last executing test programs: 29.328602123s ago: executing program 1 (id=1526): userfaultfd(0x80001) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 24.800528695s ago: executing program 2 (id=1528): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) 23.029539596s ago: executing program 2 (id=1530): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 22.893780907s ago: executing program 0 (id=1532): r0 = syz_open_procfs(0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) 22.663438486s ago: executing program 1 (id=1533): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 21.156630906s ago: executing program 2 (id=1534): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x57d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xea, 0x7b, 0x97, 0x20, 0x3340, 0x191c, 0xb10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56b, 0x3, 0x10, 0x9, 0x40, 0x72, [{{0x9, 0x4, 0x27, 0x0, 0x3, 0x52, 0x74, 0xfa, 0x9, [@hid_hid={0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x23c}}], [{{0x9, 0x5, 0x5, 0x8, 0x8, 0x7, 0x73, 0xfc, [@generic={0x41, 0x30, "72805341bfb29704d8fd074d66aad92739bc99328652c96f1e61313dcbab4f22833a121b65d3f69888d63237b5fde3337a245c46c4615073f4c61a95a79e79"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x5, 0xc, 0x7, [@generic={0x4f, 0x7, "6cb85156ff3dc633a41fc40ea7424af9f87f52bae5245cfcc44276d5b53342ba9f0e042520af0e6a62049a86672b70260a182f22ba678fb74fa539792442aa7134cd36cf9799f355acbe260b57"}, @generic={0x86, 0x30, "ff91e73c7799a22cfb08518b7b0b78c596d124b81adee5cd9caeb69036b54aa7e82096669d225d6d8bdc09407beb7c8f9fcbad2597fc05f86dbda5bcdee5944a5ecffbdcffaca1dec4e42e5246aa5ca544ebbe88400fad4d45380b0c2cda845cdf2a52ad44a123193c36efff08742803f103cc528d9dde340c1bfa3b2b9ebdd2420f7af3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xf8, 0x83, 0x81, [@generic={0x5d, 0x22, "e71d72355e690cae662ce70340b2af8be44f67f2fb1d741b8ee73768dad94797c15e06f2818ebb219452339db82fdf8ff19656548ecf7ebfcf1fc42c1a4e8a205bce8121efa59ad48ebd64bb49002529e884819f7077b519c61887"}]}}]}}, {{0x9, 0x4, 0xdb, 0x4, 0x5, 0x26, 0x99, 0xc9, 0x2a, [@generic={0x37, 0x23, "b763325701e196e6e5b6e4612142b875466d1cff08390ce5807d712ebc18f7dfa04836995f572fa9894c0e7dfa2b134b48914f7c00"}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x6, 0x2, 0xce}]}], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x8, 0xa, 0x78, [@generic={0x62, 0x23, "a39928fdcdc3b8a08201cfddb201e3befc78ed3740f670708471815dc570da72ea6588c882e2175763397cdf5b2c2ff46fef353be86e1aa1274c2f9a491e9bc78e6641a8bfd2b56d5fa9ad02f20d0fea68ed0637365ed75c5eec2b8dfa2beeee"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x7, 0xfe, [@generic={0x59, 0xb, "219e08d6cb995924fae9bbae07826e2ac0442062fd795baa7141450599becc5369b4c51846cdcfb2aac9c47d78170cb41528a965e505eee539f8802f9cb3004b04319f63595e35cac73444744145bd423a03b2b7a9f629"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x91, 0x6, 0x7, [@generic={0xa2, 0x31, "baf8ec194a14615711c2b10c5d775248634074ce45b20bcba4c62330ea73ec90857fccbc2d500b786c95c7e30ac51913903bdd9e790439a082c2e90e8485f00b1416bd32c8a51265f50c2e07a345436414ad188861678b6879f897d2814c813ee963742755b7eb5c677508814fc811325b1c006056241cbcb4b14733461cda8272c463ce4f10007db809bf89df64a0d00431ca3f7b9d768f2fd8023a2dcd7bf0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0xca, 0x9, [@generic={0x36, 0x21, "72431f005dbaf8e2e53276a570bfd981d238f09d4ac68472d76ffdf00e9fa485fe7a255a5c864097c5c8a069b0b690fca6954e42"}, @generic={0xe7, 0x4, "414d5637e2d3131651176452fa06864e62548f6c48d35aeb68f035bdcc605c3b2a3e18686db0d88f5d67a631b9519e92683ec8351a884c6edc054b548c22de836aaec80302ccbc829a1a4d4701644b37440a2c21fee1fbd410ae5553d2e08d83af74a7eea2104b3b2f66f67b2f4e744bf94edc155bee22ba3ed1676d7a560c5d4a0a204a8eb4e4884d1a3d3b19c816665cf64782ae138c1d048b707b0fdb95b9ad0340348ec2e057839a7e9ca789c416a714fcbdeb6f4a898681ec912fa68568cb1efb4e6f6a1893b03653beae2a7cc1ecf8d97b1a996a3b9d31c752d7abf4ce8a5f9f11b8"}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x1, 0x33, 0x90, 0xe0, 0xd, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "7abe83baf26f"}, {0x5, 0x24, 0x0, 0x6462}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x3ff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x1, [0xffff]}]}, @generic={0x69, 0x21, "84dfc2b36e38ba4ad39e0b358b5ad55ec18d1f43235e55408355f3be851c0ccda61b44cdf87eb959fa6eb5125f5f506a67bfd4f318b67b2d20d35bb88222db2c878ee7473be98425842e37a7725b9fc22b25dd2d238ebfed951308994b0c2eb5be74f043d13564"}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa3, 0x40}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x5, 0x7, 0x4, 0x10, 0x3}, 0xa8, &(0x7f0000000080)={0x5, 0xf, 0xa8, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "104c07b2b939b1639846f6b99ae39cb6"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x8e, 0x0, 0xae01, [0xff3fc0, 0x3f3f]}, @ptm_cap={0x3}, @generic={0x78, 0x10, 0x4, "6448db8198b3cb9d14dd415bafbad9d82d03566e0b10e7270ad2fd127905910abb06513c32e0ec96b56c4237bdce77684f651152f503ed87f240b1d1c1bfa3a027775c213750b0bdce91e71847a15f01954bf7a0b7792406b80b326a3fe5d14b1991316c7767e3c5a3cc021691f9754b0bafc04cad"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x0, 0x24, 0xd8, {0xd8, 0x31, "0788615c29d9fe69ff689f89ce0f7cf5e85ed3ac5e8409b84037a44fc3074a4f2ff3c4cb489cb35a0f401fdc3e53c31bdc4877fc45e02ed4d21b9f3678be0c728e9185100fddb9cb99d6ebd742e32c0a1c6dd733f3d74c18a712b48506e53d9f469edea4875b416329f7de88277adf2659f69edbc3c631b335062475154b59edb0a4c7a91289f63831eb69cc27f94ecb705594d60d8b6e0cd8f4af3f278ba2ed96dc5ab2dbbc4378d38215a1bf5f3dfb4711187f8ab04dc125fe763c2c971e652d46ba807f8c913313c14f6c34536f051cd918ef1e71"}}, &(0x7f0000000880)={0x0, 0x3, 0x76, @string={0x76, 0x3, "92ca8f4f390aed854922f3940499fe8484386d25fcdaf2f7fc3631b0fa320cf627c884dc4bbb15ddba87f658d20905a000622d206194f8cc33928d82be603b408ddeeada99db5b875e7bc838b20017f7375694bcecb231952ef7bdbc1e862e0afbc0bbc35c4c79889cb78dcaa96b2490995e88e9"}}}, &(0x7f0000000bc0)={0x34, &(0x7f0000000a00)={0x20, 0xe, 0x97, "b89042c6c722b75e80c0a839337054cf3e266fabfa47c98009720068ef55ffde8d942cabdd6a43a68e7d00e217ce4c1b2faf2ef6a437540652254c7295630ebbda651b51bcf88bc5fb310a4557e23b11c2d36208e98cad65a476ec3c5453f083d92f031ba843161944fa4e6ba8da5cc42cd96783ad09c753344a2aa511541dfe270e2c9c08734824000599dcf1728097975b9a0a3f5c2a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000ac0)={0x20, 0x0, 0x7a, {0x78, "ec0023b8a33be3ddb7e66b2503c21837150b38b32764f11ee8a2c22eb6ad8c9884acb7943bca93a67f73b036f32b0dc8fec55f8edc7f022d8930cce0c89c737d42b86dc1916d3b9bf014e052fb0ce372bf07f483c8b1207b8f0401a8f1887b9ae0f8d8551aa9b327d98c34862a259bcf16e38978e870d7bf"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0xb}}) 21.112421409s ago: executing program 4 (id=1535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "1721"}, 0x14) futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() 19.986639419s ago: executing program 3 (id=1536): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x20, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x145, 0x145, 0x5, [@volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x9}}, @func_proto, @ptr={0x9, 0x0, 0x0, 0x2, 0x2}, @enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0xb, 0x27}, {0xe, 0xc8}, {0xd, 0x4}, {0xc, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x3c, 0x2}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x9, [{0x4, 0x1, 0x3af}, {0x7, 0x3, 0x1}, {0x5, 0x1, 0x4}]}, @datasec={0xf, 0xa, 0x0, 0xf, 0x1, [{0x4, 0x101, 0x10000}, {0x1, 0xf, 0xf93}, {0x5, 0x6cf, 0x7}, {0x3, 0x3, 0x8}, {0x1, 0x800, 0x4}, {0x3, 0x0, 0x7186}, {0x3, 0x9, 0xc2}, {0x3, 0x3, 0xe9a}, {0x3, 0x5, 0x80000001}, {0x1, 0x1, 0x61e7}], ';'}]}, {0x0, [0x2e, 0x30, 0x2e]}}, &(0x7f00000008c0)=""/252, 0x165, 0xfc, 0x1, 0xb0, 0x10000, @value}, 0x28) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xe, &(0x7f0000000480)=@raw=[@exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @printk={@llx}], &(0x7f0000000500)='syzkaller\x00', 0x8, 0xed, &(0x7f0000000680)=""/237, 0x40f00, 0x2, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r5], &(0x7f0000000a80)=[{0x0, 0x5, 0x1, 0x8}, {0x1, 0x2, 0xa, 0xa}], 0x10, 0x5, @void, @value}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 19.357883963s ago: executing program 1 (id=1537): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}, 0x4, 0x8001, 0x4}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_usb_disconnect(r2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x0, 0x0, 0x40, 0x10000000}, 0x0, &(0x7f00000002c0)={0xd6fa, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 19.344788276s ago: executing program 4 (id=1538): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 19.006238616s ago: executing program 3 (id=1539): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x8000, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0x137) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r1 = inotify_init1(0x0) inotify_rm_watch(r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$radio(0x0, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0xffffffffffffff9d) sync() recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/57, 0x39}], 0xa, &(0x7f0000000b00)=""/201, 0xc9}, 0x3}], 0x1, 0x40018221, &(0x7f0000000c40)={0x0, 0x3938700}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 17.085994028s ago: executing program 4 (id=1540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000002100010000000000000000000200"], 0x34}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0xd) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x23894) getdents64(r4, &(0x7f0000000200)=""/179, 0xb3) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f00000000c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0xfffffffffffffdc1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[], 0x0) 17.085279301s ago: executing program 2 (id=1541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x48005) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) 17.071353206s ago: executing program 3 (id=1542): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x8000, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0x137) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0xffffffffffffff9d) sync() r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000000c00)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/57, 0x39}], 0xa, &(0x7f0000000b00)=""/201, 0xc9}, 0x3}], 0x1, 0x40018221, &(0x7f0000000c40)={0x0, 0x3938700}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.586490473s ago: executing program 2 (id=1543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000002100010000000000000000000200"], 0x34}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0xd) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x23894) getdents64(r3, &(0x7f0000000200)=""/179, 0xb3) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000000c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0xfffffffffffffdc1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r7, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[], 0x0) 15.543248356s ago: executing program 0 (id=1544): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0xffff0018) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) socket$kcm(0x29, 0x7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) 15.413209131s ago: executing program 1 (id=1545): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x68}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x18) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11.196095749s ago: executing program 3 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40080c4}, 0x20000000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aa013a37daf5dce1cebde65df45493536f29bb1c0dde6fa8781276434eb9d82a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000002000000014001a80100004800c00018008"], 0x34}}, 0x0) 10.79627675s ago: executing program 4 (id=1547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0xfffffffffffffffa, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000180)={0x20000005}) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x2f126000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) 9.809617911s ago: executing program 0 (id=1548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'wlan1\x00'}], 0xa, "1721"}, 0x14) futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() 9.497773821s ago: executing program 3 (id=1549): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x8000, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0x137) r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="b395af315714546038bae1cdc7da482405f430a9b7f1e3fd395c0d3b327d751982986756cf08c4a5ebda23e84f7f39eff4d5a53e1f2d0483eaffb4fc5385dda2069ad57f70050a1834b01fd7585a5e5988b18499299ddbe0b4b4c86df563b0bc2e8c0b6fe5e89edb04709a4fbcad571b00a4804674afe1521358b9685b6b45767e5981839023ca731f3ba6099884b036e633613611e5e4590025145ea8a565d12cbdd501ba8bbd3b9d42f5879ec15db416fec84b3d663f1fc4442be6fdfa87eff02d2757c358a367a2bb68608e40f9fb30d158a5173e43072a10f0ea8bbef607bf3b7d7cf30360ba116fa165607ab2988cc412e046b62097febfcf8f81c01f3707ad9c636622af37668721ec45483d6620ce20ccafe6bd8e39160b72a8f682bd1d3c2907bedfa28fe9e1c47dcea007ceda4f6e34bcae7d78ffffcb01beeaf0647cb691ed9e46f80e1a6d55779c53787e04a38e42beac6f4823a92bbc2085e20713a42a5f0e40790eac8b56b5389d6eeed9494a9884caac2251ff8172de60492377203d99751c82f6dd36c8597cd884b2e9db5a66b9667d8aef0ed67a9187ddf4d0f216ae2682e45f47d3bf65e152b742f13daadf761ec8691d8eb315e277e393d16593cbf4a33d78b2d0f05316e88c9a18ef456647f16294399f23557e31e9df067185d721644ed0bc4785fc0028375a36cd36c5a281ea50d4e210dbbfab65c72f6f0f8c500fcf0d82e3a4259d5a0abe3860f10f7d975b54e3da6a235acf7ebb8e33c2b5dda5497ee74482253840376a1ef7fded7c7b39649ca463a4cf16dc652bc74fe66b3f25a7360aaefb703e42d08d15ec96d65a2500b9505f527f716a2b13b4d4e657120ca8020576f39669aae8fb434ee251f13eb26ab9c68932aeb6f186419f19a1487097fc75e7d1f217503df91d5e5cc67a9f6cf692321bdf597b8a4dbf5acb6cc37eb13b0ee52ed5f0e165a5558c3f4c016299130f40b5c8920ee6cefcad8fc815faccdab8dd70c33a93e43751ac077bd6f551d06c394bbe5b5f0bf39a73d58a116481d0e0a8bcd92f67d01268a796bd05bd4ef6d0a52da265f964170bcef1505fbc8892c969ae9c1c5f7bc6f7bb4cf2902e9351aec9a120244afaec5fb8b56721fefd104b3bf96454cbae8ce7d8d9f421ad748fd82e0ee32e47f7a59c73f1f1dc354ad43d0ac31e81ae69293da7969d8bd72366069a2fbb9075497e297953b885918c87da3da59bbcd78af9348083cd14a046be0e781fe91826c725244b0cc2f38127942e37952a397c9041f4755cc81fc07096c776a6bbe27cccf48a0afca3bf88bada4b0acf6f57d77f2edc011977db0ca25a67ca06b3b8f7f409d0b49a80c5100e246ac479523780e82f1895315a74374ccb5b2bbcd00d5e0a0574eb2123fdcdd38798c5b524420e49e64e012c3c079c548fa65b3a44b62338c32817ce19a2650422b636867f59a7eba1c1eb450f19c9da1646df4c267fb031e159c2aff03008e1644201e08aadbf62ea31c6ffa6cab6389d34a0b92b4e33d11f11befa3d43f269bb14d42f361b887dc4db611572db2d092de419c96f8449ddd939caf8a56d985a070a2c3889c64faeaa7039f7ea13da7567f2fd9774197866bdbcea5d291693878a4133b05f208244be2212c888fb581ecbf7d306ab079fa85890dae09cedc6f77a44c2e7e4fdb309e2e121e157c8c0410b399e8940d982eb3302c3582b84830fa7d15a616f5da0f23858b3068cbe787bc8ebf3f72809290629ce323779cb0b33c1b32c1dd4214b572863d1b19cc369c365bab4a40f9fcd5c08411a6df0bbb9d86375d4302a251bc98d4f6863d07c3b7814636bfe198e4076e84e51b35a0ae5a392f4b6a287b964e7828d603d85e681d84e9e8dbf3ceab8b2fd5d0751110a4b871945f07ae8921e4639c7a87b00fa91e83a60417794307fa08993ccb2752f63c0d29692b6e6cf000fd59486bd88d400ea08d1ac4c5dd3c03b0e6225a118e911eac1a2ec61ec3fc7044d9595de7fd78a2260b94f16dfa61727e1311303a5bd462c5cd6baf1885a70c9e60026786b73112dfd15747e775a4731335b34d966e955481c48df394618637c20b486906dccca421d20f043799624c617836475fa0ee60ca900801e31a59a6afa9e2bfa56393ba2fb375ae8ff51ed3fe232607471247e440e708923fbe71ffb380a5a9149fc5d143f2e7c87e9221a259a42eae929e08b60e2d9ddbe3699766f8f7d7fab279156b0ffbeb187afe5c4695c6daf843b53b909711353b2024b339f01fe894459ad5fdb2d748034300ccbe16f5095c21d65ffb49f70e7c1d13c1c216175d8dccb3e097a06b2e3b9369600e169974477ed90b665", 0x688}], 0x1) close(0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0xffffffffffffff9d) sync() r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r2, &(0x7f0000000c00)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/57, 0x39}], 0xa, &(0x7f0000000b00)=""/201, 0xc9}, 0x3}], 0x1, 0x40018221, &(0x7f0000000c40)={0x0, 0x3938700}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 9.422453296s ago: executing program 2 (id=1550): r0 = syz_open_procfs(0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) 8.709935397s ago: executing program 0 (id=1551): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x48005) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) 8.572270663s ago: executing program 1 (id=1552): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x57d, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xea, 