last executing test programs: 18.912551725s ago: executing program 2 (id=1397): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xfffffffc, 0xbe78, {}, {0xee01}, 0x8, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=@polexpire={0x1c4, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfb, {{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x6, 0x4e24, 0x7ff, 0x2, 0x0, 0x80, 0x1, 0x0, r1}, {0x4380, 0x1, 0x1, 0x1, 0x7, 0x5, 0x8, 0x80000000}, {0xc14b, 0x8, 0x8000, 0x8}, 0x1, 0x6e6bb8}, 0x2}, [@etimer_thresh={0x8, 0xc, 0x88b6}, @tfcpad={0x8, 0x16, 0x1}, @algo_crypt={0xbe, 0x2, {{'lrw(ecb-twofish-avx)\x00'}, 0x3b0, "c1415704c36a1df2b2bf219b260c9159a430bd9f0d334afa276e47b4096a2f634c16bdfc1dbefee8531acdafb4c7a5c089375bc43dbad221c06716149e79a8021b68b06df19ecb1f3da84a39dc7afe68fd77069e5c3af669816e214b9002747a95739cf315368fcfdbbdfba2ae4a20d8dd991087dc1f"}}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@private=0xa010101, 0x2, 0x4, 0x6}}, @offload={0xc}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc305705000000080005"], 0x154}}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x600}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 18.125030483s ago: executing program 2 (id=1399): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc40102030109021200"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) r2 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = gettid() r4 = socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xc3, 0x8, 0xa1, 0x40, 0x7f}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x9d, &(0x7f00000001c0)=@string={0x9d, 0x3, "941467861e07dded377aad66f284bc9cb88cfe83f743c1376e969b4be8fb1f1edec2346da4b5851689e3e3db248a83239c1deae31d8e0d66cabdbe0fe2eb165483083cea1d858d0a1603ebd894314c767e64525f7eb88f452a0405dde6a0993b6c3a800dbc2f50f3dd77cd62b0ce78037049b705cc399fa2ef0aeebc6289ffd13f285ce418d0225c28d3dd46564d5b19cfe1de19c92807d86fbbf3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100c}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x4, 0x0, 0x0, 0x2) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f045}) ppoll(&(0x7f0000000040)=[{r6, 0x80db}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16.520416966s ago: executing program 0 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000600)=""/98, 0x62) 15.237554359s ago: executing program 0 (id=1412): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7ff, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000080)="000000000d800000", 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = dup(r6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) syz_io_uring_setup(0x15a5, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x0, 0x32b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 14.546173177s ago: executing program 3 (id=1414): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003b40)={0x2020}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 11.703179555s ago: executing program 2 (id=1417): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.701427667s ago: executing program 3 (id=1418): ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2, 0xfffffffe, 0xfffffffffffffffe}, 0x38) 9.276637607s ago: executing program 1 (id=1424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x1a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x887) 8.816365109s ago: executing program 1 (id=1426): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcd"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000003b40)={0x2020}, 0x2020) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8.815934748s ago: executing program 0 (id=1427): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0xc0c4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000004fadfbb9a6a70490da1a165713179524083d7ab413bd7b5aed1abd59073f2d37b35e023d59c614ea69f2c72ce0a1f97a297980dc1eb0da81636ba9d84ebe6c625411dc22e60cdee94d88793a4597d4f30ff13a586869950406f34a610ed0ed5f57250b5ecadae83bcbc5ede13da0e1d74d7bdfe4c7f8ee0a441645b6", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001d4000018000000a000848030000080090001001f62ec05a800000008000200050000000a00050050505050505000000a00010001010101010100006c00008008000200060000004c00068008000500f73e00000800000001000000080002000500000008000200cb00000008000000ffff0000080002000400000008000100080000000800010002000000080000000200000008000200030000000a0001000101010101010000040087000800dc0003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x404e080) 7.982058743s ago: executing program 2 (id=1429): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x15, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.889534787s ago: executing program 0 (id=1430): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) (fail_nth: 5) 7.87223285s ago: executing program 3 (id=1431): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0300000000000000", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, &(0x7f00000005c0)={0x40, 0x20, 0x1000000, 0x20, 0x3}, 0x48) ioctl$TCSETA(r3, 0x8910, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r3) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2002) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000002c0)) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xd14, &(0x7f0000001600)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "49981d", 0xcda, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, {[@hopopts={0x2b, 0x0, '\x00', [@padn]}, @routing={0x2f, 0x4, 0x0, 0x2, 0x0, [@remote, @remote]}, @routing={0x6, 0x0, 0x0, 0x1b}, @routing={0x2c, 0x2, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x17}]}, @dstopts={0x5e, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x1}, @generic={0x5}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb, 0x0, [0x9, 0x2], "47e6b5091dbafb02fcc5fb"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "720d61a16a23138b1d0623"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x3]}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0xf, 0x2, 0x0, 0x0, 0x2, 0x2}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0xff, 0x3, 0x0, 0x1, 0x3, 0x8}, 0x2, {0x1f, 0x3ff8, 0x0, 0x10, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4000}) 7.871560888s ago: executing program 2 (id=1432): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random="b331687b8145", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "62d308", 0x1c, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x8, "096180cd5ee5"}]}}}}}}}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000a0000002400048020000180070001006374000014000280"], 0x78}}, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) syz_pidfd_open(r2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000440)={0x0, 0x4000, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200ea52c9b6b3e9b3cc4e84a22413b50f8120b5fb0bf4d9a71", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a00180003030303030300000c0070000500010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x84800) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x4, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "084daf92a6e286bb40b9fa1ae860c2a351c9b7f028b26bcbcbc8a3ca8f3cdb35", "defa40a3174d125dbd5562c1ca7a331015413257dc5bb85356ba3c89f59a51ba09f80232efc11fae00", "63d49a11aca0452e6ac5d83519db21e5ca2d4e716ecc16669e4fe921", {"e192cb61fd19036a3135ae905ed0be61", "858260c01c9b667354d45433660e8b47"}}}}}, 0xc2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 7.857702147s ago: executing program 4 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 7.791858712s ago: executing program 1 (id=1434): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003b40)={0x2020}, 0x2020) 6.976359469s ago: executing program 0 (id=1435): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x0, 0x5, 0x53e, 0x0, 0x8}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x3e}, "080a7162eef40df36f803bb3ef7fab2f47e1ce6b6041f0e74ba3238bf03214e84a2e0a258c7a64da40d6ef30960356bbd38ec0048c3c873e56dbe9384af6"}}, 0x41) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xec}, "f2456d89ab081a0de12d4e233bd01987a8b7c574d672cfe5b6b05110d11988e6f5c300106127dd4c292afc1fc47e51caaaf4cbf3b8ca0e1ca8e0d0a342fc7a5bbf256d8d961736b1e131cefbc9a8947ae6bfc3132452e9446b0b18ad389279142f411b49ef50b970ef2d7fa685ee853e53341bc51107fa5ff469a14a07889f1c0644f8106c481caf47a2d627e486fe666d188460135f58582c46edeb028bce55eb36bdb74a50bbd1e924c1cd99435551468d1308c040a2e8de6f255296a7a66b150899c0022f4a11a1d320161b5fcc2b023d16c29482878c93d0915d7acf4f3a8a9ad99159a1189a588cd5c5"}, 0xf0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x28081, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x7, r1}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100, &(0x7f0000000240)=[{0x8, 0x5, 0x3}, {0x8, 0x3, 0x10}, {0xf, 0x2, 0xd2b8}, {0x2, 0x7, 0x37f00def}, {0x80000000, 0xfffffffffffffd37, 0x7fff}], 0x5, 0x2, 0x10, 0x28, 0x4c, 0x64}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x24, 0x98, 0x1, 0x5}, {0xfffc, 0xfd, 0x6, 0x80}, {0x71f, 0x8, 0x5, 0x70c9}, {0xfff7, 0x4, 0xff, 0xc4}, {0xfffa, 0x2, 0xf4, 0x10001}, {0x5, 0x81, 0x40, 0xf5}, {0x5, 0x0, 0x10, 0xfffffff8}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{0x3b25, 0x9, 0x5, 0x5d0a}, {0x1, 0x9, 0x56, 0x6}, {0x8, 0xfb, 0xd, 0x396fd894}, {0x4, 0xc, 0x7, 0xffffff06}, {0x3, 0x4, 0x7, 0xb7a587d}, {0x18eb, 0x7, 0x2, 0x200}, {0x0, 0x6, 0xf, 0xffffffff}, {0x401, 0x7, 0xd0, 0x4}, {0x4, 0x40, 0x1, 0x1}]}) syz_clone3(&(0x7f0000000980)={0x88000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0, {0x23}, &(0x7f00000007c0)=""/89, 0x59, &(0x7f0000000840)=""/197, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r2}}, 0x58) getresuid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) statx(r2, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgrp(0x0) statx(r2, &(0x7f0000000c00)='./file0\x00', 0x0, 0x400, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000d40)='./file0\x00', 0x400, 0x400, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001000)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)="cc5ab5b6b8d0097435a4cc9b155bf8b6a2b75f00e6319d773847882d978db2ba361229c54a22b38a22890298509c32c28219f37ba6101b56c19dac3db607826bc95f2b95b79821ec673475ff9024adcf515dd669f0d3", 0x56}, {&(0x7f0000000500)="76dad8", 0x3}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0xb0, 0x8040}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x20040090}}], 0x2, 0x4000810) sched_setscheduler(r9, 0x7, &(0x7f0000001080)=0x7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000012c0)={0x5, 0x0, &(0x7f0000001280)=[r2]}, 0x1) ppoll(0x0, 0x0, 0x0, &(0x7f0000001380)={[0x6]}, 0x8) mount$9p_virtio(&(0x7f00000013c0), &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x40416, &(0x7f0000001480)={'trans=virtio,', {[{@cache_loose}, {@cache_fscache}, {@aname={'aname', 0x3d, '/dev/dma_heap/system\x00'}}], [{@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '/dev/dma_heap/system\x00'}}]}}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001540), 0x402000, 0x0) getresgid(&(0x7f0000003880), &(0x7f00000038c0), 0x0) getresuid(&(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0)) 4.788302464s ago: executing program 1 (id=1436): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003b40)={0x2020}, 0x2020) 4.170506215s ago: executing program 3 (id=1437): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x0, 0x5, 0x53e, 0x0, 0x8}}}}, 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x3e}, "080a7162eef40df36f803bb3ef7fab2f47e1ce6b6041f0e74ba3238bf03214e84a2e0a258c7a64da40d6ef30960356bbd38ec0048c3c873e56dbe9384af6"}}, 0x41) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xec}, "f2456d89ab081a0de12d4e233bd01987a8b7c574d672cfe5b6b05110d11988e6f5c300106127dd4c292afc1fc47e51caaaf4cbf3b8ca0e1ca8e0d0a342fc7a5bbf256d8d961736b1e131cefbc9a8947ae6bfc3132452e9446b0b18ad389279142f411b49ef50b970ef2d7fa685ee853e53341bc51107fa5ff469a14a07889f1c0644f8106c481caf47a2d627e486fe666d188460135f58582c46edeb028bce55eb36bdb74a50bbd1e924c1cd99435551468d1308c040a2e8de6f255296a7a66b150899c0022f4a11a1d320161b5fcc2b023d16c29482878c93d0915d7acf4f3a8a9ad99159a1189a588cd5c5"}, 0xf0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x28081, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x7, r1}) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100, &(0x7f0000000240)=[{0x8, 0x5, 0x3}, {0x8, 0x3, 0x10}, {0xf, 0x2, 0xd2b8}, {0x2, 0x7, 0x37f00def}, {0x80000000, 0xfffffffffffffd37, 0x7fff}], 0x5, 0x2, 0x10, 0x28, 0x4c, 0x64}) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x24, 0x98, 0x1, 0x5}, {0xfffc, 0xfd, 0x6, 0x80}, {0x71f, 0x8, 0x5, 0x70c9}, {0xfff7, 0x4, 0xff, 0xc4}, {0xfffa, 0x2, 0xf4, 0x10001}, {0x5, 0x81, 0x40, 0xf5}, {0x5, 0x0, 0x10, 0xfffffff8}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{0x3b25, 0x9, 0x5, 0x5d0a}, {0x1, 0x9, 0x56, 0x6}, {0x8, 0xfb, 0xd, 0x396fd894}, {0x4, 0xc, 0x7, 0xffffff06}, {0x3, 0x4, 0x7, 0xb7a587d}, {0x18eb, 0x7, 0x2, 0x200}, {0x0, 0x6, 0xf, 0xffffffff}, {0x401, 0x7, 0xd0, 0x4}, {0x4, 0x40, 0x1, 0x1}]}) syz_clone3(&(0x7f0000000980)={0x88000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0, {0x23}, &(0x7f00000007c0)=""/89, 0x59, &(0x7f0000000840)=""/197, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r2}}, 0x58) getresuid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) statx(r2, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgrp(0x0) statx(r2, &(0x7f0000000c00)='./file0\x00', 0x0, 0x400, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000d40)='./file0\x00', 0x400, 0x400, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001000)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)="cc5ab5b6b8d0097435a4cc9b155bf8b6a2b75f00e6319d773847882d978db2ba361229c54a22b38a22890298509c32c28219f37ba6101b56c19dac3db607826bc95f2b95b79821ec673475ff9024adcf515dd669f0d3", 0x56}, {&(0x7f0000000500)="76dad8", 0x3}], 0x2, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0xb0, 0x8040}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x20040090}}], 0x2, 0x4000810) sched_setscheduler(r9, 0x7, &(0x7f0000001080)=0x7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000012c0)={0x5, 0x0, &(0x7f0000001280)=[r2]}, 0x1) ppoll(0x0, 0x0, 0x0, &(0x7f0000001380)={[0x6]}, 0x8) mount$9p_virtio(&(0x7f00000013c0), &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x40416, &(0x7f0000001480)={'trans=virtio,', {[{@cache_loose}, {@cache_fscache}, {@aname={'aname', 0x3d, '/dev/dma_heap/system\x00'}}], [{@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '/dev/dma_heap/system\x00'}}]}}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001540), 0x402000, 0x0) getresgid(&(0x7f0000003880), &(0x7f00000038c0), 0x0) getresuid(&(0x7f0000003b40), &(0x7f0000003b80), &(0x7f0000003bc0)) 2.148411266s ago: executing program 3 (id=1438): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 2.105902201s ago: executing program 0 (id=1439): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}}) 2.049727424s ago: executing program 1 (id=1440): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) close(r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x24004805) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 854.052707ms ago: executing program 3 (id=1441): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x1692c2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20004050) sendfile(r0, r0, 0x0, 0x30) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) (fail_nth: 5) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 462.282143ms ago: executing program 4 (id=1442): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x15, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 414.666825ms ago: executing program 4 (id=1443): prctl$PR_SET_SECUREBITS(0x8, 0x1a) 349.684381ms ago: executing program 2 (id=1444): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000003b40)={0x2020}, 0x2020) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 284.991825ms ago: executing program 1 (id=1445): r0 = getpgrp(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)={"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"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="45871ba8febf0c180960c4f2ffff0509e7f2e34a16721ee4d15880000409050000edff000000000000000000000000000000b2cb96293cc33e29ae", @ANYBLOB="b7eaae4be280f3f2825072aa422a29b40d811c775e3866466e4a12541a131667fca38f6c46246d18cd46f73819783d41295c6fe6dce712d316ffd17f7fff3009f56080b4663899fbe3578480c320dbee60daa0d8"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0xb4e6093b2f1368b1, 