product: syz [ 501.913551][ T1108] usb 5-1: Manufacturer: syz [ 501.928464][ T1108] usb 5-1: SerialNumber: syz [ 501.945725][ T1108] usb 5-1: config 0 descriptor?? [ 501.965386][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 502.000544][ T1108] usb 5-1: can't set config #0, error -71 [ 502.568924][ T1111] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 502.918528][ T1111] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 502.928815][ T1111] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 502.936750][ T1108] usb 5-1: USB disconnect, device number 54 [ 502.943507][ T1111] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 502.960334][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.979811][ T4249] usb 1-1: USB disconnect, device number 59 [ 502.987435][ T1111] usb 7-1: config 0 descriptor?? [ 503.000318][ T4251] usbhid 4-1:0.0: can't add hid device: -71 [ 503.051134][ T1111] usb 7-1: can't set config #0, error -71 [ 503.057803][ T9485] kAFS: unable to lookup cell '/,c¾ûL' [ 503.063742][ T9485] binder: BINDER_SET_CONTEXT_MGR already set [ 503.070230][ T9485] binder: 9484:9485 ioctl 4018620d 200000000100 returned -16 [ 503.079165][ T4251] usbhid: probe of 4-1:0.0 failed with error -71 [ 503.120394][ T1111] usb 7-1: USB disconnect, device number 33 [ 503.131508][ T4251] usb 4-1: USB disconnect, device number 61 [ 503.153133][ T9490] binder_alloc: 9488: binder_alloc_buf, no vma [ 503.171484][ T9491] device syzkaller0 entered promiscuous mode [ 503.241871][ T9487] md: couldn't update array info. -22 [ 503.286905][ T9487] md: could not open device unknown-block(1,1). [ 503.413459][ T9487] md: md_import_device returned -16 [ 503.483956][ T9500] md: could not open device unknown-block(1,2). [ 503.503055][ T9500] md: md_import_device returned -16 [ 504.160083][ T1108] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 504.396466][ T9512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 505.380025][ T4248] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 505.520319][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.789996][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 505.920369][ T9525] binder: 9522:9525 ioctl c0306201 200000000400 returned -11 [ 507.283356][ T1108] usb 5-1: config 0 has no interfaces? [ 507.360113][ T1108] usb 5-1: string descriptor 0 read error: -71 [ 507.366484][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 507.385639][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.396473][ T1108] usb 5-1: config 0 descriptor?? [ 507.430040][ T1108] usb 5-1: can't set config #0, error -71 [ 507.441438][ T1108] usb 5-1: USB disconnect, device number 55 [ 507.450323][ T4248] usb 4-1: unable to read config index 0 descriptor/all [ 507.460035][ T4248] usb 4-1: can't read configurations, error -71 [ 507.481162][ T9530] kAFS: unable to lookup cell '/,c¾ûL' [ 507.518992][ T9532] binder: BINDER_SET_CONTEXT_MGR already set [ 507.530104][ T9532] binder: 9531:9532 ioctl 4018620d 200000000100 returned -16 [ 507.572182][ T9532] binder: BINDER_SET_CONTEXT_MGR already set [ 507.578207][ T9532] binder: 9531:9532 ioctl 4018620d 200000004a80 returned -16 [ 507.904636][ T9542] md: couldn't update array info. -22 [ 507.912805][ T9542] md: could not open device unknown-block(1,1). [ 507.919286][ T9542] md: md_import_device returned -16 [ 507.927029][ T9542] md: could not open device unknown-block(1,2). [ 507.934954][ T9542] md: md_import_device returned -16 [ 508.800184][ T1108] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 508.870116][ T4248] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 509.120333][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 509.190579][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.202436][ T7] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 509.235543][ T1108] usb 5-1: config 0 has no interfaces? [ 509.261405][ T4248] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 509.283230][ T4248] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 509.333035][ T4248] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 509.389710][ T4248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.430522][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 509.456097][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.468728][ T4248] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.480958][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 509.526386][ T1108] usb 5-1: Product: syz [ 509.541878][ T4248] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.569167][ T1108] usb 5-1: Manufacturer: syz [ 509.596907][ T1108] usb 5-1: SerialNumber: syz [ 509.610316][ T7] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 509.634086][ T7] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 509.668509][ T1108] usb 5-1: config 0 descriptor?? [ 509.675871][ T4248] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 509.730542][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 