0x7b, 0x97, 0x20, 0x3340, 0x191c, 0xb10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56b, 0x3, 0x10, 0x9, 0x40, 0x72, [{{0x9, 0x4, 0x27, 0x0, 0x3, 0x52, 0x74, 0xfa, 0x9, [@hid_hid={0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x23c}}], [{{0x9, 0x5, 0x5, 0x8, 0x8, 0x7, 0x73, 0xfc, [@generic={0x41, 0x30, "72805341bfb29704d8fd074d66aad92739bc99328652c96f1e61313dcbab4f22833a121b65d3f69888d63237b5fde3337a245c46c4615073f4c61a95a79e79"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x5, 0xc, 0x7, [@generic={0x4f, 0x7, "6cb85156ff3dc633a41fc40ea7424af9f87f52bae5245cfcc44276d5b53342ba9f0e042520af0e6a62049a86672b70260a182f22ba678fb74fa539792442aa7134cd36cf9799f355acbe260b57"}, @generic={0x86, 0x30, "ff91e73c7799a22cfb08518b7b0b78c596d124b81adee5cd9caeb69036b54aa7e82096669d225d6d8bdc09407beb7c8f9fcbad2597fc05f86dbda5bcdee5944a5ecffbdcffaca1dec4e42e5246aa5ca544ebbe88400fad4d45380b0c2cda845cdf2a52ad44a123193c36efff08742803f103cc528d9dde340c1bfa3b2b9ebdd2420f7af3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xf8, 0x83, 0x81, [@generic={0x5d, 0x22, "e71d72355e690cae662ce70340b2af8be44f67f2fb1d741b8ee73768dad94797c15e06f2818ebb219452339db82fdf8ff19656548ecf7ebfcf1fc42c1a4e8a205bce8121efa59ad48ebd64bb49002529e884819f7077b519c61887"}]}}]}}, {{0x9, 0x4, 0xdb, 0x4, 0x5, 0x26, 0x99, 0xc9, 0x2a, [@generic={0x37, 0x23, "b763325701e196e6e5b6e4612142b875466d1cff08390ce5807d712ebc18f7dfa04836995f572fa9894c0e7dfa2b134b48914f7c00"}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x6, 0x2, 0xce}]}], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x8, 0xa, 0x78, [@generic={0x62, 0x23, "a39928fdcdc3b8a08201cfddb201e3befc78ed3740f670708471815dc570da72ea6588c882e2175763397cdf5b2c2ff46fef353be86e1aa1274c2f9a491e9bc78e6641a8bfd2b56d5fa9ad02f20d0fea68ed0637365ed75c5eec2b8dfa2beeee"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x7, 0xfe, [@generic={0x59, 0xb, "219e08d6cb995924fae9bbae07826e2ac0442062fd795baa7141450599becc5369b4c51846cdcfb2aac9c47d78170cb41528a965e505eee539f8802f9cb3004b04319f63595e35cac73444744145bd423a03b2b7a9f629"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x91, 0x6, 0x7, [@generic={0xa2, 0x31, "baf8ec194a14615711c2b10c5d775248634074ce45b20bcba4c62330ea73ec90857fccbc2d500b786c95c7e30ac51913903bdd9e790439a082c2e90e8485f00b1416bd32c8a51265f50c2e07a345436414ad188861678b6879f897d2814c813ee963742755b7eb5c677508814fc811325b1c006056241cbcb4b14733461cda8272c463ce4f10007db809bf89df64a0d00431ca3f7b9d768f2fd8023a2dcd7bf0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0xca, 0x9, [@generic={0x36, 0x21, "72431f005dbaf8e2e53276a570bfd981d238f09d4ac68472d76ffdf00e9fa485fe7a255a5c864097c5c8a069b0b690fca6954e42"}, @generic={0xe7, 0x4, "414d5637e2d3131651176452fa06864e62548f6c48d35aeb68f035bdcc605c3b2a3e18686db0d88f5d67a631b9519e92683ec8351a884c6edc054b548c22de836aaec80302ccbc829a1a4d4701644b37440a2c21fee1fbd410ae5553d2e08d83af74a7eea2104b3b2f66f67b2f4e744bf94edc155bee22ba3ed1676d7a560c5d4a0a204a8eb4e4884d1a3d3b19c816665cf64782ae138c1d048b707b0fdb95b9ad0340348ec2e057839a7e9ca789c416a714fcbdeb6f4a898681ec912fa68568cb1efb4e6f6a1893b03653beae2a7cc1ecf8d97b1a996a3b9d31c752d7abf4ce8a5f9f11b8"}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x1, 0x33, 0x90, 0xe0, 0xd, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "7abe83baf26f"}, {0x5, 0x24, 0x0, 0x6462}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x3ff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x1, [0xffff]}]}, @generic={0x69, 0x21, "84dfc2b36e38ba4ad39e0b358b5ad55ec18d1f43235e55408355f3be851c0ccda61b44cdf87eb959fa6eb5125f5f506a67bfd4f318b67b2d20d35bb88222db2c878ee7473be98425842e37a7725b9fc22b25dd2d238ebfed951308994b0c2eb5be74f043d13564"}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa3, 0x40}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x5, 0x7, 0x4, 0x10, 0x3}, 0xa8, &(0x7f0000000080)={0x5, 0xf, 0xa8, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "104c07b2b939b1639846f6b99ae39cb6"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x8e, 0x0, 0xae01, [0xff3fc0, 0x3f3f]}, @ptm_cap={0x3}, @generic={0x78, 0x10, 0x4, "6448db8198b3cb9d14dd415bafbad9d82d03566e0b10e7270ad2fd127905910abb06513c32e0ec96b56c4237bdce77684f651152f503ed87f240b1d1c1bfa3a027775c213750b0bdce91e71847a15f01954bf7a0b7792406b80b326a3fe5d14b1991316c7767e3c5a3cc021691f9754b0bafc04cad"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x0, 0x24, 0xd8, {0xd8, 0x31, "0788615c29d9fe69ff689f89ce0f7cf5e85ed3ac5e8409b84037a44fc3074a4f2ff3c4cb489cb35a0f401fdc3e53c31bdc4877fc45e02ed4d21b9f3678be0c728e9185100fddb9cb99d6ebd742e32c0a1c6dd733f3d74c18a712b48506e53d9f469edea4875b416329f7de88277adf2659f69edbc3c631b335062475154b59edb0a4c7a91289f63831eb69cc27f94ecb705594d60d8b6e0cd8f4af3f278ba2ed96dc5ab2dbbc4378d38215a1bf5f3dfb4711187f8ab04dc125fe763c2c971e652d46ba807f8c913313c14f6c34536f051cd918ef1e71"}}, &(0x7f0000000880)={0x0, 0x3, 0x76, @string={0x76, 0x3, "92ca8f4f390aed854922f3940499fe8484386d25fcdaf2f7fc3631b0fa320cf627c884dc4bbb15ddba87f658d20905a000622d206194f8cc33928d82be603b408ddeeada99db5b875e7bc838b20017f7375694bcecb231952ef7bdbc1e862e0afbc0bbc35c4c79889cb78dcaa96b2490995e88e9"}}}, &(0x7f0000000bc0)={0x34, &(0x7f0000000a00)={0x20, 0xe, 0x97, "b89042c6c722b75e80c0a839337054cf3e266fabfa47c98009720068ef55ffde8d942cabdd6a43a68e7d00e217ce4c1b2faf2ef6a437540652254c7295630ebbda651b51bcf88bc5fb310a4557e23b11c2d36208e98cad65a476ec3c5453f083d92f031ba843161944fa4e6ba8da5cc42cd96783ad09c753344a2aa511541dfe270e2c9c08734824000599dcf1728097975b9a0a3f5c2a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000ac0)={0x20, 0x0, 0x7a, {0x78, "ec0023b8a33be3ddb7e66b2503c21837150b38b32764f11ee8a2c22eb6ad8c9884acb7943bca93a67f73b036f32b0dc8fec55f8edc7f022d8930cce0c89c737d42b86dc1916d3b9bf014e052fb0ce372bf07f483c8b1207b8f0401a8f1887b9ae0f8d8551aa9b327d98c34862a259bcf16e38978e870d7bf"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0xb}}) 7.88986437s ago: executing program 0 (id=1553): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r5 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x1, 0x2000008}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) 7.001683897s ago: executing program 4 (id=1554): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x8000, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0x137) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r1 = inotify_init1(0x0) inotify_rm_watch(r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$radio(0x0, 0x3, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0x688}], 0x1) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0xffffffffffffff9d) sync() recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/160, 0xa0}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/61, 0x3d}, {&(0x7f0000000a00)=""/57, 0x39}], 0xa, &(0x7f0000000b00)=""/201, 0xc9}, 0x3}], 0x1, 0x40018221, &(0x7f0000000c40)={0x0, 0x3938700}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 330.270618ms ago: executing program 0 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r3, 0x0, 0x900}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2fd60012002890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x4000855) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000002100010000000000000000000200"], 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xd) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x23894) getdents64(r5, &(0x7f0000000200)=""/179, 0xb3) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000000c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0xfffffffffffffdc1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r9, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 155.470204ms ago: executing program 3 (id=1556): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002280)={0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000200)) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x5000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r8 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r3, 0x3, r8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket(0x2, 0x80805, 0x0) 154.739562ms ago: executing program 1 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, r1, 0x1, 0x70bd25, 0x25dfdb7d, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0xc080) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r3, &(0x7f0000001f00)=""/4111, 0x100f) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c4ba2e4082058b007d64f5c3030109021200010000400009041909007c532400"], 0x0) 0s ago: executing program 4 (id=1558): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): changing to 10 [ 347.005114][ T10] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.018156][ T9891] FAULT_INJECTION: forcing a failure. [ 347.018156][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.040783][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 347.081690][ T9891] CPU: 0 UID: 0 PID: 9891 Comm: syz.1.1130 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 347.081716][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.081726][ T9891] Call Trace: [ 347.081731][ T9891] [ 347.081737][ T9891] dump_stack_lvl+0x16c/0x1f0 [ 347.081764][ T9891] should_fail_ex+0x512/0x640 [ 347.081785][ T9891] _copy_from_iter+0x2a4/0x15b0 [ 347.081806][ T9891] ? __alloc_skb+0x200/0x380 [ 347.081825][ T9891] ? __pfx__copy_from_iter+0x10/0x10 [ 347.081845][ T9891] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 347.081873][ T9891] netlink_sendmsg+0x829/0xdd0 [ 347.081898][ T9891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.081945][ T9891] ____sys_sendmsg+0xa95/0xc70 [ 347.081969][ T9891] ? copy_msghdr_from_user+0x10a/0x160 [ 347.081988][ T9891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.082021][ T9891] ___sys_sendmsg+0x134/0x1d0 [ 347.082040][ T9891] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.082085][ T9891] __sys_sendmsg+0x16d/0x220 [ 347.082103][ T9891] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.082129][ T9891] ? rcu_is_watching+0x12/0xc0 [ 347.082157][ T9891] do_syscall_64+0xcd/0x260 [ 347.082180][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.082196][ T9891] RIP: 0033:0x7f1590f8d169 [ 347.082211][ T9891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.082226][ T9891] RSP: 002b:00007f1591d3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.082242][ T9891] RAX: ffffffffffffffda RBX: 00007f15911a5fa0 RCX: 00007f1590f8d169 [ 347.082252][ T9891] RDX: 0000000000000800 RSI: 0000200000001080 RDI: 0000000000000005 [ 347.082262][ T9891] RBP: 00007f1591d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.082271][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.082280][ T9891] R13: 0000000000000000 R14: 00007f15911a5fa0 R15: 00007ffd8adc1c58 [ 347.082302][ T9891] [ 347.082430][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.303896][ T10] usb 1-1: config 0 descriptor?? [ 347.433065][ T5916] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 347.458403][ T5916] usb 5-1: USB disconnect, device number 42 [ 347.574447][ T5874] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 347.584403][ T5924] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 347.645427][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.711610][ T9881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.724935][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 347.732730][ T9881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.742290][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.758584][ T5924] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.762766][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 347.774281][ T5924] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 347.804304][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 347.813510][ T5924] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 347.829098][ T10] usbhid 1-1:0.66: can't add hid device: -71 [ 347.834298][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 347.837196][ T10] usbhid 1-1:0.66: probe with driver usbhid failed with error -71 [ 347.860311][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.873169][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.881187][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 347.881215][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 347.881233][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.889122][ T5874] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 347.896936][ T10] usb 1-1: USB disconnect, device number 39 [ 347.924269][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.964969][ T5924] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.979404][ T5874] usb 3-1: Product: syz [ 348.003539][ T5874] usb 3-1: Manufacturer: syz [ 348.029409][ T5874] usb 3-1: SerialNumber: syz [ 348.343308][ T5874] usb 3-1: config 0 descriptor?? [ 348.359041][ T9896] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.368442][ T5874] ati_remote 3-1:0.0: Initializing ati_remote hardware failed. [ 348.376136][ T5874] ati_remote 3-1:0.0: probe with driver ati_remote failed with error -5 [ 348.384634][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 348.458952][ T9910] netlink: 'syz.3.1135': attribute type 16 has an invalid length. [ 348.466886][ T9910] netlink: 'syz.3.1135': attribute type 17 has an invalid length. [ 348.800638][ T9910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.832760][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.865067][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.091543][ T9920] [U] 1WT`8H$09\ [ 349.097143][ T9920] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 349.108534][ T9920] [U] 4XZ^Y)MC. OȞPOW [ 349.124355][ T9920] [U] ä%Z [ 349.127742][ T9920] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 349.194940][ T5924] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 349.218201][ T9920] [U] P>BЍ̖Z% [ 349.222729][ T9920] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 349.250177][ T5924] usb 2-1: USB disconnect, device number 61 [ 349.294682][ T9920] [U] ܣK [ 349.298433][ T9920] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 349.306197][ T9920] [U] ^ [ 349.354160][ T9920] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 349.373783][ T9920] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 349.396024][ T9920] [U] ţԶDǂ`=ƁN<ʸ]Q [ 349.403307][ T9920] [U] KEZȒF9Ǩ{ [ 349.515251][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.682853][ T9922] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 349.713169][ T9929] FAULT_INJECTION: forcing a failure. [ 349.713169][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 349.725959][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.3.1140 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 349.725981][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.725991][ T9929] Call Trace: [ 349.725996][ T9929] [ 349.726002][ T9929] dump_stack_lvl+0x16c/0x1f0 [ 349.726027][ T9929] should_fail_ex+0x512/0x640 [ 349.726044][ T9929] ? fs_reclaim_acquire+0xae/0x150 [ 349.726067][ T9929] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 349.726089][ T9929] should_failslab+0xc2/0x120 [ 349.726108][ T9929] __kmalloc_noprof+0xd2/0x510 [ 349.726130][ T9929] tomoyo_realpath_from_path+0xc2/0x6e0 [ 349.726156][ T9929] ? tomoyo_profile+0x47/0x60 [ 349.726173][ T9929] tomoyo_path_number_perm+0x245/0x580 [ 349.726192][ T9929] ? tomoyo_path_number_perm+0x237/0x580 [ 349.726213][ T9929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.726233][ T9929] ? find_held_lock+0x2b/0x80 [ 349.726275][ T9929] ? find_held_lock+0x2b/0x80 [ 349.726292][ T9929] ? hook_file_ioctl_common+0x145/0x410 [ 349.726311][ T9929] ? __fget_files+0x20e/0x3c0 [ 349.726333][ T9929] security_file_ioctl+0x9b/0x240 [ 349.726357][ T9929] __x64_sys_ioctl+0xb7/0x200 [ 349.726381][ T9929] do_syscall_64+0xcd/0x260 [ 349.726404][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.726420][ T9929] RIP: 0033:0x7f2ee058d169 [ 349.726433][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.726448][ T9929] RSP: 002b:00007f2ee1423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.726463][ T9929] RAX: ffffffffffffffda RBX: 00007f2ee07a5fa0 RCX: 00007f2ee058d169 [ 349.726473][ T9929] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 349.726483][ T9929] RBP: 00007f2ee1423090 R08: 0000000000000000 R09: 0000000000000000 [ 349.726493][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.726502][ T9929] R13: 0000000000000000 R14: 00007f2ee07a5fa0 R15: 00007ffebe0c1228 [ 349.726524][ T9929] [ 349.726531][ T9929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.732393][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 349.856447][ T30] audit: type=1400 audit(1743736230.443:767): avc: denied { create } for