0x1}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r0, 0x6, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x494280, 0x100) syz_emit_ethernet(0x56, 0x0, 0x0) getdents(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file1\x00', 0x14927e, 0x91) fallocate(r2, 0x0, 0x0, 0x8800000) openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'batadv_slave_1\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x10, r3, 0x0, 0x3, 0x1}}, 0x20) r8 = syz_open_dev$video(&(0x7f0000000380), 0xbdff, 0x2242) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 116.358609ms ago: executing program 4 (id=1446): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x3, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f00000003c0)="20c20742", 0x4, 0x20008090, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200006400300000b035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x8000) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r7 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r10, 0x40045201, &(0x7f0000000440)=0x7) io_uring_enter(r7, 0x2df0, 0x4000, 0x0, 0x0, 0x0) write(r6, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046}) socket(0x10, 0x3, 0x0) 49.350669ms ago: executing program 4 (id=1447): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) 0s ago: executing program 4 (id=1448): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2280, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[]) socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r6}, 0x38) close(r0) syz_open_dev$sg(&(0x7f0000000100), 0x3ff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r8, 0x0) fcntl$notify(r8, 0x402, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4203000205"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) kernel console output (not intermixed with test programs): nterface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.250021][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.268346][ T5877] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 409.278582][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.289082][ T5877] usb 3-1: Product: syz [ 409.296417][ T5877] usb 3-1: Manufacturer: syz [ 409.301530][ T5904] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 409.304090][ T5877] usb 3-1: SerialNumber: syz [ 409.319859][ T5877] usb 3-1: config 0 descriptor?? [ 409.336505][ T5877] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 409.535410][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 409.542612][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.556737][ T5904] usb 2-1: config 0 has no interfaces? [ 409.564751][ T5904] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 409.576713][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.626008][ T9403] vhci_hcd: connection reset by peer [ 409.632036][ T1046] vhci_hcd: stop threads [ 409.634476][ T5877] imon:send_packet: packet tx failed (-71) [ 409.646545][ T1046] vhci_hcd: release socket [ 409.670648][ T5877] imon 3-1:0.0: panel buttons/knobs setup failed [ 409.672706][ T5904] usb 2-1: Product: syz [ 409.691702][ T1046] vhci_hcd: disconnect device [ 409.697896][ T5904] usb 2-1: Manufacturer: syz [ 409.706654][ T5904] usb 2-1: SerialNumber: syz [ 409.731909][ T5904] usb 2-1: config 0 descriptor?? [ 409.814766][ T5877] rc_core: IR keymap rc-imon-pad not found [ 409.820716][ T5877] Registered IR keymap rc-empty [ 409.825918][ T5877] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 409.856124][ T5877] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 409.879035][ T5877] imon:send_packet: packet tx failed (-71) [ 410.196214][ T5877] imon 3-1:0.0: remote input dev register failed [ 410.277002][ T5877] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 410.378947][ T5877] imon 3-1:0.0: unable to initialize intf0, err 0 [ 410.392297][ T5877] imon:imon_probe: failed to initialize context! [ 410.399681][ T5877] imon 3-1:0.0: unable to register, err -19 [ 410.465791][ T5877] usb 3-1: USB disconnect, device number 37 [ 411.313844][ T5904] usb 1-1: USB disconnect, device number 36 [ 411.740574][ T5904] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 412.224625][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 412.312531][ T5904] usb 1-1: not running at top speed; connect to a high speed hub [ 412.457388][ T5904] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 412.523150][ T5904] usb 1-1: config 106 has no interface number 0 [ 412.572432][ T5904] usb 1-1: config 106 interface 8 has no altsetting 0 [ 412.661473][ T5904] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 412.675034][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.739116][ T5904] usb 1-1: Product: syz [ 412.746197][ T5904] usb 1-1: Manufacturer: syz [ 413.280978][ T5873] usb 2-1: USB disconnect, device number 41 [ 413.940437][ T9] vhci_hcd: vhci_device speed not set [ 413.951762][ T5904] usb 1-1: SerialNumber: syz [ 415.521134][ T5904] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 415.554376][ T5904] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 415.638625][ T5904] usb 1-1: USB disconnect, device number 37 [ 418.010253][ T5875] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 418.322173][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.332394][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.357692][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 418.420536][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 418.485388][ T5875] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 418.509938][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.520701][ T5933] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 418.562051][ T9502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.655544][ T5875] hub 5-1:1.0: bad descriptor, ignoring hub [ 418.777733][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.786961][ T5933] usb 1-1: not running at top speed; connect to a high speed hub [ 418.799911][ T5875] hub 5-1:1.0: probe with driver hub failed with error -5 [ 418.809916][ T5933] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 418.827511][ T5933] usb 1-1: config 106 has no interface number 0 [ 418.842001][ T5933] usb 1-1: config 106 interface 8 has no altsetting 0 [ 418.877903][ T5933] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 418.890795][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 418.913143][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.915336][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 418.959669][ T5933] usb 1-1: Product: syz [ 418.972738][ T5875] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 418.978573][ T5933] usb 1-1: Manufacturer: syz [ 418.988313][ T5933] usb 1-1: SerialNumber: syz [ 419.068424][ T5875] usb 5-1: USB disconnect, device number 35 [ 419.316903][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.325630][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.368689][ T5933] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 419.393334][ T5933] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 419.430884][ T5933] usb 1-1: USB disconnect, device number 38 [ 419.820553][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 419.972679][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.275350][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 420.605853][ T9] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 420.616555][ T9] usb 3-1: config 106 has no interface number 0 [ 420.639369][ T9] usb 3-1: config 106 interface 8 has no altsetting 0 [ 420.765957][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 420.884063][ T5873] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 420.970787][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.979990][ T9] usb 3-1: Product: syz [ 420.995928][ T9] usb 3-1: Manufacturer: syz [ 421.091623][ T9] usb 3-1: SerialNumber: syz [ 421.860378][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 421.879537][ T5873] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 421.881245][ T5933] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 421.913553][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.939553][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.959953][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 421.973886][ T5873] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 421.984641][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.001312][ T5873] usb 1-1: config 0 descriptor?? [ 422.052851][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.065846][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 422.089956][ T5933] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 422.104960][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 422.118915][ T5933] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 422.124151][ T9572] No control pipe specified [ 422.135885][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.148517][ T9562] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.159887][ T5933] hub 4-1:1.0: bad descriptor, ignoring hub [ 422.165995][ T5933] hub 4-1:1.0: probe with driver hub failed with error -5 [ 422.176237][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 422.181885][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 422.187259][ T5933] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 422.226380][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 422.237219][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 422.255383][ T5873] usb 1-1: USB disconnect, device number 39 [ 422.876268][ T9] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 422.887473][ T9] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 422.902321][ T9] usb 3-1: USB disconnect, device number 38 [ 422.956741][ T9580] No control pipe specified [ 423.011200][ T5873] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 424.190514][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 424.198974][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.211132][ T5873] usb 1-1: not running at top speed; connect to a high speed hub [ 424.219955][ T5873] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 424.229873][ T5873] usb 1-1: config 106 has no interface number 0 [ 424.354474][ T5873] usb 1-1: config 106 interface 8 has no altsetting 0 [ 424.514504][ T5873] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 424.620867][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.669798][ T5873] usb 1-1: Product: syz [ 424.689951][ T5873] usb 1-1: Manufacturer: syz [ 424.723565][ T5873] usb 1-1: SerialNumber: syz [ 425.179449][ T9] usb 4-1: USB disconnect, device number 47 [ 425.524627][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.533329][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.606086][ T5873] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 425.636990][ T5873] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 425.823703][ T5873] usb 1-1: USB disconnect, device number 40 [ 426.313038][ T9613] FAULT_INJECTION: forcing a failure. [ 426.313038][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 426.325878][ T9613] CPU: 0 UID: 0 PID: 9613 Comm: syz.2.1033 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 426.325901][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 426.325909][ T9613] Call Trace: [ 426.325914][ T9613] [ 426.325919][ T9613] dump_stack_lvl+0x16c/0x1f0 [ 426.325970][ T9613] should_fail_ex+0x512/0x640 [ 426.325989][ T9613] ? fs_reclaim_acquire+0xae/0x150 [ 426.326011][ T9613] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 426.326031][ T9613] should_failslab+0xc2/0x120 [ 426.326045][ T9613] __kmalloc_noprof+0xd2/0x510 [ 426.326060][ T9613] tomoyo_realpath_from_path+0xc2/0x6e0 [ 426.326077][ T9613] ? tomoyo_profile+0x47/0x60 [ 426.326089][ T9613] tomoyo_path_number_perm+0x245/0x580 [ 426.326101][ T9613] ? tomoyo_path_number_perm+0x237/0x580 [ 426.326116][ T9613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.326130][ T9613] ? find_held_lock+0x2b/0x80 [ 426.326161][ T9613] ? find_held_lock+0x2b/0x80 [ 426.326173][ T9613] ? hook_file_ioctl_common+0x145/0x410 [ 426.326188][ T9613] ? __fget_files+0x20e/0x3c0 [ 426.326203][ T9613] security_file_ioctl+0x9b/0x240 [ 426.326222][ T9613] __x64_sys_ioctl+0xb7/0x200 [ 426.326240][ T9613] do_syscall_64+0xcd/0x260 [ 426.326257][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.326269][ T9613] RIP: 0033:0x7f6b9178d169 [ 426.326280][ T9613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.326290][ T9613] RSP: 002b:00007f6b8f5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.326301][ T9613] RAX: ffffffffffffffda RBX: 00007f6b919a6160 RCX: 00007f6b9178d169 [ 426.326308][ T9613] RDX: 0000200000000140 RSI: 00000000000089fa RDI: 0000000000000003 [ 426.326314][ T9613] RBP: 00007f6b8f5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 426.326320][ T9613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.326326][ T9613] R13: 0000000000000000 R14: 00007f6b919a6160 R15: 00007ffeb0cdf088 [ 426.326339][ T9613] [ 426.326360][ T9613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.960672][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 427.041063][ T5873] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 427.140995][ T5835] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 427.280794][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.379194][ T5873] usb 1-1: not running at top speed; connect to a high speed hub [ 427.399947][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.415425][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.434300][ T5873] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 427.443925][ T5873] usb 1-1: config 106 has no interface number 0 [ 427.450189][ T5873] usb 1-1: config 106 interface 8 has no altsetting 0 [ 427.458629][ T5835] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 427.467773][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.483703][ T5873] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 427.493473][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.502494][ T5835] usb 2-1: config 0 descriptor?? [ 427.507620][ T5873] usb 1-1: Product: syz [ 427.511966][ T5873] usb 1-1: Manufacturer: syz [ 427.516728][ T5873] usb 1-1: SerialNumber: syz [ 427.551968][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 427.559086][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 427.570186][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.581740][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.591789][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 427.604944][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 427.614818][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.626094][ T9] usb 4-1: config 0 descriptor?? [ 427.670660][ T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 427.905144][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.924981][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 427.933075][ T5835] usbhid 2-1:0.0: can't add hid device: -71 [ 427.939148][ T5835] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 427.939244][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.959060][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 427.967864][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 427.973693][ T5835] usb 2-1: USB disconnect, device number 42 [ 427.990103][ T9] usb 4-1: USB disconnect, device number 48 [ 427.998673][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 428.009864][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.038442][ T10] usb 5-1: config 0 descriptor?? [ 428.465737][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 428.479574][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.501309][ T10] usb 5-1: USB disconnect, device number 36 [ 428.567018][ T9634] No control pipe specified [ 428.845283][ T9642] program syz.3.1042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.862263][ T9645] ipip0: entered promiscuous mode [ 429.252589][ T5923] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 429.270551][ T30] audit: type=1400 audit(1744139180.227:571): avc: denied { bind } for pid=9648 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 429.497527][ T5873] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 429.532018][ T30] audit: type=1400 audit(1744139180.227:572): avc: denied { name_bind } for pid=9648 comm="syz.4.1046" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 429.552727][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.591768][ T30] audit: type=1400 audit(1744139180.227:573): avc: denied { node_bind } for pid=9648 comm="syz.4.1046" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 429.612870][ T30] audit: type=1400 audit(1744139180.227:574): avc: denied { connect } for pid=9648 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 429.636595][ T5873] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 429.678027][ T9652] FAULT_INJECTION: forcing a failure. [ 429.678027][ T9652] name failslab, interval 1, probability 0, space 0, times 0 [ 429.691368][ T9652] CPU: 0 UID: 0 PID: 9652 Comm: syz.4.1047 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 429.691389][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.691397][ T9652] Call Trace: [ 429.691402][ T9652] [ 429.691406][ T9652] dump_stack_lvl+0x16c/0x1f0 [ 429.691431][ T9652] should_fail_ex+0x512/0x640 [ 429.691446][ T9652] ? __kvmalloc_node_noprof+0x122/0x600 [ 429.691460][ T9652] should_failslab+0xc2/0x120 [ 429.691475][ T9652] __kvmalloc_node_noprof+0x135/0x600 [ 429.691485][ T9652] ? __pfx___mutex_lock+0x10/0x10 [ 429.691502][ T9652] ? traverse.part.0.constprop.0+0x392/0x640 [ 429.691541][ T9652] ? traverse.part.0.constprop.0+0x392/0x640 [ 429.691556][ T9652] traverse.part.0.constprop.0+0x392/0x640 [ 429.691577][ T9652] seq_read_iter+0x932/0x12c0 [ 429.691596][ T9652] ? __pfx__kstrtoull+0x10/0x10 [ 429.691616][ T9652] seq_read+0x39e/0x4e0 [ 429.691634][ T9652] ? __pfx_seq_read+0x10/0x10 [ 429.691656][ T9652] ? avc_policy_seqno+0x9/0x20 [ 429.691671][ T9652] ? __pfx_seq_read+0x10/0x10 [ 429.691687][ T9652] proc_reg_read+0x23d/0x330 [ 429.691702][ T9652] ? __pfx_proc_reg_read+0x10/0x10 [ 429.691715][ T9652] vfs_readv+0x6bc/0x8a0 [ 429.691732][ T9652] ? get_pid_task+0x106/0x250 [ 429.691749][ T9652] ? __pfx_vfs_readv+0x10/0x10 [ 429.691765][ T9652] ? find_held_lock+0x2b/0x80 [ 429.691789][ T9652] ? __fget_files+0x20e/0x3c0 [ 429.691804][ T9652] ? do_preadv+0x1af/0x270 [ 429.691818][ T9652] do_preadv+0x1af/0x270 [ 429.691833][ T9652] ? __pfx_do_preadv+0x10/0x10 [ 429.691847][ T9652] ? rcu_is_watching+0x12/0xc0 [ 429.691869][ T9652] do_syscall_64+0xcd/0x260 [ 429.691886][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.691899][ T9652] RIP: 0033:0x7f90ded8d169 [ 429.691909][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.691920][ T9652] RSP: 002b:00007f90dfc7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 429.691930][ T9652] RAX: ffffffffffffffda RBX: 00007f90defa5fa0 RCX: 00007f90ded8d169 [ 429.691937][ T9652] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000006 [ 429.691943][ T9652] RBP: 00007f90dfc7e090 R08: 0000000000007fff R09: 0000000000000000 [ 429.691949][ T9652] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 429.691955][ T9652] R13: 0000000000000000 R14: 00007f90defa5fa0 R15: 00007ffda505e0e8 [ 429.691968][ T9652] [ 429.937770][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.956029][ T30] audit: type=1400 audit(1744139180.227:575): avc: denied { name_connect } for pid=9648 comm="syz.4.1046" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 430.013125][ T5873] usb 1-1: USB disconnect, device number 41 [ 430.484946][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.093302][ T5923] usb 3-1: not running at top speed; connect to a high speed hub [ 431.128028][ T5923] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 431.347216][ T5923] usb 3-1: config 106 has no interface number 0 [ 431.369932][ T5923] usb 3-1: config 106 interface 8 has no altsetting 0 [ 431.738750][ T5923] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 431.748559][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.759308][ T5923] usb 3-1: Product: syz [ 431.764462][ T5923] usb 3-1: Manufacturer: syz [ 431.769162][ T5923] usb 3-1: SerialNumber: syz [ 433.185633][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.218082][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.469286][ T5923] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 433.495113][ T5923] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 433.507558][ T5923] usb 3-1: USB disconnect, device number 39 [ 433.801208][ T5873] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 433.960457][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 434.040421][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 434.267672][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 434.382738][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 434.393405][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.400707][ T9] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 434.412398][ T9] usb 1-1: config 106 has no interface number 0 [ 434.418785][ T9] usb 1-1: config 106 interface 8 has no altsetting 0 [ 434.422620][ T5873] usb 2-1: config 0 has no interfaces? [ 434.428299][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 434.454236][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.462693][ T5873] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 434.465733][ T9] usb 1-1: Product: syz [ 434.475296][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.494420][ T9] usb 1-1: Manufacturer: syz [ 434.498308][ T5873] usb 2-1: Product: syz [ 434.507903][ T9] usb 1-1: SerialNumber: syz [ 434.509578][ T5873] usb 2-1: Manufacturer: syz [ 434.529020][ T5873] usb 2-1: SerialNumber: syz [ 434.549766][ T5873] usb 2-1: config 0 descriptor?? [ 434.714480][ T9692] No control pipe specified [ 434.967989][ T9697] tipc: Enabled bearer , priority 0 [ 436.140530][ T10] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 436.381895][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.458804][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 436.470427][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 436.490162][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 436.556705][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 436.586669][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.691689][ T9697] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 436.704647][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 436.788904][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 436.797070][ T9] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 436.816682][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 436.822339][ T9] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 436.830236][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 436.871918][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 436.930721][ T9] usb 1-1: USB disconnect, device number 42 [ 437.290699][ T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 437.463816][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.527121][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 437.609691][ T9] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 437.626395][ T9] usb 1-1: config 106 has no interface number 0 [ 437.643695][ T9] usb 1-1: config 106 interface 8 has no altsetting 0 [ 437.659377][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 437.677357][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.692722][ T9] usb 1-1: Product: syz [ 437.700033][ T9] usb 1-1: Manufacturer: syz [ 437.708818][ T9] usb 1-1: SerialNumber: syz [ 437.805155][ T5835] usb 2-1: USB disconnect, device number 43 [ 437.966392][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.977095][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.001123][ T9] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 438.019832][ T9734] No control pipe specified [ 438.043089][ T9] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 438.065167][ T5923] usb 3-1: USB disconnect, device number 40 [ 438.072371][ T9] usb 1-1: USB disconnect, device number 43 [ 439.817053][ T30] audit: type=1400 audit(1744139190.787:576): avc: denied { ioctl } for pid=9751 comm="syz.0.1077" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 440.767931][ T30] audit: type=1400 audit(1744139191.727:577): avc: denied { nlmsg_read } for pid=9755 comm="syz.4.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.922820][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.929163][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.636557][ T5873] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 442.850408][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 442.857085][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.867569][ T5873] usb 3-1: config 0 has no interfaces? [ 442.875219][ T5873] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 442.885653][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.896460][ T5873] usb 3-1: Product: syz [ 442.900888][ T5873] usb 3-1: Manufacturer: syz [ 442.905524][ T5873] usb 3-1: SerialNumber: syz [ 442.934851][ T5873] usb 3-1: config 0 descriptor?? [ 445.251118][ T5875] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 445.420091][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 445.436628][ T5875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 445.559528][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.617816][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.682992][ T5875] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 445.760253][ T5875] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 445.772447][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.773556][ T9] usb 3-1: USB disconnect, device number 41 [ 445.783830][ T5875] usb 2-1: config 0 descriptor?? [ 446.456563][ T5875] usbhid 2-1:0.0: can't add hid device: -71 [ 446.472900][ T5875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 446.504310][ T5875] usb 2-1: USB disconnect, device number 44 [ 447.253754][ T10] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 447.350806][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 447.423113][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.441274][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.464803][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 447.485878][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.502202][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.520522][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.540791][ T5933] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 447.548621][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 447.558842][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.731859][ T9] usb 1-1: config 0 descriptor?? [ 447.739229][ T10] usb 4-1: config 0 descriptor?? [ 447.768223][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.797796][ T5933] usb 5-1: not running at top speed; connect to a high speed hub [ 447.824393][ T5933] usb 5-1: config 106 has an invalid interface number: 8 but max is 0 [ 447.850484][ T5933] usb 5-1: config 106 has no interface number 0 [ 447.867198][ T5933] usb 5-1: config 106 interface 8 has no altsetting 0 [ 447.889770][ T5933] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 447.923649][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.948489][ T5933] usb 5-1: Product: syz [ 447.975817][ T5933] usb 5-1: Manufacturer: syz [ 447.988144][ T5933] usb 5-1: SerialNumber: syz [ 448.185579][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 448.193523][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 448.210827][ T5875] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 448.232713][ T9] usb 1-1: USB disconnect, device number 44 [ 448.385757][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.404600][ T5875] usb 3-1: not running at top speed; connect to a high speed hub [ 448.430431][ T5835] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 448.441728][ T5875] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 448.463536][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 448.469798][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 448.480482][ T5875] usb 3-1: config 106 has no interface number 0 [ 448.492881][ T10] usb 4-1: USB disconnect, device number 49 [ 448.502632][ T5875] usb 3-1: config 106 interface 8 has no altsetting 0 [ 448.533622][ T5875] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 448.555698][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.579774][ T5875] usb 3-1: Product: syz [ 448.591096][ T5875] usb 3-1: Manufacturer: syz [ 448.596980][ T5875] usb 3-1: SerialNumber: syz [ 448.620564][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 448.627719][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.638911][ T5835] usb 2-1: config 0 has no interfaces? [ 448.650191][ T5835] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 448.663727][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.679304][ T5835] usb 2-1: Product: syz [ 448.688960][ T5835] usb 2-1: Manufacturer: syz [ 448.706114][ T5835] usb 2-1: SerialNumber: syz [ 448.723148][ T5835] usb 2-1: config 0 descriptor?? [ 449.805616][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 450.107263][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.123633][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 450.146552][ T10] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 450.157331][ T10] usb 1-1: config 106 has no interface number 0 [ 450.168128][ T10] usb 1-1: config 106 interface 8 has no altsetting 0 [ 450.182256][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 450.197835][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.291939][ T10] usb 1-1: Product: syz [ 450.296886][ T10] usb 1-1: Manufacturer: syz [ 450.330797][ T10] usb 1-1: SerialNumber: syz [ 450.396737][ T5933] kalmia 5-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 450.417960][ T5933] kalmia 5-1:106.8: probe with driver kalmia failed with error -22 [ 450.492111][ T5933] usb 5-1: USB disconnect, device number 37 [ 450.714904][ T9881] tipc: Enabled bearer , priority 0 [ 451.097004][ T5875] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 451.162106][ T5875] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 451.222877][ T5875] usb 3-1: USB disconnect, device number 42 [ 451.230768][ T5835] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 451.415833][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.610591][ T9888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.615368][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 451.621019][ T9888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.655997][ T5835] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 451.678132][ T5835] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 451.692639][ T5835] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 451.701790][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.783985][ T9881] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 451.793534][ T5835] hub 4-1:1.0: bad descriptor, ignoring hub [ 451.799475][ T5835] hub 4-1:1.0: probe with driver hub failed with error -5 [ 451.822890][ T5835] cdc_wdm 4-1:1.0: skipping garbage [ 451.828149][ T5835] cdc_wdm 4-1:1.0: skipping garbage [ 451.833530][ T5875] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 451.844800][ T5835] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 451.994695][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 452.014161][ T5875] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 452.037767][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.062306][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.083727][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 452.103867][ T5875] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 452.115223][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.128466][ T5875] usb 3-1: config 0 descriptor?? [ 452.245715][ T5873] usb 2-1: USB disconnect, device number 45 [ 452.347839][ T5875] usbhid 3-1:0.0: can't add hid device: -71 [ 452.363445][ T5875] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 452.476422][ T5875] usb 3-1: USB disconnect, device