509.764621][ T4248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.814993][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.833032][ T4248] usb 4-1: config 0 descriptor?? [ 509.853357][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.866626][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.911014][ T9564] kAFS: unable to lookup cell '/,c¾ûL' [ 509.928456][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 509.939303][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.954436][ T7] usb 1-1: config 0 descriptor?? [ 509.978375][ T9553] udc-core: couldn't find an available UDC or it's busy [ 509.990283][ T9553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 510.049809][ T9566] md: couldn't update array info. -22 [ 510.056572][ T9566] md: could not open device unknown-block(1,1). [ 510.070889][ T9566] md: md_import_device returned -16 [ 510.078465][ T9566] md: could not open device unknown-block(1,2). [ 510.086758][ T9566] md: md_import_device returned -16 [ 510.178863][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 510.178879][ T26] audit: type=1326 audit(1792180567.433:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.221791][ T4248] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 510.242383][ T4248] usb 4-1: USB disconnect, device number 64 [ 510.260535][ T4248] usblp0: removed [ 510.266169][ T9572] program syz.5.1633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.267301][ T26] audit: type=1326 audit(1792180567.433:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.305773][ T7] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 510.310043][ T4249] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 510.330578][ T7] usb 1-1: USB disconnect, device number 60 [ 510.350784][ T7] usblp0: removed [ 510.358420][ T26] audit: type=1326 audit(1792180567.433:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.407791][ T26] audit: type=1326 audit(1792180567.433:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.463123][ T26] audit: type=1326 audit(1792180567.433:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.520007][ T26] audit: type=1326 audit(1792180567.433:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.579692][ T26] audit: type=1326 audit(1792180567.433:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.636990][ T26] audit: type=1326 audit(1792180567.433:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.694802][ T26] audit: type=1326 audit(1792180567.433:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.710523][ T4249] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.748739][ T26] audit: type=1326 audit(1792180567.433:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9551 comm="syz.3.1628" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89309b3559 code=0x7fc00000 [ 510.832333][ T4249] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.021810][ T4249] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 511.056411][ T4249] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.105428][ T4249] usb 7-1: Product: syz [ 511.127118][ T4249] usb 7-1: Manufacturer: syz [ 511.153902][ T4249] usb 7-1: SerialNumber: syz [ 511.261514][ T4249] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 511.295378][ T9581] binder: BINDER_SET_CONTEXT_MGR already set [ 511.305369][ T9579] binder: 9578:9579 ioctl c0306201 200000000400 returned -11 [ 512.571154][ T4249] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 512.585745][ T9581] binder: 9580:9581 ioctl 4018620d 200000000100 returned -16 [ 512.615580][ T4249] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 512.632143][ T9584] binder: BINDER_SET_CONTEXT_MGR already set [ 512.657004][ T9584] binder: 9580:9584 ioctl 4018620d 200000004a80 returned -16 [ 512.691279][ T9585] binder: 9580:9585 ioctl c0306201 0 returned -14 [ 512.692231][ T1111] usb 5-1: USB disconnect, device number 56 [ 513.021338][ T9594] autofs4:pid:9594:autofs_fill_super: called with bogus options [ 513.628729][ T1111] usb 7-1: USB disconnect, device number 34 [ 513.653469][ T1111] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 513.677853][ T1111] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 513.693726][ T1111] ti_usb_3410_5052 7-1:2.0: device disconnected [ 514.140753][ T9603] md: couldn't update array info. -22 [ 514.147249][ T9603] md: could not open device unknown-block(1,1). [ 514.162229][ T9603] md: md_import_device returned -16 [ 514.199178][ T9604] md: could not open device unknown-block(1,2). [ 514.251256][ T9604] md: md_import_device returned -16 [ 514.613728][ T9621] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 514.633466][ T9621] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 514.669470][ T9621] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 514.680872][ T1111] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 514.930029][ T1111] usb 7-1: Using ep0 maxpacket: 32 [ 514.934161][ T9627] binder: BINDER_SET_CONTEXT_MGR already set [ 514.951394][ T9627] binder: 9626:9627 ioctl 4018620d 200000000100 returned -16 [ 514.991488][ T9627] binder: BINDER_SET_CONTEXT_MGR already set [ 515.019040][ T9627] binder: 9626:9627 ioctl 4018620d 200000004a80 returned -16 [ 515.042697][ T9627] binder: 9626:9627 ioctl c0306201 0 returned -14 [ 515.050342][ T1111] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 515.058708][ T1111] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 515.091808][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 515.225445][ T9638] binder: BINDER_SET_CONTEXT_MGR already set [ 515.230145][ T1111] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 515.250825][ T9638] binder: 9634:9638 ioctl 4018620d 200000000300 returned -16 [ 515.366737][ T9638] binder: BINDER_SET_CONTEXT_MGR already set [ 515.376272][ T9641] device syzkaller0 entered promiscuous mode [ 515.396037][ T9638] binder: 9634:9638 ioctl 4018620d 200000000500 returned -16 [ 515.550402][ T1111] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 515.560299][ T1111] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 515.573635][ T1111] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 515.582801][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.592932][ T1111] usb 7-1: config 0 descriptor?? [ 515.600802][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1654'. [ 515.612550][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1654'. [ 515.748925][ T9649] md: couldn't update array info. -22 [ 515.760041][ T25] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 515.847930][ T9649] md: could not open device unknown-block(1,1). [ 515.893563][ T9649] md: md_import_device returned -16 [ 515.963788][ T9651] md: could not open device unknown-block(1,2). [ 516.093434][ T9651] md: md_import_device returned -16 [ 516.144616][ T9638] syz.3.1652 (9638): drop_caches: 2 [ 516.188611][ T26] kauditd_printk_skb: 221 callbacks suppressed [ 516.188729][ T26] audit: type=1326 audit(1792180573.443:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 516.251235][ T1111] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 516.452782][ T26] audit: type=1326 audit(1792180573.483:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 516.649194][ T1111] usb 7-1: USB disconnect, device number 35 [ 516.657148][ T1111] usblp0: removed [ 516.670390][ T26] audit: type=1326 audit(1792180573.483:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 516.734274][ T26] audit: type=1326 audit(1792180573.483:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 516.804466][ T26] audit: type=1326 audit(1792180573.493:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.110972][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 517.176762][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 517.310067][ T25] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 517.422405][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 517.520749][ T26] audit: type=1326 audit(1792180573.493:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.528899][ T25] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 517.549752][ T26] audit: type=1326 audit(1792180573.493:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.636189][ T9668] binder: BINDER_SET_CONTEXT_MGR already set [ 517.650060][ T9668] binder: 9667:9668 ioctl 4018620d 200000004a80 returned -16 [ 517.667990][ T26] audit: type=1326 audit(1792180573.503:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.673437][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 517.714189][ T9672] binder: BINDER_SET_CONTEXT_MGR already set [ 517.730025][ T9672] binder: 9671:9672 ioctl 4018620d 200000004a80 returned -16 [ 517.746057][ T9672] binder: 9671:9672 ioctl c0306201 0 returned -14 [ 517.759739][ T26] audit: type=1326 audit(1792180573.513:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.760703][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.793498][ T26] audit: type=1326 audit(1792180573.513:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.6.1645" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08f822559 code=0x7fc00000 [ 517.832356][ T9676] kAFS: unable to lookup cell '/,c¾ûL' [ 517.839396][ T9676] binder: BINDER_SET_CONTEXT_MGR already set [ 517.849234][ T9676] binder: 9675:9676 ioctl 4018620d 200000000100 returned -16 [ 517.910410][ T9629] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 517.931707][ T25] ims_pcu 5-1:1.0: Max IN packet size is too small (0) [ 517.953902][ T25] ims_pcu: probe of 5-1:1.0 failed with error -22 [ 517.998856][ T25] usb 5-1: USB disconnect, device number 57 [ 518.011727][ T150] block nbd5: Attempted send on invalid socket [ 518.019102][ T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 518.033746][ T150] gfs2: error 10 reading superblock [ 518.126030][ T9684] device syzkaller0 entered promiscuous mode [ 518.180777][ T9688] md: couldn't update array info. -22 [ 518.211405][ T9688] md: could not open device unknown-block(1,1). [ 