pid=9934 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.858058][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 349.878474][ T9936] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.889853][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 349.899471][ T30] audit: type=1400 audit(1743736230.473:768): avc: denied { write } for pid=9934 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.902406][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 349.952707][ T30] audit: type=1400 audit(1743736230.543:769): avc: denied { mount } for pid=9895 comm="syz.2.1133" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 349.982721][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.053339][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.066721][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.076636][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.087587][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.097127][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.108405][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.118061][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.129366][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.139067][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.148394][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 350.161337][ T30] audit: type=1400 audit(1743736230.753:770): avc: denied { read write } for pid=9939 comm="syz.1.1144" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 350.196667][ T30] audit: type=1400 audit(1743736230.753:771): avc: denied { open } for pid=9939 comm="syz.1.1144" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 350.275741][ T30] audit: type=1400 audit(1743736230.823:772): avc: denied { ioctl } for pid=9939 comm="syz.1.1144" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 350.310532][ T30] audit: type=1400 audit(1743736230.823:773): avc: denied { ioctl } for pid=9939 comm="syz.1.1144" path="socket:[24596]" dev="sockfs" ino=24596 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 350.718250][ T9952] xt_hashlimit: size too large, truncated to 1048576 [ 351.202615][ T10] usb 3-1: USB disconnect, device number 51 [ 351.321643][ T9967] netlink: 'syz.2.1150': attribute type 3 has an invalid length. [ 351.460212][ T9977] [U] 1WT`8H$09\ [ 351.494557][ T9977] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 351.526271][ T9977] [U] 4XZ^Y)MC. OȞPOW [ 351.570030][ T9977] [U] ä%Z [ 351.593373][ T9977] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 351.601731][ T9977] [U] P>BЍ̖Z% [ 351.606635][ T9977] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 351.627304][ T9977] [U] ܣK [ 351.641647][ T9977] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 351.674145][ T9977] [U] ^ [ 351.677284][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 351.698673][ T9977] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 351.754722][ T9977] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 351.806498][ T9977] [U] ţԶDǂ`=ƁN<ʸ]Q [ 351.820713][ T9977] [U] KEZȒF9Ǩ{ [ 351.867531][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.877504][ T10] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 351.888972][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.898371][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 351.910251][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2033, setting to 1024 [ 351.953478][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.993331][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.005879][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.014121][ T10] usb 3-1: Product: syz [ 352.025230][ T10] usb 3-1: Manufacturer: syz [ 352.037870][ T30] audit: type=1400 audit(1743736232.633:774): avc: denied { setopt } for pid=9987 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 352.063104][ T9974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 352.072881][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 352.084479][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 352.123712][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 352.130350][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 352.209121][ T9968] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 352.285154][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.291871][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.299128][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.305727][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.311989][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.318575][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.324870][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.331441][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.337684][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.344285][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.350569][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.357143][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.363374][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.369976][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.376231][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.382806][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.389041][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.395607][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.401820][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 352.408566][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 352.477595][ T5874] usb 3-1: USB disconnect, device number 52 [ 352.478397][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 352.485928][ T9967] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 352.588123][ T9997] tipc: Started in network mode [ 352.593216][ T9997] tipc: Node identity 080211000001, cluster identity 4711 [ 352.600833][ T9997] tipc: Enabled bearer , priority 10 [ 352.848078][ T30] audit: type=1400 audit(1743736233.443:775): avc: denied { write } for pid=10000 comm="syz.4.1160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 352.869391][ T5829] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 353.285609][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.297292][ T5829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 353.712643][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.715911][ T5916] tipc: Node number set to 134418688 [ 353.727310][ T5829] usb 4-1: Product: syz [ 353.731668][ T5829] usb 4-1: Manufacturer: syz [ 353.736659][ T5829] usb 4-1: SerialNumber: syz [ 353.743669][ T5829] usb 4-1: config 0 descriptor?? [ 353.916975][T10018] FAULT_INJECTION: forcing a failure. [ 353.916975][T10018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.950477][T10018] CPU: 0 UID: 0 PID: 10018 Comm: syz.4.1165 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 353.950502][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.950511][T10018] Call Trace: [ 353.950517][T10018] [ 353.950523][T10018] dump_stack_lvl+0x16c/0x1f0 [ 353.950549][T10018] should_fail_ex+0x512/0x640 [ 353.950570][T10018] _copy_from_iter+0x2a4/0x15b0 [ 353.950590][T10018] ? __alloc_skb+0x200/0x380 [ 353.950608][T10018] ? __pfx__copy_from_iter+0x10/0x10 [ 353.950627][T10018] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 353.950655][T10018] netlink_sendmsg+0x829/0xdd0 [ 353.950679][T10018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.950708][T10018] ____sys_sendmsg+0xa95/0xc70 [ 353.950731][T10018] ? copy_msghdr_from_user+0x10a/0x160 [ 353.950749][T10018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.950781][T10018] ___sys_sendmsg+0x134/0x1d0 [ 353.950801][T10018] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.950847][T10018] __sys_sendmsg+0x16d/0x220 [ 353.950865][T10018] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.950890][T10018] ? rcu_is_watching+0x12/0xc0 [ 353.950917][T10018] do_syscall_64+0xcd/0x260 [ 353.950939][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.950956][T10018] RIP: 0033:0x7f39ff58d169 [ 353.950969][T10018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.950985][T10018] RSP: 002b:00007f3a003dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.951000][T10018] RAX: ffffffffffffffda RBX: 00007f39ff7a5fa0 RCX: 00007f39ff58d169 [ 353.951010][T10018] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 353.951019][T10018] RBP: 00007f3a003dd090 R08: 0000000000000000 R09: 0000000000000000 [ 353.951028][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.951035][T10018] R13: 0000000000000000 R14: 00007f39ff7a5fa0 R15: 00007ffdcb320e78 [ 353.951055][T10018] [ 354.187235][ T5829] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 354.193879][ T5829] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 354.243621][ T5829] usb 4-1: USB disconnect, device number 39 [ 354.672243][ T5874] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 354.811040][T10032] [U] 1WT`8H$09\ [ 354.827907][ T5874] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.843051][T10032] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 354.854401][ T5874] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.855803][T10032] [U] 4XZ^Y)MC. OȞPOW [ 354.864926][ T5874] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.883640][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.893632][T10032] [U] ä%Z [ 354.907378][T10022] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.922750][ T5874] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.983624][T10032] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 355.018913][T10032] [U] P>BЍ̖Z% [ 355.084755][T10032] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 355.108737][T10032] [U] ܣK [ 355.118570][T10032] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 355.144404][T10032] [U] ^ [ 355.147698][T10032] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 355.201068][T10032] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 355.251136][T10032] [U] ţԶDǂ`=ƁN<ʸ]Q [ 355.271819][T10032] [U] KEZȒF9Ǩ{ [ 355.387837][ T5829] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 355.551095][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.551507][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.558021][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.582306][T10046] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.636114][T10046] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 355.758931][T10030] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 355.783792][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.787506][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.790351][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.792051][T10046] wg1 speed is unknown, defaulting to 1000 [ 355.793741][T10046] wg1 speed is unknown, defaulting to 1000 [ 356.042162][ T5874] usb 1-1: USB disconnect, device number 40 [ 356.074526][ T5829] usb 5-1: device descriptor read/64, error -71 [ 356.293419][T10056] [U] 1WT`8H$09\ [ 356.298852][T10056] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 356.314304][ T5829] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 356.325787][T10056] [U] 4XZ^Y)MC. OȞPOW [ 356.338632][T10056] [U] ä%Z [ 356.820114][T10056] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 356.873658][T10056] [U] P>BЍ̖Z% [ 356.882999][T10056] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 356.893635][ T5829] usb 5-1: device descriptor read/64, error -71 [ 356.941265][T10056] [U] ܣK [ 356.954444][T10056] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 356.962039][T10056] [U] ^ [ 356.966791][T10056] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 356.982576][T10056] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 357.014751][ T5829] usb usb5-port1: attempt power cycle [ 357.040309][T10064] wg1 speed is unknown, defaulting to 1000 [ 357.065253][T10056] [U] ţԶDǂ`=ƁN<ʸ]Q [ 357.072820][T10056] [U] KEZȒF9Ǩ{ [ 357.094362][ T10] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 357.208378][T10052] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 357.272874][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.299121][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.327179][ T10] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 357.351054][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 357.360114][ T10] usb 1-1: Manufacturer: syz [ 357.374795][ T10] usb 1-1: config 0 descriptor?? [ 357.582917][T10072] FAULT_INJECTION: forcing a failure. [ 357.582917][T10072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 357.596550][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.4.1179 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 357.596573][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.596584][T10072] Call Trace: [ 357.596590][T10072] [ 357.596596][T10072] dump_stack_lvl+0x16c/0x1f0 [ 357.596621][T10072] should_fail_ex+0x512/0x640 [ 357.596641][T10072] should_fail_alloc_page+0xe7/0x130 [ 357.596660][T10072] prepare_alloc_pages+0x3c2/0x610 [ 357.596688][T10072] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 357.596707][T10072] ? kasan_save_stack+0x42/0x60 [ 357.596722][T10072] ? kasan_save_track+0x14/0x30 [ 357.596736][T10072] ? __kasan_kmalloc+0xaa/0xb0 [ 357.596750][T10072] ? __kmalloc_noprof+0x223/0x510 [ 357.596764][T10072] ? sock_kmalloc+0x111/0x170 [ 357.596784][T10072] ? af_alg_sendmsg+0x149e/0x2920 [ 357.596804][T10072] ? skcipher_sendmsg_nokey+0x12c/0x190 [ 357.596826][T10072] ? __sys_sendto+0x495/0x510 [ 357.596840][T10072] ? __x64_sys_sendto+0xe0/0x1c0 [ 357.596854][T10072] ? do_syscall_64+0xcd/0x260 [ 357.596873][T10072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.596897][T10072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 357.596929][T10072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.596949][T10072] ? policy_nodemask+0xea/0x4e0 [ 357.596970][T10072] alloc_pages_mpol+0x1fb/0x550 [ 357.596989][T10072] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 357.597005][T10072] ? __kmalloc_noprof+0x242/0x510 [ 357.597028][T10072] alloc_pages_noprof+0x131/0x390 [ 357.597046][T10072] af_alg_sendmsg+0xfdd/0x2920 [ 357.597075][T10072] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 357.597098][T10072] ? find_held_lock+0x2b/0x80 [ 357.597120][T10072] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 357.597142][T10072] ? rcu_is_watching+0x12/0xc0 [ 357.597161][T10072] ? __local_bh_enable_ip+0xa4/0x120 [ 357.597188][T10072] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.597206][T10072] ? skcipher_check_key.isra.0+0x78/0x1e0 [ 357.597228][T10072] ? __local_bh_enable_ip+0xa4/0x120 [ 357.597253][T10072] skcipher_sendmsg_nokey+0x12c/0x190 [ 357.597280][T10072] __sys_sendto+0x495/0x510 [ 357.597298][T10072] ? __pfx___sys_sendto+0x10/0x10 [ 357.597334][T10072] ? ksys_write+0x1b9/0x240 [ 357.597349][T10072] ? __pfx_ksys_write+0x10/0x10 [ 357.597366][T10072] __x64_sys_sendto+0xe0/0x1c0 [ 357.597382][T10072] ? do_syscall_64+0x91/0x260 [ 357.597400][T10072] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.597418][T10072] do_syscall_64+0xcd/0x260 [ 357.597439][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.597453][T10072] RIP: 0033:0x7f39ff58d169 [ 357.597466][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.597481][T10072] RSP: 002b:00007f3a003dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 357.597496][T10072] RAX: ffffffffffffffda RBX: 00007f39ff7a5fa0 RCX: 00007f39ff58d169 [ 357.597507][T10072] RDX: 703d59595f6742a8 RSI: 0000200000000440 RDI: 0000000000000006 [ 357.597516][T10072] RBP: 00007f3a003dd090 R08: 0000000000000000 R09: 0000000000000000 [ 357.597526][T10072] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 357.597535][T10072] R13: 0000000000000000 R14: 00007f39ff7a5fa0 R15: 00007ffdcb320e78 [ 357.597557][T10072] [ 358.009768][ T10] cougar 0003:060B:700A.