last executing test programs: 6m38.474606749s ago: executing program 2 (id=2557): inotify_init() r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 6m38.368846731s ago: executing program 2 (id=2559): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x10, 0x1, 0xffffff45, 0x0, 0x4, 0x8fc1, 0x65f40}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback={0xa4, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0x1, 0x0, 0xffff}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000100)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2, r4, r5, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 6m38.217665735s ago: executing program 2 (id=2560): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) 6m34.31482946s ago: executing program 2 (id=2575): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 6m34.214816755s ago: executing program 2 (id=2576): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_dev$vcsu(0x0, 0x7ff, 0x624200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2000000a}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x104) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) write$6lowpan_control(r6, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0x7041, 0x0) write$sndseq(r7, &(0x7f0000000080), 0x0) 6m33.192033292s ago: executing program 2 (id=2581): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x84, &(0x7f0000000480)=ANY=[@ANYRES16=r4]) r8 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private=0xa010100}, {@local}, {@remote}, {@private}, {@remote, 0x200}, {@private}]}]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 6m32.248008043s ago: executing program 32 (id=2581): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = dup(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x84, &(0x7f0000000480)=ANY=[@ANYRES16=r4]) r8 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r8, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r3, @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private=0xa010100}, {@local}, {@remote}, {@private}, {@remote, 0x200}, {@private}]}]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 1m47.07061638s ago: executing program 0 (id=3758): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x8f, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) 1m42.856025114s ago: executing program 0 (id=3776): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') symlinkat(&(0x7f0000000180)='.\x00', r2, &(0x7f0000000140)='./file0\x00') 1m42.747165896s ago: executing program 0 (id=3777): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1m41.723138491s ago: executing program 0 (id=3784): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 1m40.61107186s ago: executing program 0 (id=3789): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.303223427s ago: executing program 0 (id=3794): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1m38.976816529s ago: executing program 33 (id=3794): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 56.168683455s ago: executing program 5 (id=3957): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff004) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xec, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 55.119999989s ago: executing program 5 (id=3960): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) lseek(r0, 0x3, 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, 0x0) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0), 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40000000, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 53.668304652s ago: executing program 5 (id=3964): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001400)={0xa, @vbi={0x0, 0x0, 0x34565348, 0x0, [0x2], [0x0, 0x7]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 51.851985703s ago: executing program 5 (id=3969): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 50.740281072s ago: executing program 5 (id=3972): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x1, 0x1, [0x82, 0x6, 0x22, 0x1000, 0x3, 0x9, 0x5, 0x2]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsopen(&(0x7f0000000340)='exofs\x00', 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 50.248320219s ago: executing program 5 (id=3977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e52", 0x24}], 0x2}}], 0x2, 0x0) 49.117329934s ago: executing program 34 (id=3977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e52", 0x24}], 0x2}}], 0x2, 0x0) 21.129771862s ago: executing program 4 (id=4084): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) close(r0) 20.222445833s ago: executing program 4 (id=4086): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aada2162a9eca7b6f983d446a7cba9ec5d3b9b701543e8e4e756fbf3adfd0aec3e1eb887a8a626a113c52522a8eaa0ffa9e52b89f52dd0963c3eb8179d196a71758d5c839d0da94c206e3372fcde92e5da04a7cb2632b4acf90cc9517c58b1b892714903333a99a4d5d34e", 0x6c}], 0x1, 0x8, 0x8000, 0x4) write$UHID_CREATE2(r3, &(0x7f0000000300)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3ff, 0x81, 0x0, 0xb, 0x800}}, 0x118) 19.604075874s ago: executing program 4 (id=4089): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 15.907736076s ago: executing program 4 (id=4100): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 14.948324962s ago: executing program 4 (id=4103): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 14.095419317s ago: executing program 4 (id=4105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x5d, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 13.591125362s ago: executing program 35 (id=4105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x5d, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 7.96669482s ago: executing program 1 (id=4138): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x4008800) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200"/55], 0x4b) 6.523574721s ago: executing program 1 (id=4143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) 5.366902877s ago: executing program 1 (id=4147): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) truncate(&(0x7f0000000640)='./file2\x00', 0xa00) truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000665000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000380)=""/189) rt_sigsuspend(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x33a77c20f21f5ff8}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 4.00384823s ago: executing program 1 (id=4153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000300)={0x7dd, 0x4bf4, @value=0x3}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 3.202949517s ago: executing program 1 (id=4157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) 3.14240636s ago: executing program 6 (id=4158): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.125210975s ago: executing program 7 (id=4159): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x0) 1.971459572s ago: executing program 7 (id=4160): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r3, &(0x7f0000000400)=[{&(0x7f0000000300)="14ec1c598e544bddbc704ecc4212ee8becd4925541cec86be3226d577c", 0x1d}, {0x0, 0x30}], 0x2, 0x8, 0x5, 0x4) 1.968371806s ago: executing program 6 (id=4161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x9, 0xfffffffe, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.80656486s ago: executing program 6 (id=4163): write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) 1.679054054s ago: executing program 7 (id=4164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "379a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x4000084) 1.465116373s ago: executing program 3 (id=4165): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/132, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x600}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 1.329642574s ago: executing program 7 (id=4166): syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 1.308119239s ago: executing program 3 (id=4167): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000001400)={0xa, @vbi={0x0, 0x0, 0x34565348, 0x0, [0x2], [0x0, 0x7]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 1.229825131s ago: executing program 7 (id=4168): syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b"]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 971.300731ms ago: executing program 3 (id=4169): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xe0}}, 0x0) 896.710364ms ago: executing program 3 (id=4170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 631.684051ms ago: executing program 1 (id=4171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) pwritev2(r3, 0x0, 0x0, 0xffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 500.119435ms ago: executing program 6 (id=4172): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="dccb07ef399fa77311413e3cc9adf84d8610a42dae9b113a24288a1a7f834417b381ced900f61b5f7a9cd30a51dc432a6e27e25be626f6c476ba1378fbed11fd28d3409cebcf4ff5", 0x48}, {&(0x7f0000000540)="d7fa398b3dc99f2d124aa94ee13c8082b04a7b3681e16e463011d356749d8cf74f9de1d02e5d697d221b21a4480963712c0f18540dc669976f5f9c5232267566319a5b6f614856d9957cce73f014b6e7a8d494c3777a89309e7e39e671027933aa8a497756474c8237ab001b04450f18914340304e8881ab41b0873b73206c8e7a3e601679220c7300a4fb60657bca8594e9cbb95fd25815b1723f27769fdac42328a6c56c0ff88b02208f643f3ca8bf06cd4649558e97d2dae85dd7e40770c8c478b4eb255d957400a1d7d532b283ef39a8881b988d57d7319e73a94dee4b923ae05550e027a3c5364b3078", 0xec}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) 382.740997ms ago: executing program 6 (id=4173): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x108) pwritev2(r2, &(0x7f0000000400)=[{&(0x7f0000000300)="14ec1c598e544bddbc704ecc4212ee8becd4925541cec86be3226d577c", 0x1d}, {0x0, 0x30}], 0x2, 0x8, 0x5, 0x4) 259.906249ms ago: executing program 6 (id=4174): socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) 259.04929ms ago: executing program 7 (id=4175): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 168.062122ms ago: executing program 3 (id=4176): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/132, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x600}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 0s ago: executing program 3 (id=4177): syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) kernel console output (not intermixed with test programs): 1375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 951.989365][T11375] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 952.007815][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.016034][T11375] usb 5-1: Product: syz [ 952.023438][T11375] usb 5-1: Manufacturer: syz [ 952.029177][T11375] usb 5-1: SerialNumber: syz [ 952.036178][T11375] usb 5-1: config 0 descriptor?? [ 952.044112][T11375] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 952.062804][T11375] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 952.362462][T16878] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3397'. [ 952.989603][T11375] em28xx 5-1:0.0: unknown em28xx chip ID (59) [ 953.035897][T11375] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 953.174420][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3402'. [ 953.254006][T11375] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 953.261822][T11375] em28xx 5-1:0.0: No AC97 audio processor [ 953.271666][T11375] usb 5-1: USB disconnect, device number 55 [ 953.278550][T11375] em28xx 5-1:0.0: Disconnecting em28xx [ 953.284904][T11375] em28xx 5-1:0.0: Freeing device [ 954.590059][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 954.651842][T16910] netlink: 'syz.0.3407': attribute type 3 has an invalid length. [ 954.659631][T16910] netlink: 'syz.0.3407': attribute type 1 has an invalid length. [ 954.667423][T16910] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3407'. [ 954.676516][T16910] NCSI netlink: No device for ifindex 33022 [ 954.699566][T16910] hub 8-0:1.0: USB hub found [ 954.705361][T16910] hub 8-0:1.0: 1 port detected [ 954.984506][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.011817][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 955.045126][ T5940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.261820][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3405'. [ 955.269110][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.294876][ T5940] usb 4-1: config 0 descriptor?? [ 955.914326][T16918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3409'. [ 956.030027][ T5940] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 956.508098][T16931] can0: slcan on ttyS3. [ 956.776576][T16923] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3411'. [ 956.785977][T16923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3411'. [ 956.794948][T16923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3411'. [ 957.649961][T16926] can0 (unregistered): slcan off ttyS3. [ 957.695691][ T5940] usb 4-1: USB disconnect, device number 54 [ 958.026790][ T5953] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 958.126068][ T5940] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 958.249296][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 958.260135][T11375] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 958.672890][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 958.674550][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 958.691950][ T5940] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 958.699675][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 958.700244][ T5940] usb 4-1: config 6 has no interface number 0 [ 958.717955][ T5940] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 958.720737][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 958.728715][ T5940] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.747297][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.748385][ T5940] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 958.766600][ T5953] usb 5-1: Product: syz [ 958.768288][ T5940] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 958.772849][ T5953] usb 5-1: Manufacturer: syz [ 958.780457][ T5940] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 958.793106][ T5940] usb 4-1: Product: syz [ 958.797307][ T5940] usb 4-1: Manufacturer: syz [ 958.802766][ T5953] usb 5-1: SerialNumber: syz [ 958.805337][ T5940] usb 4-1: SerialNumber: syz [ 958.813427][ T5953] usb 5-1: config 0 descriptor?? [ 958.815816][ T5940] hso 4-1:6.2: Failed to find INT IN ep [ 958.819417][T16955] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3422'. [ 958.837156][ T5953] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 958.846541][ T5953] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 958.849904][T11375] usb 1-1: Using ep0 maxpacket: 16 [ 958.863168][T11375] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 958.872263][T11375] usb 1-1: config 0 has no interface number 0 [ 958.880826][T11375] usb 1-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 958.889980][T11375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.898037][T11375] usb 1-1: Product: syz [ 958.904001][T11375] usb 1-1: Manufacturer: syz [ 958.908638][T11375] usb 1-1: SerialNumber: syz [ 958.918476][T11375] usb 1-1: config 0 descriptor?? [ 958.925418][T11375] ftdi_sio 1-1:0.41: FTDI USB Serial Device converter detected [ 958.935141][T11375] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 959.047700][T11375] usb 4-1: USB disconnect, device number 55 [ 959.106967][T16963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3426'. [ 959.287709][T11452] usb 1-1: USB disconnect, device number 49 [ 959.299082][T11452] ftdi_sio 1-1:0.41: device disconnected [ 959.719920][ T30] audit: type=1400 audit(1752565828.888:451): avc: denied { connect } for pid=16965 comm="syz.5.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 959.767179][ T30] audit: type=1400 audit(1752565828.988:452): avc: denied { set_context_mgr } for pid=16965 comm="syz.5.