518.237835][ T9688] md: md_import_device returned -16 [ 518.251322][ T9686] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1667'. [ 518.256134][ T9688] md: could not open device unknown-block(1,2). [ 518.363010][ T9688] md: md_import_device returned -16 [ 518.501859][ T9698] ------------[ cut here ]------------ [ 518.550173][ T9698] kernel BUG at include/linux/scatterlist.h:143! [ 518.578886][ T9698] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 518.585002][ T9698] CPU: 0 PID: 9698 Comm: syz.0.1670 Not tainted syzkaller #0 [ 518.592560][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 518.602628][ T9698] RIP: 0010:sg_init_one+0x14a/0x160 [ 518.607854][ T9698] Code: 80 c1 03 38 c1 7c cf e8 54 cd d7 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 3d cd d7 fd eb c8 e8 d6 87 92 fd <0f> 0b e8 cf 87 92 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 518.627902][ T9698] RSP: 0018:ffffc90002faf928 EFLAGS: 00010287 [ 518.634639][ T9698] RAX: ffffffff83e69b8a RBX: ffffc90002fafc40 RCX: 0000000000080000 [ 518.643672][ T9698] RDX: ffffc90004fc9000 RSI: 0000000000000817 RDI: 0000000000000818 [ 518.651655][ T9698] RBP: 0000000000000000 R08: ffffc90002fafa9f R09: ffffc90002fafa88 [ 518.659648][ T9698] R10: dffffc0000000000 R11: fffff520005f5f54 R12: 1ffff920005f5f50 [ 518.667640][ T9698] R13: dffffc0000000000 R14: ffffc90002fafa80 R15: 0000000000000010 [ 518.675762][ T9698] FS: 00007f3e1cb2a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 518.685502][ T9698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.692078][ T9698] CR2: 000055558c230a38 CR3: 0000000061009000 CR4: 00000000003526f0 [ 518.700271][ T9698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.708345][ T9698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 518.716340][ T9698] Call Trace: [ 518.719703][ T9698] [ 518.722617][ T9698] software_key_eds_op+0x4f6/0xb30 [ 518.727716][ T9698] ? stack_depot_save+0x41b/0x460 [ 518.732724][ T9698] ? software_key_query+0x830/0x830 [ 518.739100][ T9698] ? asymmetric_key_eds_op+0xe9/0x130 [ 518.745281][ T9698] keyctl_pkey_e_d_s+0x208/0x300 [ 518.751627][ T9698] ? keyctl_pkey_params_get+0x4c0/0x4c0 [ 518.757259][ T9698] ? do_futex+0xdc2/0x12b0 [ 518.761673][ T9698] __se_sys_keyctl+0x6c6/0xa20 [ 518.766515][ T9698] ? __x64_sys_keyctl+0xc0/0xc0 [ 518.771915][ T9698] ? __context_tracking_exit+0x4c/0x80 [ 518.777388][ T9698] ? __lock_acquire+0x7d40/0x7d40 [ 518.782470][ T9698] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 518.788813][ T9698] ? lock_chain_count+0x20/0x20 [ 518.793774][ T9698] ? lockdep_hardirqs_on+0x94/0x140 [ 518.799085][ T9698] ? __x64_sys_keyctl+0x1c/0xc0 [ 518.804123][ T9698] do_syscall_64+0x4c/0xa0 [ 518.808751][ T9698] ? clear_bhb_loop+0x30/0x80 [ 518.814291][ T9698] ? clear_bhb_loop+0x30/0x80 [ 518.819061][ T9698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 518.824974][ T9698] RIP: 0033:0x7f3e1e8d2559 [ 518.829599][ T9698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.850049][ T9698] RSP: 002b:00007f3e1cb2a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 518.858661][ T9698] RAX: ffffffffffffffda RBX: 00007f3e1eb59fa0 RCX: 00007f3e1e8d2559 [ 518.866649][ T9698] RDX: 00002000000007c0 RSI: 0000200000000180 RDI: 000000000000001a [ 518.874636][ T9698] RBP: 00007f3e1e9698b0 R08: 0000000000000000 R09: 0000000000000000 [ 518.882853][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.890841][ T9698] R13: 00007f3e1eb5a038 R14: 00007f3e1eb59fa0 R15: 00007fffc1d8a318 [ 518.898863][ T9698] [ 518.901977][ T9698] Modules linked in: [ 518.937205][ T9698] ---[ end trace 66b52b2b2a183114 ]--- [ 518.943993][ T9698] RIP: 0010:sg_init_one+0x14a/0x160 [ 518.949359][ T9698] Code: 80 c1 03 38 c1 7c cf e8 54 cd d7 fd eb c8 44 89 f1 80 e1 07 80 c1 03 38 c1 7c d2 4c 89 f7 e8 3d cd d7 fd eb c8 e8 d6 87 92 fd <0f> 0b e8 cf 87 92 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 518.992013][ T9698] RSP: 0018:ffffc90002faf928 EFLAGS: 00010287 [ 519.080113][ T9698] RAX: ffffffff83e69b8a RBX: ffffc90002fafc40 RCX: 0000000000080000 [ 519.088657][ T9698] RDX: ffffc90004fc9000 RSI: 0000000000000817 RDI: 0000000000000818 [ 519.098010][ T9698] RBP: 0000000000000000 R08: ffffc90002fafa9f R09: ffffc90002fafa88 [ 519.107506][ T9698] R10: dffffc0000000000 R11: fffff520005f5f54 R12: 1ffff920005f5f50 [ 519.117530][ T9698] R13: dffffc0000000000 R14: ffffc90002fafa80 R15: 0000000000000010 [ 519.127459][ T9698] FS: 00007f3e1cb2a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 519.138184][ T9698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.146615][ T9698] CR2: 00007fd08da38d58 CR3: 0000000061009000 CR4: 00000000003506e0 [ 519.156258][ T9698] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.165899][ T9698] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 519.176042][ T9698] Kernel panic - not syncing: Fatal exception [ 519.182472][ T9698] Kernel Offset: disabled [ 519.187309][ T9698] Rebooting in 86400 seconds..