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 358.405324][ T5873] usb 1-1: USB disconnect, device number 41 [ 358.494299][ T10] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 358.674516][ T10] usb 3-1: device descriptor read/64, error -71 [ 359.293025][ T10] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 359.617501][ T10] usb 3-1: device descriptor read/64, error -71 [ 360.009136][ T10] usb usb3-port1: attempt power cycle [ 360.449031][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 360.478438][ T10] usb 3-1: device descriptor read/8, error -71 [ 360.725578][ T10] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 360.792507][ T10] usb 3-1: device descriptor read/8, error -71 [ 360.931700][ T10] usb usb3-port1: unable to enumerate USB device [ 361.012186][T10112] wg1 speed is unknown, defaulting to 1000 [ 361.063426][T10119] netlink: 'syz.0.1194': attribute type 16 has an invalid length. [ 361.071339][T10119] netlink: 'syz.0.1194': attribute type 17 has an invalid length. [ 361.388804][T10119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.731464][T10160] __nla_validate_parse: 40 callbacks suppressed [ 363.731474][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 364.335117][T10171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.464277][ T5874] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 365.354349][ T5874] usb 5-1: device descriptor read/64, error -71 [ 365.447722][T10184] netlink: 'syz.2.1208': attribute type 16 has an invalid length. [ 365.455647][T10184] netlink: 'syz.2.1208': attribute type 17 has an invalid length. [ 365.799215][T10184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.855192][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 366.084536][ T5874] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 366.200702][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.225052][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.244409][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.263902][ T5874] usb 5-1: device descriptor read/64, error -71 [ 366.264356][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.283103][T10179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.316862][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.352910][T10190] wg1 speed is unknown, defaulting to 1000 [ 366.384805][ T5874] usb usb5-port1: attempt power cycle [ 366.637500][ T10] usb 2-1: USB disconnect, device number 62 [ 366.884453][ T5874] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 367.076864][ T5874] usb 5-1: device descriptor read/8, error -71 [ 368.613024][ T30] audit: type=1400 audit(1743736249.203:776): avc: denied { bind } for pid=10219 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.487960][ T5874] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 369.754533][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 369.940917][ T5874] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e3.25 [ 370.004242][ T5874] usb 3-1: New USB device strings: Mfr=14, Product=156, SerialNumber=3 [ 370.070455][ T5874] usb 3-1: Product: syz [ 370.154522][ T5874] usb 3-1: Manufacturer: syz [ 370.176083][ T5874] usb 3-1: SerialNumber: syz [ 370.196609][ T5874] usb 3-1: config 0 descriptor?? [ 370.227577][ T5874] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 370.248546][T10246] wg1 speed is unknown, defaulting to 1000 [ 370.757476][ T5874] gspca_ov534_9: reg_w failed -110 [ 370.954487][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 370.987970][T10269] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1236'. [ 371.034427][ T58] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 371.316583][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 371.328053][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 371.334362][ T5874] gspca_ov534_9: Unknown sensor 0000 [ 371.336210][ T5874] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 371.336298][ T10] usb 1-1: config 0 has no interface number 0 [ 371.356721][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.368577][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 371.376118][ T5874] usb 3-1: USB disconnect, device number 57 [ 371.382316][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 371.393970][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.409805][ T10] usb 1-1: Product: syz [ 371.415854][ T10] usb 1-1: Manufacturer: syz [ 371.420736][ T10] usb 1-1: SerialNumber: syz [ 371.429563][ T10] usb 1-1: config 0 descriptor?? [ 371.467223][ T58] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 371.480768][ T58] usb 4-1: config 4 has no interface number 0 [ 371.490519][ T58] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 371.501446][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.538013][ T58] usb 4-1: Product: syz [ 371.550070][ T58] usb 4-1: Manufacturer: syz [ 371.559885][ T58] usb 4-1: SerialNumber: syz [ 371.584828][ T58] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 371.728612][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 371.970950][T10277] FAULT_INJECTION: forcing a failure. [ 371.970950][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.997569][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.4.1240 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 371.997598][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.997608][T10277] Call Trace: [ 371.997613][T10277] [ 371.997619][T10277] dump_stack_lvl+0x16c/0x1f0 [ 371.997644][T10277] should_fail_ex+0x512/0x640 [ 371.997666][T10277] _copy_from_iter+0x2a4/0x15b0 [ 371.997687][T10277] ? __alloc_skb+0x200/0x380 [ 371.997704][T10277] ? __pfx__copy_from_iter+0x10/0x10 [ 371.997723][T10277] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 371.997749][T10277] netlink_sendmsg+0x829/0xdd0 [ 371.997771][T10277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.997809][T10277] ____sys_sendmsg+0xa95/0xc70 [ 371.997832][T10277] ? copy_msghdr_from_user+0x10a/0x160 [ 371.997850][T10277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.997879][T10277] ? mark_held_locks+0x49/0x80 [ 371.997898][T10277] ___sys_sendmsg+0x134/0x1d0 [ 371.997918][T10277] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.997948][T10277] ? find_held_lock+0x2b/0x80 [ 371.997984][T10277] __sys_sendmmsg+0x200/0x420 [ 371.998006][T10277] ? __pfx___sys_sendmmsg+0x10/0x10 [ 371.998031][T10277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.998062][T10277] ? xfd_validate_state+0x5d/0x180 [ 371.998082][T10277] ? rcu_is_watching+0x12/0xc0 [ 371.998105][T10277] __x64_sys_sendmmsg+0x9c/0x100 [ 371.998128][T10277] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.998146][T10277] do_syscall_64+0xcd/0x260 [ 371.998168][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.998184][T10277] RIP: 0033:0x7f39ff58d169 [ 371.998197][T10277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.998211][T10277] RSP: 002b:00007f3a003dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.998226][T10277] RAX: ffffffffffffffda RBX: 00007f39ff7a5fa0 RCX: 00007f39ff58d169 [ 371.998236][T10277] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 371.998245][T10277] RBP: 00007f3a003dd090 R08: 0000000000000000 R09: 0000000000000000 [ 371.998253][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.998262][T10277] R13: 0000000000000000 R14: 00007f39ff7a5fa0 R15: 00007ffdcb320e78 [ 371.998282][T10277] [ 372.217189][ T58] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 372.225049][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.228423][ T10] appletouch 1-1:0.85: Failed to read mode from device. [ 372.252419][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 372.279914][ T58] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 372.354453][ T5924] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 372.391168][T10283] [U] 1WT`8H$09\ [ 372.396886][T10283] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 372.406370][T10283] [U] 4XZ^Y)MC. OȞPOW [ 372.413355][T10283] [U] ä%Z [ 372.417369][T10283] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 372.428669][T10283] [U] P>BЍ̖Z% [ 372.432968][T10283] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 372.443758][T10283] [U] ܣK [ 372.454960][T10283] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 372.462192][T10283] [U] ^ [ 372.466221][T10283] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 372.495932][T10283] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 372.515054][ T5924] usb 3-1: device descriptor read/64, error -71 [ 372.527486][T10283] [U] ţԶDǂ`=ƁN<ʸ]Q [ 372.553775][ T9] usb 4-1: USB disconnect, device number 40 [ 372.583474][T10283] [U] KEZȒF9Ǩ{ [ 372.587870][ T10] usb 1-1: USB disconnect, device number 42 [ 372.605584][ T58] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 372.754361][ T5924] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 372.769956][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.782924][ T58] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 372.792163][ T58] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 372.800744][ T58] usb 2-1: Product: syz [ 372.805427][ T58] usb 2-1: Manufacturer: syz [ 372.810220][ T58] usb 2-1: SerialNumber: syz [ 372.825151][ T58] usb 2-1: config 0 descriptor?? [ 372.843240][ T58] gspca_main: conex-2.14.0 probing 0572:0041 [ 372.894391][ T5924] usb 3-1: device descriptor read/64, error -71 [ 373.004811][ T5924] usb usb3-port1: attempt power cycle [ 373.027962][T10280] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 373.243335][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.251950][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.387133][ T58] usb 2-1: USB disconnect, device number 63 [ 373.405130][ T5924] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 373.448677][ T5924] usb 3-1: device descriptor read/8, error -71 [ 373.724368][ T5924] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 373.757208][ T5924] usb 3-1: device descriptor read/8, error -71 [ 373.864420][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 373.872325][ T5924] usb usb3-port1: unable to enumerate USB device [ 373.878320][ T30] audit: type=1400 audit(1743736254.463:777): avc: denied { connect } for pid=10302 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.059159][T10308] FAULT_INJECTION: forcing a failure. [ 374.059159][T10308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.072787][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.3.1250 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 374.072811][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 374.072820][T10308] Call Trace: [ 374.072833][T10308] [ 374.072839][T10308] dump_stack_lvl+0x16c/0x1f0 [ 374.072865][T10308] should_fail_ex+0x512/0x640 [ 374.072885][T10308] _copy_from_iter+0x2a4/0x15b0 [ 374.072905][T10308] ? __alloc_skb+0x200/0x380 [ 374.072923][T10308] ? __pfx__copy_from_iter+0x10/0x10 [ 374.072942][T10308] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 374.072968][T10308] netlink_sendmsg+0x829/0xdd0 [ 374.072990][T10308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.073017][T10308] ____sys_sendmsg+0xa95/0xc70 [ 374.073038][T10308] ? copy_msghdr_from_user+0x10a/0x160 [ 374.073055][T10308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.073087][T10308] ___sys_sendmsg+0x134/0x1d0 [ 374.073107][T10308] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.073157][T10308] __sys_sendmsg+0x16d/0x220 [ 374.073176][T10308] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.073209][T10308] do_syscall_64+0xcd/0x260 [ 374.073231][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.073247][T10308] RIP: 0033:0x7f2ee058d169 [ 374.073260][T10308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.073275][T10308] RSP: 002b:00007f2ee1423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.073292][T10308] RAX: ffffffffffffffda RBX: 00007f2ee07a5fa0 RCX: 00007f2ee058d169 [ 374.073303][T10308] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 374.073312][T10308] RBP: 00007f2ee1423090 R08: 0000000000000000 R09: 0000000000000000 [ 374.073321][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.073331][T10308] R13: 0000000000000000 R14: 00007f2ee07a5fa0 R15: 00007ffebe0c1228 [ 374.073352][T10308] [ 374.085590][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 374.322064][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.333001][ T10] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 374.344618][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 374.354074][ T10] usb 5-1: Manufacturer: syz [ 374.360365][ T10] usb 5-1: config 0 descriptor?? [ 374.384312][ T58] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 374.544373][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 374.552331][ T58] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 374.561698][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.569829][ T58] usb 4-1: Product: syz [ 374.574392][ T58] usb 4-1: Manufacturer: syz [ 374.578987][ T58] usb 4-1: SerialNumber: syz [ 374.585036][ T5924] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 374.585652][ T58] usb 4-1: config 0 descriptor?? [ 374.823965][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 374.831515][ T58] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 374.838894][ T10] cougar 0003:060B:700A.0028: unknown main item tag 0x0 [ 374.853062][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.863940][ T10] cougar 0003:060B:700A.0028: unknown main item tag 0x0 [ 374.885496][ T10] cougar 0003:060B:700A.0028: unknown main item tag 0x0 [ 374.893361][ T10] cougar 0003:060B:700A.0028: unknown main item tag 0x0 [ 374.903924][ T5924] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 374.923477][ T5924] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 374.932670][ T10] cougar 0003:060B:700A.0028: unknown main item tag 0x0 [ 374.941264][ T5924] usb 1-1: Manufacturer: syz [ 374.964878][ T10] cougar 0003:060B:700A.0028: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 375.064919][ T5924] usb 1-1: config 0 descriptor?? [ 375.156573][ T10] usb 5-1: USB disconnect, device number 50 [ 375.458210][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.467081][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.479710][ T58] usb write operation failed. (-71) [ 375.490057][ T58] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 375.500787][ T58] dvbdev: DVB: registering new adapter (Terratec H7) [ 375.508196][ T58] usb 4-1: media controller created [ 375.513757][ T58] usb read operation failed. (-71) [ 375.519313][ T58] usb write operation failed. (-71) [ 375.528447][ T58] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 375.540268][ T58] usb 4-1: USB disconnect, device number 41 [ 375.566196][ T5924] cougar 0003:060B:700A.0029: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 375.671547][T10318] [U] 1WT`8H$09\ [ 375.677142][T10318] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 375.687073][T10318] [U] 4XZ^Y)MC. OȞPOW [ 375.693349][T10318] [U] ä%Z [ 375.697901][T10318] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 375.707084][T10318] [U] P>BЍ̖Z% [ 375.711316][T10318] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 375.721821][T10318] [U] ܣK [ 375.725649][T10318] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 375.732851][T10318] [U] ^ [ 375.743759][T10318] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 375.776329][T10318] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 375.795853][T10318] [U] ţԶDǂ`=ƁN<ʸ]Q [ 375.813738][ T58] usb 1-1: USB disconnect, device number 43 [ 375.828229][T10318] [U] KEZȒF9Ǩ{ [ 376.173583][T10316] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 376.240689][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 376.327066][ T58] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 376.385277][T10335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1259'. [ 376.396584][ T30] audit: type=1326 audit(1743736256.993:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.432818][ T30] audit: type=1326 audit(1743736257.013:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.457081][ T30] audit: type=1326 audit(1743736257.013:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.480966][ T30] audit: type=1326 audit(1743736257.013:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.505353][T10338] [U] 1WT`8H$09\ [ 376.510402][T10338] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 376.518139][ T30] audit: type=1326 audit(1743736257.013:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.534433][T10338] [U] 4XZ^Y)MC. OȞPOW [ 376.544381][ T30] audit: type=1326 audit(1743736257.013:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.549826][T10338] [U] ä%Z [ 376.574709][T10338] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 376.575035][ T58] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.583030][T10338] [U] P>BЍ̖Z% [ 376.610013][T10338] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 376.614271][ T58] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.641019][T10338] [U] ܣK [ 376.642605][ T58] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.651226][T10338] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 376.656862][ T30] audit: type=1326 audit(1743736257.013:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.673107][T10338] [U] ^ [ 376.684583][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.689495][ T30] audit: type=1326 audit(1743736257.013:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 376.698101][T10322] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 376.718967][T10338] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 376.797353][T10342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.847105][ T58] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.861731][T10338] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 377.005595][T10338] [U] ţԶDǂ`=ƁN<ʸ]Q [ 377.130711][T10338] [U] KEZȒF9Ǩ{ [ 377.614744][ T30] audit: type=1326 audit(1743736257.013:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10334 comm="syz.0.