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 959.768833][ T5953] em28xx 5-1:0.0: unknown em28xx chip ID (59) [ 959.928723][ T30] audit: type=1400 audit(1752565829.288:453): avc: denied { search } for pid=16969 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.991142][ T30] audit: type=1400 audit(1752565829.288:454): avc: denied { search } for pid=16969 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.001096][ T5953] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 960.061665][ T30] audit: type=1400 audit(1752565829.288:455): avc: denied { search } for pid=16969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.195817][ T30] audit: type=1400 audit(1752565829.288:456): avc: denied { search } for pid=16969 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.331137][ T5953] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 960.339499][ T5953] em28xx 5-1:0.0: No AC97 audio processor [ 961.047689][ T5953] usb 5-1: USB disconnect, device number 56 [ 961.112594][ T5953] em28xx 5-1:0.0: Disconnecting em28xx [ 961.118605][ T30] audit: type=1400 audit(1752565829.298:457): avc: denied { read open } for pid=16972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.144685][ T5953] em28xx 5-1:0.0: Freeing device [ 961.157918][ T30] audit: type=1400 audit(1752565829.298:458): avc: denied { getattr } for pid=16972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.189959][ T30] audit: type=1400 audit(1752565829.298:459): avc: denied { getattr } for pid=16972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 961.226202][ T30] audit: type=1400 audit(1752565829.428:460): avc: denied { read } for pid=16974 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1887 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 961.594098][T17001] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3434'. [ 962.480572][T17024] No buffer was provided with the request [ 962.530742][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3444'. [ 962.676095][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3445'. [ 962.859176][ T5953] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 963.520449][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 963.543109][ T5953] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 963.568832][ T5953] usb 4-1: config 0 has no interface number 0 [ 963.589076][ T5953] usb 4-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 963.688672][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.697532][ T5953] usb 4-1: Product: syz [ 963.701729][ T5953] usb 4-1: Manufacturer: syz [ 963.706322][ T5953] usb 4-1: SerialNumber: syz [ 963.716955][ T5953] usb 4-1: config 0 descriptor?? [ 963.727166][ T5953] ftdi_sio 4-1:0.41: FTDI USB Serial Device converter detected [ 963.735576][ T5953] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 965.168433][T11452] usb 4-1: USB disconnect, device number 56 [ 965.185545][T11452] ftdi_sio 4-1:0.41: device disconnected [ 965.240901][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 965.446944][T17094] No buffer was provided with the request [ 966.317873][T17096] syz.1.3461: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 966.332578][T17096] CPU: 1 UID: 0 PID: 17096 Comm: syz.1.3461 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 966.332595][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.332602][T17096] Call Trace: [ 966.332606][T17096] [ 966.332610][T17096] dump_stack_lvl+0x16c/0x1f0 [ 966.332630][T17096] warn_alloc+0x248/0x3a0 [ 966.332646][T17096] ? __pfx_warn_alloc+0x10/0x10 [ 966.332661][T17096] ? __pfx_stack_trace_save+0x10/0x10 [ 966.332677][T17096] ? stack_depot_save_flags+0x28/0xa40 [ 966.332696][T17096] ? kasan_save_stack+0x42/0x60 [ 966.332709][T17096] ? kasan_save_stack+0x33/0x60 [ 966.332722][T17096] ? kasan_save_track+0x14/0x30 [ 966.332736][T17096] ? xskq_create+0x52/0x1d0 [ 966.332749][T17096] ? xsk_setsockopt+0x640/0x840 [ 966.332759][T17096] ? do_sock_setsockopt+0x224/0x470 [ 966.332777][T17096] ? xskq_create+0xfb/0x1d0 [ 966.332791][T17096] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 966.332811][T17096] ? xskq_create+0xfb/0x1d0 [ 966.332828][T17096] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.332845][T17096] ? xskq_create+0xfb/0x1d0 [ 966.332858][T17096] vmalloc_user_noprof+0x9e/0xe0 [ 966.332869][T17096] ? xskq_create+0xfb/0x1d0 [ 966.332883][T17096] xskq_create+0xfb/0x1d0 [ 966.332897][T17096] xsk_setsockopt+0x640/0x840 [ 966.332910][T17096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 966.332922][T17096] ? __lock_acquire+0x622/0x1c90 [ 966.332937][T17096] ? selinux_socket_setsockopt+0x6a/0x80 [ 966.332953][T17096] ? __pfx_xsk_setsockopt+0x10/0x10 [ 966.332966][T17096] do_sock_setsockopt+0x224/0x470 [ 966.332983][T17096] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 966.333008][T17096] __sys_setsockopt+0x1a0/0x230 [ 966.333025][T17096] __x64_sys_setsockopt+0xbd/0x160 [ 966.333038][T17096] ? do_syscall_64+0x91/0x4c0 [ 966.333053][T17096] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.333068][T17096] do_syscall_64+0xcd/0x4c0 [ 966.333084][T17096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.333095][T17096] RIP: 0033:0x7f0aa698e929 [ 966.333104][T17096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.333115][T17096] RSP: 002b:00007f0aa78bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 966.333125][T17096] RAX: ffffffffffffffda RBX: 00007f0aa6bb5fa0 RCX: 00007f0aa698e929 [ 966.333132][T17096] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 966.333138][T17096] RBP: 00007f0aa6a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 966.333144][T17096] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.333150][T17096] R13: 0000000000000000 R14: 00007f0aa6bb5fa0 R15: 00007ffd70b5c4d8 [ 966.333164][T17096] [ 966.333168][T17096] Mem-Info: [ 966.599208][T17096] active_anon:5238 inactive_anon:0 isolated_anon:0 [ 966.599208][T17096] active_file:19446 inactive_file:40931 isolated_file:0 [ 966.599208][T17096] unevictable:778 dirty:306 writeback:0 [ 966.599208][T17096] slab_reclaimable:12232 slab_unreclaimable:103492 [ 966.599208][T17096] mapped:29503 shmem:2135 pagetables:1091 [ 966.599208][T17096] sec_pagetables:0 bounce:0 [ 966.599208][T17096] kernel_misc_reclaimable:0 [ 966.599208][T17096] free:1292746 free_pcp:18721 free_cma:0 [ 966.644943][T17096] Node 0 active_anon:20952kB inactive_anon:0kB active_file:77784kB inactive_file:163520kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:118012kB dirty:1224kB writeback:0kB shmem:7004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11812kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 966.678291][T17096] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 966.709657][T17096] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 966.738655][T17096] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 966.744387][T17096] Node 0 DMA32 free:1260516kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20936kB inactive_anon:0kB active_file:77784kB inactive_file:162196kB unevictable:1576kB writepending:1224kB present:3129332kB managed:2540076kB mlocked:40kB bounce:0kB free_pcp:54464kB local_pcp:26180kB free_cma:0kB [ 966.776810][T17096] lowmem_reserve[]: 0 0 1 1 1 [ 966.781538][T17096] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 966.810633][T17096] lowmem_reserve[]: 0 0 0 0 0 [ 966.815545][T17096] Node 1 Normal free:3895128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20384kB local_pcp:8704kB free_cma:0kB [ 966.846638][T17096] lowmem_reserve[]: 0 0 0 0 0 [ 966.851326][T17096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 966.867699][T17096] Node 0 DMA32: 863*4kB (UME) 411*8kB (UME) 119*16kB (UME) 773*32kB (UM) 436*64kB (UME) 157*128kB (UME) 80*256kB (UME) 43*512kB (UM) 36*1024kB (UME) 21*2048kB (UM) 258*4096kB (UM) = 1260516kB [ 966.886591][T17096] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 966.898805][T17096] Node 1 Normal: 192*4kB (U) 41*8kB (UME) 39*16kB (UME) 79*32kB (UME) 33*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895128kB [ 966.916864][T17096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.926389][T17096] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.935653][T17096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 966.945182][T17096] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 966.954458][T17096] 62508 total pagecache pages [ 966.959101][T17096] 0 pages in swap cache [ 966.963237][T17096] Free swap = 124996kB [ 966.967367][T17096] Total swap = 124996kB [ 966.971511][T17096] 2097051 pages RAM [ 966.975294][T17096] 0 pages HighMem/MovableOnly [ 966.979952][T17096] 430054 pages reserved [ 966.984074][T17096] 0 pages cma reserved [ 968.310095][T16546] Bluetooth: hci0: command 0x0419 tx timeout [ 969.650024][ T5940] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 969.796733][T17138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 969.803000][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 969.810802][T17138] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 969.816865][ T5940] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 969.829080][ T5940] usb 2-1: config 0 has no interface number 0 [ 970.245902][ T5940] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 970.266932][T17138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 970.273422][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.282743][T17138] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 970.291113][ T5940] usb 2-1: Product: syz [ 970.296009][ T5940] usb 2-1: Manufacturer: syz [ 970.301764][ T5940] usb 2-1: SerialNumber: syz [ 970.310987][T17138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 970.317181][T17138] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 970.327429][ T5940] usb 2-1: config 0 descriptor?? [ 970.335717][T17138] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 970.336411][ T5940] ftdi_sio 2-1:0.41: FTDI USB Serial Device converter detected [ 970.351855][T17138] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 970.373155][T17138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 970.381196][ T5940] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 970.400269][T17138] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 970.711339][T11452] usb 2-1: USB disconnect, device number 69 [ 970.719419][T11452] ftdi_sio 2-1:0.41: device disconnected [ 971.170106][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 971.170121][ T30] audit: type=1400 audit(1752565840.548:468): avc: denied { create } for pid=17164 comm="syz.5.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 971.198496][ T30] audit: type=1400 audit(1752565840.578:469): avc: denied { sys_admin } for pid=17164 comm="syz.5.3484" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 971.327029][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3485'. [ 973.735174][T17208] mkiss: ax0: crc mode is auto. [ 973.759815][T11375] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 974.541690][ T30] audit: type=1400 audit(1752565843.168:470): avc: denied { bind } for pid=17206 comm="syz.4.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 974.681743][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3499'. [ 974.701643][T11375] usb 2-1: Using ep0 maxpacket: 16 [ 974.722755][T11375] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 974.731974][T11375] usb 2-1: config 0 has no interface number 0 [ 974.747005][T11375] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 974.765924][T11375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.775818][T11375] usb 2-1: Product: syz [ 974.780181][T11375] usb 2-1: Manufacturer: syz [ 974.784950][T11375] usb 2-1: SerialNumber: syz [ 974.791333][T11375] usb 2-1: config 0 descriptor?? [ 974.801832][T11375] ftdi_sio 2-1:0.41: FTDI USB Serial Device converter detected [ 974.811284][T11375] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 975.901347][T11375] usb 2-1: USB disconnect, device number 70 [ 975.920893][T11375] ftdi_sio 2-1:0.41: device disconnected [ 977.524371][ T5945] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 978.419167][ T5945] usb 5-1: Using ep0 maxpacket: 32 [ 978.426987][T17249] No buffer was provided with the request [ 978.450249][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 978.486012][ T5945] usb 5-1: config 2 has an invalid interface number: 210 but max is 0 [ 978.522034][ T5945] usb 5-1: config 2 has no interface number 0 [ 978.545581][ T5945] usb 5-1: config 2 interface 210 has no altsetting 0 [ 978.593495][ T5945] usb 5-1: New USB device found, idVendor=19d2, idProduct=0133, bcdDevice= 3.71 [ 978.603671][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.657740][ T5945] usb 5-1: Product: ⯵厊訷巓퓣虐뻸崜 [ 978.687840][ T5945] usb 5-1: SerialNumber: syz [ 978.775754][T17254] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3517'. [ 978.931382][ T5945] usb 5-1: Found UVC 0.00 device ⯵厊訷巓퓣虐뻸崜 (19d2:0133) [ 978.972509][ T5945] usb 5-1: No valid video chain found. [ 978.999414][ T5945] usb 5-1: USB disconnect, device number 57 [ 979.243069][ T30] audit: type=1400 audit(1752565848.708:471): avc: denied { getopt } for pid=17261 comm="syz.0.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 983.185962][ T30] audit: type=1400 audit(1752565852.608:472): avc: denied { write } for pid=17281 comm="syz.3.3527" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 983.849823][ T30] audit: type=1400 audit(1752565853.298:473): avc: denied { listen } for pid=17281 comm="syz.3.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 984.382771][T11375] IPVS: starting estimator thread 0... [ 984.849864][ T5144] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 984.889990][T17308] IPVS: using max 35 ests per chain, 84000 per kthread [ 985.022380][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 985.042005][ T5144] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 985.054591][ T5144] usb 4-1: config 6 has no interface number 0 [ 985.061055][ T5144] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 985.077154][ T5144] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.088934][ T5144] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 985.106541][ T5144] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 985.116852][ T5144] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 985.126650][ T5144] usb 4-1: Product: syz [ 985.131129][ T5144] usb 4-1: Manufacturer: syz [ 985.135756][ T5144] usb 4-1: SerialNumber: syz [ 985.164888][ T5144] hso 4-1:6.2: Failed to find INT IN ep [ 985.192474][ T30] audit: type=1400 audit(1752565854.658:474): avc: denied { relabelfrom } for pid=17312 comm="syz.0.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 985.250802][ T30] audit: type=1400 audit(1752565854.658:475): avc: denied { relabelto } for pid=17312 comm="syz.0.