last executing test programs: 1m23.104049967s ago: executing program 3 (id=735): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x10002) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000ffffac13f43037d1"], 0x20}}], 0x1, 0x40010) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 1m21.155321915s ago: executing program 3 (id=740): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) (fail_nth: 4) 1m20.64129064s ago: executing program 3 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d010140000102030109025f0003010060000904000000010100"], 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="000338000000380329e6a417d525f663e0e30da79143a84ab5ba0472d784232eb9c060ac3445d5763fcdf18da300e5b2a8c2e0dd638b774cd4ba9a0a3d870b02f0c82df666c5c5501c7334d71586410d89d03c4655d2e9686cd817d48ce6d91ac8cb7693d35adae27a84cf8aeb0ee84f181ef58df2a07a32ebff3cb29a8d5d1c5343721bed9cdfc97b790e6964046e5abc39205927f7ff64b1608c83068a9b998de76be0322394c09647d8ebeb6f"], 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x20000000, 0x1}, &(0x7f00000002c0)=0xc) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x324, 0x140, 0x111, 0x4b4, 0x140, 0xd4feffff, 0x278, 0x20a, 0x278, 0x278, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xff], 'bond_slave_0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x33, 0x2, 0x4, 0x2}, 0x0, 0x10c, 0x140, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x7}, 0x4b5, 0xd}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@ipcomp={{0x2c}, {[0x4d6, 0x4d2]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x7, 0x7, 0xf2e5, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x39c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000100)={r6, 0x3ff, 0x103}, 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x6, 0x4, 0x2]}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r11, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="35042dbd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c00238005001f0000000400"], 0x28}, 0x1, 0x0, 0x0, 0x4000064}, 0x40020) 1m18.517969647s ago: executing program 3 (id=746): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="81482057dd07fd35dea0a85e3ea31a72ee0c185880501e05e4d04734c46abfdf018c4fc926357324f67ea3a4eb377f5e81daf759f9f33b6e93c250d02f041a3a1cc11492e2f3c3c797441e27f5f24a7940f1b7d75d78e09afaa029e2aa6b6cf0ea3741d89a9178e46691faede100d34706b10e8d52147c885fb2b68090a1107c25dfcd9e26a9c229051aa73d2e3a06a7244a3ce0c60cc1e0d11b26205f31174beb78d3ca1f3f463bbd8da39b1bbc48d95423d2b0d072016888d40762b92f233de762bd1ee0485d0d783812a751e76f3c6275dd459151ff82b9bf8a", @ANYRESOCT=r0, @ANYBLOB="03925cba3cbe94f70616b16d6719351eb8756b4a69b33ad6a46250f7cd5305f9ecd001a48313f041c08e7dfb0b5b3fcfdb77e0614742a83162258ea1b6da5475647ce7e49dc9fe3cf9a8e968e9009d3df2d7c73e85817d6cd6fae416538e2f11363df3d3f1f2f1823cf9b1058cdbfab3fcbe14ee521856429d66b6f124afe81912489d6ae518ea24774e920b98fe5d4ff318b353a38ada9fb0fac5d4474d6541c91c110793dfda617089dfbd91c76adc0119da5e64f962754b7e29db08c2515be039e1fdd18a769ec76ff736d2351b2e97ab5d8498b88eedc97ddba3853949122abf36", @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000770000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 1m15.898932187s ago: executing program 3 (id=757): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x1a, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x88, 0x3, @private=0xa010102, @multicast1}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (fail_nth: 4) 1m15.125812813s ago: executing program 3 (id=761): syz_usb_connect$uac1(0x2, 0xbe, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x5, 0x5, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x7, 0xcd32e795acb4132e, 0xa, 0xa035d67311b4f14e]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf7, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x4, 0xc}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x4, 0x1, 0x40}, 0xc0, &(0x7f0000000140)={0x5, 0xf, 0xc0, 0x4, [@generic={0x84, 0x10, 0xb, "771a267ae22f760c93b8463cbb1ccdfd63f3a6f39c47bbd744d7345a088284d4a832c4d5927050bbaa946a576b7ad3a98a0e92ed5e283583bc0a0078bdd3def51f49fa809a7e99ca8d009dd21e794e6939ff82173d91ffdc56bdf468e3cf6478ed131d67ecede94aab869a47c96d670b67b834da22cbc6199f604d4dc109361a21"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x5, 0x3, 0xa, 0xc}, @ssp_cap={0x14, 0x10, 0xa, 0x3b, 0x2, 0xdb2, 0x0, 0x5, [0xff0000, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x10, 0xf00f, 0x8001, [0x3e40, 0x3f0f, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1045}}]}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x4, 0x5}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000003c0)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_enter(r0, 0x739a, 0x52a2, 0x50, &(0x7f0000000040)={[0x6, 0x6]}, 0x8) 1m0.077913146s ago: executing program 32 (id=761): syz_usb_connect$uac1(0x2, 0xbe, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x5, 0x5, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x5, 0x2, 0x4, [0x7, 0xcd32e795acb4132e, 0xa, 0xa035d67311b4f14e]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf7, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x4, 0xc}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3, 0x4, 0x1, 0x40}, 0xc0, &(0x7f0000000140)={0x5, 0xf, 0xc0, 0x4, [@generic={0x84, 0x10, 0xb, "771a267ae22f760c93b8463cbb1ccdfd63f3a6f39c47bbd744d7345a088284d4a832c4d5927050bbaa946a576b7ad3a98a0e92ed5e283583bc0a0078bdd3def51f49fa809a7e99ca8d009dd21e794e6939ff82173d91ffdc56bdf468e3cf6478ed131d67ecede94aab869a47c96d670b67b834da22cbc6199f604d4dc109361a21"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x5, 0x3, 0xa, 0xc}, @ssp_cap={0x14, 0x10, 0xa, 0x3b, 0x2, 0xdb2, 0x0, 0x5, [0xff0000, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x10, 0xf00f, 0x8001, [0x3e40, 0x3f0f, 0x0]}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1045}}]}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x4, 0x5}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000003c0)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_enter(r0, 0x739a, 0x52a2, 0x50, &(0x7f0000000040)={[0x6, 0x6]}, 0x8) 7.328204847s ago: executing program 0 (id=983): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="0000cc0500010000000000d17fec00000008d224017409ad9e8df9c452a50c36b460796491807ecc4e91cea389ad0ddd3d2fe1f5d18cbdd69eeab8d66ee8f8bdfa45d728dc82c761f9d3d442ae1251b8c385cc602f263c22866b8fbad7bbedefc1c76974ef2a14e6a7622f03c802067e3ab814c022e6c292289b299381d1041c85fec6a0e60d3d3ccc165910de918802c59f6773e04dc4188a359b4e5d7dba7031cd51f4ee6a90f2ef5f8b404798290e4a9b7ecc52bdd6a0f616ce32ed84b78a509e1f11091d2093a6713552f1b4b623ff5cf5a44bf72828988e5f55e60c965e2d081ea187f4b9d6d990e1e97dc7fa7116d222cfb3892513ba680b6dc48868fc8a6948d8f7cb0098806be7"], 0x5) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="683d1cedc7140000005a9b1904989e2d7068"], 0x12) getpeername$inet(r2, &(0x7f0000000500)={0x2, 0x0, @multicast2}, &(0x7f0000000540)=0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x5, 0x2, 0x5a, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x2, 0xb}}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r11 = syz_open_pts(r10, 0x900) r12 = dup3(r11, r10, 0x0) read(r12, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r12, &(0x7f0000001d40)=""/4095, 0xfff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r9, r7, 0x26, 0x201c, 0x0, @value=r12, @void, @void, @void, r8}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 5.948414245s ago: executing program 0 (id=988): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r2, 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x41) 5.946808696s ago: executing program 2 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) inotify_init1(0x0) memfd_secret(0x80000) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}) io_uring_enter(r3, 0x1a27, 0x0, 0x0, 0x0, 0x0) 5.927417647s ago: executing program 4 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x200, 0x40000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x6, 0x3, 0x4c, @mcast2, @mcast2, 0x20, 0x1, 0x4, 0x10001}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@private1, r2}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pivot_root(&(0x7f0000002780)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r7, &(0x7f0000000540)={0x2020}, 0x2020) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000140)={0x10, {{0x2, 0x4e21, @multicast2}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$isdn(0x22, 0x3, 0x21) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_clone(0x8200000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 5.79161754s ago: executing program 2 (id=991): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = syz_io_uring_setup(0xe13, &(0x7f0000000540)={0x0, 0x353a, 0x8, 0x2, 0x1b3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4400c800) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) sendmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) io_uring_enter(r1, 0x3516, 0x95ff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) unshare(0x42000000) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3, 0x4e22, 0x0, 0xa}, {0x0, 0x400403, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, {0x800, 0x0, 0x80000000, 0x10000000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x3500, 0x1, 0x2, 0x0, 0x1, 0x9}}, 0xe4) 5.623831434s ago: executing program 4 (id=992): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000098b3c064cbc9ac80f2e679bc00000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003700060003000000e70800000600000008000000eddf47e96f7fcfba5b0ad5cb8a6cf6ce2d747cd629a28c928f77f08e4ffbfeb9b36a880868e964d155f4e3"], 0x14f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x400, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x400000, 0x3, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f028}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xff}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, &(0x7f0000000280)={{0x0, 0x3, 0xe, 0x1, 0x8}, 0x1000, 0x3, 'id1\x00', 'timer0\x00', 0x0, 0xfe61, 0x5, 0x12f, 0x5e4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "a730b801"}, 0x0, 0x1, {0x0}}) 5.250848079s ago: executing program 0 (id=993): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000ffffac13f43037d1"], 0x20}}], 0x1, 0x40010) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 5.2144809s ago: executing program 1 (id=994): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0xffe0, 0x7}}, [@filter_kind_options=@f_matchall={{0x3d}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x80800) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b", 0x5a}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000020) mmap(&(0x7f00001d7000/0x1000)=nil, 0x1000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r13, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200"], 0x0) 5.072655792s ago: executing program 4 (id=995): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) 4.309574313s ago: executing program 2 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xcb, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x148}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffdb5}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 4.037287955s ago: executing program 4 (id=997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="81482057dd07fd35dea0a85e3ea31a72ee0c185880501e05e4d04734c46abfdf018c4fc926357324f67ea3a4eb377f5e81daf759f9f33b6e93c250d02f041a3a1cc11492e2f3c3c797441e27f5f24a7940f1b7d75d78e09afaa029e2aa6b6cf0ea3741d89a9178e46691faede100d34706b10e8d52147c885fb2b68090a1107c25dfcd9e26a9c229051aa73d2e3a06a7244a3ce0c60cc1e0d11b26205f31174beb78d3ca1f3f463bbd8da39b1bbc48d95423d2b0d072016888d40762b92f233de762bd1ee0485d0d783812a751e76f3c6275dd459151ff82b9bf8a", @ANYRESOCT=r0, @ANYBLOB="03925cba3cbe94f70616b16d6719351eb8756b4a69b33ad6a46250f7cd5305f9ecd001a48313f041c08e7dfb0b5b3fcfdb77e0614742a83162258ea1b6da5475647ce7e49dc9fe3cf9a8e968e9009d3df2d7c73e85817d6cd6fae416538e2f11363df3d3f1f2f1823cf9b1058cdbfab3fcbe14ee521856429d66b6f124afe81912489d6ae518ea24774e920b98fe5d4ff318b353a38ada9fb0fac5d4474d6541c91c110793dfda617089dfbd91c76adc0119da5e64f962754b7e29db08c2515be039e1fdd18a769ec76ff736d2351b2e97ab5d8498b88eedc97ddba3853949122abf36", @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="a0dab2f65aa10736fbafdd708fca"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000770000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 