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7f38d169 code=0x7ffc0000 [ 377.687613][T10336] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 377.763825][ T58] usb 4-1: USB disconnect, device number 42 [ 377.955682][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'. [ 378.199760][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1263'. [ 378.210702][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.285958][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.416920][ T5924] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 378.814422][ T5924] usb 3-1: device descriptor read/64, error -71 [ 378.894581][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 379.036709][ T10] usb 2-1: device descriptor read/64, error -71 [ 379.064307][ T5924] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 379.206946][ T5924] usb 3-1: device descriptor read/64, error -71 [ 379.284365][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 379.326763][ T5924] usb usb3-port1: attempt power cycle [ 379.434301][ T10] usb 2-1: device descriptor read/64, error -71 [ 379.707197][ T10] usb usb2-port1: attempt power cycle [ 379.774318][ T5924] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 379.806431][ T5924] usb 3-1: device descriptor read/8, error -71 [ 380.084392][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 380.095126][ T5924] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 380.137182][ T5924] usb 3-1: device descriptor read/8, error -71 [ 380.143639][ T10] usb 2-1: device descriptor read/8, error -71 [ 380.178575][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 380.178591][ T30] audit: type=1400 audit(1743736260.773:813): avc: denied { getopt } for pid=10379 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 380.205069][ T30] audit: type=1400 audit(1743736260.773:814): avc: denied { getopt } for pid=10379 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 380.274643][ T5924] usb usb3-port1: unable to enumerate USB device [ 380.556361][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 380.604836][ T10] usb 2-1: device descriptor read/8, error -71 [ 380.714621][ T10] usb usb2-port1: unable to enumerate USB device [ 381.034444][ T58] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 381.389314][ T30] audit: type=1326 audit(1743736261.983:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ff58d169 code=0x7fc00000 [ 381.415837][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.428718][ T30] audit: type=1326 audit(1743736261.983:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.4.1278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ff58d169 code=0x0 [ 381.463251][ T58] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 381.470641][ T30] audit: type=1400 audit(1743736262.063:817): avc: denied { ioctl } for pid=10397 comm="syz.4.1278" path="socket:[25781]" dev="sockfs" ino=25781 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.472369][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.565558][T10407] netlink: 'syz.2.1280': attribute type 16 has an invalid length. [ 381.573440][T10407] netlink: 'syz.2.1280': attribute type 17 has an invalid length. [ 381.928366][T10407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.949646][ T58] usb 1-1: config 0 descriptor?? [ 382.432479][T10413] FAULT_INJECTION: forcing a failure. [ 382.432479][T10413] name failslab, interval 1, probability 0, space 0, times 0 [ 382.519422][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 382.710220][ T58] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 382.714306][T10413] CPU: 0 UID: 0 PID: 10413 Comm: syz.2.1282 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 382.714328][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.714336][T10413] Call Trace: [ 382.714342][T10413] [ 382.714348][T10413] dump_stack_lvl+0x16c/0x1f0 [ 382.714370][T10413] should_fail_ex+0x512/0x640 [ 382.714388][T10413] should_failslab+0xc2/0x120 [ 382.714405][T10413] __kvmalloc_node_noprof+0x135/0x600 [ 382.714420][T10413] ? __pfx___schedule+0x10/0x10 [ 382.714434][T10413] ? bpf_test_run_xdp_live+0x13b/0x500 [ 382.714454][T10413] ? bpf_test_run_xdp_live+0x13b/0x500 [ 382.714468][T10413] bpf_test_run_xdp_live+0x13b/0x500 [ 382.714484][T10413] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 382.714502][T10413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.714524][T10413] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 382.714539][T10413] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 382.714571][T10413] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 382.714587][T10413] ? 0xffffffffa00038c0 [ 382.714600][T10413] ? 0xffffffffa00038c0 [ 382.714611][T10413] ? 0xffffffffa00038c0 [ 382.714626][T10413] bpf_prog_test_run_xdp+0x824/0x1540 [ 382.714650][T10413] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.714672][T10413] ? fput+0x70/0xf0 [ 382.714688][T10413] ? __bpf_prog_get+0xa0/0x290 [ 382.714703][T10413] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.714718][T10413] __sys_bpf+0x1485/0x4d80 [ 382.714739][T10413] ? __pfx___sys_bpf+0x10/0x10 [ 382.714760][T10413] ? __pfx___schedule+0x10/0x10 [ 382.714774][T10413] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 382.714815][T10413] __x64_sys_bpf+0x78/0xc0 [ 382.714834][T10413] do_syscall_64+0xcd/0x260 [ 382.714853][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.714867][T10413] RIP: 0033:0x7f411a38d169 [ 382.714878][T10413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.714891][T10413] RSP: 002b:00007f411b161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.714906][T10413] RAX: ffffffffffffffda RBX: 00007f411a5a5fa0 RCX: 00007f411a38d169 [ 382.714915][T10413] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 382.714923][T10413] RBP: 00007f411b161090 R08: 0000000000000000 R09: 0000000000000000 [ 382.714931][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.714939][T10413] R13: 0000000000000000 R14: 00007f411a5a5fa0 R15: 00007fffb6ab5498 [ 382.714958][T10413] [ 382.914413][ T5924] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 382.927238][ T58] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002A/input/input44 [ 383.004320][ T30] audit: type=1326 audit(1743736263.583:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f39ff58d169 code=0x7fc00000 [ 383.094038][ T58] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 383.119725][ T5924] usb 2-1: device descriptor read/64, error -71 [ 383.498873][ T58] usb 1-1: USB disconnect, device number 44 [ 383.584493][ T5924] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 383.614641][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1285'. [ 383.637894][ T30] audit: type=1326 audit(1743736264.233:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x7ffc0000 [ 383.710241][ T30] audit: type=1326 audit(1743736264.253:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee058d169 code=0x7ffc0000 [ 383.738562][ T30] audit: type=1326 audit(1743736264.253:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x7ffc0000 [ 383.765336][ T5924] usb 2-1: device descriptor read/64, error -71 [ 383.778619][ T30] audit: type=1326 audit(1743736264.263:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ee058d169 code=0x7ffc0000 [ 383.874599][ T5924] usb usb2-port1: attempt power cycle [ 383.944375][ T5874] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 384.544620][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 384.634432][ T5924] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 384.648305][ T5874] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 384.668444][ T5874] usb 3-1: config 0 has no interface number 0 [ 384.685036][ T5924] usb 2-1: device descriptor read/8, error -71 [ 384.688224][ T5874] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.724002][ T5874] usb 3-1: config 0 interface 85 has no altsetting 0 [ 384.736386][ T5874] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 384.746711][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.757460][ T5874] usb 3-1: Product: syz [ 384.761782][ T5874] usb 3-1: Manufacturer: syz [ 384.769063][ T5874] usb 3-1: SerialNumber: syz [ 384.778772][ T5874] usb 3-1: config 0 descriptor?? [ 384.944477][ T5924] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 384.977385][ T5924] usb 2-1: device descriptor read/8, error -71 [ 384.989321][ T5874] appletouch 3-1:0.85: Failed to read mode from device. [ 384.998163][ T5874] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 385.085141][ T5924] usb usb2-port1: unable to enumerate USB device [ 385.509310][ T5874] usb 3-1: USB disconnect, device number 66 [ 385.814476][ T5873] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 385.874341][ T5916] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 386.017108][ T5873] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 386.035088][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.037670][ T5916] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 386.055754][ T5873] usb 2-1: config 0 has no interface number 0 [ 386.065371][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.071779][ T5873] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 386.073594][ T5916] usb 1-1: Product: syz [ 386.090857][ T5916] usb 1-1: Manufacturer: syz [ 386.095641][ T5916] usb 1-1: SerialNumber: syz [ 386.113787][ T5873] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 386.127775][ T5916] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 386.140525][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.159255][ T5873] usb 2-1: Product: syz [ 386.179774][ T5924] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 386.201110][ T5873] usb 2-1: Manufacturer: syz [ 386.216446][ T5873] usb 2-1: SerialNumber: syz [ 386.242303][ T5873] usb 2-1: config 0 descriptor?? [ 386.257489][T10449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.266519][T10466] FAULT_INJECTION: forcing a failure. [ 386.266519][T10466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.279684][T10466] CPU: 1 UID: 0 PID: 10466 Comm: syz.4.1298 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 386.279709][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.279718][T10466] Call Trace: [ 386.279724][T10466] [ 386.279730][T10466] dump_stack_lvl+0x16c/0x1f0 [ 386.279754][T10466] should_fail_ex+0x512/0x640 [ 386.279773][T10466] _copy_to_user+0x32/0xd0 [ 386.279792][T10466] simple_read_from_buffer+0xcb/0x170 [ 386.279812][T10466] proc_fail_nth_read+0x197/0x270 [ 386.279829][T10466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.279845][T10466] ? rw_verify_area+0xcf/0x680 [ 386.279859][T10466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.279880][T10466] vfs_read+0x1de/0xc70 [ 386.279897][T10466] ? __pfx___mutex_lock+0x10/0x10 [ 386.279917][T10466] ? __pfx_vfs_read+0x10/0x10 [ 386.279945][T10466] ? __fget_files+0x20e/0x3c0 [ 386.279966][T10466] ksys_read+0x12a/0x240 [ 386.279975][T10466] ? __pfx_ksys_read+0x10/0x10 [ 386.279988][T10466] do_syscall_64+0xcd/0x260 [ 386.280001][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.280011][T10466] RIP: 0033:0x7f39ff58bb7c [ 386.280020][T10466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 386.280031][T10466] RSP: 002b:00007f3a003bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.280046][T10466] RAX: ffffffffffffffda RBX: 00007f39ff7a6080 RCX: 00007f39ff58bb7c [ 386.280057][T10466] RDX: 000000000000000f RSI: 00007f3a003bc0a0 RDI: 0000000000000005 [ 386.280066][T10466] RBP: 00007f3a003bc090 R08: 0000000000000000 R09: 0000000000000000 [ 386.280076][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.280084][T10466] R13: 0000000000000000 R14: 00007f39ff7a6080 R15: 00007ffdcb320e78 [ 386.280105][T10466] [ 386.282714][T10449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.810700][T10474] FAULT_INJECTION: forcing a failure. [ 386.810700][T10474] name failslab, interval 1, probability 0, space 0, times 0 [ 386.823505][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.4.1301 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 386.823528][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.823538][T10474] Call Trace: [ 386.823544][T10474] [ 386.823552][T10474] dump_stack_lvl+0x16c/0x1f0 [ 386.823578][T10474] should_fail_ex+0x512/0x640 [ 386.823600][T10474] should_failslab+0xc2/0x120 [ 386.823620][T10474] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 386.823639][T10474] ? skb_clone+0x190/0x3f0 [ 386.823668][T10474] skb_clone+0x190/0x3f0 [ 386.823689][T10474] raw6_local_deliver+0x3cc/0xa40 [ 386.823717][T10474] ? __pfx_raw6_local_deliver+0x10/0x10 [ 386.823744][T10474] ip6_protocol_deliver_rcu+0x1f1/0x1520 [ 386.823768][T10474] ? ip6_protocol_deliver_rcu+0x14e0/0x1520 [ 386.823803][T10474] ip6_input_finish+0x102/0x180 [ 386.823828][T10474] ip6_input+0x105/0x2f0 [ 386.823851][T10474] ip6_mc_input+0x465/0xfd0 [ 386.823877][T10474] ? __pfx_ip6_mc_input+0x10/0x10 [ 386.823901][T10474] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 386.823927][T10474] ? __pfx_ip6_mc_input+0x10/0x10 [ 386.823951][T10474] ipv6_rcv+0x45a/0x680 [ 386.823973][T10474] ? __pfx_ipv6_rcv+0x10/0x10 [ 386.823993][T10474] __netif_receive_skb_one_core+0x12d/0x1e0 [ 386.824012][T10474] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 386.824031][T10474] ? lock_acquire+0x179/0x350 [ 386.824055][T10474] __netif_receive_skb+0x1d/0x160 [ 386.824072][T10474] netif_receive_skb+0x137/0x7b0 [ 386.824089][T10474] ? __pfx_netif_receive_skb+0x10/0x10 [ 386.824116][T10474] tun_rx_batched.isra.0+0x3ee/0x740 [ 386.824136][T10474] ? find_held_lock+0x2b/0x80 [ 386.824159][T10474] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 386.824186][T10474] ? tun_get_user+0x1c0d/0x3b10 [ 386.824209][T10474] ? rcu_is_watching+0x12/0xc0 [ 386.824234][T10474] tun_get_user+0x2897/0x3b10 [ 386.824265][T10474] ? __pfx_tun_get_user+0x10/0x10 [ 386.824285][T10474] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 386.824312][T10474] ? find_held_lock+0x2b/0x80 [ 386.824333][T10474] ? tun_get+0x191/0x370 [ 386.824358][T10474] tun_chr_write_iter+0xdc/0x210 [ 386.824382][T10474] vfs_write+0x5ba/0x1180 [ 386.824399][T10474] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 386.824422][T10474] ? __pfx_vfs_write+0x10/0x10 [ 386.824435][T10474] ? find_held_lock+0x2b/0x80 [ 386.824473][T10474] ksys_write+0x12a/0x240 [ 386.824488][T10474] ? __pfx_ksys_write+0x10/0x10 [ 386.824502][T10474] ? rcu_is_watching+0x12/0xc0 [ 386.824530][T10474] do_syscall_64+0xcd/0x260 [ 386.824552][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.824569][T10474] RIP: 0033:0x7f39ff58bc1f [ 386.824584][T10474] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 386.824601][T10474] RSP: 002b:00007f3a003dd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 386.824617][T10474] RAX: ffffffffffffffda RBX: 00007f39ff7a5fa0 RCX: 00007f39ff58bc1f [ 386.824628][T10474] RDX: 0000000000000072 RSI: 0000200000000040 RDI: 00000000000000c8 [ 386.824639][T10474] RBP: 00007f3a003dd090 R08: 0000000000000000 R09: 0000000000000000 [ 386.824649][T10474] R10: 0000000000000072 R11: 0000000000000293 R12: 0000000000000001 [ 386.824658][T10474] R13: 0000000000000000 R14: 00007f39ff7a5fa0 R15: 00007ffdcb320e78 [ 386.824689][T10474] [ 387.169393][ T5873] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 387.387364][ T10] usb 1-1: USB disconnect, device number 45 [ 387.410580][ T5924] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 387.423535][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 387.460060][T10449] 8021q: adding VLAN 0 to HW filter on device team1 [ 387.467310][ T5924] ath9k_htc: Failed to initialize the device [ 387.494398][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 387.587072][ T5873] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 387.799917][ T5873] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.823245][ T5873] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.835552][ T5873] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.844669][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 387.844684][ T30] audit: type=1400 audit(1743736268.433:843): avc: denied { read } for pid=10448 comm="syz.1.1293" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.844724][ T30] audit: type=1400 audit(1743736268.433:844): avc: denied { open } for pid=10448 