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 985.374738][ T5144] usb 4-1: USB disconnect, device number 57 [ 986.273079][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 986.342712][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'. [ 986.650383][T17337] lo speed is unknown, defaulting to 1000 [ 986.664097][T17337] lo speed is unknown, defaulting to 1000 [ 986.673910][T17337] lo speed is unknown, defaulting to 1000 [ 987.120608][T17337] infiniband syz0: set active [ 987.125388][T17337] infiniband syz0: added lo [ 987.144411][T17337] RDS/IB: syz0: added [ 987.148674][T17337] smc: adding ib device syz0 with port count 1 [ 987.154926][T17337] smc: ib device syz0 port 1 has pnetid [ 987.161978][T17337] lo speed is unknown, defaulting to 1000 [ 987.246140][T17337] lo speed is unknown, defaulting to 1000 [ 987.335047][T17337] lo speed is unknown, defaulting to 1000 [ 987.420757][T17337] lo speed is unknown, defaulting to 1000 [ 987.502708][T17337] lo speed is unknown, defaulting to 1000 [ 987.545403][ T5144] lo speed is unknown, defaulting to 1000 [ 987.553668][ T5144] lo speed is unknown, defaulting to 1000 [ 988.492211][ T24] IPVS: starting estimator thread 0... [ 988.702249][T17349] IPVS: using max 43 ests per chain, 103200 per kthread [ 988.929831][ T5144] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 989.663558][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'. [ 989.731262][ T5144] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 989.739640][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.756949][ T5144] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 989.771438][ T5144] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 989.779549][ T5144] usb 5-1: Manufacturer: syz [ 989.810086][ T5144] usb 5-1: config 0 descriptor?? [ 989.837351][T17369] No buffer was provided with the request [ 990.742608][ T5144] rc_core: IR keymap rc-hauppauge not found [ 990.765688][ T5144] Registered IR keymap rc-empty [ 990.794107][ T5144] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 990.836182][ T5144] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input50 [ 990.879123][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 991.091617][ T5144] usb 5-1: USB disconnect, device number 58 [ 991.259811][ T5906] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 992.222932][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.234349][ T5906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 992.249923][ T5906] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 992.263555][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.281936][ T5906] usb 1-1: config 0 descriptor?? [ 992.295284][ T5906] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 992.302084][ T5906] dvb-usb: bulk message failed: -22 (3/0) [ 992.324162][ T5906] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 992.333170][ T5906] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 992.340290][ T5906] usb 1-1: media controller created [ 992.347005][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.425113][ T5906] dvb-usb: bulk message failed: -22 (6/0) [ 992.432360][ T5906] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 992.520973][T17399] netlink: 'syz.3.3568': attribute type 3 has an invalid length. [ 992.528735][T17399] netlink: 'syz.3.3568': attribute type 1 has an invalid length. [ 992.536516][T17399] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3568'. [ 992.545615][T17399] NCSI netlink: No device for ifindex 33022 [ 992.565392][T17399] hub 8-0:1.0: USB hub found [ 992.570755][T17399] hub 8-0:1.0: 1 port detected [ 992.650339][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.656732][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.836066][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input51 [ 992.856356][ T5906] dvb-usb: schedule remote query interval to 150 msecs. [ 992.863925][T17383] dvb-usb: bulk message failed: -22 (2/0) [ 992.947724][ T30] audit: type=1800 audit(1752565862.408:476): pid=17402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3569" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 992.952034][ T5906] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 993.111544][T11375] dvb-usb: bulk message failed: -22 (1/0) [ 993.117988][T11375] dvb-usb: error while querying for an remote control event. [ 993.581072][ T5906] usb 1-1: USB disconnect, device number 50 [ 993.892255][ T5906] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 996.369271][ T30] audit: type=1800 audit(1752565865.828:477): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3582" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 996.510317][ T5906] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 996.728328][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 996.828060][ T5906] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 996.924126][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.449933][ T30] audit: type=1400 audit(1752565866.848:478): avc: denied { accept } for pid=17448 comm="syz.5.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 997.511966][ T5906] usb 1-1: config 0 descriptor?? [ 997.819875][T11375] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 997.936962][ T5906] asus 0003:0B05:17E0.0009: item fetching failed at offset 2/5 [ 997.946422][ T5906] asus 0003:0B05:17E0.0009: Asus hid parse failed: -22 [ 997.953775][ T5906] asus 0003:0B05:17E0.0009: probe with driver asus failed with error -22 [ 998.199780][T11375] usb 5-1: Using ep0 maxpacket: 8 [ 998.223953][T11375] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 998.232033][T11375] usb 5-1: config 6 has no interface number 0 [ 998.238771][T11375] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 998.260507][ T5906] usb 1-1: USB disconnect, device number 51 [ 998.268063][T11375] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 998.382193][T11375] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 998.423151][T11375] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 998.453612][T11375] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 998.493974][T11375] usb 5-1: Product: syz [ 998.562160][T11375] usb 5-1: Manufacturer: syz [ 998.587204][T11375] usb 5-1: SerialNumber: syz [ 998.606709][T11375] hso 5-1:6.2: Failed to find INT IN ep [ 998.858214][T11452] usb 5-1: USB disconnect, device number 59 [ 998.929802][T11375] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 999.100964][T11375] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 999.109306][T11375] usb 4-1: config 0 has no interface number 0 [ 999.151783][T11375] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 999.160944][T11375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.221243][T11375] usb 4-1: Product: syz [ 999.238970][T11375] usb 4-1: Manufacturer: syz [ 999.247944][T11375] usb 4-1: SerialNumber: syz [ 999.255409][T11375] usb 4-1: config 0 descriptor?? [ 1000.178601][T11375] usb 4-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 1000.381427][T11375] usb 4-1: failed to fetch extended address, random address set [ 1000.907626][T11375] usb 4-1: USB disconnect, device number 58 [ 1001.045985][T17491] syzkaller0: entered promiscuous mode [ 1001.057519][T17491] syzkaller0: entered allmulticast mode [ 1001.078002][ T30] audit: type=1400 audit(1752565870.538:479): avc: denied { module_request } for pid=17496 comm="syz.4.3598" kmod="crypto-ccm(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1001.272930][T17507] hub 8-0:1.0: USB hub found [ 1001.288627][T17507] hub 8-0:1.0: 1 port detected [ 1001.382404][T17504] netlink: 'syz.5.3599': attribute type 3 has an invalid length. [ 1001.422737][T17504] netlink: 'syz.5.3599': attribute type 1 has an invalid length. [ 1001.459329][T17504] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3599'. [ 1001.507686][T17504] NCSI netlink: No device for ifindex 33022 [ 1001.773458][T11375] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1001.918953][T17520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3603'. [ 1001.932519][T11375] usb 4-1: device descriptor read/64, error -71 [ 1002.190155][T11375] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1002.340194][T11375] usb 4-1: device descriptor read/64, error -71 [ 1002.460326][T11375] usb usb4-port1: attempt power cycle [ 1002.810596][T11375] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1002.920800][T11375] usb 4-1: device descriptor read/8, error -71 [ 1003.189946][T11375] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1003.243389][T11375] usb 4-1: device descriptor read/8, error -71 [ 1003.415132][T11375] usb usb4-port1: unable to enumerate USB device [ 1004.582268][ T30] audit: type=1800 audit(1752565874.048:480): pid=17557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3616" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1004.769792][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1005.549518][T17559] syz.0.3615: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1005.564295][T17559] CPU: 1 UID: 0 PID: 17559 Comm: syz.0.3615 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1005.564321][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.564332][T17559] Call Trace: [ 1005.564339][T17559] [ 1005.564346][T17559] dump_stack_lvl+0x16c/0x1f0 [ 1005.564378][T17559] warn_alloc+0x248/0x3a0 [ 1005.564405][T17559] ? __pfx_warn_alloc+0x10/0x10 [ 1005.564428][T17559] ? __pfx_stack_trace_save+0x10/0x10 [ 1005.564454][T17559] ? stack_depot_save_flags+0x28/0xa40 [ 1005.564488][T17559] ? kasan_save_stack+0x42/0x60 [ 1005.564510][T17559] ? kasan_save_stack+0x33/0x60 [ 1005.564531][T17559] ? kasan_save_track+0x14/0x30 [ 1005.564553][T17559] ? xskq_create+0x52/0x1d0 [ 1005.564573][T17559] ? xsk_setsockopt+0x640/0x840 [ 1005.564592][T17559] ? do_sock_setsockopt+0x224/0x470 [ 1005.564624][T17559] ? xskq_create+0xfb/0x1d0 [ 1005.564646][T17559] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1005.564677][T17559] ? xskq_create+0xfb/0x1d0 [ 1005.564706][T17559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1005.564735][T17559] ? xskq_create+0xfb/0x1d0 [ 1005.564759][T17559] vmalloc_user_noprof+0x9e/0xe0 [ 1005.564779][T17559] ? xskq_create+0xfb/0x1d0 [ 1005.564803][T17559] xskq_create+0xfb/0x1d0 [ 1005.564829][T17559] xsk_setsockopt+0x640/0x840 [ 1005.564852][T17559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1005.564872][T17559] ? __lock_acquire+0x622/0x1c90 [ 1005.564895][T17559] ? selinux_socket_setsockopt+0x6a/0x80 [ 1005.564921][T17559] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1005.564943][T17559] do_sock_setsockopt+0x224/0x470 [ 1005.564972][T17559] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1005.565016][T17559] __sys_setsockopt+0x1a0/0x230 [ 1005.565046][T17559] __x64_sys_setsockopt+0xbd/0x160 [ 1005.565068][T17559] ? do_syscall_64+0x91/0x4c0 [ 1005.565094][T17559] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.565119][T17559] do_syscall_64+0xcd/0x4c0 [ 1005.565146][T17559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.565165][T17559] RIP: 0033:0x7f7fa618e929 [ 1005.565181][T17559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.565199][T17559] RSP: 002b:00007f7fa70b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1005.565216][T17559] RAX: ffffffffffffffda RBX: 00007f7fa63b6080 RCX: 00007f7fa618e929 [ 1005.565228][T17559] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1005.565239][T17559] RBP: 00007f7fa6210b39 R08: 0000000000000004 R09: 0000000000000000 [ 1005.565256][T17559] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.565267][T17559] R13: 0000000000000000 R14: 00007f7fa63b6080 R15: 00007ffe19c37a98 [ 1005.565295][T17559] [ 1005.565308][T17559] Mem-Info: [ 1005.835679][T17559] active_anon:8249 inactive_anon:0 isolated_anon:0 [ 1005.835679][T17559] active_file:19446 inactive_file:40945 isolated_file:0 [ 1005.835679][T17559] unevictable:768 dirty:220 writeback:0 [ 1005.835679][T17559] slab_reclaimable:12121 slab_unreclaimable:105179 [ 1005.835679][T17559] mapped:32815 shmem:5204 pagetables:1079 [ 1005.835679][T17559] sec_pagetables:0 bounce:0 [ 1005.835679][T17559] kernel_misc_reclaimable:0 [ 1005.835679][T17559] free:1292591 free_pcp:14126 free_cma:0 [ 1005.881105][T17559] Node 0 active_anon:32996kB inactive_anon:0kB active_file:77784kB inactive_file:163576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131260kB dirty:880kB writeback:0kB shmem:19280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1005.914603][T17559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1005.946749][T17559] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.976154][T17559] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1005.982112][T17559] Node 0 DMA32 free:1259896kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32980kB inactive_anon:0kB active_file:77784kB inactive_file:162252kB unevictable:1536kB writepending:880kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:36080kB local_pcp:22036kB free_cma:0kB [ 1006.014405][T17559] lowmem_reserve[]: 0 0 1 1 1 [ 1006.019254][T17559] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 1006.049171][T17559] lowmem_reserve[]: 0 0 0 0 0 [ 1006.054643][T17559] Node 1 Normal free:3895128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20392kB local_pcp:8704kB free_cma:0kB [ 1006.085831][T17559] lowmem_reserve[]: 0 0 0 0 0 [ 1006.090667][T17559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1006.105262][T17559] Node 0 DMA32: 1044*4kB (UME) 85*8kB (UE) 380*16kB (UME) 624*32kB (UME) 437*64kB (UME) 145*128kB (UME) 85*256kB (ME) 39*512kB (UM) 36*1024kB (UME) 21*2048kB (UM) 259*4096kB (UM) = 1259896kB [ 1006.124746][T17559] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1006.138176][T17559] Node 1 Normal: 192*4kB (U) 41*8kB (UME) 39*16kB (UME) 79*32kB (UME) 33*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895128kB [ 1006.157292][T17559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.166895][T17559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1006.176220][T17559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.185838][T17559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1006.195166][T17559] 65591 total pagecache pages [ 1006.199868][T17559] 0 pages in swap cache [ 1006.204016][T17559] Free swap = 124996kB [ 1006.208165][T17559] Total swap = 124996kB [ 1006.212334][T17559] 2097051 pages RAM [ 1006.216158][T17559] 0 pages HighMem/MovableOnly [ 1006.220872][T17559] 430054 pages reserved [ 1006.225041][T17559] 0 pages cma reserved [ 1006.382956][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1006.490789][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1006.500277][ T24] usb 4-1: config 2 has an invalid interface number: 210 but max is 0 [ 1006.532405][ T24] usb 4-1: config 2 has no interface number 0 [ 1006.538503][ T24] usb 4-1: config 2 interface 210 has no altsetting 0 [ 1006.643223][ T24] usb 4-1: New USB device found, idVendor=19d2, idProduct=0133, bcdDevice= 3.71 [ 1006.666943][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.816964][ T24] usb 4-1: Product: syz [ 1006.855647][ T24] usb 4-1: Manufacturer: ⯵厊訷巓퓣虐뻸崜쏚 [ 1006.892904][ T24] usb 4-1: SerialNumber: syz [ 1007.669269][ T24] usb 4-1: can't set config #2, error -71 [ 1007.694176][ T24] usb 4-1: USB disconnect, device number 63 [ 1008.217441][ T30] audit: type=1400 audit(1752565877.598:481): avc: denied { nlmsg_read } for pid=17584 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1008.237985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.189890][T15980] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1009.349827][T15980] usb 5-1: Using ep0 maxpacket: 16 [ 1009.376243][T15980] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1009.395874][T15980] usb 5-1: config 0 has no interface number 0 [ 1009.432304][T15980] usb 5-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 1009.443719][T15980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.460718][T15980] usb 5-1: Product: syz [ 1009.474204][T15980] usb 5-1: Manufacturer: syz [ 1009.487647][T15980] usb 5-1: SerialNumber: syz [ 1009.510842][T15980] usb 5-1: config 0 descriptor?? [ 1009.533383][T15980] ftdi_sio 5-1:0.41: FTDI USB Serial Device converter detected [ 1009.551942][T15980] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 1009.699873][ T5945] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1009.759862][ T5906] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1009.813632][T15980] usb 5-1: USB disconnect, device number 60 [ 1009.834929][T15980] ftdi_sio 5-1:0.41: device disconnected [ 1009.860094][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 1009.912928][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1009.937318][ T5945] usb 2-1: config 2 has an invalid interface number: 210 but max is 0 [ 1009.945024][ T5906] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1009.955748][ T5945] usb 2-1: config 2 has no interface number 0 [ 1009.977655][ T5945] usb 2-1: config 2 interface 210 has no altsetting 0 [ 1009.978185][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.013204][ T5945] usb 2-1: string descriptor 0 read error: -22 [ 1010.034917][ T5945] usb 2-1: New USB device found, idVendor=19d2, idProduct=0133, bcdDevice= 3.71 [ 1010.076824][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.088876][ T5906] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1010.115723][ T5945] usb 2-1: Found UVC 0.00 device (19d2:0133) [ 1010.129839][ T5906] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1010.143153][ T5945] usb 2-1: No valid video chain found. [ 1010.166579][ T5906] usb 1-1: Manufacturer: syz [ 1010.200727][ T5906] usb 1-1: config 0 descriptor?? [ 1010.309818][ T5906] rc_core: IR keymap rc-hauppauge not found [ 1010.315785][ T5906] Registered IR keymap rc-empty [ 1010.321448][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1010.339582][T15980] usb 2-1: USB disconnect, device number 71 [ 1010.376296][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52 [ 1010.551698][ T30] audit: type=1400 audit(1752565879.948:482): avc: denied { write } for pid=17619 comm="syz.4.