number 43 [ 452.951174][ T9900] tipc: Enabled bearer , priority 0 [ 454.162141][ T9878] tipc: Disabling bearer [ 454.208804][ T10] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 454.356288][ T5904] usb 4-1: USB disconnect, device number 50 [ 454.367937][ T5933] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 454.413286][ T10] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 454.834206][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.866553][ T10] usb 1-1: USB disconnect, device number 45 [ 454.888266][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.908819][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 454.924538][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 454.936581][ T5933] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 454.949084][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.015163][ T9900] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 455.070921][ T5933] hub 2-1:1.0: bad descriptor, ignoring hub [ 455.076879][ T5933] hub 2-1:1.0: probe with driver hub failed with error -5 [ 455.086842][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 455.092435][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 455.097836][ T5933] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 455.141434][ T92] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 455.274188][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 455.292290][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.311615][ T92] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.322177][ T92] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 455.332163][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.343513][ T92] usb 4-1: config 0 descriptor?? [ 455.826291][ T30] audit: type=1400 audit(1744139206.797:578): avc: denied { write } for pid=9921 comm="syz.2.1129" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 455.885797][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 455.904273][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 455.919133][ T10] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 455.927972][ T10] usb 1-1: config 106 has no interface number 0 [ 455.934764][ T10] usb 1-1: config 106 interface 8 has no altsetting 0 [ 456.090132][ T92] usbhid 4-1:0.0: can't add hid device: -71 [ 456.098548][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 456.110183][ T92] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 456.121405][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.129419][ T10] usb 1-1: Product: syz [ 456.341121][ T9900] tipc: Disabling bearer [ 456.371590][ T92] usb 4-1: USB disconnect, device number 51 [ 456.388205][ T10] usb 1-1: Manufacturer: syz [ 456.409999][ T10] usb 1-1: SerialNumber: syz [ 456.891629][ T5875] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 457.056858][ T5873] usb 2-1: USB disconnect, device number 46 [ 457.657980][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 457.674119][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.684442][ T5875] usb 5-1: config 0 has no interfaces? [ 457.693732][ T5875] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 457.797099][ T9943] tipc: Enabling of bearer rejected, already enabled [ 458.262971][ T10] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 458.273510][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.299121][ T10] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 458.316366][ T5875] usb 5-1: Product: syz [ 458.326460][ T10] usb 1-1: USB disconnect, device number 46 [ 458.332502][ T5875] usb 5-1: Manufacturer: syz [ 458.332527][ T5875] usb 5-1: SerialNumber: syz [ 458.357906][ T5875] usb 5-1: config 0 descriptor?? [ 458.432152][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 458.450443][ T5873] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 459.182475][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1140'. [ 459.433354][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.490614][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.514257][ T5873] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 459.526620][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 459.540055][ T5873] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 459.570169][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.709774][ T9943] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 459.719614][ T5873] hub 3-1:1.0: bad descriptor, ignoring hub [ 459.736988][ T5873] hub 3-1:1.0: probe with driver hub failed with error -5 [ 459.756156][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 461.040390][ T5873] cdc_wdm 3-1:1.0: skipping garbage [ 461.045809][ T5873] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 461.156799][ T5873] usb 3-1: USB disconnect, device number 44 [ 461.158196][ T5933] usb 5-1: USB disconnect, device number 38 [ 461.850367][ T5877] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 461.858031][ T5873] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 462.831024][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.842873][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.853520][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 462.862788][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.870966][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short [ 462.880447][ T5873] usb 5-1: not running at top speed; connect to a high speed hub [ 462.889470][ T5877] usb 1-1: config 0 descriptor?? [ 463.069199][ T5873] usb 5-1: config 106 has an invalid interface number: 8 but max is 0 [ 463.111472][ T5835] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 463.130870][ T5873] usb 5-1: config 106 has no interface number 0 [ 463.168540][ T5873] usb 5-1: config 106 interface 8 has no altsetting 0 [ 463.221555][ T5873] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 463.261296][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.269951][ T5873] usb 5-1: Product: syz [ 463.274402][ T5873] usb 5-1: Manufacturer: syz [ 463.279407][ T5873] usb 5-1: SerialNumber: syz [ 463.316295][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 463.328480][ T5835] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 463.337723][ T5835] usb 3-1: config 179 has no interface number 0 [ 463.344616][ T5835] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 463.371302][ T5835] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 463.383522][ T5835] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.395587][ T5835] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 463.406300][ T5835] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 463.420201][ T5835] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 463.429834][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.450075][ T9983] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 463.469114][ T5835] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 464.249624][ T5877] usbhid 1-1:0.0: can't add hid device: -71 [ 464.399785][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 464.411372][ T5877] usb 1-1: USB disconnect, device number 47 [ 464.504269][ T9983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.511578][ T9983] IPv6: NLM_F_CREATE should be set when creating new route [ 464.518787][ T9983] IPv6: NLM_F_CREATE should be set when creating new route [ 465.194864][ T5933] usb 3-1: USB disconnect, device number 45 [ 465.724324][ T5873] kalmia 5-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 465.788892][ T5873] kalmia 5-1:106.8: probe with driver kalmia failed with error -22 [ 465.816764][ T5873] usb 5-1: USB disconnect, device number 39 [ 466.028163][T10006] tipc: Enabling of bearer rejected, failed to enable media [ 466.600719][ T5933] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 467.070448][ T48] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 467.100085][T10018] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 467.106699][T10018] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 467.118401][T10018] vhci_hcd vhci_hcd.0: Device attached [ 467.254309][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 467.254317][ T5933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.254372][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.426014][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 467.436292][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.470366][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 467.481657][ T92] vhci_hcd: vhci_device speed not set [ 467.497439][ T48] usb 3-1: config 0 has no interfaces? [ 467.513582][ T48] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 467.523138][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.537540][ T48] usb 3-1: Product: syz [ 467.540651][ T92] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 467.551359][ T48] usb 3-1: Manufacturer: syz [ 467.566476][ T5933] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 467.570303][ T48] usb 3-1: SerialNumber: syz [ 467.577705][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.654718][T10007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 467.664658][ T5933] hub 2-1:1.0: bad descriptor, ignoring hub [ 467.671529][ T5933] hub 2-1:1.0: probe with driver hub failed with error -5 [ 467.679113][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 467.680374][ T5873] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 467.684669][ T5933] cdc_wdm 2-1:1.0: skipping garbage [ 467.699757][ T48] usb 3-1: config 0 descriptor?? [ 467.705889][ T5933] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 467.850444][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 467.857798][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.893305][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 467.905429][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 467.947481][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.979706][ T5873] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 467.993204][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.001492][ T5873] usb 4-1: Product: syz [ 468.005836][ T5873] usb 4-1: Manufacturer: syz [ 468.011949][ T5873] usb 4-1: SerialNumber: syz [ 468.040210][ T5873] usb 4-1: config 0 descriptor?? [ 468.066352][ T5873] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65 [ 469.130993][ T9] usb 2-1: USB disconnect, device number 47 [ 470.277961][ T9] usb 3-1: USB disconnect, device number 46 [ 470.284333][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 470.955555][T10019] vhci_hcd: connection reset by peer [ 471.090338][ T5873] imon:send_packet: packet tx failed (-71) [ 471.109303][ T54] vhci_hcd: stop threads [ 471.123099][ T5873] imon 4-1:0.0: panel buttons/knobs setup failed [ 471.131652][ T54] vhci_hcd: release socket [ 471.136456][ T54] vhci_hcd: disconnect device [ 471.231362][ T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 471.531348][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.600708][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 471.611453][ T5873] rc_core: IR keymap rc-imon-pad not found [ 471.634536][ T5873] Registered IR keymap rc-empty [ 471.657484][ T9] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 471.658925][ T5873] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 471.701445][ T5873] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 471.721812][ T5873] imon:send_packet: packet tx failed (-71) [ 471.732985][ T9] usb 3-1: config 106 has no interface number 0 [ 471.739305][ T9] usb 3-1: config 106 interface 8 has no altsetting 0 [ 471.740677][ T5873] imon 4-1:0.0: remote input dev register failed [ 471.810950][ T5873] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 471.813097][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 471.852243][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.877948][ T9] usb 3-1: Product: syz [ 471.929929][ T9] usb 3-1: Manufacturer: syz [ 472.017897][ T9] usb 3-1: SerialNumber: syz [ 472.560706][ T5873] imon 4-1:0.0: unable to initialize intf0, err 0 [ 472.580405][ T5873] imon:imon_probe: failed to initialize context! [ 472.687140][T10077] tipc: Enabling of bearer rejected, failed to enable media [ 472.702081][ T92] vhci_hcd: vhci_device speed not set [ 472.968609][ T5873] imon 4-1:0.0: unable to register, err -19 [ 473.088721][ T5873] usb 4-1: USB disconnect, device number 52 [ 473.153360][ T5933] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 473.562415][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.606859][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.627838][ T5933] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 473.658688][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 473.717307][ T5933] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 473.759777][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1172'. [ 473.852902][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.869383][T10078] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 473.881405][ T5933] hub 1-1:1.0: bad descriptor, ignoring hub [ 474.169993][ T9] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 474.845167][ T5933] hub 1-1:1.0: probe with driver hub failed with error -5 [ 474.852659][ T9] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 474.861443][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 474.867729][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 474.881035][ T9] usb 3-1: USB disconnect, device number 47 [ 474.887213][ T5933] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 475.644508][T10094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 475.651102][T10094] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 475.690617][T10094] vhci_hcd vhci_hcd.0: Device attached [ 475.843387][T10102] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 475.849961][T10102] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 475.890697][ T5835] usb 1-1: USB disconnect, device number 48 [ 475.932135][T10102] vhci_hcd vhci_hcd.0: Device attached [ 475.963252][ T5873] vhci_hcd: vhci_device speed not set [ 476.063651][ T5877] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 476.071844][ T5873] usb 39-1: new full-speed USB device number 8 using vhci_hcd [ 476.232373][ T5835] vhci_hcd: vhci_device speed not set [ 476.290530][ T48] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 476.300731][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 476.347302][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.366115][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 476.382863][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.394030][ T5835] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 476.421861][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.480903][ T5877] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 476.509716][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.524695][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 476.545189][ T5877] usb 4-1: Product: syz [ 476.549485][ T5877] usb 4-1: Manufacturer: syz [ 476.560971][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.575035][ T5877] usb 4-1: SerialNumber: syz [ 476.592811][ T5877] usb 4-1: config 0 descriptor?? [ 476.598749][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 476.627918][ T5877] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input67 [ 476.680945][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.806810][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.865369][ T48] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 476.887084][T10119] No control pipe specified [ 476.892053][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.900178][ T48] usb 5-1: Product: syz [ 476.952399][ T48] usb 5-1: Manufacturer: syz [ 476.967279][ T48] usb 5-1: SerialNumber: syz [ 477.110856][ T48] usb 5-1: config 0 descriptor?? [ 477.421268][ T48] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input69 [ 478.197429][ T5877] imon:send_packet: packet tx failed (-71) [ 478.198183][T10096] vhci_hcd: connection reset by peer [ 478.241087][ T5877] imon 4-1:0.0: panel buttons/knobs setup failed [ 478.263285][ T7142] vhci_hcd: stop threads [ 478.267694][ T7142] vhci_hcd: release socket [ 478.307627][ T7142] vhci_hcd: disconnect device [ 478.954823][ T5877] rc_core: IR keymap rc-imon-pad not