comm="syz.1.1293" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.874529][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.876941][T10477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 387.914686][ T30] audit: type=1400 audit(1743736268.433:845): avc: denied { ioctl } for pid=10448 comm="syz.1.1293" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.964589][ T5873] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.045289][ T5873] usb 2-1: USB disconnect, device number 72 [ 388.199886][ T5874] usb 5-1: USB disconnect, device number 51 [ 388.373818][T10504] syzkaller1: entered promiscuous mode [ 388.380562][T10504] syzkaller1: entered allmulticast mode [ 388.555713][T10511] syzkaller1: entered promiscuous mode [ 388.572500][T10511] syzkaller1: entered allmulticast mode [ 389.535536][T10532] netlink: ct family unspecified [ 389.626871][T10532] openvswitch: netlink: Actions may not be safe on all matching packets [ 389.904050][T10546] FAULT_INJECTION: forcing a failure. [ 389.904050][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.178516][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.1.1315 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 390.178542][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.178552][T10546] Call Trace: [ 390.178558][T10546] [ 390.178564][T10546] dump_stack_lvl+0x16c/0x1f0 [ 390.178588][T10546] should_fail_ex+0x512/0x640 [ 390.178609][T10546] _copy_from_user+0x2e/0xd0 [ 390.178628][T10546] kstrtouint_from_user+0xd6/0x1d0 [ 390.178650][T10546] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 390.178677][T10546] ? __lock_acquire+0xaa4/0x1ba0 [ 390.178703][T10546] proc_fail_nth_write+0x83/0x250 [ 390.178728][T10546] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.178757][T10546] vfs_write+0x25c/0x1180 [ 390.178771][T10546] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 390.178796][T10546] ? __pfx___mutex_lock+0x10/0x10 [ 390.178814][T10546] ? __pfx_vfs_write+0x10/0x10 [ 390.178834][T10546] ? __fget_files+0x20e/0x3c0 [ 390.178858][T10546] ksys_write+0x12a/0x240 [ 390.178872][T10546] ? __pfx_ksys_write+0x10/0x10 [ 390.178893][T10546] do_syscall_64+0xcd/0x260 [ 390.178914][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.178931][T10546] RIP: 0033:0x7f1590f8bc1f [ 390.178945][T10546] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 390.178961][T10546] RSP: 002b:00007f1591d3d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 390.178977][T10546] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1590f8bc1f [ 390.178987][T10546] RDX: 0000000000000001 RSI: 00007f1591d3d0a0 RDI: 0000000000000004 [ 390.178996][T10546] RBP: 00007f1591d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 390.179006][T10546] R10: 0000200000000200 R11: 0000000000000293 R12: 0000000000000001 [ 390.179015][T10546] R13: 0000000000000000 R14: 00007f15911a5fa0 R15: 00007ffd8adc1c58 [ 390.179038][T10546] [ 390.477635][T10549] capability: warning: `syz.3.1314' uses deprecated v2 capabilities in a way that may be insecure [ 390.514676][ T30] audit: type=1804 audit(1743736271.083:846): pid=10547 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1314" name="/" dev="pidfs" ino=10543 res=1 errno=0 [ 390.915595][T10557] FAULT_INJECTION: forcing a failure. [ 390.915595][T10557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.983832][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.1.1319 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 390.983858][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.983868][T10557] Call Trace: [ 390.983874][T10557] [ 390.983881][T10557] dump_stack_lvl+0x16c/0x1f0 [ 390.983905][T10557] should_fail_ex+0x512/0x640 [ 390.983933][T10557] _copy_from_iter+0x2a4/0x15b0 [ 390.983952][T10557] ? __alloc_skb+0x200/0x380 [ 390.983968][T10557] ? __pfx__copy_from_iter+0x10/0x10 [ 390.983986][T10557] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 390.984016][T10557] netlink_sendmsg+0x829/0xdd0 [ 390.984040][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.984070][T10557] ____sys_sendmsg+0xa95/0xc70 [ 390.984095][T10557] ? copy_msghdr_from_user+0x10a/0x160 [ 390.984113][T10557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.984147][T10557] ___sys_sendmsg+0x134/0x1d0 [ 390.984168][T10557] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.984212][T10557] __sys_sendmsg+0x16d/0x220 [ 390.984228][T10557] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.984252][T10557] ? rcu_is_watching+0x12/0xc0 [ 390.984277][T10557] do_syscall_64+0xcd/0x260 [ 390.984300][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.984316][T10557] RIP: 0033:0x7f1590f8d169 [ 390.984329][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.984345][T10557] RSP: 002b:00007f1591d3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.984362][T10557] RAX: ffffffffffffffda RBX: 00007f15911a5fa0 RCX: 00007f1590f8d169 [ 390.984373][T10557] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 390.984383][T10557] RBP: 00007f1591d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 390.984393][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.984403][T10557] R13: 0000000000000000 R14: 00007f15911a5fa0 R15: 00007ffd8adc1c58 [ 390.984425][T10557] [ 391.319700][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1317'. [ 392.340319][T10579] netlink: 'syz.4.1326': attribute type 16 has an invalid length. [ 392.348293][T10579] netlink: 'syz.4.1326': attribute type 17 has an invalid length. [ 392.699051][T10579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.164547][ T950] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 393.343203][ T950] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.596872][ T950] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.640943][ T950] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.659963][ T950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.715224][T10584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.737145][ T950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.799644][T10606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.944324][ T5924] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 394.629486][ T5873] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 394.659266][T10605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.708320][ T950] usb 2-1: USB disconnect, device number 73 [ 394.774409][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 394.795832][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.832372][ T5873] usb 4-1: device descriptor read/64, error -71 [ 394.920788][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.978980][ T5924] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 395.002074][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.017668][ T5924] usb 1-1: config 0 descriptor?? [ 395.074428][ T5873] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 395.094959][T10585] udevd[10585]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.159211][T10624] xt_hashlimit: size too large, truncated to 1048576 [ 395.214305][ T5873] usb 4-1: device descriptor read/64, error -71 [ 395.335550][ T5873] usb usb4-port1: attempt power cycle [ 395.358979][T10629] IPVS: set_ctl: invalid protocol: 249 100.1.1.0:20000 [ 395.516989][ T5924] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 395.622300][T10633] netlink: 'syz.2.1341': attribute type 16 has an invalid length. [ 395.630409][T10633] netlink: 'syz.2.1341': attribute type 17 has an invalid length. [ 395.661462][T10633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.004428][ T5873] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 396.027186][ T5873] usb 4-1: device descriptor read/8, error -71 [ 396.028288][ T5924] usb 1-1: USB disconnect, device number 46 [ 396.290557][ T5873] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 396.341727][ T5873] usb 4-1: device descriptor read/8, error -71 [ 396.467362][ T5873] usb usb4-port1: unable to enumerate USB device [ 396.758372][ T30] audit: type=1400 audit(1743736277.303:847): avc: denied { read write } for pid=10636 comm="syz.2.1343" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 396.783347][ T30] audit: type=1400 audit(1743736277.303:848): avc: denied { open } for pid=10636 comm="syz.2.1343" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 398.612920][ T5916] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 398.954292][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.966078][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.977251][ T5916] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 398.991618][ T5916] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 399.000228][ T5916] usb 2-1: Manufacturer: syz [ 399.046180][ T5916] usb 2-1: config 0 descriptor?? [ 399.059054][ T30] audit: type=1400 audit(1743736279.653:849): avc: denied { create } for pid=10669 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 399.336022][ T30] audit: type=1400 audit(1743736279.933:850): avc: denied { connect } for pid=10669 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.394813][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 399.515881][ T30] audit: type=1400 audit(1743736279.933:851): avc: denied { bind } for pid=10669 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.535616][ T30] audit: type=1400 audit(1743736279.933:852): avc: denied { write } for pid=10669 comm="syz.3.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.608593][ T5916] cougar 0003:060B:700A.002C: unknown main item tag 0x0 [ 399.616778][ T5916] cougar 0003:060B:700A.002C: unknown main item tag 0x0 [ 399.624838][ T5916] cougar 0003:060B:700A.002C: unknown main item tag 0x0 [ 399.635687][ T5916] cougar 0003:060B:700A.002C: unknown main item tag 0x0 [ 399.643789][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 399.653607][ T5916] cougar 0003:060B:700A.002C: unknown main item tag 0x0 [ 399.662198][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 399.672955][ T5916] cougar 0003:060B:700A.002C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 399.689126][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.703813][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 399.748456][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.758886][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.777309][T10668] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 399.791693][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.857672][ T10] usb 2-1: USB disconnect, device number 74 [ 400.021056][ T5916] usb 5-1: USB disconnect, device number 52 [ 400.804078][T10690] [U] 1WT`8H$09\ [ 400.833783][T10690] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 400.858894][T10690] [U] 4XZ^Y)MC. OȞPOW [ 400.865447][T10690] [U] ä%Z [ 400.869256][T10690] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 400.879426][T10690] [U] P>BЍ̖Z% [ 400.884062][T10690] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 400.894989][T10690] [U] ܣK [ 400.898755][T10690] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 400.907496][T10690] [U] ^ [ 400.911239][T10690] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 400.934032][T10690] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 400.966198][T10690] [U] ţԶDǂ`=ƁN<ʸ]Q [ 401.031289][T10690] [U] KEZȒF9Ǩ{ [ 401.542702][T10686] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 401.644122][T10706] [U] 1WT`8H$09\ [ 401.650057][T10706] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 401.742466][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1365'. [ 401.961134][T10706] [U] 4XZ^Y)MC. OȞPOW [ 401.976741][T10706] [U] ä%Z [ 401.985042][T10706] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 401.996412][T10706] [U] P>BЍ̖Z% [ 402.003477][T10706] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 402.044338][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 402.171300][T10706] [U] ܣK [ 402.182066][T10706] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 402.404277][T10714] wg1 speed is unknown, defaulting to 1000 [ 402.686207][T10706] [U] ^ [ 402.698390][T10706] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 402.716711][T10706] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 402.754393][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 402.769090][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 402.781935][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.898640][T10706] [U] ţԶDǂ`=ƁN<ʸ]Q [ 402.918374][ T10] usb 1-1: Product: syz [ 402.976839][ T10] usb 1-1: Manufacturer: syz [ 402.983430][T10706] [U] KEZȒF9Ǩ{ [ 402.988195][ T10] usb 1-1: SerialNumber: syz [ 402.998437][T10706] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 403.025379][ T10] usb 1-1: config 0 descriptor?? [ 403.524468][ T10] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 404.130518][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.140251][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.148614][ T950] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 404.156305][ T5874] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 404.165432][T10737] [U] 1WT`8H$09\ [ 404.170532][T10737] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 404.178787][T10737] [U] 4XZ^Y)MC. OȞPOW [ 404.182233][ T10] usb write operation failed. (-71) [ 404.186414][T10737] [U] ä%Z [ 404.194455][T10737] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 404.203288][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 404.206308][T10737] [U] P>BЍ̖Z% [ 404.218395][T10737] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 404.224764][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 404.231366][T10737] [U] ܣK [ 404.239096][T10737] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 404.247884][ T10] usb 1-1: media controller created [ 404.250094][T10737] [U] ^ [ 404.253554][ T10] usb read operation failed. (-71) [ 404.257593][T10737] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 404.261558][ T10] usb write operation failed. (-71) [ 404.288226][ T10] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 404.290327][T10737] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 404.313741][ T10] usb 1-1: USB disconnect, device number 47 [ 404.326100][T10737] [U] ţԶDǂ`=ƁN<ʸ]Q [ 404.333593][T10737] [U] KEZȒF9Ǩ{ [ 404.340313][ T950] usb 5-1: Using ep0 maxpacket: 32 [ 404.345662][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 404.352347][ T950] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 404.363371][ T950] usb 5-1: config 0 has no interface number 0 [ 404.374345][ T5874] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e3.25 [ 404.383457][ T5874] usb 2-1: New USB device strings: Mfr=14, Product=156, SerialNumber=3 [ 404.396110][ T950] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.408516][ T5874] usb 2-1: Product: syz [ 404.412693][ T5874] usb 2-1: Manufacturer: syz [ 404.418240][ T950] usb 5-1: config 0 interface 85 has no altsetting 0 [ 404.427168][ T5874] usb 2-1: SerialNumber: syz [ 404.435079][ T950] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 404.444132][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.455621][ T5874] usb 2-1: config 0 descriptor?? [ 404.465499][ T5874] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 404.471856][ T950] usb 5-1: Product: syz [ 404.478817][ T950] usb 5-1: Manufacturer: syz [ 404.483490][ T950] usb 5-1: SerialNumber: syz [ 404.504975][ T950] usb 5-1: config 0 descriptor?? [ 404.521808][T10735] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 404.572647][T10743] FAULT_INJECTION: forcing a failure. [ 404.572647][T10743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.586482][T10743] CPU: 0 UID: 0 PID: 10743 Comm: syz.2.1375 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 404.586506][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 404.586517][T10743] Call Trace: [ 404.586523][T10743] [ 404.586529][T10743] dump_stack_lvl+0x16c/0x1f0 [ 404.586554][T10743] should_fail_ex+0x512/0x640 [ 404.586576][T10743] _copy_from_iter+0x2a4/0x15b0 [ 404.586598][T10743] ? __alloc_skb+0x200/0x380 [ 404.586617][T10743] ? __pfx__copy_from_iter+0x10/0x10 [ 404.586637][T10743] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 404.586665][T10743] netlink_sendmsg+0x829/0xdd0 [ 404.586690][T10743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.586721][T10743] ____sys_sendmsg+0xa95/0xc70 [ 404.586746][T10743] ? copy_msghdr_from_user+0x10a/0x160 [ 404.586764][T10743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.586804][T10743] ___sys_sendmsg+0x134/0x1d0 [ 404.586825][T10743] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.586872][T10743] __sys_sendmsg+0x16d/0x220 [ 404.586892][T10743] ? __pfx___sys_sendmsg+0x10/0x10 [ 404.586915][T10743] ? rcu_is_watching+0x12/0xc0 [ 