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1010.984583][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1011.000145][ T5906] usb 1-1: USB disconnect, device number 52 [ 1011.629803][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1011.661315][ T5906] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1011.824542][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.948605][ T5906] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1012.180774][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.190919][ T5906] usb 2-1: config 0 descriptor?? [ 1012.219854][ T24] usb 6-1: device descriptor read/64, error -71 [ 1012.461520][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1012.533293][T17662] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 1012.599932][ T24] usb 6-1: device descriptor read/64, error -71 [ 1012.616520][ T5906] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1012.663392][ T5906] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input53 [ 1012.756527][ T24] usb usb6-port1: attempt power cycle [ 1013.314388][ T5906] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1013.332902][ T5906] usb 2-1: USB disconnect, device number 72 [ 1013.547979][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1013.600835][ T24] usb 6-1: device descriptor read/8, error -71 [ 1014.779906][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1014.991524][ T24] usb 6-1: device not accepting address 31, error -71 [ 1015.008216][ T24] usb usb6-port1: unable to enumerate USB device [ 1015.145542][ T30] audit: type=1400 audit(1752565884.598:483): avc: denied { connect } for pid=17681 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1015.217290][ T30] audit: type=1400 audit(1752565884.598:484): avc: denied { write } for pid=17681 comm="syz.5.3659" path="socket:[58652]" dev="sockfs" ino=58652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1015.500804][ T30] audit: type=1400 audit(1752565884.968:485): avc: denied { create } for pid=17690 comm="syz.0.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1015.652062][ T30] audit: type=1400 audit(1752565885.088:486): avc: denied { accept } for pid=17690 comm="syz.0.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1016.246992][T17701] Driver unsupported XDP return value 0 on prog (id 749) dev N/A, expect packet loss! [ 1016.459878][ T55] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1017.252301][ T55] usb 2-1: device descriptor read/64, error -71 [ 1017.509893][ T55] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1018.189841][ T55] usb 2-1: device descriptor read/64, error -71 [ 1018.300438][ T55] usb usb2-port1: attempt power cycle [ 1019.045407][T15980] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1019.053083][ T55] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1019.123656][ T55] usb 2-1: device descriptor read/8, error -71 [ 1019.249940][T15980] usb 4-1: Using ep0 maxpacket: 16 [ 1019.273318][T15980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1019.443172][T15980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1019.518733][T15980] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1019.542473][T15980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.565743][T15980] usb 4-1: Product: syz [ 1019.579832][T15980] usb 4-1: Manufacturer: syz [ 1019.594220][T15980] usb 4-1: SerialNumber: syz [ 1019.602729][T15980] usb 4-1: config 0 descriptor?? [ 1019.621179][T15980] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1019.642547][T15980] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1020.356958][T15980] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1020.448231][T15980] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1021.246674][T15980] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1021.409820][ T55] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1021.455395][T15980] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1021.472441][T15980] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1021.489134][T15980] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1021.506584][T15980] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1021.513434][T15980] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1021.529091][T15980] usb 4-1: USB disconnect, device number 64 [ 1021.623344][ T55] usb 1-1: device descriptor read/64, error -71 [ 1021.773525][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 1021.799958][ T24] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1021.869992][ T55] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1021.981074][ T24] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1022.027901][ T24] usb 2-1: config 0 has no interface number 0 [ 1022.041175][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1022.058967][ T55] usb 1-1: device descriptor read/64, error -71 [ 1022.187212][ T55] usb usb1-port1: attempt power cycle [ 1022.204513][ T30] audit: type=1800 audit(1752565891.628:487): pid=17775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3692" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1022.210033][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.236209][ T24] usb 2-1: Product: syz [ 1022.240445][ T24] usb 2-1: Manufacturer: syz [ 1022.245174][ T24] usb 2-1: SerialNumber: syz [ 1022.252147][ T24] usb 2-1: config 0 descriptor?? [ 1022.662009][ T24] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 1022.949866][ T55] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1023.195993][ T24] usb 2-1: failed to fetch extended address, random address set [ 1023.240162][ T55] usb 1-1: device descriptor read/8, error -71 [ 1023.484280][ T24] usb 2-1: USB disconnect, device number 77 [ 1023.520116][ T55] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1023.903546][ T55] usb 1-1: device descriptor read/8, error -71 [ 1024.019847][T11452] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1024.020011][ T55] usb usb1-port1: unable to enumerate USB device [ 1024.179877][T11452] usb 5-1: Using ep0 maxpacket: 16 [ 1024.187631][T11452] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1024.851209][T11452] usb 5-1: config 0 has no interface number 0 [ 1024.940998][T11452] usb 5-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 1025.761835][T11452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.862699][T11452] usb 5-1: Product: syz [ 1025.866921][T11452] usb 5-1: Manufacturer: syz [ 1025.871598][T11452] usb 5-1: SerialNumber: syz [ 1025.878279][T11452] usb 5-1: config 0 descriptor?? [ 1025.885309][T11452] ftdi_sio 5-1:0.41: FTDI USB Serial Device converter detected [ 1025.893784][T11452] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 1025.986914][ T30] audit: type=1800 audit(1752565895.448:488): pid=17823 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3708" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1026.094866][T17826] random: crng reseeded on system resumption [ 1027.163545][ T24] usb 5-1: USB disconnect, device number 61 [ 1027.176868][ T24] ftdi_sio 5-1:0.41: device disconnected [ 1027.268091][T17835] affs: No valid root block on device nullb0 [ 1027.939944][ T55] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1028.322342][ T55] usb 1-1: device descriptor read/64, error -71 [ 1029.219816][ T55] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1029.531355][ T55] usb 1-1: device descriptor read/64, error -71 [ 1029.692310][ T55] usb usb1-port1: attempt power cycle [ 1030.029973][ T55] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1030.050608][ T55] usb 1-1: device descriptor read/8, error -71 [ 1030.349953][ T55] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1030.385722][ T55] usb 1-1: device descriptor read/8, error -71 [ 1030.530511][ T55] usb usb1-port1: unable to enumerate USB device [ 1030.756784][T17885] No buffer was provided with the request [ 1030.871517][ T5144] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1031.031084][T17890] syz.3.3732: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1031.045831][T17890] CPU: 0 UID: 0 PID: 17890 Comm: syz.3.3732 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1031.045858][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1031.045869][T17890] Call Trace: [ 1031.045875][T17890] [ 1031.045883][T17890] dump_stack_lvl+0x16c/0x1f0 [ 1031.045916][T17890] warn_alloc+0x248/0x3a0 [ 1031.045942][T17890] ? __pfx_warn_alloc+0x10/0x10 [ 1031.045965][T17890] ? __pfx_stack_trace_save+0x10/0x10 [ 1031.045990][T17890] ? stack_depot_save_flags+0x28/0xa40 [ 1031.046025][T17890] ? kasan_save_stack+0x42/0x60 [ 1031.046050][T17890] ? kasan_save_stack+0x33/0x60 [ 1031.046072][T17890] ? kasan_save_track+0x14/0x30 [ 1031.046097][T17890] ? xskq_create+0x52/0x1d0 [ 1031.046117][T17890] ? xsk_setsockopt+0x640/0x840 [ 1031.046136][T17890] ? do_sock_setsockopt+0x224/0x470 [ 1031.046166][T17890] ? xskq_create+0xfb/0x1d0 [ 1031.046184][T17890] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1031.046212][T17890] ? xskq_create+0xfb/0x1d0 [ 1031.046236][T17890] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1031.046262][T17890] ? xskq_create+0xfb/0x1d0 [ 1031.046284][T17890] vmalloc_user_noprof+0x9e/0xe0 [ 1031.046303][T17890] ? xskq_create+0xfb/0x1d0 [ 1031.046326][T17890] xskq_create+0xfb/0x1d0 [ 1031.046349][T17890] xsk_setsockopt+0x640/0x840 [ 1031.046370][T17890] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1031.046386][T17890] ? __lock_acquire+0x622/0x1c90 [ 1031.046409][T17890] ? selinux_socket_setsockopt+0x6a/0x80 [ 1031.046435][T17890] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1031.046456][T17890] do_sock_setsockopt+0x224/0x470 [ 1031.046484][T17890] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1031.046528][T17890] __sys_setsockopt+0x1a0/0x230 [ 1031.046558][T17890] __x64_sys_setsockopt+0xbd/0x160 [ 1031.046580][T17890] ? do_syscall_64+0x91/0x4c0 [ 1031.046605][T17890] ? lockdep_hardirqs_on+0x7c/0x110 [ 1031.046630][T17890] do_syscall_64+0xcd/0x4c0 [ 1031.046658][T17890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.046683][T17890] RIP: 0033:0x7f436938e929 [ 1031.046699][T17890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.046718][T17890] RSP: 002b:00007f436a19c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1031.046737][T17890] RAX: ffffffffffffffda RBX: 00007f43695b6080 RCX: 00007f436938e929 [ 1031.046750][T17890] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1031.046762][T17890] RBP: 00007f4369410b39 R08: 0000000000000004 R09: 0000000000000000 [ 1031.046774][T17890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.046786][T17890] R13: 0000000000000000 R14: 00007f43695b6080 R15: 00007ffd92230368 [ 1031.046812][T17890] [ 1031.046824][T17890] Mem-Info: [ 1031.176212][ T5144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1031.333726][T17890] active_anon:7302 inactive_anon:0 isolated_anon:0 [ 1031.333726][T17890] active_file:19446 inactive_file:40955 isolated_file:0 [ 1031.333726][T17890] unevictable:768 dirty:127 writeback:0 [ 1031.333726][T17890] slab_reclaimable:12104 slab_unreclaimable:103800 [ 1031.333726][T17890] mapped:32415 shmem:4270 pagetables:1068 [ 1031.333726][T17890] sec_pagetables:0 bounce:0 [ 1031.333726][T17890] kernel_misc_reclaimable:0 [ 1031.333726][T17890] free:1289475 free_pcp:19464 free_cma:0 [ 1031.379368][T17890] Node 0 active_anon:29268kB inactive_anon:0kB active_file:77784kB inactive_file:163616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129620kB dirty:544kB writeback:0kB shmem:15508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.481699][T17890] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.535705][T17890] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1031.593692][T17890] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1031.625694][T17890] Node 0 DMA32 free:1252512kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29308kB inactive_anon:0kB active_file:77784kB inactive_file:162292kB unevictable:1536kB writepending:544kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:52616kB local_pcp:35496kB free_cma:0kB [ 1031.675705][T17890] lowmem_reserve[]: 0 0 1 1 1 [ 1031.711696][T17890] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1031.752684][T17890] lowmem_reserve[]: 0 0 0 0 0 [ 1031.862203][ T5144] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1031.876007][ T5144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.894982][ T5144] usb 6-1: config 0 descriptor?? [ 1032.052862][T17890] Node 1 Normal free:3895128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20400kB local_pcp:8704kB free_cma:0kB [ 1032.294282][T17890] lowmem_reserve[]: 0 0 0 0 0 [ 1032.308920][T17890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1032.323013][ T5144] usbhid 6-1:0.0: can't add hid device: -71 [ 1032.323097][ T5144] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1032.421186][T17890] Node 0 DMA32: 2700*4kB (UME) 1763*8kB (UME) 941*16kB (UME) 688*32kB (UME) 379*64kB (ME) 104*128kB (ME) 36*256kB (ME) 38*512kB (UM) 34*1024kB (UME) 21*2048kB (UM) 259*4096kB (UM) = 1266904kB [ 1032.536149][T17890] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1032.608089][T17890] Node 1 Normal: 192*4kB (U) 41*8kB (UME) 39*16kB (UME) 79*32kB (UME) 33*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895128kB [ 1032.717935][T17890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.745497][T17890] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1032.774109][T17890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1032.814531][T17890] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1032.850757][T17890] 61777 total pagecache pages [ 1032.884310][T17890] 0 pages in swap cache [ 1032.906845][T17890] Free swap = 124996kB [ 1032.928755][T17890] Total swap = 124996kB [ 1032.975723][T17890] 2097051 pages RAM [ 1032.987468][ T5144] usb 6-1: USB disconnect, device number 32 [ 1033.009506][T17890] 0 pages HighMem/MovableOnly [ 1033.049068][T17890] 430054 pages reserved [ 1033.097879][T17890] 0 pages cma reserved [ 1034.119799][ T5144] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1034.269936][ T5144] usb 6-1: device descriptor read/64, error -71 [ 1034.960864][ T30] audit: type=1400 audit(1752565904.428:489): avc: denied { ioctl } for pid=17930 comm="syz.0.3749" path="socket:[59189]" dev="sockfs" ino=59189 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1034.989916][ T5945] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1034.998186][ T24] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1035.060307][ T5144] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1035.201260][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1035.218480][ T5945] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1035.252913][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 1035.266203][ T5144] usb 6-1: device descriptor read/64, error -71 [ 1035.278212][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.321051][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.351408][ T5945] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1035.384422][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1035.405105][ T5945] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1035.426064][ T5144] usb usb6-port1: attempt power cycle [ 1035.455068][ T5945] usb 