3.306910581s ago: executing program 1 (id=998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20}, 0x20004000) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)=""/37, 0x25}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0xffa4, 0x2a, &(0x7f0000000000)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000001000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r6, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = fanotify_init(0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r11, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 3.215536351s ago: executing program 1 (id=999): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="81482057dd07fd35dea0a85e3ea31a72ee0c185880501e05e4d04734c46abfdf018c4fc926357324f67ea3a4eb377f5e81daf759f9f33b6e93c250d02f041a3a1cc11492e2f3c3c797441e27f5f24a7940f1b7d75d78e09afaa029e2aa6b6cf0ea3741d89a9178e46691faede100d34706b10e8d52147c885fb2b68090a1107c25dfcd9e26a9c229051aa73d2e3a06a7244a3ce0c60cc1e0d11b26205f31174beb78d3ca1f3f463bbd8da39b1bbc48d95423d2b0d072016888d40762b92f233de762bd1ee0485d0d783812a751e76f3c6275dd459151ff82b9bf8a", @ANYRESOCT=r0, @ANYBLOB="03925cba3cbe94f70616b16d6719351eb8756b4a69b33ad6a46250f7cd5305f9ecd001a48313f041c08e7dfb0b5b3fcfdb77e0614742a83162258ea1b6da5475647ce7e49dc9fe3cf9a8e968e9009d3df2d7c73e85817d6cd6fae416538e2f11363df3d3f1f2f1823cf9b1058cdbfab3fcbe14ee521856429d66b6f124afe81912489d6ae518ea24774e920b98fe5d4ff318b353a38ada9fb0fac5d4474d6541c91c110793dfda617089dfbd91c76adc0119da5e64f962754b7e29db08c2515be039e1fdd18a769ec76ff736d2351b2e97ab5d8498b88eedc97ddba3853949122abf36", @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="a0dab2f65aa10736fbafdd708fca"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000770000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 2.627122426s ago: executing program 2 (id=1000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) memfd_secret(0x80000) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}) io_uring_enter(r3, 0x1a27, 0x0, 0x0, 0x0, 0x0) 2.540736294s ago: executing program 2 (id=1001): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x3, 0x4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000140)) openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4b, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x5}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) socket(0x3d, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}, {{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/222, 0xde}], 0x1, &(0x7f0000000440)=""/8, 0x8}, 0x8}, {{&(0x7f0000000680)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/73, 0x49}, {&(0x7f0000000880)=""/48, 0x30}, {&(0x7f00000008c0)=""/72, 0x48}, {&(0x7f0000002680)=""/26, 0x1a}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000a80)=""/51, 0x33}, {&(0x7f0000000ac0)=""/105, 0x69}, {&(0x7f0000000b40)=""/218, 0xda}], 0x9, &(0x7f0000000cc0)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000001cc0)=@nfc_llcp, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/202, 0xca}, {&(0x7f0000001e40)=""/12, 0xc}, {&(0x7f0000001e80)=""/188, 0xbc}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/53, 0x35}], 0x5}, 0x3ff}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)=""/154, 0x9a}, {&(0x7f0000002200)=""/72, 0x48}, {&(0x7f0000002280)=""/65, 0x41}, {&(0x7f0000002300)=""/155, 0x9b}, {&(0x7f00000023c0)=""/67, 0x43}], 0x5, &(0x7f0000002480)=""/194, 0xc2}, 0x9}, {{&(0x7f0000002580)=@generic, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002600)=""/81, 0x51}, {&(0x7f00000026c0)=""/150, 0x96}, {&(0x7f0000002780)=""/250, 0xfa}, {&(0x7f0000002880)=""/177, 0xb1}, {&(0x7f0000002940)}, {&(0x7f0000003b00)=""/4110, 0x100e}, {&(0x7f0000003980)=""/10, 0xa}], 0x7}, 0x416a}], 0x7, 0x60002000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x8100, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) 2.0956829s ago: executing program 0 (id=1002): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x3, 0x4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000140)) openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4b, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x5}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) socket(0x3d, 0x0, 0x0) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}, {{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/222, 0xde}], 0x1, &(0x7f0000000440)=""/8, 0x8}, 0x8}, {{&(0x7f0000000680)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/73, 0x49}, {&(0x7f0000000880)=""/48, 0x30}, {&(0x7f00000008c0)=""/72, 0x48}, {&(0x7f0000002680)=""/26, 0x1a}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000a80)=""/51, 0x33}, {&(0x7f0000000ac0)=""/105, 0x69}, {&(0x7f0000000b40)=""/218, 0xda}], 0x9, &(0x7f0000000cc0)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000001cc0)=@nfc_llcp, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d40)=""/202, 0xca}, {&(0x7f0000001e40)=""/12, 0xc}, {&(0x7f0000001e80)=""/188, 0xbc}, {&(0x7f0000001f40)=""/234, 0xea}, {&(0x7f0000002040)=""/53, 0x35}], 0x5}, 0x3ff}, {{&(0x7f00000020c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)=""/154, 0x9a}, {&(0x7f0000002200)=""/72, 0x48}, {&(0x7f0000002280)=""/65, 0x41}, {&(0x7f0000002300)=""/155, 0x9b}, {&(0x7f00000023c0)=""/67, 0x43}], 0x5, &(0x7f0000002480)=""/194, 0xc2}, 0x9}, {{&(0x7f0000002580)=@generic, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002600)=""/81, 0x51}, {&(0x7f00000026c0)=""/150, 0x96}, {&(0x7f0000002780)=""/250, 0xfa}, {&(0x7f0000002880)=""/177, 0xb1}, {&(0x7f0000002940)}, {&(0x7f0000003b00)=""/4110, 0x100e}, {&(0x7f0000003980)=""/10, 0xa}], 0x7}, 0x416a}], 0x7, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1, 0x8100, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) 1.543058069s ago: executing program 4 (id=1003): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x100, {{}, {}, {0x8}}}, 0x24}}, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r4, &(0x7f0000000a00)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) listen(r5, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000000200)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @remote}, 0x1, 0x3, 0x4000, 0x2}}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) mmap(&(0x7f0000066000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r6, 0x0) read$FUSE(r3, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r11, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000300)={0x8, 0xfffffea7, {r10}, {r8}, 0xe, 0x58}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,use', @ANYRESDEC=r13, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000001800,default_permissions,allow_other,smackfshat=&:,context=unconfined_u,\x00']) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x23f58e5b666e3706) 840.16273ms ago: executing program 2 (id=1004): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000210001000095860000000000000002000000000000010000000008000b00e20b00005a2ec11f6b2aec5ac3f1bf02dbc9280934db24e4dcc0a8ea0e00ebe4432237434e0f019306756edab982647eaaaebbee175e456afdd6087a04c3c97e44c292f6d097512b298532e707747cea46ee554ce10f51292da190db40fbf65d90eecccfc8207aa2bcd1d47866e6dda049c421f9251804563aed255ac48b6149b94d080bcdab0cef86cab67ce048826f571f328a673a8b5f08494f2ba93e75c82ab72f18f5e27c840a5470f041da545d01eafb7d34fd679079eb35fc2fffc7439b53da294e9de1b4ef"], 0x24}, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={&(0x7f0000000040)=""/2, 0x0, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4054, 0xfd6, 0x0, 0x0}, &(0x7f0000000100)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a70000002000001090224000100000000090400000103000000092100000001220500090581030000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x840) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 750.824062ms ago: executing program 0 (id=1005): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r3, 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 607.76447ms ago: executing program 4 (id=1006): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000080), 0x2000011a) 454.162541ms ago: executing program 1 (id=1007): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000002340), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x64}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) lseek(r0, 0xfffffffffffffff9, 0x4) 362.845589ms ago: executing program 1 (id=1008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20}, 0x20004000) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)=""/37, 0x25}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0xffa4, 0x2a, &(0x7f0000000000)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, 0x0, &(0x7f0000001000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r6, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = fanotify_init(0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r11, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 272.895866ms ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xcb, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x148}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffdb5}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 0s ago: executing program 0 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) memfd_secret(0x80000) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0xfffd}}) io_uring_enter(r3, 0x1a27, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2DBE.0032: unknown main item tag 0x0 [ 317.287920][ T5894] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 317.295785][ T24] konepure 0003:1E7D:2DBE.0032: unknown main item tag 0x0 [ 317.307156][ T5894] hid-steam 0003:28DE:1102.0033: unknown main item tag 0x0 [ 317.389253][ T5894] hid-steam 0003:28DE:1102.0033: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 317.432637][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439892][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.454078][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 317.463685][ T24] konepure 0003:1E7D:2DBE.0032: unknown main item tag 0x0 [ 317.472118][ T24] konepure 0003:1E7D:2DBE.0032: unknown main item tag 0x0 [ 317.480956][ T24] konepure 0003:1E7D:2DBE.0032: unknown main item tag 0x0 [ 317.505017][ T5894] usb 5-1: USB disconnect, device number 37 [ 317.519365][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 317.555349][ T24] konepure 0003:1E7D:2DBE.0032: hidraw1: USB HID v0.02 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 317.773476][ T974] usb 2-1: USB disconnect, device number 41 [ 317.878505][ T8321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.720'. [ 318.041649][ T47] ch341-uart ttyUSB0: failed to read break control: -71 [ 318.063558][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 318.096600][ T47] usb 1-1: USB disconnect, device number 42 [ 318.115499][ T47] ch341 1-1:0.0: device disconnected [ 318.398887][ T24] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 318.498925][ T3407] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 318.562929][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.572761][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 318.584625][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.596998][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.621722][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.645585][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.685843][ T3407] usb 5-1: Using ep0 maxpacket: 8 [ 318.692091][ T24] usb 4-1: Product: syz [ 318.696487][ T24] usb 4-1: Manufacturer: syz [ 318.696618][ T974] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 318.701847][ T24] usb 4-1: SerialNumber: syz [ 318.746434][ T3407] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.756935][ T3407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.766886][ T3407] usb 5-1: Product: syz [ 318.780388][ T5838] usbhid 3-1:1.0: can't add hid device: -71 [ 318.800423][ T5838] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 318.806919][ T3407] usb 5-1: Manufacturer: syz [ 318.827751][ T3407] usb 5-1: SerialNumber: syz [ 318.835181][ T5838] usb 3-1: USB disconnect, device number 41 [ 318.872518][ T3407] usb 5-1: config 0 descriptor?? [ 318.881766][ T974] usb 2-1: Using ep0 maxpacket: 8 [ 318.907484][ T974] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.925229][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.953231][ T974] usb 2-1: Product: syz [ 318.957572][ T974] usb 2-1: Manufacturer: syz [ 318.968359][ T974] usb 2-1: SerialNumber: syz [ 318.977680][ T974] usb 2-1: config 0 descriptor?? [ 319.004028][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.020062][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.137844][ T3407] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 319.169693][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 319.182032][ T24] usb 4-1: 0:2 : does not exist [ 319.213874][ T8349] fuse: Invalid uid '00000000000000000004' [ 319.224792][ T974] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 319.272201][ T24] usb 4-1: USB disconnect, device number 48 [ 319.381957][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 319.513999][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.599984][ T5838] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 319.769011][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 319.781559][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.796689][ T5838] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 319.807013][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.827026][ T5838] usb 3-1: config 0 descriptor?? [ 319.842737][ T5838] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 319.868994][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 320.024001][ T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 320.033450][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.041971][ T24] usb 1-1: Product: syz [ 320.046306][ T24] usb 1-1: Manufacturer: syz [ 320.051430][ T24] usb 1-1: SerialNumber: syz [ 320.060119][ T24] usb 1-1: config 0 descriptor?? [ 320.069815][ T24] ch341 1-1:0.0: ch341-uart converter detected [ 320.139056][ T5895] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 320.246562][ T5838] gspca_vc032x: reg_w err -71 [ 320.266489][ T5838] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 320.285139][ T5838] usb 3-1: USB disconnect, device number 42 [ 320.328845][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 320.336216][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.349293][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.359483][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.370067][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.396880][ T3407] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 320.406644][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.418651][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.424542][ T3407] usb 5-1: USB disconnect, device number 38 [ 320.524669][ T974] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 320.552250][ T974] usb 2-1: USB disconnect, device number 42 [ 320.649282][ T5895] usb 4-1: GET_CAPABILITIES returned 0 [ 320.655130][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 320.856043][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.865155][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.874233][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.883295][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.893262][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.902567][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.911736][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.927564][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.936748][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.946747][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.956177][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.965316][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.974828][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 320.984374][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.002796][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.011940][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 321.032979][ T974] usb 4-1: USB disconnect, device number 49 [ 321.253483][ T8363] FAULT_INJECTION: forcing a failure. [ 321.253483][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 321.268790][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.4.736 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 321.268821][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.268832][ T8363] Call Trace: [ 321.268840][ T8363] [ 321.268848][ T8363] dump_stack_lvl+0x241/0x360 [ 321.268889][ T8363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.268925][ T8363] ? __pfx__printk+0x10/0x10 [ 321.268956][ T8363] ? __pfx___might_resched+0x10/0x10 [ 321.268984][ T8363] should_fail_ex+0x424/0x570 [ 321.269007][ T8363] should_failslab+0xac/0x100 [ 321.269035][ T8363] __kmalloc_noprof+0xdf/0x4d0 [ 321.269059][ T8363] ? tomoyo_encode+0x26f/0x540 [ 321.269087][ T8363] tomoyo_encode+0x26f/0x540 [ 321.269132][ T8363] tomoyo_realpath_from_path+0x59e/0x5e0 [ 321.269175][ T8363] tomoyo_path_number_perm+0x245/0x790 [ 321.269207][ T8363] ? __lock_acquire+0xad5/0xd80 [ 321.269230][ T8363] ? tomoyo_path_number_perm+0x215/0x790 [ 321.269257][ T8363] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.269324][ T8363] ? __fget_files+0x2a/0x420 [ 321.269341][ T8363] ? __fget_files+0x2a/0x420 [ 321.269362][ T8363] ? __fget_files+0x2a/0x420 [ 321.269385][ T8363] security_file_ioctl_compat+0xc6/0x2a0 [ 321.269411][ T8363] __se_compat_sys_ioctl+0xd8/0xc30 [ 321.269434][ T8363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.269458][ T8363] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 321.269483][ T8363] ? __fget_files+0x2a/0x420 [ 321.269508][ T8363] ? fput+0x9b/0xd0 [ 321.269526][ T8363] ? ksys_write+0x275/0x2d0 [ 321.269558][ T8363] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 321.269580][ T8363] ? lockdep_hardirqs_on+0x9d/0x150 [ 321.269604][ T8363] __do_fast_syscall_32+0xb4/0x110 [ 321.269625][ T8363] ? exc_page_fault+0x5f8/0x920 [ 321.269652][ T8363] do_fast_syscall_32+0x34/0x80 [ 321.269674][ T8363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.269697][ T8363] RIP: 0023:0xf73dd579 [ 321.269715][ T8363] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 321.269731][ T8363] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 321.269754][ T8363] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000f502 [ 321.269767][ T8363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.269779][ T8363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.269790][ T8363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.269801][ T8363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.269833][ T8363] [ 321.269937][ T8363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.540323][ T24] ch341-uart ttyUSB0: failed to read break control: -71 [ 321.547388][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 321.567305][ T24] usb 1-1: USB disconnect, device number 43 [ 321.622715][ T24] ch341 1-1:0.0: device disconnected [ 321.806095][ T8380] FAULT_INJECTION: forcing a failure. [ 321.806095][ T8380] name failslab, interval 1, probability 0, space 0, times 0 [ 321.823680][ T974] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 321.831648][ T8380] CPU: 1 UID: 0 PID: 8380 Comm: syz.3.740 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 321.831669][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.831676][ T8380] Call Trace: [ 321.831681][ T8380] [ 321.831686][ T8380] dump_stack_lvl+0x241/0x360 [ 321.831709][ T8380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.831726][ T8380] ? __pfx__printk+0x10/0x10 [ 321.831749][ T8380] should_fail_ex+0x424/0x570 [ 321.831765][ T8380] should_failslab+0xac/0x100 [ 321.831782][ T8380] __kmalloc_cache_noprof+0x73/0x370 [ 321.831797][ T8380] ? sctp_add_bind_addr+0x89/0x3a0 [ 321.831814][ T8380] sctp_add_bind_addr+0x89/0x3a0 [ 321.831831][ T8380] sctp_do_bind+0x5d2/0x950 [ 321.831855][ T8380] sctp_connect_new_asoc+0x2a0/0x700 [ 321.831875][ T8380] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 321.831890][ T8380] ? sctp_sendmsg+0xf30/0x3620 [ 321.831910][ T8380] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 321.831925][ T8380] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 321.831940][ T8380] sctp_sendmsg+0x2009/0x3620 [ 321.831970][ T8380] ? __pfx_sctp_sendmsg+0x10/0x10 [ 321.831988][ T8380] ? aa_sk_perm+0x96f/0xac0 [ 321.832013][ T8380] ? inet_sendmsg+0x330/0x390 [ 321.832028][ T8380] __sock_sendmsg+0x1a6/0x270 [ 321.832045][ T8380] ____sys_sendmsg+0x523/0x860 [ 321.832062][ T8380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.832084][ T8380] __sys_sendmmsg+0x4a3/0x7b0 [ 321.832104][ T8380] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.832119][ T8380] ? __lock_acquire+0xad5/0xd80 [ 321.832158][ T8380] ? vfs_write+0xb29/0xd10 [ 321.832182][ T8380] ? __mutex_unlock_slowpath+0x229/0x800 [ 321.832201][ T8380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.832213][ T8380] ? __fget_files+0x2a/0x420 [ 321.832231][ T8380] ? fput+0x9b/0xd0 [ 321.832241][ T8380] ? ksys_write+0x275/0x2d0 [ 321.832260][ T8380] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 321.832279][ T8380] __do_fast_syscall_32+0xb4/0x110 [ 321.832292][ T8380] ? exc_page_fault+0x5f8/0x920 [ 321.832307][ T8380] do_fast_syscall_32+0x34/0x80 [ 321.832321][ T8380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.832334][ T8380] RIP: 0023:0xf743d579 [ 321.832345][ T8380] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 321.832355][ T8380] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 321.832369][ T8380] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 321.832385][ T8380] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.832392][ T8380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.832399][ T8380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.832406][ T8380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.832423][ T8380] [ 322.139606][ T5838] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 322.321590][ T3407] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 322.447085][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 322.475934][ T974] usb 2-1: config 0 has no interfaces? [ 322.486752][ T974] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.486753][ T3407] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.486789][ T3407] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.515938][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 322.528263][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.540656][ T974] usb 2-1: Product: syz [ 322.541313][ T5838] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.561950][ T974] usb 2-1: Manufacturer: syz [ 322.566701][ T974] usb 2-1: SerialNumber: syz [ 322.572332][ T5838] usb 3-1: config 1 interface 0 has no altsetting 0 [ 322.583976][ T974] usb 2-1: config 0 descriptor?? [ 322.590191][ T3407] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.597595][ T5838] usb 3-1: string descriptor 0 read error: -22 [ 322.658218][ T3407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.666845][ T5838] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 322.666878][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.679106][ T5894] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 322.731298][ T8378] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 322.745526][ T3407] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.801109][ T8387] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 322.865433][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 322.877064][ T5894] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.888103][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.920809][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.964143][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.016428][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.043853][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.058677][ T5894] usb 4-1: Product: syz [ 323.066769][ T5894] usb 4-1: Manufacturer: syz [ 323.072462][ T5894] usb 4-1: SerialNumber: syz [ 323.423358][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.435120][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.609331][ T5894] usb 4-1: cannot find UAC_HEADER [ 323.816537][ T5894] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 323.834520][ T10] usb 5-1: USB disconnect, device number 39 [ 323.878351][ T5894] usb 4-1: USB disconnect, device number 50 [ 324.131274][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 324.448970][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 324.530418][ T5894] usb 2-1: USB disconnect, device number 43 [ 324.581975][ T5838] usbhid 3-1:1.0: can't add hid device: -71 [ 324.592192][ T5838] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 324.619893][ T5838] usb 3-1: USB disconnect, device number 43 [ 324.631398][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.641388][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 324.662050][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.674708][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.710744][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 324.729398][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.748996][ T3407] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 324.757880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.778034][ T10] usb 1-1: Product: syz [ 324.783509][ T10] usb 1-1: Manufacturer: syz [ 324.797091][ T10] usb 1-1: SerialNumber: syz [ 324.939424][ T3407] usb 4-1: Using ep0 maxpacket: 8 [ 324.952679][ T3407] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 324.966753][ T3407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.976095][ T3407] usb 4-1: Product: syz [ 324.980508][ T3407] usb 4-1: Manufacturer: syz [ 324.985138][ T3407] usb 4-1: SerialNumber: syz [ 324.998831][ T3407] usb 4-1: config 0 descriptor?? [ 325.038365][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.079332][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 325.099737][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.179362][ T5838] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 325.210875][ T3407] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 325.264149][ T10] usb 1-1: 0:2 : does not exist [ 325.290884][ T10] usb 1-1: USB disconnect, device number 44 [ 325.349839][ T5838] usb 2-1: Using ep0 maxpacket: 8 [ 325.365693][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.397886][ T5838] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 325.416764][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.441921][ T5838] usb 2-1: config 0 descriptor?? [ 325.455828][ T5838] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 325.572964][ T6304] udevd[6304]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.869009][ T5838] gspca_vc032x: reg_w err -71 [ 325.888258][ T5838] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 325.930130][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 325.965263][ T5838] usb 2-1: USB disconnect, device number 44 [ 326.189053][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 326.239510][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.272905][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.284793][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.307380][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.321181][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.324662][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 326.330999][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.475971][ T3407] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 326.482283][ T5838] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 326.492431][ T3407] usb 4-1: USB disconnect, device number 51 [ 326.571404][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 326.577141][ T24] usbtmc 3-1:16.0: can't read capabilities [ 326.659116][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 326.667658][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 326.696513][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.711884][ T5838] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.725646][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.734341][ T5838] usb 5-1: Product: syz [ 326.738553][ T5838] usb 5-1: Manufacturer: syz [ 326.743978][ T5838] usb 5-1: SerialNumber: syz [ 326.752591][ T5838] usb 5-1: config 0 descriptor?? [ 326.759084][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 326.761902][ T5838] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 326.791036][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.800235][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.809872][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.819545][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.828769][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.837955][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.849219][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.857623][ T5838] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 326.858329][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.874822][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.884194][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.903779][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.913305][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.922453][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.931643][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.945275][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.950416][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.756'. [ 326.954590][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.974006][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 326.983360][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 326.992377][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.998792][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 327.053548][ T5838] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 327.077785][ T3407] usb 3-1: USB disconnect, device number 44 [ 327.080084][ T5838] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 327.084233][ T47] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 327.107411][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.129590][ T47] usb 1-1: Product: syz [ 327.137871][ T5838] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 327.141145][ T47] usb 1-1: Manufacturer: syz [ 327.165682][ T5838] em28xx 5-1:0.0: No AC97 audio processor [ 327.173170][ T47] usb 1-1: SerialNumber: syz [ 327.185681][ T8442] syz_tun: entered allmulticast mode [ 327.202111][ T47] usb 1-1: config 0 descriptor?? [ 327.227528][ T5838] usb 5-1: USB disconnect, device number 40 [ 327.256285][ T8442] dvmrp1: entered allmulticast mode [ 327.266956][ T5838] em28xx 5-1:0.0: Disconnecting em28xx [ 327.344639][ T5838] em28xx 5-1:0.0: Freeing device [ 327.401825][ T8443] ip6tnl2: entered promiscuous mode [ 327.442512][ T47] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 327.445018][ T8443] ip6tnl2: entered allmulticast mode [ 327.576993][ T8440] syz_tun: left allmulticast mode [ 327.590241][ T8440] dvmrp1: left allmulticast mode [ 328.262119][ T974] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 328.318126][ T8459] FAULT_INJECTION: forcing a failure. [ 328.318126][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 328.336208][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.1.763 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 328.336241][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.336253][ T8459] Call Trace: [ 328.336261][ T8459] [ 328.336269][ T8459] dump_stack_lvl+0x241/0x360 [ 328.336303][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.336328][ T8459] ? __pfx__printk+0x10/0x10 [ 328.336351][ T8459] ? do_raw_spin_lock+0x151/0x370 [ 328.336381][ T8459] ? __pfx___might_resched+0x10/0x10 [ 328.336408][ T8459] should_fail_ex+0x424/0x570 [ 328.336433][ T8459] should_failslab+0xac/0x100 [ 328.336462][ T8459] __kmalloc_cache_noprof+0x73/0x370 [ 328.336486][ T8459] ? snd_seq_port_connect+0x6a/0x490 [ 328.336514][ T8459] snd_seq_port_connect+0x6a/0x490 [ 328.336536][ T8459] ? do_raw_read_unlock+0x3c/0x80 [ 328.336560][ T8459] ? _raw_read_unlock+0x28/0x50 [ 328.336585][ T8459] snd_seq_ioctl_subscribe_port+0x321/0x7b0 [ 328.336618][ T8459] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 328.336643][ T8459] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 328.336662][ T8459] ? is_bpf_text_address+0x26/0x2a0 [ 328.336693][ T8459] snd_seq_oss_midi_open+0x427/0xa40 [ 328.336728][ T8459] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 328.336777][ T8459] snd_seq_oss_process_event+0xd21/0x2c70 [ 328.336807][ T8459] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 328.336844][ T8459] snd_seq_oss_write+0x56c/0xc10 [ 328.336890][ T8459] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 328.336914][ T8459] ? end_current_label_crit_section+0x151/0x180 [ 328.336944][ T8459] ? common_file_perm+0x1a6/0x210 [ 328.336974][ T8459] ? bpf_lsm_file_permission+0x9/0x10 [ 328.336999][ T8459] odev_write+0x5b/0x80 [ 328.337019][ T8459] ? __pfx_odev_write+0x10/0x10 [ 328.337042][ T8459] vfs_write+0x2bc/0xd10 [ 328.337090][ T8459] ? __pfx_vfs_write+0x10/0x10 [ 328.337113][ T8459] ? __fget_files+0x2a/0x420 [ 328.337129][ T8459] ? __fget_files+0x2a/0x420 [ 328.337147][ T8459] ? __fget_files+0x39d/0x420 [ 328.337163][ T8459] ? __fget_files+0x2a/0x420 [ 328.337191][ T8459] ksys_write+0x19d/0x2d0 [ 328.337216][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 328.337242][ T8459] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 328.337262][ T8459] ? lockdep_hardirqs_on+0x9d/0x150 [ 328.337285][ T8459] __do_fast_syscall_32+0xb4/0x110 [ 328.337305][ T8459] ? exc_page_fault+0x5f8/0x920 [ 328.337330][ T8459] do_fast_syscall_32+0x34/0x80 [ 328.337351][ T8459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.337371][ T8459] RIP: 0023:0xf7fd2579 [ 328.337387][ T8459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 328.337401][ T8459] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 328.337423][ T8459] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 328.337435][ T8459] RDX: 000000000000050e RSI: 0000000000000000 RDI: 0000000000000000 [ 328.337446][ T8459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.337457][ T8459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 328.337468][ T8459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.337495][ T8459] [ 329.009785][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.018240][ T974] usb 4-1: not running at top speed; connect to a high speed hub [ 329.036891][ T47] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 329.161513][ T47] usb 1-1: USB disconnect, device number 45 [ 329.195719][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 