404.586944][T10743] do_syscall_64+0xcd/0x260 [ 404.586967][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.586984][T10743] RIP: 0033:0x7f411a38d169 [ 404.586998][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.587014][T10743] RSP: 002b:00007f411b161038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.587031][T10743] RAX: ffffffffffffffda RBX: 00007f411a5a5fa0 RCX: 00007f411a38d169 [ 404.587041][T10743] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 404.587051][T10743] RBP: 00007f411b161090 R08: 0000000000000000 R09: 0000000000000000 [ 404.587061][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.587071][T10743] R13: 0000000000000000 R14: 00007f411a5a5fa0 R15: 00007fffb6ab5498 [ 404.587093][T10743] [ 405.025398][T10747] wg1 speed is unknown, defaulting to 1000 [ 405.249659][ T5874] gspca_ov534_9: reg_w failed -71 [ 405.257109][ T950] appletouch 5-1:0.85: Failed to read mode from device. [ 405.353620][ T950] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 405.369594][ T950] usb 5-1: USB disconnect, device number 53 [ 405.893953][T10765] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.016970][T10766] input: syz0 as /devices/virtual/input/input47 [ 406.125409][ T5874] gspca_ov534_9: Unknown sensor 0000 [ 406.125961][ T5874] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 406.453348][ T5874] usb 2-1: USB disconnect, device number 75 [ 407.042780][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 407.064149][T10793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.092427][T10788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.099650][T10788] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 407.110901][T10788] bond1: (slave vcan1): Error -95 calling set_mac_address [ 407.694350][ T950] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 408.045635][ T950] usb 2-1: Using ep0 maxpacket: 32 [ 408.057505][ T950] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e3.25 [ 408.067419][ T950] usb 2-1: New USB device strings: Mfr=14, Product=156, SerialNumber=3 [ 408.075892][ T950] usb 2-1: Product: syz [ 408.080116][ T950] usb 2-1: Manufacturer: syz [ 408.085194][ T950] usb 2-1: SerialNumber: syz [ 408.109721][ T950] usb 2-1: config 0 descriptor?? [ 408.129836][ T950] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 408.148628][T10809] netlink: 'syz.4.1395': attribute type 16 has an invalid length. [ 408.156938][T10809] netlink: 'syz.4.1395': attribute type 17 has an invalid length. [ 408.293557][T10809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.459519][ T950] gspca_ov534_9: reg_w failed -71 [ 408.586929][T10813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.874456][ T950] gspca_ov534_9: Unknown sensor 0000 [ 408.874853][ T950] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 409.027058][ T950] usb 2-1: USB disconnect, device number 76 [ 409.610220][T10820] [U] 1WT`8H$09\ [ 409.617349][T10820] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 409.640315][T10820] [U] 4XZ^Y)MC. OȞPOW [ 409.654480][T10820] [U] ä%Z [ 409.658056][T10820] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 409.666617][T10820] [U] P>BЍ̖Z% [ 409.670695][T10820] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 409.681012][T10820] [U] ܣK [ 409.694367][T10820] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 409.701424][T10820] [U] ^ [ 409.705990][T10820] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 409.723942][T10820] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 409.924983][T10820] [U] ţԶDǂ`=ƁN<ʸ]Q [ 410.030257][T10820] [U] KEZȒF9Ǩ{ [ 410.286059][ T30] audit: type=1400 audit(1743736290.873:853): avc: denied { read } for pid=10829 comm="syz.2.1402" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 410.353941][ T30] audit: type=1400 audit(1743736290.873:854): avc: denied { open } for pid=10829 comm="syz.2.1402" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 410.390483][T10836] FAULT_INJECTION: forcing a failure. [ 410.390483][T10836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.390645][ T30] audit: type=1400 audit(1743736290.883:855): avc: denied { ioctl } for pid=10829 comm="syz.2.1402" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 410.435256][T10816] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 410.488341][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.3.1403 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 410.488369][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.488379][T10836] Call Trace: [ 410.488386][T10836] [ 410.488393][T10836] dump_stack_lvl+0x16c/0x1f0 [ 410.488420][T10836] should_fail_ex+0x512/0x640 [ 410.488442][T10836] _copy_to_user+0x32/0xd0 [ 410.488463][T10836] simple_read_from_buffer+0xcb/0x170 [ 410.488491][T10836] proc_fail_nth_read+0x197/0x270 [ 410.488516][T10836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.488545][T10836] ? rw_verify_area+0xcf/0x680 [ 410.488567][T10836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.488592][T10836] vfs_read+0x1de/0xc70 [ 410.488609][T10836] ? __pfx___mutex_lock+0x10/0x10 [ 410.488630][T10836] ? __pfx_vfs_read+0x10/0x10 [ 410.488661][T10836] ? __fget_files+0x20e/0x3c0 [ 410.488684][T10836] ksys_read+0x12a/0x240 [ 410.488700][T10836] ? __pfx_ksys_read+0x10/0x10 [ 410.488721][T10836] do_syscall_64+0xcd/0x260 [ 410.488754][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.488772][T10836] RIP: 0033:0x7f2ee058bb7c [ 410.488785][T10836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.488802][T10836] RSP: 002b:00007f2ee1423030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.488819][T10836] RAX: ffffffffffffffda RBX: 00007f2ee07a5fa0 RCX: 00007f2ee058bb7c [ 410.488830][T10836] RDX: 000000000000000f RSI: 00007f2ee14230a0 RDI: 0000000000000006 [ 410.488840][T10836] RBP: 00007f2ee1423090 R08: 0000000000000000 R09: 0000000000000000 [ 410.488849][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.488859][T10836] R13: 0000000000000000 R14: 00007f2ee07a5fa0 R15: 00007ffebe0c1228 [ 410.488883][T10836] [ 411.624344][T10855] netlink: 'syz.0.1408': attribute type 16 has an invalid length. [ 411.632200][T10855] netlink: 'syz.0.1408': attribute type 17 has an invalid length. [ 412.426590][T10855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.625460][T10879] wg1 speed is unknown, defaulting to 1000 [ 413.774555][T10885] hub 6-0:1.0: USB hub found [ 413.779995][T10885] hub 6-0:1.0: 1 port detected [ 415.420158][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1425'. [ 415.544582][ T950] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 415.712782][ T950] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 415.889526][ T950] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 415.904284][ T5916] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 415.939267][ T950] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.995031][ T950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.037091][T10904] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 416.044284][ T5916] usb 5-1: device descriptor read/64, error -71 [ 416.071719][ T950] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.288604][ T950] usb 3-1: USB disconnect, device number 67 [ 416.373088][T10914] hub 6-0:1.0: USB hub found [ 416.378830][T10914] hub 6-0:1.0: 1 port detected [ 417.266021][ T5916] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 417.405040][ T5916] usb 5-1: device descriptor read/64, error -71 [ 417.534544][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 417.542546][ T5916] usb usb5-port1: attempt power cycle [ 417.694329][ T5874] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 417.696014][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.712952][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 417.722821][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.731931][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.743082][T10918] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.752284][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 417.790188][ T950] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 417.856190][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.868794][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 417.884510][ T5916] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 417.884519][ T5874] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 417.884542][ T5874] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 417.910875][ T5874] usb 2-1: Manufacturer: syz [ 417.917686][ T5874] usb 2-1: config 0 descriptor?? [ 417.927433][ T5916] usb 5-1: device descriptor read/8, error -71 [ 417.928863][ T5874] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 417.955713][ T950] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 417.964851][ T950] usb 1-1: config 0 has no interface number 0 [ 417.970970][ T950] usb 1-1: config 0 interface 25 has no altsetting 0 [ 417.984617][ T950] usb 1-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice=64.7d [ 417.994063][ T950] usb 1-1: New USB device strings: Mfr=245, Product=195, SerialNumber=3 [ 418.002504][ T950] usb 1-1: Product: syz [ 418.006301][ T10] usb 4-1: USB disconnect, device number 47 [ 418.008894][ T950] usb 1-1: Manufacturer: syz [ 418.020787][ T950] usb 1-1: SerialNumber: syz [ 418.037180][ T950] usb 1-1: config 0 descriptor?? [ 418.174274][ T5916] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 418.205978][ T5916] usb 5-1: device descriptor read/8, error -71 [ 418.254755][ T10] usb 1-1: USB disconnect, device number 48 [ 418.391105][ T5916] usb usb5-port1: unable to enumerate USB device [ 418.454325][T10936] input: syz0 as /devices/virtual/input/input48 [ 418.916041][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1436'. [ 419.765448][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'. [ 420.095688][ T5874] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 420.244734][ T5874] usb 1-1: device descriptor read/64, error -71 [ 420.401315][ T950] usb 2-1: USB disconnect, device number 77 [ 420.754427][ T5874] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 420.768123][T10961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.820529][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 422.869746][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.045776][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.078240][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.136357][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.197119][ T10] usb 5-1: can't set config #27, error -71 [ 423.234801][ T10] usb 5-1: USB disconnect, device number 58 [ 423.834776][T10979] input: syz0 as /devices/virtual/input/input49 [ 424.304406][ T5874] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 424.989042][ T5874] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 425.239662][ T5874] usb 3-1: config 0 has no interface number 0 [ 425.304305][ T5874] usb 3-1: config 0 interface 25 has no altsetting 0 [ 425.364536][ T5874] usb 3-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice=64.7d [ 426.420552][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1452'. [ 426.524304][ T5874] usb 3-1: New USB device strings: Mfr=245, Product=195, SerialNumber=3 [ 426.532760][ T5874] usb 3-1: Product: syz [ 429.299116][ T5874] usb 3-1: Manufacturer: syz [ 429.340306][ T5874] usb 3-1: SerialNumber: syz [ 429.405605][ T5874] usb 3-1: config 0 descriptor?? [ 429.417353][ T5874] usb 3-1: can't set config #0, error -71 [ 429.425010][ T5874] usb 3-1: USB disconnect, device number 68 [ 429.517641][ T0] sched: DL replenish lagged too much [ 430.530780][T11003] wg1 speed is unknown, defaulting to 1000 [ 431.901755][T11010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.674346][ T5829] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 434.689094][ T5916] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 434.896588][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 434.925956][ T5829] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 434.963983][ T5829] usb 5-1: config 0 has no interface number 0 [ 434.981330][ T5829] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.060516][ T5829] usb 5-1: config 0 interface 85 has no altsetting 0 [ 435.103298][ T5829] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 435.156134][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.198791][ T5829] usb 5-1: Product: syz [ 435.202983][ T5829] usb 5-1: Manufacturer: syz [ 435.226935][ T5829] usb 5-1: SerialNumber: syz [ 435.264436][ T5829] usb 5-1: config 0 descriptor?? [ 435.305717][ T5916] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.325694][ T5916] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 435.366676][ T5916] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.395327][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.464864][T11026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 435.522797][ T5829] appletouch 5-1:0.85: Failed to read mode from device. [ 435.533327][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.555971][ T5829] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 435.657740][ T5829] usb 5-1: USB disconnect, device number 59 [ 435.787432][T11037] input: syz0 as /devices/virtual/input/input51 [ 436.091598][ T5874] usb 2-1: USB disconnect, device number 78 [ 436.440380][T10614] udevd[10614]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.616852][T11050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.034274][ T5829] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 439.334263][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 439.397763][ T5829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 439.410839][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.493070][T11055] wg1 speed is unknown, defaulting to 1000 [ 439.656402][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.666300][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358503][ T5829] usb 4-1: Product: syz [ 440.375954][ T5829] usb 4-1: Manufacturer: syz [ 440.385326][ T5829] usb 4-1: SerialNumber: syz [ 440.398942][ T5829] usb 4-1: config 0 descriptor?? [ 444.544320][ T5829] usb read operation failed. (-71) [ 444.794324][ T5829] usb write operation failed. (-71) [ 444.829228][ T5829] usb write operation failed. (-71) [ 444.881104][ T5829] usb write operation failed. (-71) [ 444.966496][ T5829] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 445.043626][ T5829] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 445.154661][ T5829] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 445.250370][ T30] audit: type=1400 audit(1743736325.753:856): avc: denied { firmware_load } for pid=5829 comm="kworker/1:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 449.068769][T11080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.074387][ T950] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 451.344427][ T5873] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 451.530961][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.707339][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.770427][ T30] audit: type=1326 audit(1743736332.363:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x7fc00000 [ 451.876981][ T5873] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 451.904026][ T5873] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 451.937474][ T5873] usb 5-1: Manufacturer: syz [ 451.944418][ T30] audit: type=1326 audit(1743736332.473:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.3.1485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x0 [ 451.991173][ T5873] usb 5-1: config 0 descriptor?? [ 452.016550][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 452.670625][ T30] audit: type=1326 audit(1743736333.253:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ee058d169 code=0x7fc00000 [ 454.189743][ T950] usb 5-1: USB disconnect, device number 60 [ 454.889640][T11108] ubi31: attaching mtd0 [ 454.898235][T11108] ubi31: scanning is finished [ 454.902942][T11108] ubi31: empty MTD device detected [ 455.075852][T11120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.124314][ T5874] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 455.617950][T11108] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 455.625586][T11108] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 455.632904][T11108] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 455.640082][T11108] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 455.647958][T11108] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 455.654911][T11108] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 455.662973][T11108] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2007330151 [ 455.673083][T11108] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 