2-1: Manufacturer: syz [ 1035.460656][ T24] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.529596][ T24] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1035.549526][ T5945] usb 2-1: config 0 descriptor?? [ 1035.712123][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.758163][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.804136][ T24] usb 5-1: Product: syz [ 1035.838704][ T24] usb 5-1: Manufacturer: syz [ 1035.870050][ T5144] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1035.877657][ T24] usb 5-1: SerialNumber: syz [ 1035.960903][ T5144] usb 6-1: device descriptor read/8, error -71 [ 1035.979808][ T5945] rc_core: IR keymap rc-hauppauge not found [ 1035.985934][ T5945] Registered IR keymap rc-empty [ 1035.996989][ T5945] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1036.025448][ T5945] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 1036.196911][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1036.203795][ T5144] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1036.220992][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 1036.253718][ T24] usb 5-1: selecting invalid altsetting 0 [ 1036.356479][ T5945] usb 2-1: USB disconnect, device number 78 [ 1036.800854][ T5144] usb 6-1: device descriptor read/8, error -71 [ 1036.816027][ T24] usb 5-1: USB disconnect, device number 62 [ 1036.997484][ T5144] usb usb6-port1: unable to enumerate USB device [ 1037.491924][T17961] No buffer was provided with the request [ 1037.551081][ T55] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1037.760883][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 1037.793896][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1037.817012][ T55] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1037.826716][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.839900][ T55] usb 1-1: Product: syz [ 1037.844090][ T55] usb 1-1: Manufacturer: syz [ 1037.848793][ T55] usb 1-1: SerialNumber: syz [ 1037.870319][ T55] usb 1-1: config 0 descriptor?? [ 1037.882203][ T55] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1037.892266][ T55] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1038.053297][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1038.220001][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1038.231212][ T24] usb 4-1: config 0 has no interfaces? [ 1038.242981][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1038.260098][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.269569][ T24] usb 4-1: Product: syz [ 1038.279939][ T24] usb 4-1: Manufacturer: syz [ 1038.302939][ T24] usb 4-1: SerialNumber: syz [ 1038.316734][ T24] usb 4-1: config 0 descriptor?? [ 1039.419375][ T55] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1039.759990][ T5144] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1039.978289][ T55] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1039.981529][ T5144] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1039.996138][ T5144] usb 5-1: not running at top speed; connect to a high speed hub [ 1039.997505][ T55] em28xx 1-1:0.0: board has no eeprom [ 1040.004824][ T5144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.020721][ T5144] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1040.033171][ T5144] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1040.046252][ T5144] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1040.059066][ T5144] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.068617][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.106499][ T5144] usb 5-1: Product: syz [ 1040.111252][ T5144] usb 5-1: Manufacturer: syz [ 1040.115923][ T5144] usb 5-1: SerialNumber: syz [ 1040.418054][ T5144] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1040.425066][ T5144] usb 5-1: selecting invalid altsetting 0 [ 1040.444054][ T5144] usb 5-1: USB disconnect, device number 63 [ 1040.640077][ T55] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1040.652882][ T55] em28xx 1-1:0.0: dvb set to bulk mode. [ 1040.659220][T15980] em28xx 1-1:0.0: Binding DVB extension [ 1040.740021][ T55] usb 1-1: USB disconnect, device number 61 [ 1040.748682][ T55] em28xx 1-1:0.0: Disconnecting em28xx [ 1040.757719][T15980] em28xx 1-1:0.0: Registering input extension [ 1040.764532][ T55] em28xx 1-1:0.0: Closing input extension [ 1040.776829][ T55] em28xx 1-1:0.0: Freeing device [ 1040.804564][T15980] usb 4-1: USB disconnect, device number 65 [ 1044.999138][ T4208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.020210][T15980] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1045.139418][T18077] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 1045.309787][T15980] usb 2-1: device descriptor read/64, error -71 [ 1046.089275][T18080] No buffer was provided with the request [ 1046.118521][ T4208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.215109][ T4208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.250281][T15980] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1046.273841][T16546] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1046.286904][T16546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1046.297115][T16546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1046.315384][T16546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1046.325357][T16546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.336719][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1046.345400][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1046.352579][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1046.360195][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1046.367698][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.481402][T15980] usb 2-1: device descriptor read/64, error -71 [ 1046.522750][ T4208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.572580][T18081] lo speed is unknown, defaulting to 1000 [ 1046.590120][T15980] usb usb2-port1: attempt power cycle [ 1046.734323][ T4208] bridge_slave_1: left allmulticast mode [ 1046.758871][ T4208] bridge_slave_1: left promiscuous mode [ 1046.780014][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.813679][ T4208] bridge_slave_0: left allmulticast mode [ 1046.819991][ T4208] bridge_slave_0: left promiscuous mode [ 1046.838021][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.949807][T15980] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1047.030244][T15980] usb 2-1: device descriptor read/8, error -71 [ 1048.402544][T16546] Bluetooth: hci1: command tx timeout [ 1048.777064][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.814733][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.866406][ T4208] bond0 (unregistering): Released all slaves [ 1050.385736][ T30] audit: type=1400 audit(1752565919.758:490): avc: denied { create } for pid=18118 comm="syz.3.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1050.464257][T16546] Bluetooth: hci1: command tx timeout [ 1052.298144][ T5906] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1052.309281][T18081] chnl_net:caif_netlink_parms(): no params data found [ 1052.429834][ T5906] usb 5-1: device descriptor read/64, error -71 [ 1052.540004][T16546] Bluetooth: hci1: command tx timeout [ 1052.712772][ T4208] hsr_slave_0: left promiscuous mode [ 1052.721911][ T4208] hsr_slave_1: left promiscuous mode [ 1052.731614][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.748303][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.755518][ T5906] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1052.774994][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.787394][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.810858][ T4208] veth1_macvtap: left promiscuous mode [ 1052.816481][ T4208] veth0_macvtap: left promiscuous mode [ 1052.823297][ T4208] veth1_vlan: left promiscuous mode [ 1052.829556][ T4208] veth0_vlan: left promiscuous mode [ 1052.949889][ T5906] usb 5-1: device descriptor read/64, error -71 [ 1053.666910][ T5906] usb usb5-port1: attempt power cycle [ 1054.006349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.305180][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.620073][T16546] Bluetooth: hci1: command tx timeout [ 1057.025828][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 1057.034564][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1057.077857][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 1057.981310][T18200] netlink: 'syz.3.3830': attribute type 3 has an invalid length. [ 1057.989111][T18200] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 1057.997071][T18200] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3830'. [ 1058.006465][T18200] NCSI netlink: No device for ifindex 33022 [ 1058.030462][T18200] hub 8-0:1.0: USB hub found [ 1058.036797][T18200] hub 8-0:1.0: 1 port detected [ 1058.507567][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.517929][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.528507][T18081] bridge_slave_0: entered allmulticast mode [ 1058.539518][T18081] bridge_slave_0: entered promiscuous mode [ 1058.706081][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.713311][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.724203][T18081] bridge_slave_1: entered allmulticast mode [ 1058.741059][T18081] bridge_slave_1: entered promiscuous mode [ 1058.843105][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.866223][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.339066][T18081] team0: Port device team_slave_0 added [ 1059.434791][T18081] team0: Port device team_slave_1 added [ 1060.249780][ T5906] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1060.366089][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.439572][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.480765][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.640804][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1060.649189][ T5906] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1060.651019][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.657363][ T5906] usb 2-1: config 0 has no interface number 0 [ 1060.670215][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.670252][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.741865][T18239] netlink: 'syz.5.3843': attribute type 3 has an invalid length. [ 1060.749629][T18239] netlink: 'syz.5.3843': attribute type 1 has an invalid length. [ 1060.757396][T18239] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3843'. [ 1060.766453][T18239] NCSI netlink: No device for ifindex 33022 [ 1060.786246][T18239] hub 8-0:1.0: USB hub found [ 1060.791902][T18239] hub 8-0:1.0: 1 port detected [ 1061.199009][ T5906] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 1061.208338][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.228022][ T5906] usb 2-1: Product: syz [ 1061.231446][T18081] hsr_slave_0: entered promiscuous mode [ 1061.238868][T18081] hsr_slave_1: entered promiscuous mode [ 1061.248631][ T4208] IPVS: stop unused estimator thread 0... [ 1061.259582][ T5906] usb 2-1: Manufacturer: syz [ 1061.273554][ T5906] usb 2-1: SerialNumber: syz [ 1061.280051][T11375] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1061.299038][ T5906] usb 2-1: config 0 descriptor?? [ 1061.311512][ T5906] ftdi_sio 2-1:0.41: FTDI USB Serial Device converter detected [ 1061.411037][ T5906] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 1061.481145][T11375] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.501529][T11375] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1061.530799][T11375] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1061.545719][T11375] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1061.571857][T11375] usb 5-1: Product: syz [ 1061.595087][T11375] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.604014][ T24] usb 2-1: USB disconnect, device number 83 [ 1061.611105][T11375] usb 5-1: invalid MIDI out EP 0 [ 1061.611185][ T24] ftdi_sio 2-1:0.41: device disconnected [ 1061.633281][T18081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1061.657509][T18081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1061.674002][T18081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1061.693111][T18081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1061.724129][T11375] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1061.785254][T18081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.815877][T18081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.817631][T11375] usb 5-1: USB disconnect, device number 67 [ 1061.847222][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.854352][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.868138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.875259][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.157252][T18081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.630059][ T55] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1063.070009][ T55] usb 6-1: device descriptor read/64, error -71 [ 1063.309844][ T55] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1063.947414][T18081] veth0_vlan: entered promiscuous mode [ 1063.962625][T18081] veth1_vlan: entered promiscuous mode [ 1063.999211][T18081] veth0_macvtap: entered promiscuous mode [ 1064.008675][T18081] veth1_macvtap: entered promiscuous mode [ 1064.031101][T18081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.059790][ T55] usb 6-1: device descriptor read/64, error -71 [ 1064.067089][T18081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.101904][T18081] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.120323][T18081] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.130859][T18081] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.142400][T18081] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.170084][ T55] usb usb6-port1: attempt power cycle [ 1064.292687][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.588317][ T55] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1064.722655][ T55] usb 6-1: device descriptor read/8, error -71 [ 1065.020263][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.050921][ T55] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1065.243749][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.291263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.319922][ T55] usb 6-1: device not accepting address 40, error -71 [ 1065.340507][ T55] usb usb6-port1: unable to enumerate USB device [ 1065.376655][ T30] audit: type=1400 audit(1752565934.838:491): avc: denied { mounton } for pid=18081 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1065.760153][T11375] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1065.782462][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1065.850047][ T5906] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1065.930464][T11375] usb 4-1: Using ep0 maxpacket: 16 [ 1065.948970][T11375] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1065.995591][T11375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1066.054038][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1066.088211][T11375] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1066.139100][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1066.153828][T11375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.218076][T11375] usb 4-1: Product: syz [ 1066.236270][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1066.278118][T11375] usb 4-1: Manufacturer: syz [ 1066.306255][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.323006][T11375] usb 4-1: SerialNumber: syz [ 1066.403045][ T5906] usb 2-1: Product: syz [ 1066.438534][T11375] usb 4-1: config 0 descriptor?? [ 1066.466655][ T5906] usb 2-1: Manufacturer: syz [ 1066.535883][ T5906] usb 2-1: SerialNumber: syz [ 1066.559141][T11375] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1066.675080][T11375] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1066.690324][ T5906] usb 2-1: config 0 descriptor?? [ 1066.847546][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1066.901859][ T5906] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1067.696120][ T5906] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1067.702170][T11375] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1067.713682][T11375] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1067.834093][T18345] warn_alloc: 1 callbacks suppressed [ 1067.839565][T18345] syz.4.3871: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1067.855611][T18345] CPU: 0 UID: 0 PID: 18345 Comm: syz.4.3871 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1067.855639][T18345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1067.855651][T18345] Call Trace: [ 1067.855658][T18345] [ 1067.855665][T18345] dump_stack_lvl+0x16c/0x1f0 [ 1067.855700][T18345] warn_alloc+0x248/0x3a0 [ 1067.855728][T18345] ? __pfx_warn_alloc+0x10/0x10 [ 1067.855750][T18345] ? __pfx_stack_trace_save+0x10/0x10 [ 1067.855778][T18345] ? stack_depot_save_flags+0x28/0xa40 [ 1067.855811][T18345] ? kasan_save_stack+0x42/0x60 [ 1067.855833][T18345] ? kasan_save_stack+0x33/0x60 [ 1067.855856][T18345] ? kasan_save_track+0x14/0x30 [ 1067.855881][T18345] ? xskq_create+0x52/0x1d0 [ 1067.855902][T18345] ? xsk_setsockopt+0x640/0x840 [ 1067.855921][T18345] ? do_sock_setsockopt+0x224/0x470 [ 1067.855952][T18345] ? xskq_create+0xfb/0x1d0 [ 1067.855975][T18345] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1067.856005][T18345] ? xskq_create+0xfb/0x1d0 [ 1067.856034][T18345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1067.856065][T18345] ? xskq_create+0xfb/0x1d0 [ 1067.856088][T18345] vmalloc_user_noprof+0x9e/0xe0 [ 1067.856108][T18345] ? xskq_create+0xfb/0x1d0 [ 1067.856141][T18345] xskq_create+0xfb/0x1d0 [ 1067.856166][T18345] xsk_setsockopt+0x640/0x840 [ 1067.856188][T18345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1067.856208][T18345] ? __lock_acquire+0x622/0x1c90 [ 1067.856233][T18345] ? selinux_socket_setsockopt+0x6a/0x80 [ 1067.856259][T18345] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1067.856282][T18345] do_sock_setsockopt+0x224/0x470 [ 1067.856311][T18345] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1067.856356][T18345] __sys_setsockopt+0x1a0/0x230 [ 1067.856385][T18345] __x64_sys_setsockopt+0xbd/0x160 [ 1067.856408][T18345] ? do_syscall_64+0x91/0x4c0 [ 1067.856439][T18345] ? lockdep_hardirqs_on+0x7c/0x110 [ 1067.856463][T18345] do_syscall_64+0xcd/0x4c0 [ 1067.856491][T18345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.856510][T18345] RIP: 0033:0x7f29c138e929 [ 1067.856524][T18345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.856542][T18345] RSP: 002b:00007f29c220f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1067.856559][T18345] RAX: ffffffffffffffda RBX: 00007f29c15b6080 RCX: 00007f29c138e929 [ 1067.856573][T18345] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1067.856584][T18345] RBP: 00007f29c1410b39 R08: 0000000000000004 R09: 0000000000000000 [ 1067.856596][T18345] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.856608][T18345] R13: 0000000000000000 R14: 00007f29c15b6080 R15: 00007ffd7223f538 [ 1067.856634][T18345] [ 1068.123943][T18345] Mem-Info: [ 1068.127167][T18345] active_anon:19751 inactive_anon:0 isolated_anon:0 [ 1068.127167][T18345] active_file:19463 inactive_file:40971 isolated_file:0 [ 1068.127167][T18345] unevictable:768 dirty:144 writeback:0 [ 1068.127167][T18345] slab_reclaimable:12266 slab_unreclaimable:101246 [ 1068.127167][T18345] mapped:41090 shmem:16642 pagetables:1162 [ 1068.127167][T18345] sec_pagetables:0 bounce:0 [ 1068.127167][T18345] kernel_misc_reclaimable:0 [ 1068.127167][T18345] free:1281441 free_pcp:17290 free_cma:0 [ 1068.173609][T18345] Node 0 active_anon:79004kB inactive_anon:0kB active_file:77852kB inactive_file:163680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164360kB dirty:576kB writeback:0kB shmem:65032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11940kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1068.220080][T18345] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1068.251671][T18345] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1068.280583][T18345] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1068.286505][T18345] Node 0 DMA32 free:1215296kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78988kB inactive_anon:0kB active_file:77852kB inactive_file:162356kB unevictable:1536kB writepending:572kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:48588kB local_pcp:32872kB free_cma:0kB [ 1068.325640][T18345] lowmem_reserve[]: 0 0 1 1 1 [ 1068.330629][T18345] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1068.359795][T18345] lowmem_reserve[]: 0 0 0 0 0 [ 1068.365148][T18345] Node 1 Normal free:3895128kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20496kB local_pcp:11728kB free_cma:0kB [ 1068.396971][T18345] lowmem_reserve[]: 0 0 0 0 0 [ 1068.402460][T18345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1068.417026][T18345] Node 0 DMA32: 336*4kB (UE) 268*8kB (UME) 66*16kB (UE) 210*32kB (UE) 331*64kB (UME) 205*128kB (UME) 78*256kB (UM) 40*512kB (UME) 18*1024kB (UME) 18*2048kB (UM) 259*4096kB (UM) = 1215296kB [ 1068.438483][T18345] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1068.451997][T18345] Node 1 Normal: 192*4kB (U) 41*8kB (UME) 39*16kB (UME) 79*32kB (UME) 33*64kB (UME) 5*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895128kB [ 1068.472048][T18345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.488078][T11375] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1068.512297][T11375] em28xx 4-1:0.0: No AC97 audio processor [ 1068.529784][T18345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1068.539784][T18345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1068.558889][T18345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1068.638756][T18345] 77522 total pagecache pages [ 1068.670118][T18345] 0 pages in swap cache [ 1068.983507][ T5906] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1069.044433][ T5906] em28xx 2-1:0.0: board has no eeprom [ 1069.222267][T18345] Free swap = 124996kB [ 1069.226490][T18345] Total swap = 124996kB [ 1069.239932][T18345] 2097051 pages RAM [ 1069.259066][T18345] 0 pages HighMem/MovableOnly [ 1069.288144][T18345] 430054 pages reserved [ 1069.308487][T18345] 0 pages cma reserved [ 1070.149808][ T5906] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1070.154219][ T24] usb 4-1: USB disconnect, device number 66 [ 1070.157631][ T5906] em28xx 2-1:0.0: dvb set to bulk mode. [ 1070.158284][ T5940] em28xx 2-1:0.0: Binding DVB extension [ 1070.181891][ T5906] usb 2-1: USB disconnect, device number 84 [ 1070.197238][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 1070.202321][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 1070.266835][ T5940] em28xx 2-1:0.0: Registering input extension [ 1070.335689][ T5906] em28xx 2-1:0.0: Closing input extension [ 1070.336356][ T24] em28xx 4-1:0.0: Freeing device [ 1070.361077][ T5906] em28xx 2-1:0.0: Freeing device [ 1074.019967][ T5953] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1074.030838][ T5906] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1074.161033][ T5940] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1074.220141][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 1074.226834][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1074.255605][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1074.303506][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1074.327975][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.329767][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1074.349040][ T5953] usb 5-1: Product: syz [ 1074.351126][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1074.364660][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1074.365832][ T5953] usb 5-1: Manufacturer: syz [ 1074.373834][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.409446][ T5953] usb 5-1: SerialNumber: syz [ 1074.558554][ T5953] usb 5-1: config 0 descriptor?? [ 1074.695048][ T5953] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1074.821802][ T5953] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1074.834293][ T5906] usb 2-1: Product: syz [ 1074.838468][ T5906] usb 2-1: Manufacturer: syz [ 1074.843323][ T5906] usb 2-1: SerialNumber: syz [ 1074.849812][ T5940] usb 6-1: Using ep0 maxpacket: 32 [ 1074.856694][ T5940] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.870655][ T5906] usb 2-1: config 0 descriptor?? [ 1074.880793][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1074.899747][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1074.906588][ T5940] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1074.915899][ T5906] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1074.922159][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.932898][ T5940] usb 6-1: config 0 descriptor?? [ 1075.194636][T18412] usb usb8: usbfs: process 18412 (syz.3.3895) did not claim interface 0 before use [ 1075.348415][ T5940] usbhid 6-1:0.0: can't add hid device: -71 [ 1075.355766][ T5940] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1075.378509][ T5940] usb 6-1: USB disconnect, device number 41 [ 1075.407978][ T5953] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1075.414605][ T5953] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1075.844746][ T5953] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1075.922738][ T5906] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1075.945451][ T5953] em28xx 5-1:0.0: No AC97 audio processor [ 1076.741742][ T5906] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1076.751960][ T5906] em28xx 2-1:0.0: board has no eeprom [ 1076.894149][T18438] netlink: 'syz.6.3901': attribute type 3 has an invalid length. [ 1076.902077][T18438] netlink: 'syz.6.3901': attribute type 1 has an invalid length. [ 1076.909897][T18438] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3901'. [ 1076.918988][T18438] NCSI netlink: No device for ifindex 33022 [ 1077.279905][ T5906] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1077.292360][T15980] usb 5-1: USB disconnect, device number 68 [ 1077.304337][T15980] em28xx 5-1:0.0: Disconnecting em28xx [ 1077.310793][ T5906] em28xx 2-1:0.0: dvb set to bulk mode. [ 1077.411873][T11375] em28xx 2-1:0.0: Binding DVB extension [ 1077.439949][ T5906] usb 2-1: USB disconnect, device number 85 [ 1077.446840][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 1077.662156][T11375] em28xx 2-1:0.0: Registering input extension [ 1077.676210][ T5906] em28xx 2-1:0.0: Closing input extension [ 1077.683162][T15980] em28xx 5-1:0.0: Freeing device [ 1077.697100][ T5906] em28xx 2-1:0.0: Freeing device [ 1078.579934][T15980] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1078.866248][T18475] netlink: 'syz.4.3916': attribute type 3 has an invalid length. [ 1078.875414][T18475] netlink: 'syz.4.3916': attribute type 1 has an invalid length. [ 1078.883172][T18475] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3916'. [ 1078.892203][T18475] NCSI netlink: No device for ifindex 33022 [ 1079.553894][T15980] usb 2-1: Using ep0 maxpacket: 16 [ 1079.666358][T15980] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1079.686660][T15980] usb 2-1: config 0 has no interface number 0 [ 1079.705612][T15980] usb 2-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=b5.85 [ 1079.725196][T15980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.742273][T15980] usb 2-1: Product: syz [ 1079.747435][T15980] usb 2-1: Manufacturer: syz [ 1079.759459][T15980] usb 2-1: SerialNumber: syz [ 1079.782021][T15980] usb 2-1: config 0 descriptor?? [ 1079.788897][T15980] ftdi_sio 2-1:0.41: FTDI USB Serial Device converter detected [ 1079.808040][T15980] ftdi_sio ttyUSB0: unknown device type: 0xb585 [ 1079.929794][ T5953] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1080.073340][T11375] usb 2-1: USB disconnect, device number 86 [ 1080.084347][T18498] usb usb8: usbfs: process 18498 (syz.5.3927) did not claim interface 0 before use [ 1080.088494][T11375] ftdi_sio 2-1:0.41: device disconnected [ 1080.118523][ T5953] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1080.127861][ T5953] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1080.148195][ T5953] usb 5-1: can't read configurations, error -71 [ 1081.706435][T18515] hub 8-0:1.0: USB hub found [ 1081.719907][T18515] hub 8-0:1.0: 1 port detected [ 1082.218282][T18516] can0: slcan on ptm0. [ 1082.503881][T18508] can0 (unregistered): slcan off ptm0. [ 1084.209971][T11375] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1084.545781][ T30] audit: type=1400 audit(1752565954.008:492): avc: denied { setopt } for pid=18554 comm="syz.3.3946" lport=60439 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1084.673688][T18557] hub 8-0:1.0: USB hub found [ 1084.680865][T18557] hub 8-0:1.0: 1 port detected [ 1085.139550][T11375] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1085.231837][T11375] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1085.239434][T11375] usb 7-1: can't read configurations, error -71 [ 1085.787952][T18568] rdma_rxe: rxe_newlink: failed to add lo [ 1089.067823][T18601] netlink: 'syz.4.3958': attribute type 21 has an invalid length. [ 1089.122607][T18603] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 1089.400249][T18601] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1089.597478][T18603] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1091.273316][T18626] hub 8-0:1.0: USB hub found [ 1091.278789][T18626] hub 8-0:1.0: 1 port detected [ 1091.742645][T18627] rdma_rxe: rxe_newlink: failed to add lo [ 1093.382058][T18647] netlink: 'syz.1.3973': attribute type 10 has an invalid length. [ 1093.507210][T18647] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1094.734043][T10590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.862441][T10590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.968961][T10590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.241519][T15980] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1095.241559][T10590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.419994][T15980] usb 7-1: Using ep0 maxpacket: 16 [ 1095.476112][T15980] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1095.606136][T15980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1095.709601][T15980] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1095.727381][T15980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.756515][T15980] usb 7-1: Product: syz [ 1095.771325][T15980] usb 7-1: Manufacturer: syz [ 1095.779899][T15980] usb 7-1: SerialNumber: syz [ 1095.890424][T15980] usb 7-1: config 0 descriptor?? [ 1095.901658][T15980] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1095.948527][T15980] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1096.138930][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1096.149387][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1096.152892][T10590] bridge_slave_1: left allmulticast mode [ 1096.169655][T18679] affs: No valid root block on device nullb0 [ 1096.282725][T18680] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 1096.514299][T15980] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1096.526598][T15980] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1096.593727][T10590] bridge_slave_1: left promiscuous mode [ 1096.599422][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.608718][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1096.643707][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1096.669241][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1096.678450][T10590] bridge_slave_0: left allmulticast mode [ 1096.696479][T10590] bridge_slave_0: left promiscuous mode [ 1096.720093][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.113016][T15980] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1097.246137][T15980] em28xx 7-1:0.0: No AC97 audio processor [ 1098.432558][ T5953] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1098.700138][ T5846] Bluetooth: hci2: command tx