found [ 479.092481][ T5877] Registered IR keymap rc-empty [ 479.097483][ T5877] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 479.108202][ T5877] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 479.118045][ T5877] imon:send_packet: packet tx failed (-71) [ 479.155077][ T48] imon:send_packet: packet tx failed (-71) [ 479.164740][ T5877] imon 4-1:0.0: remote input dev register failed [ 479.181691][T10105] vhci_hcd: connection reset by peer [ 479.199362][ T5877] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 479.216862][ T48] imon 5-1:0.0: panel buttons/knobs setup failed [ 479.251295][ T1046] vhci_hcd: stop threads [ 479.262606][ T1046] vhci_hcd: release socket [ 479.345399][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 479.539513][ T1046] vhci_hcd: disconnect device [ 479.810636][ T48] rc_core: IR keymap rc-imon-pad not found [ 479.816834][ T48] Registered IR keymap rc-empty [ 479.867955][ T48] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 479.901696][ T48] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 479.916331][ T5877] imon 4-1:0.0: unable to initialize intf0, err 0 [ 479.923274][ T5877] imon:imon_probe: failed to initialize context! [ 479.930469][ T5877] imon 4-1:0.0: unable to register, err -19 [ 479.930594][ T48] imon:send_packet: packet tx failed (-71) [ 479.973162][ T5877] usb 4-1: USB disconnect, device number 53 [ 480.030850][ T48] imon 5-1:0.0: remote input dev register failed [ 480.043952][ T48] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 480.100989][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 481.300470][ T5873] vhci_hcd: vhci_device speed not set [ 481.346996][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.362073][ T48] imon 5-1:0.0: unable to initialize intf0, err 0 [ 481.370308][ T48] imon:imon_probe: failed to initialize context! [ 481.376705][ T48] imon 5-1:0.0: unable to register, err -19 [ 481.386766][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.393245][ T48] usb 5-1: USB disconnect, device number 40 [ 481.460492][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 481.469633][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.595026][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 481.615774][ T5835] vhci_hcd: vhci_device speed not set [ 482.234183][ T9] usb 1-1: config 0 descriptor?? [ 482.989951][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 483.007684][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 483.555171][ T9] usb 1-1: USB disconnect, device number 49 [ 483.860166][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 484.370465][ T5835] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 485.630552][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 485.707132][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.729397][ T5835] usb 3-1: config 0 has no interfaces? [ 485.738914][ T5835] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 485.750792][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.759409][ T5835] usb 3-1: Product: syz [ 485.765869][ T5835] usb 3-1: Manufacturer: syz [ 485.771128][ T5835] usb 3-1: SerialNumber: syz [ 485.796115][ T5835] usb 3-1: config 0 descriptor?? [ 485.811957][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 487.180656][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 487.320906][ T9] usb 4-1: device descriptor read/64, error -71 [ 488.220375][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 488.360883][ T9] usb 4-1: device descriptor read/64, error -71 [ 488.515070][ T9] usb usb4-port1: attempt power cycle [ 488.690491][T10219] tipc: Enabled bearer , priority 0 [ 488.858636][T10219] syzkaller0: entered promiscuous mode [ 488.864272][T10219] syzkaller0: entered allmulticast mode [ 488.872280][T10219] tipc: Resetting bearer [ 489.001437][ T92] usb 3-1: USB disconnect, device number 48 [ 489.116760][ T7142] tipc: Resetting bearer [ 489.190708][ T5835] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 489.310647][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 489.384643][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.485675][ T9] usb 4-1: device descriptor read/8, error -71 [ 489.520807][ T5835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.529778][ T5835] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 489.603258][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 489.620455][ T5835] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 489.652564][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 489.660333][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.839395][T10219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 489.877295][ T5835] hub 1-1:1.0: bad descriptor, ignoring hub [ 489.927117][ T5835] hub 1-1:1.0: probe with driver hub failed with error -5 [ 489.955371][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 489.976038][ T5835] cdc_wdm 1-1:1.0: skipping garbage [ 489.982090][ T5835] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 490.074235][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'. [ 490.271630][ T92] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 490.590547][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 490.691861][ T92] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 490.782774][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 490.798020][ T92] usb 3-1: config 0 has no interface number 0 [ 490.950590][ T92] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 491.003671][ T5906] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 491.042561][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 491.058216][ T92] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 491.079400][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.095927][ T9] usb 4-1: config 0 has no interfaces? [ 491.101559][ T92] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 491.112602][ T92] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024 [ 491.126142][ T92] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 491.126251][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 491.145675][ T92] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25135, setting to 1024 [ 491.157294][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.172372][ T92] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 491.183973][ T9] usb 4-1: Product: syz [ 491.193525][ T9] usb 4-1: Manufacturer: syz [ 491.201806][ T9] usb 4-1: SerialNumber: syz [ 491.208900][ T92] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 491.222240][ T9] usb 4-1: config 0 descriptor?? [ 491.232553][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.261591][ T92] usb 3-1: Product: syz [ 491.264839][T10261] No control pipe specified [ 491.268945][ T92] usb 3-1: Manufacturer: syz [ 491.276260][ T92] usb 3-1: SerialNumber: syz [ 491.288831][ T92] usb 3-1: config 0 descriptor?? [ 491.301851][T10238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 491.315538][T10238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 491.328442][T10238] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 491.342510][ T92] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 491.423415][T10219] tipc: Resetting bearer [ 491.510628][ T92] usb 1-1: USB disconnect, device number 50 [ 493.098403][T10219] tipc: Disabling bearer [ 493.233776][T10277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1230'. [ 493.312188][ T5906] usb 4-1: USB disconnect, device number 57 [ 493.315933][T10238] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.353573][T10238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 493.396064][T10238] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 493.407231][T10238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.415706][ T30] audit: type=1400 audit(1744139244.387:579): avc: denied { bind } for pid=10286 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 493.445038][T10238] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 493.475110][T10238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 493.485931][ T30] audit: type=1400 audit(1744139244.427:580): avc: denied { read } for pid=10286 comm="syz.3.1234" path="socket:[26497]" dev="sockfs" ino=26497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 493.510992][T10238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 493.594433][ T5906] usb 3-1: USB disconnect, device number 49 [ 493.990662][ T5906] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 494.143116][ T5835] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 494.155108][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.277011][ T30] audit: type=1400 audit(1744139245.197:581): avc: denied { create } for pid=10299 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 494.351397][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.519290][ T30] audit: type=1400 audit(1744139245.217:582): avc: denied { write } for pid=10299 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 494.539745][ T5906] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 494.550239][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.610696][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 494.647953][ T5835] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 494.652128][ T5906] usb 3-1: config 0 descriptor?? [ 494.740071][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.946026][ T5835] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.962799][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.978081][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.033876][T10311] No control pipe specified [ 495.047199][ T5835] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 495.057050][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.068607][ T5835] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.244931][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.256956][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.269886][ T5835] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 495.277394][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 495.288681][ T5835] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.300363][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 495.315311][ T5835] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.347850][ T5835] usb 5-1: string descriptor 0 read error: -22 [ 495.390997][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 495.416375][ T5835] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 495.500808][T10320] tipc: Enabled bearer , priority 0 [ 495.666881][T10320] syzkaller0: entered promiscuous mode [ 495.672484][T10320] syzkaller0: entered allmulticast mode [ 495.681027][T10320] tipc: Resetting bearer [ 495.775364][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 495.781085][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 495.794227][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 495.801562][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 495.808401][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.822830][ T5906] usb 3-1: USB disconnect, device number 50 [ 495.875530][ T7141] tipc: Resetting bearer [ 495.880707][ T5835] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 495.910625][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 495.990442][ T5873] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 496.017018][ T30] audit: type=1400 audit(1744139246.987:583): avc: denied { setopt } for pid=10324 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 496.048271][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.061965][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 496.067562][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.079461][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.098182][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.107193][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.127001][ T5906] usb 5-1: USB disconnect, device number 41 [ 496.137781][ T9] usb 1-1: config 0 has no interfaces? [ 496.152115][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.153948][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 496.175115][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.184872][ T9] usb 1-1: Product: syz [ 496.189101][ T9] usb 1-1: Manufacturer: syz [ 496.197228][ T9] usb 1-1: SerialNumber: syz [ 496.223576][ T9] usb 1-1: config 0 descriptor?? [ 496.250489][ T5933] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 496.300362][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 496.309298][ T5873] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 496.326640][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 496.350397][ T5873] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 496.359502][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.391474][ T5933] usb 2-1: device descriptor read/64, error -71 [ 496.407899][T10320] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 496.426745][ T5873] hub 4-1:1.0: bad descriptor, ignoring hub [ 496.435200][ T5873] hub 4-1:1.0: probe with driver hub failed with error -5 [ 496.443348][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 496.448589][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 496.454738][ T5873] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 496.650437][ T5933] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 496.790440][ T5933] usb 2-1: device descriptor read/64, error -71 [ 496.902806][ T5933] usb usb2-port1: attempt power cycle [ 497.010504][ T5906] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 497.170517][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 497.184016][ T5906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 497.193429][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.202226][ T5906] usb 3-1: Product: syz [ 497.206718][ T5906] usb 3-1: Manufacturer: syz [ 497.211668][ T5906] usb 3-1: SerialNumber: syz [ 497.219129][ T5906] usb 3-1: config 0 descriptor?? [ 497.231457][ T9] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 497.260792][ T5933] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 497.281111][ T5933] usb 2-1: device descriptor read/8, error -71 [ 497.431990][ T5906] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.470596][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 497.546648][ T5933] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 497.581572][ T5933] usb 2-1: device descriptor read/8, error -71 [ 497.850511][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 497.856978][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 498.041696][ T5933] usb usb2-port1: unable to enumerate USB device [ 498.109056][T10321] tipc: Resetting bearer [ 498.254290][ T5933] usb 4-1: USB disconnect, device number 58 [ 498.416979][ T5873] usb 1-1: USB disconnect, device number 51 [ 498.498947][T10346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.563653][ T30] audit: type=1400 audit(1744139249.527:584): avc: denied { bind } for pid=10347 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 498.604849][ T30] audit: type=1400 audit(1744139249.547:585): avc: denied { allowed } for pid=10347 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 499.550405][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 499.637092][ T5906] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 499.712301][ T5906] usb 3-1: USB disconnect, device number 51 [ 499.862810][T10321] tipc: Disabling bearer [ 500.016287][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 500.046513][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 500.067221][T10357] FAULT_INJECTION: forcing a failure. [ 500.067221][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 500.092520][ T9] usb 5-1: can't read configurations, error -71 [ 500.099043][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.3.1256 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 500.099069][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.099080][T10357] Call Trace: [ 500.099088][T10357] [ 500.099096][T10357] dump_stack_lvl+0x16c/0x1f0 [ 500.099133][T10357] should_fail_ex+0x512/0x640 [ 500.099158][T10357] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 500.099184][T10357] should_failslab+0xc2/0x120 [ 500.099207][T10357] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 