455.684296][ T950] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 455.694339][T11124] ubi31: background thread "ubi_bgt31d" started, PID 11124 [ 455.757908][ T5874] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 455.769888][ T5874] usb 1-1: config 0 has no interface number 0 [ 455.782679][ T5874] usb 1-1: config 0 interface 25 has no altsetting 0 [ 455.808593][ T5874] usb 1-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice=64.7d [ 455.824294][ T5874] usb 1-1: New USB device strings: Mfr=245, Product=195, SerialNumber=3 [ 455.833263][ T5874] usb 1-1: Product: syz [ 455.849169][ T5874] usb 1-1: Manufacturer: syz [ 455.876674][ T5874] usb 1-1: SerialNumber: syz [ 455.893599][ T5874] usb 1-1: config 0 descriptor?? [ 455.947433][ T950] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.992307][ T950] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 456.014543][ T950] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 456.028929][ T950] usb 5-1: Manufacturer: syz [ 456.042183][ T950] usb 5-1: config 0 descriptor?? [ 456.070326][ T950] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 456.164167][ T950] usb 1-1: USB disconnect, device number 52 [ 457.274886][ T950] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 457.454229][ T950] usb 2-1: Using ep0 maxpacket: 8 [ 457.473196][ T950] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 457.482396][ T5873] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 457.608241][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.632814][ T950] usb 2-1: Product: syz [ 457.811741][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 457.841897][ T950] usb 2-1: Manufacturer: syz [ 458.559374][ T950] usb 2-1: SerialNumber: syz [ 458.593708][ T58] usb 5-1: USB disconnect, device number 61 [ 458.617410][ T950] usb 2-1: config 0 descriptor?? [ 458.715872][ T5873] usb 3-1: config 226 has an invalid interface number: 217 but max is 3 [ 458.897549][ T5873] usb 3-1: config 226 has an invalid descriptor of length 1, skipping remainder of the config [ 458.918596][ T950] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 458.936290][ T5873] usb 3-1: config 226 has 1 interface, different from the descriptor's value: 4 [ 458.993019][ T5873] usb 3-1: config 226 has no interface number 0 [ 459.009388][ T5873] usb 3-1: config 226 interface 217 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.022853][ T5873] usb 3-1: config 226 interface 217 has no altsetting 0 [ 459.052174][ T5873] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0011, bcdDevice=e6.65 [ 459.061754][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.071661][ T5873] usb 3-1: Product: 㐊 [ 459.075996][ T5873] usb 3-1: Manufacturer: Ч [ 459.097499][ T5873] usb 3-1: SerialNumber: 䁝 [ 459.334993][T11139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.354994][T11139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.776317][ T5873] dvb-usb: found a 'Elgato EyeTV Diversity' in cold state, will try to load a firmware [ 459.786343][ T950] usb write operation failed. (-71) [ 459.804444][ T5873] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 459.812471][ T5873] dib0700: firmware download failed at 7 with -22 [ 459.820136][ T950] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 459.830816][ T950] dvbdev: DVB: registering new adapter (Terratec H7) [ 459.891412][ T950] usb 2-1: media controller created [ 459.906355][ T5873] usb 3-1: USB disconnect, device number 69 [ 460.146956][ T950] usb read operation failed. (-71) [ 460.274595][ T950] usb write operation failed. (-71) [ 460.335572][ T950] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 460.378551][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 460.550048][ T950] usb 2-1: USB disconnect, device number 79 [ 462.433984][T11175] input: syz0 as /devices/virtual/input/input52 [ 463.509651][T11163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.371338][ T30] audit: type=1326 audit(1743736344.963:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1590f8d169 code=0x7fc00000 [ 468.144382][ T30] audit: type=1326 audit(1743736348.643:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1590f8d169 code=0x7fc00000 [ 468.248667][ T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 468.964356][ T5873] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 469.164768][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 469.183429][ T5873] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 469.197027][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.239435][ T5873] usb 3-1: Product: syz [ 469.280310][ T5873] usb 3-1: Manufacturer: syz [ 469.292970][ T5873] usb 3-1: SerialNumber: syz [ 469.320848][ T5873] usb 3-1: config 0 descriptor?? [ 469.824416][ T5873] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 471.478170][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.674128][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.758519][ T5873] usb write operation failed. (-71) [ 472.014300][ T950] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 472.467058][ T5873] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 472.557373][ T5873] dvbdev: DVB: registering new adapter (Terratec H7) [ 473.074281][ T950] usb 2-1: Using ep0 maxpacket: 8 [ 473.121517][T11222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.105885][ T5873] usb 3-1: media controller created [ 474.111998][ T5873] usb read operation failed. (-71) [ 474.118146][ T5873] usb write operation failed. (-71) [ 474.243652][ T5873] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 474.334459][ T950] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 474.355169][ T5873] usb 3-1: USB disconnect, device number 70 [ 474.474900][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.482928][ T950] usb 2-1: Product: syz [ 474.490850][ T950] usb 2-1: Manufacturer: syz [ 474.538681][ T950] usb 2-1: SerialNumber: syz [ 474.634753][T11234] netlink: 'syz.4.1521': attribute type 16 has an invalid length. [ 474.642646][T11234] netlink: 'syz.4.1521': attribute type 17 has an invalid length. [ 475.438991][T11234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.057678][ T950] usb 2-1: config 0 descriptor?? [ 476.771861][ T950] usb 2-1: can't set config #0, error -71 [ 476.977016][ T950] usb 2-1: USB disconnect, device number 80 [ 477.396427][ T30] audit: type=1326 audit(1743736357.993:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ff58d169 code=0x7fc00000 [ 478.367480][ T30] audit: type=1326 audit(1743736357.993:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.4.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ff58d169 code=0x0 [ 479.734961][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.786313][ T30] audit: type=1326 audit(1743736359.323:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11238 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f39ff58d169 code=0x7fc00000 [ 486.470112][T11286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.522501][ T5916] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 487.258086][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 487.477417][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 487.519939][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.585730][ T5916] usb 3-1: Product: syz [ 487.610763][ T5916] usb 3-1: Manufacturer: syz [ 487.654385][ T5873] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 487.714932][ T5916] usb 3-1: SerialNumber: syz [ 487.731238][ T5916] usb 3-1: config 0 descriptor?? [ 487.985889][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.049358][ T5873] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 488.139156][ T5916] usb read operation failed. (-32) [ 488.192541][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.565192][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.577394][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.611179][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.376678][ T5916] usb write operation failed. (-71) [ 489.390501][ T5916] usb write operation failed. (-71) [ 489.429578][T11294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 489.459207][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.846843][ T5916] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 490.966048][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'. [ 491.081960][ T950] usb 2-1: USB disconnect, device number 81 [ 495.322955][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1543'. [ 495.982977][T11324] netlink: 'syz.3.1546': attribute type 16 has an invalid length. [ 495.990933][T11324] netlink: 'syz.3.1546': attribute type 17 has an invalid length. [ 496.754436][T11324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.149847][T11332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.010126][ T5924] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 499.318594][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 499.661169][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 499.686768][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.718276][ T5924] usb 2-1: Product: syz [ 499.772725][ T5924] usb 2-1: Manufacturer: syz [ 499.785019][ T5924] usb 2-1: SerialNumber: syz [ 499.796054][ T5924] usb 2-1: config 0 descriptor?? [ 499.988715][T11353] [U] 1WT`8H$09\ [ 500.022098][T11353] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 500.244919][T11353] [U] 4XZ^Y)MC. OȞPOW [ 500.265401][ T5924] usb read operation failed. (-32) [ 500.356728][T11353] [U] ä%Z [ 500.360210][T11353] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 500.368721][T11353] [U] P>BЍ̖Z% [ 500.425018][T11353] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 500.521093][T11353] [U] ܣK [ 500.524686][T11353] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 500.534222][T11353] [U] ^ [ 500.537270][T11353] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 501.087703][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.094094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.333372][ T5924] usb write operation failed. (-110) [ 505.598907][T11353] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 505.618011][ T5924] usb write operation failed. (-32) [ 505.623235][ T5924] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 505.793228][T11353] [U] ţԶDǂ`=ƁN<ʸ]Q [ 505.917288][T11353] [U] KEZȒF9Ǩ{ [ 505.978007][T11353] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މDY_-T40 OPEߴP<!AU> Zù6 [ 506.216436][ T5829] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 506.237447][ T5924] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 506.261593][ T5916] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 506.274243][ T5829] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 506.321657][T10585] udevd[10585]: failed to send result of seq 15828 to main daemon: Connection refused [ 506.347305][ T5829] usb 4-1: USB disconnect, device number 48 [ 506.407172][ T5916] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 506.446572][ T5924] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 506.483699][ T5916] usb 3-1: USB disconnect, device number 71 [ 506.637944][ T5924] usb 2-1: USB disconnect, device number 82 [ 506.736625][ T30] audit: type=1326 audit(1743736387.333:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x7fc00000 [ 507.074364][ T30] audit: type=1326 audit(1743736387.333:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11356 comm="syz.3.1556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ee058d169 code=0x0 [ 507.530185][ T5924] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 567.354788][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.378303][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.838843][T11361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 625.078328][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.098581][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 646.564112][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 646.571076][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5822/1:b..l [ 646.579428][ C1] rcu: (detected by 1, t=10503 jiffies, g=40845, q=1313 ncpus=2) [ 646.587232][ C1] task:syz-executor state:R running task stack:24008 pid:5822 tgid:5822 ppid:5819 task_flags:0x400140 flags:0x00000000 [ 646.601732][ C1] Call Trace: [ 646.605013][ C1] [ 646.607958][ C1] __schedule+0x116f/0x5de0 [ 646.612464][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 646.617661][ C1] ? kernel_text_address+0x8d/0x100 [ 646.622857][ C1] ? unwind_get_return_address+0x59/0xa0 [ 646.628497][ C1] ? __pfx___schedule+0x10/0x10 [ 646.633344][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 646.638285][ C1] ? mark_held_locks+0x49/0x80 [ 646.643048][ C1] preempt_schedule_irq+0x51/0x90 [ 646.648072][ C1] irqentry_exit+0x36/0x90 [ 646.652488][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.658483][ C1] RIP: 0010:unwind_next_frame+0x3f9/0x20a0 [ 646.664309][ C1] Code: 41 c7 45 00 00 00 00 00 31 ed e8 92 e9 07 0a 85 c0 0f 85 a7 06 00 00 48 c7 c7 80 15 3c 8e 48 8d 35 00 00 00 00 e8 67 3b 2e 00 82 db 37 00 e9 3d fc ff ff 49 81 ff 00 a0 ff 91 72 0d 49 81 ff [ 646.684005][ C1] RSP: 0018:ffffc90003ebf5f0 EFLAGS: 00000296 [ 646.690070][ C1] RAX: 0000000000000000 RBX: ffffc90003ebff28 RCX: ffffc90003ebf5b4 [ 646.698033][ C1] RDX: 0000000000000002 RSI: ffffffff8dbc85ff RDI: ffffffff8bf46060 [ 646.706001][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 646.713966][ C1] R10: 0000000000000002 R11: 00000000000133a3 R12: ffffc90003ebf6b0 [ 646.722190][ C1] R13: ffffc90003ebf660 R14: ffffc90003ebff28 R15: ffffc90003ebf694 [ 646.730171][ C1] ? __do_sys_newfstatat+0xa1/0x130 [ 646.735374][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 646.741530][ C1] arch_stack_walk+0x94/0x100 [ 646.746216][ C1] ? do_syscall_64+0xcd/0x260 [ 646.750907][ C1] stack_trace_save+0x8e/0xc0 [ 646.755583][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 646.760956][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 646.765895][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 646.770826][ C1] save_stack+0x160/0x1f0 [ 646.775156][ C1] ? __pfx_save_stack+0x10/0x10 [ 646.779999][ C1] ? __free_frozen_pages+0x69d/0xff0 [ 646.785284][ C1] ? __put_partials+0x16d/0x1c0 [ 646.790148][ C1] ? qlist_free_all+0x4e/0x120 [ 646.794905][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 646.800536][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 646.805556][ C1] ? __kmalloc_noprof+0x1d4/0x510 [ 646.810578][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 646.816302][ C1] ? tomoyo_path_perm+0x274/0x460 [ 646.821321][ C1] ? security_inode_getattr+0x116/0x290 [ 646.826864][ C1] ? vfs_fstat+0x4b/0xd0 [ 646.831104][ C1] ? vfs_fstatat+0xbc/0xf0 [ 646.835516][ C1] ? __do_sys_newfstatat+0xa1/0x130 [ 646.840717][ C1] ? page_ext_put+0x3e/0xd0 [ 646.845218][ C1] __reset_page_owner+0x84/0x1a0 [ 646.850156][ C1] __free_frozen_pages+0x69d/0xff0 [ 646.855274][ C1] __put_partials+0x16d/0x1c0 [ 646.859967][ C1] qlist_free_all+0x4e/0x120 [ 646.864554][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 646.870270][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 646.875734][ C1] __kasan_slab_alloc+0x69/0x90 [ 646.880581][ C1] __kmalloc_noprof+0x1d4/0x510 [ 646.885442][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 646.891001][ C1] ? tomoyo_profile+0x47/0x60 [ 646.895681][ C1] tomoyo_path_perm+0x274/0x460 [ 646.900534][ C1] ? tomoyo_path_perm+0x260/0x460 [ 646.905567][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 646.910952][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 646.915899][ C1] ? find_held_lock+0x2b/0x80 [ 646.920596][ C1] ? __might_fault+0xe3/0x190 [ 646.925268][ C1] ? __might_fault+0xe3/0x190 [ 646.929943][ C1] ? __might_fault+0x13b/0x190 [ 646.934705][ C1] security_inode_getattr+0x116/0x290 [ 646.940077][ C1] vfs_fstat+0x4b/0xd0 [ 646.944145][ C1] vfs_fstatat+0xbc/0xf0 [ 646.948386][ C1] __do_sys_newfstatat+0xa1/0x130 [ 646.953410][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 646.959054][ C1] ? rcu_is_watching+0x12/0xc0 [ 646.963820][ C1] do_syscall_64+0xcd/0x260 [ 646.968326][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.974218][ C1] RIP: 0033:0x7f39ff58b97a [ 646.978623][ C1] RSP: 002b:00007ffdcb320048 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 646.987034][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f39ff58b97a [ 646.995000][ C1] RDX: 00007ffdcb320050 RSI: 00007f39ff64a6c2 RDI: 0000000000000003 [ 647.002963][ C1] RBP: 00007ffdcb320050 R08: 0000000000000000 R09: 0000000000000000 [ 647.010936][ C1] R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffdcb321250 [ 647.018912][ C1] R13: 00007f39ff60e08c R14: 000000000007be0c R15: 00007ffdcb321290 [ 647.026891][ C1]