timeout [ 1098.711446][T11375] usb 7-1: USB disconnect, device number 4 [ 1098.720086][ T5953] usb 5-1: device descriptor read/64, error -71 [ 1098.735387][T11375] em28xx 7-1:0.0: Disconnecting em28xx [ 1098.752557][T11375] em28xx 7-1:0.0: Freeing device [ 1099.039909][ T5953] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1099.362327][ T5953] usb 5-1: device descriptor read/64, error -71 [ 1099.563865][ T5953] usb usb5-port1: attempt power cycle [ 1099.856252][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1099.866886][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1099.876911][T10590] bond0 (unregistering): Released all slaves [ 1099.913044][T18675] lo speed is unknown, defaulting to 1000 [ 1100.120689][ T5953] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1100.659777][ T5953] usb 5-1: device not accepting address 73, error -71 [ 1100.792558][ T5846] Bluetooth: hci2: command tx timeout [ 1101.500977][T18731] affs: No valid root block on device nullb0 [ 1102.254184][T10590] hsr_slave_0: left promiscuous mode [ 1102.277555][T10590] hsr_slave_1: left promiscuous mode [ 1102.470715][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.478309][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.486311][T10590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.515910][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.582950][T10590] veth1_macvtap: left promiscuous mode [ 1102.598618][T10590] veth0_macvtap: left promiscuous mode [ 1102.608832][T10590] veth1_vlan: left promiscuous mode [ 1102.616544][T10590] veth0_vlan: left promiscuous mode [ 1102.859796][ T5846] Bluetooth: hci2: command tx timeout [ 1104.099940][T18709] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1104.123078][ T30] audit: type=1400 audit(1752565973.588:493): avc: denied { name_connect } for pid=18767 comm="syz.3.4009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1104.143264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.394920][ T30] audit: type=1400 audit(1752565973.848:494): avc: denied { listen } for pid=18767 comm="syz.3.4009" lport=35879 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1104.448396][T18709] usb 5-1: device descriptor read/64, error -71 [ 1104.660411][ T30] audit: type=1400 audit(1752565973.888:495): avc: denied { accept } for pid=18767 comm="syz.3.4009" lport=35879 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1104.684038][ T30] audit: type=1400 audit(1752565973.928:496): avc: denied { getopt } for pid=18767 comm="syz.3.4009" lport=35879 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1104.707579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1104.899822][T18709] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1104.949313][ T5846] Bluetooth: hci2: command tx timeout [ 1105.053830][T11375] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1105.147345][T10590] team0 (unregistering): Port device team_slave_1 removed [ 1105.209844][T18709] usb 5-1: device descriptor read/64, error -71 [ 1105.217222][T10590] team0 (unregistering): Port device team_slave_0 removed [ 1105.229854][T11375] usb 2-1: Using ep0 maxpacket: 16 [ 1105.241173][T11375] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1105.272807][T11375] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1105.298128][T11375] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1105.312236][T11375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.330548][T18709] usb usb5-port1: attempt power cycle [ 1105.336040][T11375] usb 2-1: Product: syz [ 1105.344053][T11375] usb 2-1: Manufacturer: syz [ 1105.354613][T11375] usb 2-1: SerialNumber: syz [ 1105.372744][T11375] usb 2-1: config 0 descriptor?? [ 1105.387429][T11375] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1105.692088][T18709] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1105.931707][T18709] usb 5-1: device not accepting address 77, error -71 [ 1107.041489][T10590] IPVS: stop unused estimator thread 0... [ 1107.058303][T18675] chnl_net:caif_netlink_parms(): no params data found [ 1107.463283][T18675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.480213][T18675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.488500][T18823] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1107.655841][T11375] usb 2-1: USB disconnect, device number 87 [ 1107.680446][T18675] bridge_slave_0: entered allmulticast mode [ 1107.852162][T18675] bridge_slave_0: entered promiscuous mode [ 1108.979306][T18675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.016412][T18675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.043309][T18675] bridge_slave_1: entered allmulticast mode [ 1109.122642][T18675] bridge_slave_1: entered promiscuous mode [ 1109.314520][T18675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.337563][T18675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.566645][T18675] team0: Port device team_slave_0 added [ 1110.385349][T18675] team0: Port device team_slave_1 added [ 1110.552805][T18675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.566750][T18675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.592640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.644674][T18675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.661572][T18675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.672901][T18675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.701825][T18675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.762900][T18675] hsr_slave_0: entered promiscuous mode [ 1110.851323][T18675] hsr_slave_1: entered promiscuous mode [ 1110.857523][T18675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.865901][T18675] Cannot create hsr debugfs directory [ 1110.971128][ T5953] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1111.008977][ T30] audit: type=1400 audit(1752565980.468:497): avc: denied { setattr } for pid=18864 comm="syz.3.4036" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1111.051158][T18865] netfs: Couldn't get user pages (rc=-14) [ 1111.111257][T18675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1111.119871][ T5953] usb 7-1: Using ep0 maxpacket: 16 [ 1111.130487][ T5953] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1111.142213][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1111.155188][T18675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1111.164912][T18675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1111.172171][ T5953] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1111.182310][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.335113][ T5953] usb 7-1: Product: syz [ 1111.343401][T18675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1111.350494][ T5953] usb 7-1: Manufacturer: syz [ 1111.355122][ T5953] usb 7-1: SerialNumber: syz [ 1111.376022][ T5953] usb 7-1: config 0 descriptor?? [ 1111.386562][ T5953] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1111.818866][T18675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.856052][T18675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.904080][T15871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.911181][T15871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.942402][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.949519][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.308140][T18675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.465815][ T30] audit: type=1400 audit(1752565981.928:498): avc: denied { mounton } for pid=18894 comm="syz.4.4041" path="/178/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1112.488444][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.548786][ T30] audit: type=1400 audit(1752565981.968:499): avc: denied { read } for pid=18894 comm="syz.4.4041" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1112.581700][ T30] audit: type=1400 audit(1752565981.968:500): avc: denied { open } for pid=18894 comm="syz.4.4041" path="/178/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1112.615438][ T30] audit: type=1400 audit(1752565981.968:501): avc: denied { read } for pid=18894 comm="syz.4.4041" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1112.667107][ T30] audit: type=1400 audit(1752565981.968:502): avc: denied { read } for pid=18894 comm="syz.4.4041" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1112.688679][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.729443][T18675] veth0_vlan: entered promiscuous mode [ 1113.591350][ T30] audit: type=1400 audit(1752565981.978:503): avc: denied { bind } for pid=18894 comm="syz.4.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1113.638736][T18675] veth1_vlan: entered promiscuous mode [ 1113.698922][T18675] veth0_macvtap: entered promiscuous mode [ 1113.749959][T18675] veth1_macvtap: entered promiscuous mode [ 1113.856011][T18675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.882204][T11375] usb 7-1: USB disconnect, device number 5 [ 1113.911781][T18675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.936275][T18675] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.965310][T18675] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.989114][T18675] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.179763][T18675] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.724279][T10590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.767042][T10590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.835302][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.855180][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.169537][ T30] audit: type=1800 audit(1752565984.628:504): pid=18934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4052" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1115.420610][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.181539][T15873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.237281][T15873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.928265][T18960] affs: No valid root block on device nullb0 [ 1119.175331][ T30] audit: type=1400 audit(1752565988.628:505): avc: denied { read write } for pid=18990 comm="syz.6.4070" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1119.216668][T15980] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1119.246601][T15980] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1119.248621][ T30] audit: type=1400 audit(1752565988.638:506): avc: denied { open } for pid=18990 comm="syz.6.4070" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1120.835104][T19010] affs: No valid root block on device nullb0 [ 1121.162088][ T5144] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1121.519824][ T5144] usb 7-1: Using ep0 maxpacket: 16 [ 1121.526993][ T5144] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1121.542244][ T5144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1121.557057][ T5144] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1121.579984][ T5144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.602762][ T5144] usb 7-1: Product: syz [ 1121.638655][ T5144] usb 7-1: Manufacturer: syz [ 1121.658521][ T5144] usb 7-1: SerialNumber: syz [ 1121.671046][ T5144] usb 7-1: config 0 descriptor?? [ 1121.701970][ T5144] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1122.581627][ T5144] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1122.689029][ T5144] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1122.707243][ T5144] em28xx 7-1:0.0: Config register raw data: 0x00 [ 1123.412441][ T30] audit: type=1400 audit(1752565992.878:507): avc: denied { shutdown } for pid=19056 comm="syz.4.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1124.329467][ T5953] usb 7-1: USB disconnect, device number 6 [ 1124.361025][ T5953] em28xx 7-1:0.0: Disconnecting em28xx [ 1124.409344][ T5953] em28xx 7-1:0.0: Freeing device [ 1126.831044][T19101] affs: No valid root block on device nullb0 [ 1127.630021][ T30] audit: type=1400 audit(1752565996.738:508): avc: denied { mounton } for pid=19106 comm="syz.3.4095" path="/225/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1128.020297][ T30] audit: type=1400 audit(1752565997.478:509): avc: denied { unmount } for pid=15684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1128.119744][ T30] audit: type=1400 audit(1752565997.578:510): avc: denied { unmount } for pid=15684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1128.529886][T15980] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1128.830273][T15980] usb 2-1: Using ep0 maxpacket: 16 [ 1128.862353][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4101'. [ 1128.893565][T15980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1128.958977][T15980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.101054][T15980] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.110310][T15980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.129727][T15980] usb 2-1: Product: syz [ 1129.138354][T15980] usb 2-1: Manufacturer: syz [ 1129.159963][T15980] usb 2-1: SerialNumber: syz [ 1129.174431][T15980] usb 2-1: config 0 descriptor?? [ 1129.197239][T15980] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.216897][T15980] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1129.331698][ T30] audit: type=1800 audit(1752565998.798:511): pid=19135 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4104" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1130.055187][T10717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.218938][T19140] affs: No valid root block on device nullb0 [ 1130.352976][T10717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.370422][T15980] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1130.376904][T15980] em28xx 2-1:0.0: Config register raw data: 0x00 [ 1130.444511][T10717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.603581][T10717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.703179][T10717] bridge_slave_1: left allmulticast mode [ 1131.722120][T16546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1131.731179][T16546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1131.731993][ T5945] usb 2-1: USB disconnect, device number 88 [ 1131.742174][T10717] bridge_slave_1: left promiscuous mode [ 1131.745857][ T5945] em28xx 2-1:0.0: Disconnecting em28xx [ 1131.749783][T16546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1131.763284][ T5945] em28xx 2-1:0.0: Freeing device [ 1131.769769][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.779014][T10717] bridge_slave_0: left allmulticast mode [ 1131.798221][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4114'. [ 1131.814196][T10717] bridge_slave_0: left promiscuous mode [ 1131.824021][T16546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1131.831751][T16546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1131.851839][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.429033][T10717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.440232][T10717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.451029][T10717] bond0 (unregistering): Released all slaves [ 1132.489790][T11375] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1132.504860][T19161] lo speed is unknown, defaulting to 1000 [ 1132.549199][ T30] audit: type=1800 audit(1752566002.008:512): pid=19178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4118" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1132.696281][T11375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.856668][T11375] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1132.865904][T11375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.962694][T11375] usb 8-1: config 0 descriptor?? [ 1133.431698][T11375] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 1133.561182][T10717] hsr_slave_0: left promiscuous mode [ 1133.575734][T10717] hsr_slave_1: left promiscuous mode [ 1133.584527][T10717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.594598][T10717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.603488][T10717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.613787][T10717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.638266][T10717] veth1_macvtap: left promiscuous mode [ 1133.649310][T10717] veth0_macvtap: left promiscuous mode [ 1133.667533][T10717] veth1_vlan: left promiscuous mode [ 1133.680968][T10717] veth0_vlan: left promiscuous mode [ 1133.901263][ T5846] Bluetooth: hci0: command tx timeout [ 1134.123501][T10717] team0 (unregistering): Port device team_slave_1 removed [ 1134.159875][T10717] team0 (unregistering): Port device team_slave_0 removed [ 1134.184600][T11375] lenovo 0003:17EF:6047.000C: Sensitivity setting failed: -71 [ 1134.195674][T11375] usb 8-1: USB disconnect, device number 2 [ 1134.615029][T19161] chnl_net:caif_netlink_parms(): no params data found [ 1134.644831][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1135.675331][ T30] audit: type=1800 audit(1752566004.908:513): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4132" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1135.783479][T19161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.795323][T19161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.802655][T19161] bridge_slave_0: entered allmulticast mode [ 1135.809980][T19161] bridge_slave_0: entered promiscuous mode [ 1135.824892][T19161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.834347][T19161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.842208][T19161] bridge_slave_1: entered allmulticast mode [ 1135.849479][T19161] bridge_slave_1: entered promiscuous mode [ 1135.979789][ T5846] Bluetooth: hci0: command tx timeout [ 1136.034220][T10717] IPVS: stop unused estimator thread 0... [ 1136.527538][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.549642][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.684287][T19161] team0: Port device team_slave_0 added [ 1136.771459][T19161] team0: Port device team_slave_1 added [ 1136.985981][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.002823][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.034077][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.531873][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.538839][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.566928][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.621448][T19161] hsr_slave_0: entered promiscuous mode [ 1137.627785][T19161] hsr_slave_1: entered promiscuous mode [ 1137.633910][T19161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.641845][T19161] Cannot create hsr debugfs directory [ 1138.269930][ T5846] Bluetooth: hci0: command tx timeout [ 1138.830039][ T30] audit: type=1800 audit(1752566008.288:514): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4147" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1139.022384][T19278] rdma_rxe: rxe_newlink: failed to add lo [ 1139.113274][T19161] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1139.125795][T19161] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1139.258264][T19161] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1139.279204][T19161] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1139.839447][T19161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.859192][T19161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.883135][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.890285][T15873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.084020][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.091168][ T6191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.379822][ T5846] Bluetooth: hci0: command tx timeout [ 1140.799162][T19309] misc userio: The device must be registered before sending interrupts [ 1142.087471][T19161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.818589][T19161] veth0_vlan: entered promiscuous mode [ 1142.847950][T19161] veth1_vlan: entered promiscuous mode [ 1142.977128][T19348] rdma_rxe: rxe_newlink: failed to add lo [ 1143.083828][T19161] veth0_macvtap: entered promiscuous mode [ 1143.115565][T19161] veth1_macvtap: entered promiscuous mode [ 1143.521729][T19161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.557887][T19161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.577506][T19161] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.605807][T19161] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.614858][T19161] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.626439][T19161] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.797320][T10717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.809830][T10717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.844794][T10717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.854964][T10717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.262576][T19380] [ 1144.264929][T19380] ====================================================== [ 1144.272118][T19380] WARNING: possible circular locking dependency detected [ 1144.279142][T19380] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 1144.286241][T19380] ------------------------------------------------------ [ 1144.293246][T19380] syz.6.4174/19380 is trying to acquire lock: [ 1144.299296][T19380] ffff888022be3140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1144.309043][T19380] [ 1144.309043][T19380] but task is already holding lock: [ 1144.316395][T19380] ffff888035186488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1144.325705][T19380] [ 1144.325705][T19380] which lock already depends on the new lock. [ 1144.325705][T19380] [ 1144.336096][T19380] [ 1144.336096][T19380] the existing dependency chain (in reverse order) is: [ 1144.345099][T19380] [ 1144.345099][T19380] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1144.352305][T19380] __mutex_lock+0x199/0xb90 [ 1144.357316][T19380] kernfs_seq_start+0x4d/0x240 [ 1144.362585][T19380] seq_read_iter+0x2c1/0x12c0 [ 1144.367766][T19380] kernfs_fop_read_iter+0x40f/0x5a0 [ 1144.373467][T19380] copy_splice_read+0x615/0xba0 [ 1144.378824][T19380] do_splice_read+0x285/0x370 [ 1144.384006][T19380] splice_file_to_pipe+0x109/0x120 [ 1144.389628][T19380] do_sendfile+0x400/0xe50 [ 1144.394546][T19380] __x64_sys_sendfile64+0x1d8/0x220 [ 1144.400256][T19380] do_syscall_64+0xcd/0x4c0 [ 1144.405272][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.411664][T19380] [ 1144.411664][T19380] -> #2 (&p->lock){+.+.}-{4:4}: [ 1144.418684][T19380] __mutex_lock+0x199/0xb90 [ 1144.423692][T19380] seq_read_iter+0xe1/0x12c0 [ 1144.428784][T19380] kernfs_fop_read_iter+0x40f/0x5a0 [ 1144.434481][T19380] copy_splice_read+0x615/0xba0 [ 1144.439835][T19380] do_splice_read+0x285/0x370 [ 1144.445012][T19380] splice_file_to_pipe+0x109/0x120 [ 1144.450625][T19380] do_sendfile+0x400/0xe50 [ 1144.455543][T19380] __x64_sys_sendfile64+0x1d8/0x220 [ 1144.461247][T19380] do_syscall_64+0xcd/0x4c0 [ 1144.466257][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.472652][T19380] [ 1144.472652][T19380] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1144.480026][T19380] __mutex_lock+0x199/0xb90 [ 1144.485048][T19380] anon_pipe_write+0x15d/0x1a70 [ 1144.490411][T19380] __kernel_write_iter+0x720/0xa90 [ 1144.496026][T19380] __kernel_write+0xf5/0x140 [ 1144.501122][T19380] autofs_notify_daemon+0x4db/0xd60 [ 1144.506826][T19380] autofs_wait+0x10ca/0x1a70 [ 1144.511916][T19380] autofs_do_expire_multi+0x14e/0x500 [ 1144.517796][T19380] autofs_expire_multi+0x68/0x90 [ 1144.523243][T19380] autofs_root_ioctl_unlocked+0x520/0x8d0 [ 1144.529466][T19380] autofs_root_ioctl+0x41/0x60 [ 1144.534732][T19380] __x64_sys_ioctl+0x18e/0x210 [ 1144.540001][T19380] do_syscall_64+0xcd/0x4c0 [ 1144.545012][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.551408][T19380] [ 1144.551408][T19380] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1144.559122][T19380] __lock_acquire+0x126f/0x1c90 [ 1144.564472][T19380] lock_acquire+0x179/0x350 [ 1144.569476][T19380] __mutex_lock+0x199/0xb90 [ 1144.574486][T19380] autofs_notify_daemon+0x4a6/0xd60 [ 1144.580191][T19380] autofs_wait+0x10ca/0x1a70 [ 1144.585287][T19380] autofs_mount_wait+0x132/0x380 [ 1144.590725][T19380] autofs_d_automount+0x390/0x7f0 [ 1144.596251][T19380] __traverse_mounts+0x192/0x790 [ 1144.601689][T19380] step_into+0x5aa/0x2270 [ 1144.606520][T19380] walk_component+0xfc/0x5b0 [ 1144.611615][T19380] path_lookupat+0x142/0x6d0 [ 1144.616709][T19380] filename_lookup+0x224/0x5f0 [ 1144.621977][T19380] kern_path+0x35/0x50 [ 1144.626548][T19380] lookup_bdev+0xd8/0x280 [ 1144.631378][T19380] resume_store+0x1d6/0x460 [ 1144.636381][T19380] kobj_attr_store+0x55/0x80 [ 1144.641479][T19380] sysfs_kf_write+0xf2/0x150 [ 1144.646571][T19380] kernfs_fop_write_iter+0x351/0x510 [ 1144.652356][T19380] vfs_write+0x6c7/0x1150 [ 1144.657187][T19380] ksys_write+0x12a/0x250 [ 1144.662021][T19380] do_syscall_64+0xcd/0x4c0 [ 1144.667033][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.673428][T19380] [ 1144.673428][T19380] other info that might help us debug this: [ 1144.673428][T19380] [ 1144.683634][T19380] Chain exists of: [ 1144.683634][T19380] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1144.683634][T19380] [ 1144.695692][T19380] Possible unsafe locking scenario: [ 1144.695692][T19380] [ 1144.703119][T19380] CPU0 CPU1 [ 1144.708459][T19380] ---- ---- [ 1144.713799][T19380] lock(&of->mutex); [ 1144.717758][T19380] lock(&p->lock); [ 1144.724064][T19380] lock(&of->mutex); [ 1144.730543][T19380] lock(&sbi->pipe_mutex); [ 1144.735024][T19380] [ 1144.735024][T19380] *** DEADLOCK *** [ 1144.735024][T19380] [ 1144.743154][T19380] 4 locks held by syz.6.4174/19380: [ 1144.748331][T19380] #0: ffff888023be9b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1144.757375][T19380] #1: ffff8880373a4428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1144.766324][T19380] #2: ffff888035186488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1144.776052][T19380] #3: ffff888140431878 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1144.786046][T19380] [ 1144.786046][T19380] stack backtrace: [ 1144.791915][T19380] CPU: 1 UID: 0 PID: 19380 Comm: syz.6.4174 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1144.791934][T19380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1144.791942][T19380] Call Trace: [ 1144.791947][T19380] [ 1144.791952][T19380] dump_stack_lvl+0x116/0x1f0 [ 1144.791972][T19380] print_circular_bug+0x275/0x350 [ 1144.791996][T19380] check_noncircular+0x14c/0x170 [ 1144.792019][T19380] __lock_acquire+0x126f/0x1c90 [ 1144.792034][T19380] lock_acquire+0x179/0x350 [ 1144.792046][T19380] ? autofs_notify_daemon+0x4a6/0xd60 [ 1144.792063][T19380] ? __pfx___might_resched+0x10/0x10 [ 1144.792081][T19380] ? kernel_text_address+0x8d/0x100 [ 1144.792096][T19380] ? rcu_is_watching+0x12/0xc0 [ 1144.792118][T19380] __mutex_lock+0x199/0xb90 [ 1144.792137][T19380] ? autofs_notify_daemon+0x4a6/0xd60 [ 1144.792152][T19380] ? autofs_notify_daemon+0x45a/0xd60 [ 1144.792168][T19380] ? autofs_notify_daemon+0x4a6/0xd60 [ 1144.792184][T19380] ? __pfx___mutex_lock+0x10/0x10 [ 1144.792202][T19380] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1144.792219][T19380] ? lockdep_hardirqs_on+0x7c/0x110 [ 1144.792238][T19380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1144.792258][T19380] ? from_kgid_munged+0xab/0x130 [ 1144.792277][T19380] ? autofs_notify_daemon+0x4a6/0xd60 [ 1144.792291][T19380] autofs_notify_daemon+0x4a6/0xd60 [ 1144.792307][T19380] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1144.792323][T19380] ? sysfs_kf_write+0xf2/0x150 [ 1144.792343][T19380] ? kernfs_fop_write_iter+0x351/0x510 [ 1144.792357][T19380] ? vfs_write+0x6c7/0x1150 [ 1144.792380][T19380] ? lockdep_init_map_type+0x5c/0x280 [ 1144.792393][T19380] ? lockdep_init_map_type+0x5c/0x280 [ 1144.792408][T19380] autofs_wait+0x10ca/0x1a70 [ 1144.792425][T19380] ? __pfx_autofs_wait+0x10/0x10 [ 1144.792440][T19380] ? __pfx_path_check_mount+0x10/0x10 [ 1144.792453][T19380] ? find_held_lock+0x2b/0x80 [ 1144.792470][T19380] ? path_has_submounts+0xcb/0x120 [ 1144.792485][T19380] ? do_raw_spin_unlock+0x172/0x230 [ 1144.792501][T19380] ? find_held_lock+0x2b/0x80 [ 1144.792518][T19380] autofs_mount_wait+0x132/0x380 [ 1144.792534][T19380] autofs_d_automount+0x390/0x7f0 [ 1144.792550][T19380] __traverse_mounts+0x192/0x790 [ 1144.792565][T19380] step_into+0x5aa/0x2270 [ 1144.792582][T19380] ? __pfx_step_into+0x10/0x10 [ 1144.792598][T19380] ? __pfx___up_read+0x10/0x10 [ 1144.792612][T19380] ? walk_component+0x35e/0x5b0 [ 1144.792627][T19380] ? lookup_fast+0x156/0x610 [ 1144.792644][T19380] walk_component+0xfc/0x5b0 [ 1144.792661][T19380] path_lookupat+0x142/0x6d0 [ 1144.792678][T19380] filename_lookup+0x224/0x5f0 [ 1144.792696][T19380] ? __pfx_filename_lookup+0x10/0x10 [ 1144.792720][T19380] ? getname_kernel+0x52/0x370 [ 1144.792740][T19380] ? __asan_memcpy+0x3c/0x60 [ 1144.792757][T19380] kern_path+0x35/0x50 [ 1144.792773][T19380] lookup_bdev+0xd8/0x280 [ 1144.792787][T19380] ? __pfx_lookup_bdev+0x10/0x10 [ 1144.792800][T19380] ? resume_store+0x1b8/0x460 [ 1144.792815][T19380] ? __asan_memcpy+0x3c/0x60 [ 1144.792831][T19380] resume_store+0x1d6/0x460 [ 1144.792846][T19380] ? __pfx_resume_store+0x10/0x10 [ 1144.792864][T19380] ? find_held_lock+0x2b/0x80 [ 1144.792882][T19380] ? __pfx_resume_store+0x10/0x10 [ 1144.792897][T19380] kobj_attr_store+0x55/0x80 [ 1144.792917][T19380] ? __pfx_kobj_attr_store+0x10/0x10 [ 1144.792935][T19380] sysfs_kf_write+0xf2/0x150 [ 1144.792952][T19380] kernfs_fop_write_iter+0x351/0x510 [ 1144.792967][T19380] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1144.792984][T19380] vfs_write+0x6c7/0x1150 [ 1144.793001][T19380] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1144.793017][T19380] ? __pfx___mutex_lock+0x10/0x10 [ 1144.793035][T19380] ? __pfx_vfs_write+0x10/0x10 [ 1144.793057][T19380] ksys_write+0x12a/0x250 [ 1144.793073][T19380] ? __pfx_ksys_write+0x10/0x10 [ 1144.793093][T19380] do_syscall_64+0xcd/0x4c0 [ 1144.793112][T19380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.793126][T19380] RIP: 0033:0x7f674098e929 [ 1144.793138][T19380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.793152][T19380] RSP: 002b:00007f673e391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1144.793165][T19380] RAX: ffffffffffffffda RBX: 00007f6740bb6240 RCX: 00007f674098e929 [ 1144.793175][T19380] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 1144.793183][T19380] RBP: 00007f6740a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1144.793191][T19380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.793200][T19380] R13: 0000000000000000 R14: 00007f6740bb6240 R15: 00007ffc37d45828 [ 1144.793212][T19380] [ 1144.793229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.241466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.380470][T15980] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1145.409987][T19380] block device autoloading is deprecated and will be removed. [ 1145.417488][T19380] PM: Image not found (code -22) [ 1145.529848][T15980] usb 8-1: Using ep0 maxpacket: 16 [ 1145.535983][T15980] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1145.547664][T15980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1145.560072][T15980] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1145.569112][T15980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.577184][T15980] usb 8-1: Product: syz [ 1145.581442][T15980] usb 8-1: Manufacturer: syz [ 1145.586021][T15980] usb 8-1: SerialNumber: syz [ 1145.592169][T15980] usb 8-1: config 0 descriptor?? [ 1145.598325][T15980] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1145.608029][T15980] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1146.200590][T15980] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1146.206967][T15980] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1146.214200][T15980] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1146.222072][T15980] em28xx 8-1:0.0: No AC97 audio processor [ 1147.226030][T11375] usb 8-1: USB disconnect, device number 3 [ 1147.232494][T11375] em28xx 8-1:0.0: Disconnecting em28xx [ 1147.238230][T11375] em28xx 8-1:0.0: Freeing device