500.099226][T10357] ? __alloc_skb+0x2b2/0x380 [ 500.099255][T10357] __alloc_skb+0x2b2/0x380 [ 500.099275][T10357] ? __pfx___alloc_skb+0x10/0x10 [ 500.099294][T10357] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 500.099324][T10357] netlink_alloc_large_skb+0x69/0x130 [ 500.099347][T10357] netlink_sendmsg+0x6a1/0xdd0 [ 500.099373][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.099400][T10357] ____sys_sendmsg+0xa95/0xc70 [ 500.099424][T10357] ? copy_msghdr_from_user+0x10a/0x160 [ 500.099441][T10357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.099470][T10357] ___sys_sendmsg+0x134/0x1d0 [ 500.099488][T10357] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.099527][T10357] __sys_sendmsg+0x16d/0x220 [ 500.099545][T10357] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.099568][T10357] ? rcu_is_watching+0x12/0xc0 [ 500.099595][T10357] do_syscall_64+0xcd/0x260 [ 500.099617][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.099633][T10357] RIP: 0033:0x7f309618d169 [ 500.099646][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.099660][T10357] RSP: 002b:00007f3096fb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.099675][T10357] RAX: ffffffffffffffda RBX: 00007f30963a5fa0 RCX: 00007f309618d169 [ 500.099684][T10357] RDX: 0000000000000810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 500.099693][T10357] RBP: 00007f3096fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 500.099701][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.099709][T10357] R13: 0000000000000000 R14: 00007f30963a5fa0 R15: 00007ffcc8079a98 [ 500.099728][T10357] [ 500.393592][ T5906] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 500.527579][ T30] audit: type=1400 audit(1744139251.497:586): avc: denied { write } for pid=10373 comm="syz.4.1262" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 500.587020][ T30] audit: type=1400 audit(1744139251.557:587): avc: denied { bind } for pid=10373 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 500.825228][ T30] audit: type=1400 audit(1744139251.787:588): avc: denied { write } for pid=10373 comm="syz.4.1262" path="socket:[26877]" dev="sockfs" ino=26877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.016815][ T30] audit: type=1400 audit(1744139251.957:589): avc: denied { read } for pid=10373 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 501.052896][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 501.071882][ T5906] usb 1-1: not running at top speed; connect to a high speed hub [ 501.182698][ T5906] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 501.195843][ T5906] usb 1-1: config 106 has no interface number 0 [ 501.243944][ T5906] usb 1-1: config 106 interface 8 has no altsetting 0 [ 501.254203][ T5906] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 501.264002][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.272415][ T5906] usb 1-1: Product: syz [ 501.276751][ T5906] usb 1-1: Manufacturer: syz [ 501.282347][ T5906] usb 1-1: SerialNumber: syz [ 502.450929][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.457815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.661537][T10399] tipc: Enabled bearer , priority 0 [ 502.700870][T10399] syzkaller0: entered promiscuous mode [ 502.706413][T10399] syzkaller0: entered allmulticast mode [ 502.713079][T10399] tipc: Resetting bearer [ 503.636897][ T5906] kalmia 1-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 503.683394][ T7141] tipc: Resetting bearer [ 503.697726][ T5906] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 503.748891][ T5906] usb 1-1: USB disconnect, device number 52 [ 503.876952][T10408] FAULT_INJECTION: forcing a failure. [ 503.876952][T10408] name failslab, interval 1, probability 0, space 0, times 0 [ 503.907953][T10408] CPU: 0 UID: 0 PID: 10408 Comm: syz.0.1272 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 503.907984][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 503.907996][T10408] Call Trace: [ 503.908004][T10408] [ 503.908012][T10408] dump_stack_lvl+0x16c/0x1f0 [ 503.908049][T10408] should_fail_ex+0x512/0x640 [ 503.908074][T10408] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 503.908103][T10408] should_failslab+0xc2/0x120 [ 503.908125][T10408] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 503.908144][T10408] ? rcu_is_watching+0x12/0xc0 [ 503.908170][T10408] ? property_entries_dup.part.0+0x3d9/0xa00 [ 503.908203][T10408] kstrdup+0x53/0x100 [ 503.908227][T10408] property_entries_dup.part.0+0x3d9/0xa00 [ 503.908258][T10408] fwnode_create_software_node+0xad/0x3f0 [ 503.908282][T10408] device_create_managed_software_node+0x103/0x270 [ 503.908310][T10408] iommufd_test+0x1566/0x6100 [ 503.908350][T10408] ? __pfx_iommufd_test+0x10/0x10 [ 503.908376][T10408] ? find_held_lock+0x2b/0x80 [ 503.908407][T10408] ? __might_fault+0xe3/0x190 [ 503.908440][T10408] iommufd_fops_ioctl+0x33c/0x4e0 [ 503.908460][T10408] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 503.908481][T10408] ? hook_file_ioctl_common+0x145/0x410 [ 503.908510][T10408] ? selinux_file_ioctl+0x180/0x270 [ 503.908537][T10408] ? selinux_file_ioctl+0xb4/0x270 [ 503.908563][T10408] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 503.908582][T10408] __x64_sys_ioctl+0x190/0x200 [ 503.908610][T10408] do_syscall_64+0xcd/0x260 [ 503.908635][T10408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.908654][T10408] RIP: 0033:0x7f40bc58d169 [ 503.908669][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.908686][T10408] RSP: 002b:00007f40bd3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.908704][T10408] RAX: ffffffffffffffda RBX: 00007f40bc7a5fa0 RCX: 00007f40bc58d169 [ 503.908715][T10408] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 503.908725][T10408] RBP: 00007f40bd3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 503.908736][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.908746][T10408] R13: 0000000000000000 R14: 00007f40bc7a5fa0 R15: 00007ffebc4cfa08 [ 503.908770][T10408] [ 503.909461][T10408] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 504.390436][ T5873] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 504.856403][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.947273][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 505.033749][ T5873] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 505.048230][ T5873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 505.135138][ T5873] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 505.147917][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.251822][T10399] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 505.265199][ T5873] hub 4-1:1.0: bad descriptor, ignoring hub [ 505.271348][ T5873] hub 4-1:1.0: probe with driver hub failed with error -5 [ 505.285461][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 505.294688][ T5873] cdc_wdm 4-1:1.0: skipping garbage [ 505.300015][ T5873] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 505.371800][ T92] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 505.407128][T10399] tipc: Resetting bearer [ 505.481237][ T5906] usb 4-1: USB disconnect, device number 59 [ 505.584864][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 505.660484][ T5873] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 505.665625][ T92] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 505.716323][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.724536][ T92] usb 5-1: Product: syz [ 505.737021][ T92] usb 5-1: Manufacturer: syz [ 505.749632][ T92] usb 5-1: SerialNumber: syz [ 505.794509][ T92] usb 5-1: config 0 descriptor?? [ 505.824521][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.858579][ T5873] usb 3-1: not running at top speed; connect to a high speed hub [ 505.888310][ T5873] usb 3-1: config 106 has an invalid interface number: 8 but max is 0 [ 505.901428][ T5873] usb 3-1: config 106 has no interface number 0 [ 505.907814][ T5873] usb 3-1: config 106 interface 8 has no altsetting 0 [ 505.917651][ T5873] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 505.930397][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.938828][ T5873] usb 3-1: Product: syz [ 505.943126][ T5873] usb 3-1: Manufacturer: syz [ 505.949333][ T5873] usb 3-1: SerialNumber: syz [ 506.021108][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.035772][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.059105][ T30] audit: type=1400 audit(1744139257.027:590): avc: denied { module_request } for pid=10428 comm="syz.4.1269" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 506.319765][ T5875] usb 5-1: USB disconnect, device number 44 [ 506.997436][T10457] FAULT_INJECTION: forcing a failure. [ 506.997436][T10457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.021392][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.4.1287 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 507.021427][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.021438][T10457] Call Trace: [ 507.021446][T10457] [ 507.021457][T10457] dump_stack_lvl+0x16c/0x1f0 [ 507.021497][T10457] should_fail_ex+0x512/0x640 [ 507.021522][T10457] _copy_from_iter+0x2a4/0x15b0 [ 507.021549][T10457] ? _copy_from_iter+0x161/0x15b0 [ 507.021565][T10457] ? __pfx__copy_from_iter+0x10/0x10 [ 507.021587][T10457] ? __pfx__copy_from_iter+0x10/0x10 [ 507.021612][T10457] copy_page_from_iter+0xa5/0x120 [ 507.021632][T10457] skb_copy_datagram_from_iter+0x2a0/0x740 [ 507.021661][T10457] unix_stream_sendmsg+0x4ae/0x1160 [ 507.021701][T10457] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 507.021733][T10457] ____sys_sendmsg+0xa95/0xc70 [ 507.021759][T10457] ? copy_msghdr_from_user+0x10a/0x160 [ 507.021777][T10457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.021809][T10457] ___sys_sendmsg+0x134/0x1d0 [ 507.021830][T10457] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.021875][T10457] __sys_sendmsg+0x16d/0x220 [ 507.021898][T10457] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.021922][T10457] ? rcu_is_watching+0x12/0xc0 [ 507.021950][T10457] do_syscall_64+0xcd/0x260 [ 507.021972][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.021989][T10457] RIP: 0033:0x7f90ded8d169 [ 507.022003][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.022019][T10457] RSP: 002b:00007f90dfc7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.022036][T10457] RAX: ffffffffffffffda RBX: 00007f90defa5fa0 RCX: 00007f90ded8d169 [ 507.022047][T10457] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 507.022055][T10457] RBP: 00007f90dfc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 507.022065][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.022077][T10457] R13: 0000000000000000 R14: 00007f90defa5fa0 R15: 00007ffda505e0e8 [ 507.022100][T10457] [ 507.451011][T10399] tipc: Disabling bearer [ 507.560700][ T5875] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 507.717002][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 507.755044][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 507.756703][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.882933][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.014045][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.067367][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 508.099401][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.116618][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 508.267432][ T5875] usb 5-1: SerialNumber: syz [ 508.294296][ T5875] cdc_acm 5-1:1.0: skipping garbage [ 508.738846][ T5873] kalmia 3-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 508.768302][ T48] usb 5-1: USB disconnect, device number 45 [ 508.786076][ T5873] kalmia 3-1:106.8: probe with driver kalmia failed with error -22 [ 508.839781][ T5873] usb 3-1: USB disconnect, device number 52 [ 508.848792][ T30] audit: type=1400 audit(1744139259.817:591): avc: denied { create } for pid=10470 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 508.995241][ T30] audit: type=1400 audit(1744139259.847:592): avc: denied { ioctl } for pid=10470 comm="syz.1.1292" path="socket:[27009]" dev="sockfs" ino=27009 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 508.998170][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 509.067396][ T30] audit: type=1400 audit(1744139260.037:593): avc: denied { write } for pid=10473 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 509.428935][T10471] veth0_to_team: entered promiscuous mode [ 509.667751][T10471] veth0_to_team: entered allmulticast mode [ 510.094363][T10496] tipc: New replicast peer: 255.255.255.255 [ 510.104878][T10496] tipc: Enabled bearer , priority 10 [ 510.176219][ T30] audit: type=1400 audit(1744139261.107:594): avc: denied { listen } for pid=10495 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 510.479055][ T30] audit: type=1400 audit(1744139261.447:595): avc: denied { read } for pid=10507 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 511.260355][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 512.691759][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.161601][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 515.066766][ T9] usb 2-1: can't read configurations, error -71 [ 515.072068][ T5877] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 515.451246][ T5877] usb 5-1: device descriptor read/all, error -71 [ 515.544447][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 515.712642][T10535] kvm: emulating exchange as write [ 515.739769][ T30] audit: type=1400 audit(1744139266.707:596): avc: denied { ioctl } for pid=10530 comm="syz.2.1311" path="socket:[27128]" dev="sockfs" ino=27128 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 516.150763][ T5877] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 516.190734][ T5875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 516.340820][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 516.361355][ T5877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 516.380658][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 516.382512][T10554] lo speed is unknown, defaulting to 1000 [ 516.397196][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 516.409986][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.422555][ T5875] usb 3-1: config 0 has no interfaces? [ 516.428478][ T5877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 516.454232][ T5875] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 516.469715][ T5877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.486743][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.495011][ T5875] usb 3-1: Product: syz [ 516.499321][ T5877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.514730][ T5875] usb 3-1: Manufacturer: syz [ 516.520156][ T5875] usb 3-1: SerialNumber: syz [ 516.525050][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.538538][ T5875] usb 3-1: config 0 descriptor?? [ 516.824076][ T5877] usb 5-1: GET_CAPABILITIES returned 0 [ 516.884289][ T5877] usbtmc 5-1:16.0: can't read capabilities [ 517.188496][ T5877] usb 5-1: USB disconnect, device number 47 [ 519.149973][ T30] audit: type=1400 audit(1744139270.117:597): avc: denied { sqpoll } for pid=10575 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 519.214590][ T92] usb 3-1: USB disconnect, device number 53 [ 519.279116][T10579] No control pipe specified [ 519.289765][ T30] audit: type=1400 audit(1744139270.257:598): avc: denied { append } for pid=10580 comm="syz.3.1327" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 519.876724][ T30] audit: type=1400 audit(1744139270.847:599): avc: denied { read } for pid=10591 comm="syz.1.1330" path="socket:[28143]" dev="sockfs" ino=28143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 521.550709][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 523.200652][ T9] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 523.229003][ T30] audit: type=1400 audit(1744139274.197:600): avc: denied { read write } for pid=10643 comm="syz.4.1344" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.340675][ T5835] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 523.345431][ T30] audit: type=1400 audit(1744139274.197:601): avc: denied { open } for pid=10643 comm="syz.4.1344" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.482413][ T5835] usb 1-1: device descriptor read/64, error -71 [ 523.488083][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.513592][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.531069][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.538250][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.636510][T10652] No control pipe specified [ 523.650393][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 523.661974][ T30] audit: type=1400 audit(1744139274.227:602): avc: denied { ioctl } for pid=10643 comm="syz.4.1344" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 523.703727][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 523.729350][ T5835] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 523.729435][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 523.802996][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.821292][T10638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.830673][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 523.836616][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 523.844710][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 523.849941][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 523.857319][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 523.920630][ T5835] usb 1-1: device descriptor read/64, error -71 [ 524.040785][ T5835] usb usb1-port1: attempt power cycle [ 524.063485][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.123902][T10625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.295414][T10625] ipvlan0: left promiscuous mode [ 524.318773][T10625] ipvlan0: left allmulticast mode [ 524.332573][T10625] veth0_vlan: left allmulticast mode [ 524.391101][ T5835] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 524.404308][T10625] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.440529][T10625] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.469874][T10625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.499281][T10625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.592350][T10633] tipc: Enabled bearer , priority 0 [ 524.628809][T10628] syzkaller0: entered promiscuous mode [ 524.634400][T10628] syzkaller0: entered allmulticast mode [ 524.641071][T10628] tipc: Resetting bearer [ 524.647051][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1345'. [ 524.671931][ T5835] usb 1-1: device descriptor read/8, error -71 [ 524.808473][ T1046] tipc: Resetting bearer [ 524.881167][ T5839] block nbd0: Receive control failed (result -107) [ 525.060541][T10664] nbd0: detected capacity change from 0 to 67108884 [ 525.127989][ T6044] block nbd0: Dead connection, failed to find a fallback [ 525.139063][ T6044] block nbd0: shutting down sockets [ 525.147135][ T6044] blk_print_req_error: 36 callbacks suppressed [ 525.147796][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.168032][ T6044] buffer_io_error: 35 callbacks suppressed [ 525.168047][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.184973][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.195795][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.229699][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.309605][ T30] audit: type=1400 audit(1744139276.277:603): avc: denied { mounton } for pid=10660 comm="syz.3.1347" path="/proc/867/task" dev="proc" ino=28384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 525.486057][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.548768][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.762756][ T5835] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 525.776067][T10638] tipc: Resetting bearer [ 525.799170][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.816530][ T5835] usb 1-1: Using ep0 maxpacket: 8 [ 525.826024][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.839204][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 525.851321][ T5933] usb 2-1: USB disconnect, device number 55 [ 525.886103][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 525.911221][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 525.919270][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.145843][ T5835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.298925][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 526.307419][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.325643][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 526.329379][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 526.340800][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.352740][T10669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.383685][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.410635][T10674] xt_TCPMSS: Only works on TCP SYN packets [ 526.437601][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 526.442410][ T5835] usb 1-1: Product: syz [ 526.470098][ T5835] usb 1-1: Manufacturer: syz [ 526.470495][ T6044] ldm_validate_partition_table(): Disk read failed. [ 526.481383][ T5835] usb 1-1: SerialNumber: syz [ 526.499019][ T5835] usb 1-1: config 0 descriptor?? [ 526.500222][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.659033][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 526.677729][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 526.686884][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 526.705849][ T6044] Dev nbd0: unable to read RDB block 0 [ 526.714731][ T6044] nbd0: unable to read partition table [ 526.750210][ T5835] usbtest 1-1:0.0: Linux user mode ISO test driver [ 526.760889][ T5835] usbtest 1-1:0.0: high-speed {control iso-in} tests (+alt) [ 526.794585][ T6044] ldm_validate_partition_table(): Disk read failed. [ 526.818323][ T6044] Dev nbd0: unable to read RDB block 0 [ 526.840884][ T6044] nbd0: unable to read partition table [ 527.618332][ T5835] usb 1-1: USB disconnect, device number 56 [ 528.017492][T10638] tipc: Disabling bearer [ 528.303430][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 528.823151][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 529.318798][T10702] No control pipe specified [ 531.307256][T10720] FAULT_INJECTION: forcing a failure. [ 531.307256][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.321280][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.2.1363 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 531.321306][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.321317][T10720] Call Trace: [ 531.321331][T10720] [ 531.321339][T10720] dump_stack_lvl+0x16c/0x1f0 [ 531.321377][T10720] should_fail_ex+0x512/0x640 [ 531.321407][T10720] _copy_from_user+0x2e/0xd0 [ 531.321430][T10720] input_event_from_user+0x133/0x3b0 [ 531.321464][T10720] ? __pfx_input_event_from_user+0x10/0x10 [ 531.321490][T10720] ? __pfx___might_resched+0x10/0x10 [ 531.321519][T10720] ? input_inject_event+0x1a5/0x390 [ 531.321549][T10720] evdev_write+0x37b/0x750 [ 531.321579][T10720] ? __pfx_evdev_write+0x10/0x10 [ 531.321608][T10720] ? vfs_write+0x1ee/0x1180 [ 531.321631][T10720] vfs_write+0x25c/0x1180 [ 531.321645][T10720] ? __pfx_evdev_write+0x10/0x10 [ 531.321675][T10720] ? __pfx_vfs_write+0x10/0x10 [ 531.321689][T10720] ? find_held_lock+0x2b/0x80 [ 531.321716][T10720] ? __fget_files+0x204/0x3c0 [ 531.321739][T10720] ? __fget_files+0x20e/0x3c0 [ 531.321763][T10720] ksys_write+0x205/0x240 [ 531.321779][T10720] ? __pfx_ksys_write+0x10/0x10 [ 531.321803][T10720] do_syscall_64+0xcd/0x260 [ 531.321830][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.321849][T10720] RIP: 0033:0x7f6b9178d169 [ 531.321866][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.321883][T10720] RSP: 002b:00007f6b8f5b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.321902][T10720] RAX: ffffffffffffffda RBX: 00007f6b919a6160 RCX: 00007f6b9178d169 [ 531.321913][T10720] RDX: 0000000000000373 RSI: 0000200000000040 RDI: 0000000000000006 [ 531.321924][T10720] RBP: 00007f6b8f5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 531.321934][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.321945][T10720] R13: 0000000000000000 R14: 00007f6b919a6160 R15: 00007ffeb0cdf088 [ 531.321970][T10720] [ 533.895498][T10733] tipc: Enabled bearer , priority 0 [ 534.179126][T10733] syzkaller0: entered promiscuous mode [ 534.185149][T10733] syzkaller0: entered allmulticast mode [ 534.195841][T10733] tipc: Resetting bearer [ 534.708772][T10739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'. [ 534.780423][ T5933] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 535.001878][ T36] tipc: Resetting bearer [ 535.272139][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.300994][ T5933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 535.310011][ T5933] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 535.330359][ T5933] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 535.419128][ T5933] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 535.446422][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.578933][T10734] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 535.591242][ T5933] hub 1-1:1.0: bad descriptor, ignoring hub [ 535.597198][ T5933] hub 1-1:1.0: probe with driver hub failed with error -5 [ 535.608040][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 535.614349][ T5933] cdc_wdm 1-1:1.0: skipping garbage [ 535.813965][ T5933] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 537.873257][ T5933] usb 1-1: USB disconnect, device number 57 [ 537.972926][T10734] tipc: Resetting bearer [ 538.224058][ T5877] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 538.405453][ T5877] usb 4-1: device descriptor read/64, error -71 [ 539.643178][T10734] tipc: Disabling bearer [ 540.039330][T10765] No control pipe specified [ 540.522099][ T5906] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 540.684546][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.712295][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.754523][ T5906] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 540.789700][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.833457][ T5906] usb 1-1: config 0 descriptor?? [ 541.345188][ T5906] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 541.553854][ T5906] isku 0003:1E7D:319C.000D: couldn't init struct isku_device [ 541.572501][ T5906] isku 0003:1E7D:319C.000D: couldn't install keyboard [ 541.599158][ T5906] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -32 [ 541.633096][ T5906] usb 1-1: USB disconnect, device number 58 [ 541.800615][ T5875] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 541.833810][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1381'. [ 541.940695][ T5875] usb 2-1: device descriptor read/64, error -71 [ 542.350347][ T5875] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 542.405352][ T30] audit: type=1400 audit(1744139293.377:604): avc: denied { watch } for pid=10786 comm="syz.3.1383" path="/278" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 542.598736][ T30] audit: type=1400 audit(1744139293.377:605): avc: denied { watch_sb } for pid=10786 comm="syz.3.1383" path="/278" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 542.930444][ T5875] usb 2-1: device descriptor read/64, error -71 [ 543.102328][ T5875] usb usb2-port1: attempt power cycle [ 543.141027][T10792] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 543.147597][T10792] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 543.157160][T10792] vhci_hcd vhci_hcd.0: Device attached [ 543.331084][ T5835] vhci_hcd: vhci_device speed not set [ 543.404139][ T5835] usb 33-1: new full-speed USB device number 8 using vhci_hcd [ 543.416739][ T5877] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 543.462449][ T5875] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 543.514230][ T5875] usb 2-1: device descriptor read/8, error -71 [ 543.641102][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 543.661854][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.680351][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 543.700675][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 543.854468][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.882121][ T5877] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 543.910476][ T5875] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 544.860695][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.904569][ T5875] usb 2-1: device descriptor read/8, error -71 [ 544.910864][ T5877] usb 1-1: Product: syz [ 544.920430][ T5877] usb 1-1: Manufacturer: syz [ 544.925662][ T5877] usb 1-1: SerialNumber: syz [ 544.962315][ T5877] usb 1-1: config 0 descriptor?? [ 544.985948][ T5877] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input71 [ 545.041432][ T5875] usb usb2-port1: unable to enumerate USB device [ 547.156077][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 547.285672][ T5877] imon:send_packet: packet tx failed (-71) [ 547.306341][T10793] vhci_hcd: connection reset by peer [ 547.443211][ T7152] vhci_hcd: stop threads [ 547.454029][ T7152] vhci_hcd: release socket [ 547.476688][ T7152] vhci_hcd: disconnect device [ 547.537399][ T5877] imon 1-1:0.0: panel buttons/knobs setup failed [ 547.870425][ T5877] rc_core: IR keymap rc-imon-pad not found [ 548.090952][ T5877] Registered IR keymap rc-empty [ 548.147943][T10842] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1397'. [ 548.225357][ T5877] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 548.312110][ T5877] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 548.327622][ T30] audit: type=1400 audit(1744139299.297:606): avc: denied { write } for pid=10839 comm="syz.2.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 548.361121][ T5877] imon:send_packet: packet tx failed (-71) [ 548.410509][ T5877] imon 1-1:0.0: remote input dev register failed [ 548.417220][ T5877] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 548.560205][ T5877] imon 1-1:0.0: unable to initialize intf0, err 0 [ 548.567398][ T5877] imon:imon_probe: failed to initialize context! [ 548.577296][ T5877] imon 1-1:0.0: unable to register, err -19 [ 548.590759][ T5835] vhci_hcd: vhci_device speed not set [ 548.615726][ T5877] usb 1-1: USB disconnect, device number 59 [ 548.645331][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 548.750831][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 548.843676][T10855] gtp0: entered promiscuous mode [ 549.600513][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 549.607276][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.620209][ T9] usb 3-1: config 0 has no interfaces? [ 549.628333][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 549.729950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.786086][ T9] usb 3-1: Product: syz [ 549.808932][ T9] usb 3-1: Manufacturer: syz [ 549.833138][ T9] usb 3-1: SerialNumber: syz [ 549.840615][ T9] usb 3-1: config 0 descriptor?? [ 550.027627][T10873] FAULT_INJECTION: forcing a failure. [ 550.027627][T10873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.041338][T10873] CPU: 0 UID: 0 PID: 10873 Comm: syz.1.1404 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 550.041362][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.041374][T10873] Call Trace: [ 550.041381][T10873] [ 550.041388][T10873] dump_stack_lvl+0x16c/0x1f0 [ 550.041423][T10873] should_fail_ex+0x512/0x640 [ 550.041449][T10873] _copy_from_user+0x2e/0xd0 [ 550.041472][T10873] copy_msghdr_from_user+0x98/0x160 [ 550.041498][T10873] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 550.041523][T10873] ? kfree+0x252/0x4d0 [ 550.041557][T10873] ___sys_recvmsg+0xdb/0x1a0 [ 550.041578][T10873] ? __pfx____sys_recvmsg+0x10/0x10 [ 550.041612][T10873] ? __pfx___might_resched+0x10/0x10 [ 550.041644][T10873] do_recvmmsg+0x2fe/0x740 [ 550.041668][T10873] ? __pfx_do_recvmmsg+0x10/0x10 [ 550.041702][T10873] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.041732][T10873] __x64_sys_recvmmsg+0x22a/0x280 [ 550.041755][T10873] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 550.041784][T10873] do_syscall_64+0xcd/0x260 [ 550.041810][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.041828][T10873] RIP: 0033:0x7fcaf598d169 [ 550.041844][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.041860][T10873] RSP: 002b:00007fcaf67e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 550.041877][T10873] RAX: ffffffffffffffda RBX: 00007fcaf5ba6160 RCX: 00007fcaf598d169 [ 550.041889][T10873] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000006 [ 550.041900][T10873] RBP: 00007fcaf67e3090 R08: 0000000000000000 R09: 0000000000000000 [ 550.041910][T10873] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 550.041920][T10873] R13: 0000000000000000 R14: 00007fcaf5ba6160 R15: 00007ffe0802e968 [ 550.041944][T10873] [ 550.236452][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 551.270667][T10892] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.241506][ T30] audit: type=1400 audit(1744139303.207:607): avc: denied { accept } for pid=10893 comm="syz.0.