329.202218][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.219295][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.298262][ T974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.338185][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.368974][ T974] usb 4-1: Product: syz [ 329.391772][ T974] usb 4-1: Manufacturer: syz [ 329.438951][ T974] usb 4-1: SerialNumber: syz [ 329.787162][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.809627][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.990833][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 330.189213][ T5894] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 330.259730][ T5893] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 330.342592][ T5894] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 330.351962][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.363422][ T5894] usb 2-1: config 0 descriptor?? [ 330.419079][ T5957] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 330.427325][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 330.435593][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.446424][ T5893] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 330.455753][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.466323][ T5893] usb 3-1: config 0 descriptor?? [ 330.474597][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 330.498852][ T47] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 330.588880][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 330.600083][ T5957] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 330.609324][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.617367][ T5957] usb 1-1: Product: syz [ 330.621818][ T5957] usb 1-1: Manufacturer: syz [ 330.626735][ T5957] usb 1-1: SerialNumber: syz [ 330.634287][ T5957] usb 1-1: config 0 descriptor?? [ 330.649138][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 330.660231][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.670524][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.680454][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.690588][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.703773][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.713231][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.849013][ T5957] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.881710][ T5893] gspca_vc032x: reg_w err -71 [ 330.886641][ T5893] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 330.898082][ T5893] usb 3-1: USB disconnect, device number 45 [ 330.930147][ T47] usb 5-1: GET_CAPABILITIES returned 0 [ 330.936003][ T47] usbtmc 5-1:16.0: can't read capabilities [ 331.139436][ T47] usb 5-1: USB disconnect, device number 41 [ 331.712000][ T8490] FAULT_INJECTION: forcing a failure. [ 331.712000][ T8490] name failslab, interval 1, probability 0, space 0, times 0 [ 331.725558][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.2.772 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 331.725586][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.725598][ T8490] Call Trace: [ 331.725606][ T8490] [ 331.725614][ T8490] dump_stack_lvl+0x241/0x360 [ 331.725648][ T8490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.725675][ T8490] ? __pfx__printk+0x10/0x10 [ 331.725707][ T8490] ? __pfx___might_resched+0x10/0x10 [ 331.725736][ T8490] should_fail_ex+0x424/0x570 [ 331.725762][ T8490] should_failslab+0xac/0x100 [ 331.725790][ T8490] kmem_cache_alloc_noprof+0x78/0x390 [ 331.725815][ T8490] ? __pmd_alloc+0x118/0x440 [ 331.725847][ T8490] __pmd_alloc+0x118/0x440 [ 331.725877][ T8490] ? __pfx___pmd_alloc+0x10/0x10 [ 331.725915][ T8490] handle_mm_fault+0xf7a/0x1bf0 [ 331.725941][ T8490] ? mt_find+0x28a/0x8f0 [ 331.725992][ T8490] ? __pfx_handle_mm_fault+0x10/0x10 [ 331.726044][ T8490] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 331.726072][ T8490] exc_page_fault+0x2bb/0x920 [ 331.726102][ T8490] asm_exc_page_fault+0x26/0x30 [ 331.726120][ T8490] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 331.726147][ T8490] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 331.726164][ T8490] RSP: 0018:ffffc9000b44fcf0 EFLAGS: 00050216 [ 331.726183][ T8490] RAX: 00007ffffffff001 RBX: 0000000080000040 RCX: 0000000000000014 [ 331.726197][ T8490] RDX: 0000000000000001 RSI: 0000000080000040 RDI: ffff88802415aac0 [ 331.726210][ T8490] RBP: ffff88802415aac0 R08: 0000000000000003 R09: ffffed100482b55a [ 331.726222][ T8490] R10: dffffc0000000000 R11: ffffed100482b55a R12: 0000000000000001 [ 331.726235][ T8490] R13: 0000000000000014 R14: ffff88802415aac0 R15: 0000000000000014 [ 331.726268][ T8490] _copy_from_user+0x7b/0xb0 [ 331.726295][ T8490] sctp_setsockopt+0xc9/0x11e0 [ 331.726333][ T8490] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 331.726359][ T8490] do_sock_setsockopt+0x3b1/0x710 [ 331.726386][ T8490] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 331.726404][ T8490] ? __fget_files+0x2a/0x420 [ 331.726424][ T8490] ? __fget_files+0x39d/0x420 [ 331.726439][ T8490] ? __fget_files+0x2a/0x420 [ 331.726467][ T8490] __ia32_sys_setsockopt+0x1f2/0x280 [ 331.726494][ T8490] __do_fast_syscall_32+0xb4/0x110 [ 331.726515][ T8490] ? exc_page_fault+0x5f8/0x920 [ 331.726542][ T8490] do_fast_syscall_32+0x34/0x80 [ 331.726564][ T8490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.726586][ T8490] RIP: 0023:0xf7fc3579 [ 331.726603][ T8490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.726619][ T8490] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 331.726638][ T8490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 331.726650][ T8490] RDX: 0000000000000001 RSI: 0000000080000040 RDI: 0000000000000014 [ 331.726662][ T8490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.726674][ T8490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 331.726685][ T8490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.726716][ T8490] [ 331.767260][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 332.069187][ T5894] usb 2-1: Cannot set autoneg [ 332.074552][ T5894] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 332.137934][ T5894] usb 2-1: USB disconnect, device number 45 [ 332.185940][ T5957] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.220581][ T5957] usb 1-1: USB disconnect, device number 46 [ 333.151423][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 333.888935][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 334.198940][ T5894] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 334.382057][ T5893] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 334.389966][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 334.439640][ T5894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.451537][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.468893][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.496149][ T5894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.535638][ T5894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.549209][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 334.754797][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.778017][ T974] usb 4-1: 0:2 : does not exist [ 334.785403][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 334.807489][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.834576][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.862954][ T5893] usb 1-1: config 0 descriptor?? [ 334.885786][ T5893] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 334.886082][ T8525] ALSA: mixer_oss: invalid OSS volume '' [ 334.914088][ T8525] veth13: entered allmulticast mode [ 335.054222][ T5894] usb 2-1: GET_CAPABILITIES returned 0 [ 335.063779][ T5894] usbtmc 2-1:16.0: can't read capabilities [ 335.143847][ T8532] syz_tun: entered allmulticast mode [ 335.158842][ T47] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 335.164019][ T8532] dvmrp1: entered allmulticast mode [ 335.178135][ T8531] syz_tun: left allmulticast mode [ 335.183745][ T8531] dvmrp1: left allmulticast mode [ 335.261379][ T5894] usb 2-1: USB disconnect, device number 46 [ 335.304571][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.316747][ T47] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 335.324603][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.331778][ T47] usb 3-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 335.340622][ T5893] gspca_vc032x: reg_w err -71 [ 335.345083][ T47] usb 3-1: config 0 has no interface number 0 [ 335.354976][ T47] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 335.355161][ T5893] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 335.356674][ T8534] FAULT_INJECTION: forcing a failure. [ 335.356674][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 335.391564][ T5893] usb 1-1: USB disconnect, device number 47 [ 335.397546][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.400130][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.4.787 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 335.400157][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.400168][ T8534] Call Trace: [ 335.400175][ T8534] [ 335.400183][ T8534] dump_stack_lvl+0x241/0x360 [ 335.400215][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.400239][ T8534] ? __pfx__printk+0x10/0x10 [ 335.400277][ T8534] ? __pfx___might_resched+0x10/0x10 [ 335.400302][ T8534] should_fail_ex+0x424/0x570 [ 335.400326][ T8534] should_failslab+0xac/0x100 [ 335.400351][ T8534] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 335.400374][ T8534] ? __alloc_skb+0x1c2/0x480 [ 335.400402][ T8534] __alloc_skb+0x1c2/0x480 [ 335.400432][ T8534] ? __pfx___alloc_skb+0x10/0x10 [ 335.400455][ T8534] ? igmp_ifc_event+0x330/0x510 [ 335.400487][ T8534] inet_ifmcaddr_notify+0xf5/0x200 [ 335.400510][ T8534] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 335.400528][ T8534] ? ____ip_mc_inc_group+0xbfb/0xea0 [ 335.400561][ T8534] ____ip_mc_inc_group+0xc29/0xea0 [ 335.400590][ T8534] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 335.400608][ T8534] ? __kmalloc_noprof+0x2ae/0x4d0 [ 335.400628][ T8534] ? sock_kmalloc+0xd7/0x160 [ 335.400647][ T8534] ? __ip_mc_join_group+0x386/0x500 [ 335.400672][ T8534] __ip_mc_join_group+0x422/0x500 [ 335.400702][ T8534] do_ip_setsockopt+0x266a/0x39c0 [ 335.400731][ T8534] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 335.400754][ T8534] ? aa_sk_perm+0x96f/0xac0 [ 335.400780][ T8534] ? ksys_write+0x24e/0x2d0 [ 335.400799][ T8534] ? __pfx_aa_sk_perm+0x10/0x10 [ 335.400820][ T8534] ? __lock_acquire+0xad5/0xd80 [ 335.400842][ T8534] ip_setsockopt+0x63/0x100 [ 335.400862][ T8534] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 335.400883][ T8534] do_sock_setsockopt+0x3b1/0x710 [ 335.400906][ T8534] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 335.400922][ T8534] ? __fget_files+0x2a/0x420 [ 335.400940][ T8534] ? __fget_files+0x39d/0x420 [ 335.400953][ T8534] ? __fget_files+0x2a/0x420 [ 335.400977][ T8534] __ia32_sys_setsockopt+0x1f2/0x280 [ 335.401001][ T8534] __do_fast_syscall_32+0xb4/0x110 [ 335.401020][ T8534] ? exc_page_fault+0x5f8/0x920 [ 335.401044][ T8534] do_fast_syscall_32+0x34/0x80 [ 335.401063][ T8534] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.401087][ T8534] RIP: 0023:0xf73dd579 [ 335.401104][ T8534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 335.401118][ T8534] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 335.401138][ T8534] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 335.401150][ T8534] RDX: 0000000000000023 RSI: 0000000080000740 RDI: 0000000000000040 [ 335.401161][ T8534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.401171][ T8534] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.401182][ T8534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.401210][ T8534] [ 335.713699][ T47] usb 3-1: config 0 descriptor?? [ 335.721656][ T47] rndis_host 3-1:0.9: skipping garbage [ 335.727363][ T47] rndis_host 3-1:0.9: More than one union descriptor, skipping ... [ 335.735668][ T47] usb 3-1: bad CDC descriptors [ 335.738960][ T974] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 335.741414][ T47] cdc_acm 3-1:0.9: skipping garbage [ 335.754181][ T47] cdc_acm 3-1:0.9: More than one union descriptor, skipping ... [ 335.828447][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.789'. [ 335.908872][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 335.927151][ T974] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.946385][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.954604][ T974] usb 5-1: Product: syz [ 335.958838][ T974] usb 5-1: Manufacturer: syz [ 335.963566][ T974] usb 5-1: SerialNumber: syz [ 335.974703][ T974] usb 5-1: config 0 descriptor?? [ 336.019732][ T8525] dvmrp1: entered allmulticast mode [ 336.129638][ T5893] usb 3-1: USB disconnect, device number 46 [ 336.151027][ T8524] veth13: left allmulticast mode [ 336.156214][ T8524] dvmrp1: left allmulticast mode [ 336.187163][ T974] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.399308][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 336.776416][ T8550] FAULT_INJECTION: forcing a failure. [ 336.776416][ T8550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.820282][ T8550] CPU: 1 UID: 0 PID: 8550 Comm: syz.1.792 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 336.820313][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.820325][ T8550] Call Trace: [ 336.820333][ T8550] [ 336.820342][ T8550] dump_stack_lvl+0x241/0x360 [ 336.820379][ T8550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.820406][ T8550] ? __pfx__printk+0x10/0x10 [ 336.820448][ T8550] should_fail_ex+0x424/0x570 [ 336.820473][ T8550] _copy_from_user+0x2d/0xb0 [ 336.820501][ T8550] ip6gre_tunnel_siocdevprivate+0x1bd/0x810 [ 336.820530][ T8550] ? __pfx___mutex_trylock_common+0x10/0x10 [ 336.820560][ T8550] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 336.820583][ T8550] ? rcu_is_watching+0x15/0xb0 [ 336.820630][ T8550] ? full_name_hash+0x93/0xe0 [ 336.820657][ T8550] dev_ifsioc+0xc04/0x1010 [ 336.820686][ T8550] ? dev_load+0x21/0x1f0 [ 336.820710][ T8550] dev_ioctl+0x8c3/0x1380 [ 336.820737][ T8550] sock_ioctl+0x819/0x900 [ 336.820763][ T8550] ? __pfx_sock_ioctl+0x10/0x10 [ 336.820807][ T8550] compat_sock_ioctl+0x293/0xf50 [ 336.820835][ T8550] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 336.820861][ T8550] ? __fget_files+0x2a/0x420 [ 336.820877][ T8550] ? __fget_files+0x2a/0x420 [ 336.820897][ T8550] ? __fget_files+0x2a/0x420 [ 336.820923][ T8550] __se_compat_sys_ioctl+0x50e/0xc30 [ 336.820950][ T8550] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 336.820974][ T8550] ? __fget_files+0x2a/0x420 [ 336.820996][ T8550] ? fput+0x9b/0xd0 [ 336.821014][ T8550] ? ksys_write+0x275/0x2d0 [ 336.821096][ T8550] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 336.821117][ T8550] ? lockdep_hardirqs_on+0x9d/0x150 [ 336.821140][ T8550] __do_fast_syscall_32+0xb4/0x110 [ 336.821162][ T8550] ? exc_page_fault+0x5f8/0x920 [ 336.821186][ T8550] do_fast_syscall_32+0x34/0x80 [ 336.821207][ T8550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.821227][ T8550] RIP: 0023:0xf7fd2579 [ 336.821245][ T8550] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 336.821261][ T8550] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 336.821283][ T8550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 336.821296][ T8550] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.821305][ T8550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.821315][ T8550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.821326][ T8550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.821356][ T8550] [ 337.089415][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.342571][ T3539] tipc: Subscription rejected, illegal request [ 337.526217][ T974] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 337.538550][ T974] usb 5-1: USB disconnect, device number 42 [ 338.110979][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 338.221069][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 338.449269][ T47] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 338.599692][ T3407] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 338.623282][ T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 338.634054][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.648804][ T47] usb 3-1: Product: syz [ 338.653044][ T47] usb 3-1: Manufacturer: syz [ 338.688452][ T47] usb 3-1: SerialNumber: syz [ 338.702589][ T47] usb 3-1: config 0 descriptor?? [ 338.721603][ T47] ch341 3-1:0.0: ch341-uart converter detected [ 338.759147][ T3407] usb 5-1: Using ep0 maxpacket: 16 [ 338.786867][ T3407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.808620][ T3407] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 338.859240][ T3407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.903533][ T3407] usb 5-1: config 0 descriptor?? [ 339.354096][ T3407] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 339.361725][ T3407] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 339.380847][ T3407] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 339.405799][ T3407] hid-steam 0003:28DE:1102.0034: unknown main item tag 0x0 [ 339.432210][ T3407] hid-steam 0003:28DE:1102.0034: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 339.556693][ T5895] usb 5-1: USB disconnect, device number 43 [ 339.737623][ T3407] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 339.920362][ T3407] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 339.935885][ T3407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.944529][ T3407] usb 1-1: Product: syz [ 339.949693][ T3407] usb 1-1: Manufacturer: syz [ 339.956349][ T3407] usb 1-1: SerialNumber: syz [ 339.972976][ T3407] usb 1-1: config 0 descriptor?? [ 339.987115][ T3407] ch341 1-1:0.0: ch341-uart converter detected [ 340.085953][ T47] ch341-uart ttyUSB0: failed to read break control: -71 [ 340.093217][ T47] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 340.105742][ T47] usb 3-1: USB disconnect, device number 47 [ 340.114509][ T47] ch341 3-1:0.0: device disconnected [ 340.117874][ T8576] blktrace: Concurrent blktraces are not allowed on sg0 [ 340.258894][ T5893] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 340.379212][ T5895] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 340.422322][ T5893] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 340.431841][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.440413][ T5893] usb 2-1: Product: syz [ 340.444643][ T5893] usb 2-1: Manufacturer: syz [ 340.451547][ T5893] usb 2-1: SerialNumber: syz [ 340.465425][ T5893] usb 2-1: config 0 descriptor?? [ 340.480622][ T5893] ch341 2-1:0.0: ch341-uart converter detected [ 340.557138][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.568647][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.583709][ T5895] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 340.594910][ T5895] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 340.603171][ T5895] usb 5-1: Manufacturer: syz [ 340.611883][ T5895] usb 5-1: config 0 descriptor?? [ 341.008854][ T5894] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 341.029336][ T5895] cougar 0003:060B:700A.0035: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 341.173101][ T5894] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 341.182824][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.191379][ T5894] usb 3-1: Product: syz [ 341.195696][ T5894] usb 3-1: Manufacturer: syz [ 341.200414][ T5894] usb 3-1: SerialNumber: syz [ 341.208200][ T5894] usb 3-1: config 0 descriptor?? [ 341.217529][ T5894] ch341 3-1:0.0: ch341-uart converter detected [ 341.241752][ T974] usb 5-1: USB disconnect, device number 44 [ 341.353068][ T3407] ch341-uart ttyUSB1: failed to read break control: -71 [ 341.360268][ T3407] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 341.372131][ T3407] usb 1-1: USB disconnect, device number 48 [ 341.380657][ T3407] ch341 1-1:0.0: device disconnected [ 341.803890][ T5893] ch341-uart ttyUSB0: failed to read break control: -71 [ 341.818070][ T5893] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 341.831896][ T5893] usb 2-1: USB disconnect, device number 47 [ 341.840499][ T5893] ch341 2-1:0.0: device disconnected [ 342.279510][ T3407] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 342.326794][ T5894] usb 3-1: failed to send control message: -71 [ 342.334607][ T5894] ch341-uart ttyUSB2: probe with driver ch341-uart failed with error -71 [ 342.353293][ T5894] usb 3-1: USB disconnect, device number 48 [ 342.369928][ T5894] ch341 3-1:0.0: device disconnected [ 342.439941][ T3407] usb 1-1: Using ep0 maxpacket: 8 [ 342.464319][ T3407] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.495961][ T3407] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.556686][ T3407] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.583707][ T3407] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.618134][ T3407] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.658836][ T3407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.803828][ T5957] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 342.882455][ T3407] usb 1-1: GET_CAPABILITIES returned 0 [ 342.888105][ T3407] usbtmc 1-1:16.0: can't read capabilities [ 342.968834][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 342.999944][ T5957] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 343.025824][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.039194][ T5957] usb 2-1: Product: syz [ 343.087233][ T5957] usb 2-1: Manufacturer: syz [ 343.099864][ T5894] usb 1-1: USB disconnect, device number 49 [ 343.110157][ T5957] usb 2-1: SerialNumber: syz [ 343.122982][ T5957] usb 2-1: config 0 descriptor?? [ 343.340448][ T5957] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 343.481965][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 343.733370][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 344.016576][ T5894] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 344.170081][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 344.174046][ T8608] blktrace: Concurrent blktraces are not allowed on sg0 [ 344.179554][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.194007][ T5894] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 344.203244][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.213753][ T5894] usb 1-1: config 0 descriptor?? [ 344.428960][ T3407] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 344.567638][ T5957] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 344.580060][ T5957] usb 2-1: USB disconnect, device number 48 [ 344.587066][ T3407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.610500][ T3407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.648206][ T3407] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 344.651435][ T5894] hid-steam 0003:28DE:1102.0036: unknown main item tag 0x0 [ 344.667780][ T3407] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 344.692471][ T5894] hid-steam 0003:28DE:1102.0036: unknown main item tag 0x0 [ 344.696900][ T3407] usb 3-1: Manufacturer: syz [ 344.712211][ T5894] hid-steam 0003:28DE:1102.0036: unknown main item tag 0x0 [ 344.727667][ T5894] hid-steam 0003:28DE:1102.0036: unknown main item tag 0x0 [ 344.752630][ T5894] hid-steam 0003:28DE:1102.0036: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 344.752833][ T3407] usb 3-1: config 0 descriptor?? [ 344.982604][ T47] usb 1-1: USB disconnect, device number 50 [ 345.229596][ T3407] cougar 0003:060B:700A.0037: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 345.244573][ T5894] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 345.422140][ T5894] usb 5-1: config 0 has no interfaces? [ 345.432372][ T47] usb 3-1: USB disconnect, device number 49 [ 