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 552.679398][T10908] tipc: Enabled bearer , priority 0 [ 553.275650][T10908] syzkaller0: entered promiscuous mode [ 553.281241][T10908] syzkaller0: entered allmulticast mode [ 553.287544][T10908] tipc: Resetting bearer [ 554.754436][ T5933] usb 3-1: USB disconnect, device number 54 [ 554.791204][ T7152] tipc: Resetting bearer [ 554.915917][T10918] FAULT_INJECTION: forcing a failure. [ 554.915917][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 554.993452][T10918] CPU: 1 UID: 0 PID: 10918 Comm: syz.4.1419 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 554.993480][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.993490][T10918] Call Trace: [ 554.993497][T10918] [ 554.993505][T10918] dump_stack_lvl+0x16c/0x1f0 [ 554.993541][T10918] should_fail_ex+0x512/0x640 [ 554.993567][T10918] should_failslab+0xc2/0x120 [ 554.993591][T10918] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 554.993610][T10918] ? skb_clone+0x190/0x3f0 [ 554.993638][T10918] skb_clone+0x190/0x3f0 [ 554.993660][T10918] netlink_deliver_tap+0xabd/0xd30 [ 554.993690][T10918] netlink_unicast+0x5df/0x7f0 [ 554.993725][T10918] ? __pfx_netlink_unicast+0x10/0x10 [ 554.993755][T10918] netlink_sendmsg+0x8d1/0xdd0 [ 554.993780][T10918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.993811][T10918] ____sys_sendmsg+0xa95/0xc70 [ 554.993836][T10918] ? copy_msghdr_from_user+0x10a/0x160 [ 554.993854][T10918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.993888][T10918] ___sys_sendmsg+0x134/0x1d0 [ 554.993908][T10918] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.993956][T10918] __sys_sendmsg+0x16d/0x220 [ 554.993975][T10918] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.994001][T10918] ? rcu_is_watching+0x12/0xc0 [ 554.994031][T10918] do_syscall_64+0xcd/0x260 [ 554.994057][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.994074][T10918] RIP: 0033:0x7f90ded8d169 [ 554.994088][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.994103][T10918] RSP: 002b:00007f90dfc7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.994120][T10918] RAX: ffffffffffffffda RBX: 00007f90defa5fa0 RCX: 00007f90ded8d169 [ 554.994131][T10918] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 554.994141][T10918] RBP: 00007f90dfc7e090 R08: 0000000000000000 R09: 0000000000000000 [ 554.994149][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.994158][T10918] R13: 0000000000000000 R14: 00007f90defa5fa0 R15: 00007ffda505e0e8 [ 554.994179][T10918] [ 555.306407][T10909] tipc: Resetting bearer [ 556.194095][ T5933] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 556.749925][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 556.776276][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.795838][ T5933] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 556.810860][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.835549][ T5933] usb 3-1: config 0 descriptor?? [ 556.980153][T10909] tipc: Disabling bearer [ 557.544343][ T5933] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 557.596578][ T5933] isku 0003:1E7D:319C.000E: couldn't init struct isku_device [ 557.630330][ T5933] isku 0003:1E7D:319C.000E: couldn't install keyboard [ 557.663154][ T5933] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -5 [ 557.857909][ T5933] usb 3-1: USB disconnect, device number 55 [ 558.706778][T10951] FAULT_INJECTION: forcing a failure. [ 558.706778][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 558.810781][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1430 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 558.810809][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.810819][T10951] Call Trace: [ 558.810825][T10951] [ 558.810832][T10951] dump_stack_lvl+0x16c/0x1f0 [ 558.810863][T10951] should_fail_ex+0x512/0x640 [ 558.810887][T10951] should_failslab+0xc2/0x120 [ 558.810908][T10951] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 558.810929][T10951] ? sidtab_sid2str_get+0x17a/0x680 [ 558.810960][T10951] kmemdup_noprof+0x29/0x60 [ 558.810989][T10951] sidtab_sid2str_get+0x17a/0x680 [ 558.811016][T10951] sidtab_entry_to_string+0x33/0x110 [ 558.811042][T10951] security_sid_to_context_core+0x35c/0x640 [ 558.811069][T10951] avc_audit_post_callback+0x109/0x8f0 [ 558.811098][T10951] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 558.811121][T10951] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 558.811144][T10951] ? skb_put+0x138/0x1b0 [ 558.811172][T10951] ? audit_log_n_string+0x253/0x540 [ 558.811207][T10951] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 558.811231][T10951] common_lsm_audit+0x24b/0x300 [ 558.811255][T10951] ? __pfx_common_lsm_audit+0x10/0x10 [ 558.811279][T10951] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.811301][T10951] ? avc_update_node.isra.0+0x4c0/0xb60 [ 558.811318][T10951] slow_avc_audit+0x186/0x210 [ 558.811335][T10951] ? __pfx_slow_avc_audit+0x10/0x10 [ 558.811353][T10951] ? avc_denied+0x14a/0x190 [ 558.811370][T10951] ? avc_has_perm_noaudit+0x306/0x3b0 [ 558.811390][T10951] avc_has_perm+0x18b/0x1c0 [ 558.811408][T10951] ? __pfx_avc_has_perm+0x10/0x10 [ 558.811427][T10951] ? find_held_lock+0x2b/0x80 [ 558.811453][T10951] sock_has_perm+0x252/0x2f0 [ 558.811472][T10951] ? __pfx_sock_has_perm+0x10/0x10 [ 558.811491][T10951] ? proc_fail_nth_write+0x9f/0x250 [ 558.811526][T10951] ? find_held_lock+0x2b/0x80 [ 558.811550][T10951] security_socket_getsockopt+0x211/0x240 [ 558.811571][T10951] do_sock_getsockopt+0xf4/0x800 [ 558.811595][T10951] ? __print_lock_name+0x30/0xe0 [ 558.811615][T10951] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 558.811637][T10951] ? __fget_files+0x204/0x3c0 [ 558.811665][T10951] __sys_getsockopt+0x12f/0x260 [ 558.811690][T10951] __x64_sys_getsockopt+0xbd/0x160 [ 558.811708][T10951] ? do_syscall_64+0x91/0x260 [ 558.811729][T10951] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.811747][T10951] do_syscall_64+0xcd/0x260 [ 558.811768][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.811785][T10951] RIP: 0033:0x7f40bc58d169 [ 558.811800][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.811815][T10951] RSP: 002b:00007f40bd3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 558.811833][T10951] RAX: ffffffffffffffda RBX: 00007f40bc7a5fa0 RCX: 00007f40bc58d169 [ 558.811844][T10951] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 558.811853][T10951] RBP: 00007f40bd3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 558.811862][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.811871][T10951] R13: 0000000000000000 R14: 00007f40bc7a5fa0 R15: 00007ffebc4cfa08 [ 558.811893][T10951] [ 559.185232][T10958] tipc: Started in network mode [ 559.190128][T10958] tipc: Node identity 065bce07f34b, cluster identity 4711 [ 559.197431][T10958] tipc: Enabled bearer , priority 0 [ 559.237058][T10958] syzkaller0: entered promiscuous mode [ 559.242631][T10958] syzkaller0: entered allmulticast mode [ 559.248979][T10958] tipc: Resetting bearer [ 559.289266][ T30] audit: type=1400 audit(2000000001.250:608): avc: denied { getopt } for pid=10950 comm="syz.0.1430" ssid=146 tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 560.417786][ T5877] tipc: Node number set to 4111519239 [ 560.423262][T10144] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 561.797130][T10963] Falling back ldisc for ttyprintk. [ 562.313719][ T7143] tipc: Resetting bearer [ 563.175098][ T5839] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 563.183329][ T5839] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 563.186993][T10958] tipc: Resetting bearer [ 563.800345][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.806708][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.939934][T10958] tipc: Disabling bearer [ 566.355321][T11009] netlink: 'syz.4.1446': attribute type 21 has an invalid length. [ 566.367585][T11009] netlink: 'syz.4.1446': attribute type 6 has an invalid length. [ 566.377156][T11009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1446'. [ 566.574948][T11016] FAULT_INJECTION: forcing a failure. [ 566.574948][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 566.588347][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.3.1441 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 566.588372][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.588383][T11016] Call Trace: [ 566.588390][T11016] [ 566.588398][T11016] dump_stack_lvl+0x16c/0x1f0 [ 566.588432][T11016] should_fail_ex+0x512/0x640 [ 566.588452][T11016] ? __kmalloc_noprof+0xbf/0x510 [ 566.588475][T11016] ? create_rule.isra.0+0x6e/0x390 [ 566.588500][T11016] should_failslab+0xc2/0x120 [ 566.588521][T11016] __kmalloc_noprof+0xd2/0x510 [ 566.588545][T11016] create_rule.isra.0+0x6e/0x390 [ 566.588574][T11016] insert_rule+0x64a/0x890 [ 566.588602][T11016] ? __pfx_insert_rule+0x10/0x10 [ 566.588627][T11016] ? __pfx___might_resched+0x10/0x10 [ 566.588653][T11016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.588678][T11016] inherit_tree+0x13d/0x250 [ 566.588706][T11016] landlock_merge_ruleset+0x1d9/0x870 [ 566.588733][T11016] ? prepare_creds+0x583/0x7d0 [ 566.588755][T11016] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 566.588784][T11016] do_syscall_64+0xcd/0x260 [ 566.588811][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.588829][T11016] RIP: 0033:0x7f309618d169 [ 566.588845][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.588861][T11016] RSP: 002b:00007f3096f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 566.588884][T11016] RAX: ffffffffffffffda RBX: 00007f30963a6160 RCX: 00007f309618d169 [ 566.588896][T11016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 566.588906][T11016] RBP: 00007f3096f77090 R08: 0000000000000000 R09: 0000000000000000 [ 566.588917][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.588927][T11016] R13: 0000000000000000 R14: 00007f30963a6160 R15: 00007ffcc8079a98 [ 566.588952][T11016] [ 566.589667][T11016] ------------[ cut here ]------------ [ 566.783978][T11016] WARNING: CPU: 1 PID: 11016 at security/landlock/domain.h:133 free_ruleset+0x226/0x270 [ 566.793978][T11016] Modules linked in: [ 566.797884][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.3.1441 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 566.808248][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.818341][T11016] RIP: 0010:free_ruleset+0x226/0x270 [ 566.823651][T11016] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 82 9b 2a fd be 03 00 00 00 4c 89 f7 e8 65 f7 3e 00 e9 42 ff ff ff e8 6b 9b 2a fd 90 <0f> 0b 90 eb af e8 d0 01 90 fd e9 4a fe ff ff 48 89 df e8 c3 01 90 [ 566.843310][T11016] RSP: 0018:ffffc90005627e38 EFLAGS: 00010293 [ 566.849359][T11016] RAX: 0000000000000000 RBX: ffff8880203de200 RCX: ffffffff8491996f [ 566.857545][T11016] RDX: ffff88802602c880 RSI: ffffffff8490a255 RDI: 0000000000000005 [ 566.865557][T11016] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 566.873566][T11016] R10: 0000000000000000 R11: fffffffffffcba90 R12: ffff88807e993000 [ 566.881555][T11016] R13: dffffc0000000000 R14: ffff8880203de220 R15: fffffffffffffff4 [ 566.889706][T11016] FS: 00007f3096f776c0(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 566.898852][T11016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.905750][T11016] CR2: 00007f3096f75f00 CR3: 0000000033110000 CR4: 00000000003526f0 [ 566.913796][T11016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 566.921786][T11016] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 566.929757][T11016] Call Trace: [ 566.933039][T11016] [ 566.935954][T11016] landlock_put_ruleset+0xa5/0xb0 [ 566.941001][T11016] landlock_merge_ruleset+0x218/0x870 [ 566.946365][T11016] ? prepare_creds+0x583/0x7d0 [ 566.951135][T11016] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 566.957295][T11016] do_syscall_64+0xcd/0x260 [ 566.961881][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.967773][T11016] RIP: 0033:0x7f309618d169 [ 566.972204][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.992348][T11016] RSP: 002b:00007f3096f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 567.000955][T11016] RAX: ffffffffffffffda RBX: 00007f30963a6160 RCX: 00007f309618d169 [ 567.008928][T11016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 567.016931][T11016] RBP: 00007f3096f77090 R08: 0000000000000000 R09: 0000000000000000 [ 567.024975][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.032960][T11016] R13: 0000000000000000 R14: 00007f30963a6160 R15: 00007ffcc8079a98 [ 567.040964][T11016] [ 567.043967][T11016] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 567.051323][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.3.1441 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 567.061630][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.071665][T11016] Call Trace: [ 567.074923][T11016] [ 567.077846][T11016] dump_stack_lvl+0x3d/0x1f0 [ 567.082437][T11016] panic+0x71c/0x800 [ 567.086348][T11016] ? __pfx_panic+0x10/0x10 [ 567.090750][T11016] ? show_trace_log_lvl+0x29b/0x3e0 [ 567.095943][T11016] ? check_panic_on_warn+0x1f/0xb0 [ 567.101037][T11016] ? free_ruleset+0x226/0x270 [ 567.105720][T11016] check_panic_on_warn+0xab/0xb0 [ 567.110639][T11016] __warn+0xf6/0x3c0 [ 567.114515][T11016] ? free_ruleset+0x226/0x270 [ 567.119179][T11016] report_bug+0x3c3/0x580 [ 567.123496][T11016] ? free_ruleset+0x226/0x270 [ 567.128160][T11016] handle_bug+0x184/0x210 [ 567.132480][T11016] exc_invalid_op+0x17/0x50 [ 567.136971][T11016] asm_exc_invalid_op+0x1a/0x20 [ 567.141806][T11016] RIP: 0010:free_ruleset+0x226/0x270 [ 567.147080][T11016] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 82 9b 2a fd be 03 00 00 00 4c 89 f7 e8 65 f7 3e 00 e9 42 ff ff ff e8 6b 9b 2a fd 90 <0f> 0b 90 eb af e8 d0 01 90 fd e9 4a fe ff ff 48 89 df e8 c3 01 90 [ 567.166685][T11016] RSP: 0018:ffffc90005627e38 EFLAGS: 00010293 [ 567.172735][T11016] RAX: 0000000000000000 RBX: ffff8880203de200 RCX: ffffffff8491996f [ 567.180699][T11016] RDX: ffff88802602c880 RSI: ffffffff8490a255 RDI: 0000000000000005 [ 567.188651][T11016] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 567.196608][T11016] R10: 0000000000000000 R11: fffffffffffcba90 R12: ffff88807e993000 [ 567.204562][T11016] R13: dffffc0000000000 R14: ffff8880203de220 R15: fffffffffffffff4 [ 567.212542][T11016] ? landlock_log_drop_domain+0x5f/0x1e0 [ 567.218269][T11016] ? free_ruleset+0x225/0x270 [ 567.222973][T11016] ? free_ruleset+0x225/0x270 [ 567.227641][T11016] landlock_put_ruleset+0xa5/0xb0 [ 567.232661][T11016] landlock_merge_ruleset+0x218/0x870 [ 567.238023][T11016] ? prepare_creds+0x583/0x7d0 [ 567.242776][T11016] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 567.248934][T11016] do_syscall_64+0xcd/0x260 [ 567.253428][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.259305][T11016] RIP: 0033:0x7f309618d169 [ 567.263724][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.283338][T11016] RSP: 002b:00007f3096f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 567.291739][T11016] RAX: ffffffffffffffda RBX: 00007f30963a6160 RCX: 00007f309618d169 [ 567.299694][T11016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 567.307648][T11016] RBP: 00007f3096f77090 R08: 0000000000000000 R09: 0000000000000000 [ 567.315686][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.323636][T11016] R13: 0000000000000000 R14: 00007f30963a6160 R15: 00007ffcc8079a98 [ 567.331610][T11016] [ 567.334831][T11016] Kernel Offset: disabled [ 567.339134][T11016] Rebooting in 86400 seconds..