345.444861][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 345.461926][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.477632][ T5894] usb 5-1: Product: syz [ 345.485300][ T5894] usb 5-1: Manufacturer: syz [ 345.512169][ T5894] usb 5-1: SerialNumber: syz [ 345.521151][ T3407] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 345.560674][ T5894] usb 5-1: config 0 descriptor?? [ 345.731352][ T3407] usb 2-1: Using ep0 maxpacket: 8 [ 345.747342][ T3407] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.765504][ T3407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.790418][ T3407] usb 2-1: Product: syz [ 345.858407][ T3407] usb 2-1: Manufacturer: syz [ 345.870716][ T3407] usb 2-1: SerialNumber: syz [ 345.896540][ T3407] usb 2-1: config 0 descriptor?? [ 345.903084][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.919325][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.937121][ T8614] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 346.020196][ T8614] bond0: (slave wlan1): Opening slave failed [ 346.154662][ T3407] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.558850][ T5895] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 346.727684][ T5895] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 346.774865][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.789928][ T5895] usb 3-1: Product: syz [ 346.798849][ T5895] usb 3-1: Manufacturer: syz [ 346.803627][ T5895] usb 3-1: SerialNumber: syz [ 346.824126][ T5895] usb 3-1: config 0 descriptor?? [ 346.836608][ T5895] ch341 3-1:0.0: ch341-uart converter detected [ 347.151114][ T8626] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 347.380842][ T3407] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 347.394195][ T3407] usb 2-1: USB disconnect, device number 49 [ 347.478862][ T5894] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 347.628898][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 347.636874][ T5894] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 347.645455][ T5894] usb 1-1: config 0 has no interface number 0 [ 347.652949][ T5894] usb 1-1: config 0 interface 197 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 347.664816][ T5894] usb 1-1: config 0 interface 197 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 347.676012][ T5894] usb 1-1: config 0 interface 197 altsetting 7 bulk endpoint 0xF has invalid maxpacket 8 [ 347.686305][ T5894] usb 1-1: config 0 interface 197 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 347.697705][ T5894] usb 1-1: config 0 interface 197 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 347.710935][ T5894] usb 1-1: config 0 interface 197 has no altsetting 0 [ 347.721668][ T5894] usb 1-1: New USB device found, idVendor=091e, idProduct=0004, bcdDevice=93.d1 [ 347.731365][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.741110][ T5894] usb 1-1: Product: syz [ 347.745952][ T5894] usb 1-1: Manufacturer: syz [ 347.750891][ T5894] usb 1-1: SerialNumber: syz [ 347.759266][ T5894] usb 1-1: config 0 descriptor?? [ 347.766296][ T8626] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 347.950113][ T5895] usb 3-1: failed to send control message: -71 [ 347.984169][ T5957] usb 5-1: USB disconnect, device number 45 [ 347.988258][ T5895] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 348.023191][ T5895] usb 3-1: USB disconnect, device number 50 [ 348.026390][ T5894] usb 1-1: active config #0 != 1 ?? [ 348.030878][ T5895] ch341 3-1:0.0: device disconnected [ 348.070981][ T5894] usb 1-1: USB disconnect, device number 51 [ 348.586319][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 349.046626][ T8638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 349.329948][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.827'. [ 349.340204][ T5895] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 349.498929][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 349.510581][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 349.524062][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.537138][ T5895] usb 1-1: Product: syz [ 349.545982][ T5895] usb 1-1: Manufacturer: syz [ 349.551651][ T5895] usb 1-1: SerialNumber: syz [ 349.564164][ T5895] usb 1-1: config 0 descriptor?? [ 349.648889][ T5894] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 349.668970][ T5957] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 349.774785][ T5895] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 349.801262][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.812752][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.822933][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 349.828257][ T5894] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 349.838146][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.851353][ T5894] usb 5-1: config 0 descriptor?? [ 349.858559][ T5957] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 349.868537][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.878668][ T5957] usb 2-1: Product: syz [ 349.882936][ T5957] usb 2-1: Manufacturer: syz [ 349.887553][ T5957] usb 2-1: SerialNumber: syz [ 349.898108][ T5957] usb 2-1: config 0 descriptor?? [ 350.122289][ T5957] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.132716][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.142088][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.478895][ T974] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 350.648969][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 350.659475][ T974] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.669927][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.678078][ T974] usb 3-1: Product: syz [ 350.682350][ T974] usb 3-1: Manufacturer: syz [ 350.687083][ T974] usb 3-1: SerialNumber: syz [ 350.695798][ T974] usb 3-1: config 0 descriptor?? [ 350.911356][ T974] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.000776][ T5895] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 351.012745][ T5895] usb 1-1: USB disconnect, device number 52 [ 351.342851][ T5957] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 351.355833][ T5957] usb 2-1: USB disconnect, device number 50 [ 351.858912][ T5957] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 352.019096][ T5957] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 352.028258][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.036748][ T5957] usb 1-1: Product: syz [ 352.041529][ T5957] usb 1-1: Manufacturer: syz [ 352.042319][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.835'. [ 352.046214][ T5957] usb 1-1: SerialNumber: syz [ 352.049986][ T5957] usb 1-1: config 0 descriptor?? [ 352.076575][ T5957] ch341 1-1:0.0: ch341-uart converter detected [ 352.136258][ T974] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.152223][ T974] usb 3-1: USB disconnect, device number 51 [ 352.550948][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 352.558245][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 352.593006][ T5894] usb 5-1: USB disconnect, device number 46 [ 352.710625][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.837'. [ 353.253684][ T974] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 353.446432][ T5957] usb 1-1: failed to send control message: -71 [ 353.561686][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 353.720093][ T974] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.765267][ T974] usb 5-1: config 1 interface 0 has no altsetting 0 [ 353.784854][ T5957] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 353.790495][ T974] usb 5-1: string descriptor 0 read error: -22 [ 353.805941][ T8677] could not allocate digest TFM handle sha3-256-ce [ 353.815645][ T974] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 353.842555][ T5957] usb 1-1: USB disconnect, device number 53 [ 353.863918][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.879839][ T5957] ch341 1-1:0.0: device disconnected [ 354.151984][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.170925][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.519023][ T5957] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 354.678888][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 354.698616][ T5957] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 354.708893][ T5894] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 354.992494][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.004353][ T5957] usb 1-1: Product: syz [ 355.008686][ T5957] usb 1-1: Manufacturer: syz [ 355.016748][ T5957] usb 1-1: SerialNumber: syz [ 355.032034][ T5957] usb 1-1: config 0 descriptor?? [ 355.323333][ T5957] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 355.600548][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 355.696485][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.706412][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.716600][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.729252][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.742731][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.752265][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.913483][ T974] usbhid 5-1:1.0: can't add hid device: -71 [ 355.920536][ T974] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 355.936763][ T974] usb 5-1: USB disconnect, device number 47 [ 355.986041][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'. [ 356.010454][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 356.016176][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 356.245864][ T5894] usb 3-1: USB disconnect, device number 52 [ 356.439052][ T974] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 356.577070][ T5957] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 356.588618][ T5957] usb 1-1: USB disconnect, device number 54 [ 356.608850][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 356.617168][ T974] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 356.626526][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.634839][ T974] usb 5-1: Product: syz [ 356.640593][ T974] usb 5-1: Manufacturer: syz [ 356.645704][ T974] usb 5-1: SerialNumber: syz [ 356.654371][ T974] usb 5-1: config 0 descriptor?? [ 356.761457][ T8698] dccp_close: ABORT with 60 bytes unread [ 356.872921][ T974] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 357.156464][ T8710] could not allocate digest TFM handle sha3-256-ce [ 357.669102][ T5895] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 358.164122][ T5895] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 358.344679][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.448159][ T5895] usb 1-1: Product: syz [ 358.469160][ T5895] usb 1-1: Manufacturer: syz [ 358.474050][ T5895] usb 1-1: SerialNumber: syz [ 358.505845][ T5895] usb 1-1: config 0 descriptor?? [ 358.529745][ T974] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 358.572079][ T5895] ch341 1-1:0.0: ch341-uart converter detected [ 358.573898][ T974] usb 5-1: USB disconnect, device number 48 [ 359.549968][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 360.011819][ T5895] ch341-uart ttyUSB0: failed to read break control: -71 [ 360.018914][ T5895] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 360.029622][ T5895] usb 1-1: USB disconnect, device number 55 [ 360.036515][ T5895] ch341 1-1:0.0: device disconnected [ 360.397495][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 360.535028][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 360.740896][ T8750] could not allocate digest TFM handle sha3-256-ce [ 360.839057][ T3407] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 360.869365][ T5894] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 360.915202][ T8759] blktrace: Concurrent blktraces are not allowed on sg0 [ 360.998808][ T3407] usb 3-1: Using ep0 maxpacket: 16 [ 361.008193][ T3407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.022910][ T3407] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 361.042010][ T3407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.057461][ T3407] usb 3-1: config 0 descriptor?? [ 361.072066][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 361.087692][ T5894] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.098124][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.114886][ T5894] usb 1-1: Product: syz [ 361.121263][ T5894] usb 1-1: Manufacturer: syz [ 361.125920][ T5894] usb 1-1: SerialNumber: syz [ 361.138140][ T5894] usb 1-1: config 0 descriptor?? [ 361.188854][ T5895] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 361.341540][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.353016][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.355144][ T5894] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.374230][ T5895] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 361.383962][ T5895] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 361.392933][ T5895] usb 5-1: Manufacturer: syz [ 361.401049][ T5895] usb 5-1: config 0 descriptor?? [ 361.498169][ T3407] hid-steam 0003:28DE:1102.0038: unknown main item tag 0x0 [ 361.527349][ T3407] hid-steam 0003:28DE:1102.0038: unknown main item tag 0x0 [ 361.547549][ T3407] hid-steam 0003:28DE:1102.0038: unknown main item tag 0x0 [ 361.571333][ T3407] hid-steam 0003:28DE:1102.0038: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 361.713105][ T3407] usb 3-1: USB disconnect, device number 53 [ 361.873797][ T5895] cougar 0003:060B:700A.0039: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 362.215072][ T3407] usb 5-1: USB disconnect, device number 49 [ 362.843278][ T5894] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 362.864897][ T5894] usb 1-1: USB disconnect, device number 56 [ 363.006326][ T8771] netlink: 32 bytes leftover after parsing attributes in process `syz.4.866'. [ 363.069034][ T5957] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 363.238986][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 363.273874][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.288996][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.301700][ T5957] usb 3-1: Product: syz [ 363.308512][ T5957] usb 3-1: Manufacturer: syz [ 363.317480][ T5957] usb 3-1: SerialNumber: syz [ 363.331010][ T5957] usb 3-1: config 0 descriptor?? [ 363.567110][ T5957] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.118892][ T3407] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 364.273830][ T3407] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 364.283590][ T3407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.291922][ T3407] usb 1-1: Product: syz [ 364.296326][ T3407] usb 1-1: Manufacturer: syz [ 364.305387][ T3407] usb 1-1: SerialNumber: syz [ 364.314279][ T3407] usb 1-1: config 0 descriptor?? [ 364.322756][ T3407] ch341 1-1:0.0: ch341-uart converter detected [ 364.917978][ T5957] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 364.919803][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 365.097856][ T5957] usb 3-1: USB disconnect, device number 54 [ 365.379785][ T5894] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 365.558875][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 365.571581][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.602499][ T5894] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 365.613058][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.635224][ T5894] usb 2-1: config 0 descriptor?? [ 365.749093][ T3407] ch341-uart ttyUSB0: failed to read break control: -71 [ 365.756392][ T3407] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 365.795531][ T3407] usb 1-1: USB disconnect, device number 57 [ 365.812613][ T3407] ch341 1-1:0.0: device disconnected [ 366.057277][ T5894] hid-steam 0003:28DE:1102.003A: unknown main item tag 0x0 [ 366.081353][ T5894] hid-steam 0003:28DE:1102.003A: unknown main item tag 0x0 [ 366.091921][ T5894] hid-steam 0003:28DE:1102.003A: unknown main item tag 0x0 [ 366.106602][ T5894] hid-steam 0003:28DE:1102.003A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 366.303197][ T5894] usb 2-1: USB disconnect, device number 51 [ 366.392998][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 366.695589][ T8797] dccp_close: ABORT with 60 bytes unread [ 366.801477][ T5895] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 367.006435][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 367.026595][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.073132][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 367.078474][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 367.103894][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.151317][ T5895] usb 1-1: config 0 descriptor?? [ 367.184362][ T5895] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 367.227044][ T8818] FAULT_INJECTION: forcing a failure. [ 367.227044][ T8818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.311994][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.2.881 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 367.312032][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.312045][ T8818] Call Trace: [ 367.312053][ T8818] [ 367.312062][ T8818] dump_stack_lvl+0x241/0x360 [ 367.312099][ T8818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.312126][ T8818] ? __pfx__printk+0x10/0x10 [ 367.312166][ T8818] should_fail_ex+0x424/0x570 [ 367.312193][ T8818] _copy_to_user+0x31/0xb0 [ 367.312224][ T8818] simple_read_from_buffer+0xc4/0x170 [ 367.312256][ T8818] proc_fail_nth_read+0x1ef/0x260 [ 367.312280][ T8818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.312304][ T8818] ? rw_verify_area+0x246/0x630 [ 367.312324][ T8818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.312346][ T8818] vfs_read+0x21f/0xb90 [ 367.312373][ T8818] ? __pfx___mutex_lock+0x10/0x10 [ 367.312397][ T8818] ? __pfx_vfs_read+0x10/0x10 [ 367.312422][ T8818] ? __fget_files+0x2a/0x420 [ 367.312442][ T8818] ? __fget_files+0x39d/0x420 [ 367.312458][ T8818] ? __fget_files+0x2a/0x420 [ 367.312487][ T8818] ksys_read+0x19d/0x2d0 [ 367.312511][ T8818] ? __pfx_ksys_read+0x10/0x10 [ 367.312536][ T8818] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 367.312558][ T8818] ? lockdep_hardirqs_on+0x9d/0x150 [ 367.312583][ T8818] __do_fast_syscall_32+0xb4/0x110 [ 367.312605][ T8818] ? exc_page_fault+0x5f8/0x920 [ 367.312631][ T8818] do_fast_syscall_32+0x34/0x80 [ 367.312653][ T8818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.312684][ T8818] RIP: 0023:0xf7fc3579 [ 367.312701][ T8818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 367.312718][ T8818] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 367.312739][ T8818] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620 [ 367.312753][ T8818] RDX: 000000000000000f RSI: 00000000f744cff4 RDI: 0000000000000000 [ 367.312765][ T8818] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 367.312776][ T8818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 367.312789][ T8818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.312820][ T8818] [ 367.544508][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.583998][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 367.801617][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.819144][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.890667][ T5895] gspca_vc032x: reg_w err -71 [ 367.895528][ T5895] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 367.906505][ T5895] usb 1-1: USB disconnect, device number 58 [ 368.068848][ T5894] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 368.248787][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 368.264799][ T5894] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 368.287356][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.295665][ T5894] usb 5-1: Product: syz [ 368.300253][ T5894] usb 5-1: Manufacturer: syz [ 368.304894][ T5894] usb 5-1: SerialNumber: syz [ 368.314970][ T5894] usb 5-1: config 0 descriptor?? [ 368.531610][ T5894] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 368.558892][ T5895] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 368.742217][ T5895] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 368.766776][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.785164][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 368.799287][ T5895] usb 3-1: Product: syz [ 368.805936][ T5895] usb 3-1: Manufacturer: syz [ 368.814448][ T5895] usb 3-1: SerialNumber: syz [ 368.827455][ T5895] usb 3-1: config 0 descriptor?? [ 368.840593][ T5895] ch341 3-1:0.0: ch341-uart converter detected [ 369.039929][ T974] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 369.238997][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 369.253953][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.298930][ T974] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 369.308159][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.358668][ T974] usb 1-1: config 0 descriptor?? [ 369.772674][ T5894] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 369.796380][ T5894] usb 5-1: USB disconnect, device number 50 [ 369.809243][ T974] hid-steam 0003:28DE:1102.003B: unknown main item tag 0x0 [ 369.834161][ T974] hid-steam 0003:28DE:1102.003B: unknown main item tag 0x0 [ 369.845441][ T974] hid-steam 0003:28DE:1102.003B: unknown main item tag 0x0 [ 369.861273][ T974] hid-steam 0003:28DE:1102.003B: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 369.994850][ T24] usb 1-1: USB disconnect, device number 59 [ 370.194186][ T5895] ch341-uart ttyUSB0: failed to read break control: -71 [ 370.202203][ T5895] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 370.233535][ T5895] usb 3-1: USB disconnect, device number 55 [ 370.241297][ T5895] ch341 3-1:0.0: device disconnected [ 370.918832][ T5894] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 371.069562][ T8865] xt_TCPMSS: Only works on TCP SYN packets [ 371.088784][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 371.107748][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 371.123292][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.157547][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 371.184864][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.200177][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.895'. [ 371.209462][ T5894] usb 1-1: Product: syz [ 371.213678][ T5894] usb 1-1: Manufacturer: syz [ 371.218313][ T5894] usb 1-1: SerialNumber: syz [ 371.236401][ T5894] usb 1-1: config 0 descriptor?? [ 371.252938][ T5894] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 371.267727][ T5894] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 371.528787][ T5897] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 371.569179][ T5894] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 371.593235][ T5894] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 371.608983][ T5894] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 371.629533][ T5894] em28xx 1-1:0.0: No AC97 audio processor [ 371.690628][ T5894] usb 1-1: USB disconnect, device number 60 [ 371.728525][ T5897] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 222, changing to 11 [ 371.750646][ T5894] em28xx 1-1:0.0: Disconnecting em28xx [ 371.756300][ T5897] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.787525][ T5894] em28xx 1-1:0.0: Freeing device [ 371.826621][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 371.836657][ T5897] usb 3-1: config 1 interface 0 has no altsetting 0 [ 371.867985][ T5897] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 371.881892][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.891617][ T5897] usb 3-1: Product: syz [ 371.896957][ T5897] usb 3-1: Manufacturer: syz [ 371.913918][ T5897] usb 3-1: SerialNumber: syz [ 372.148213][ T8871] block device autoloading is deprecated and will be removed. [ 372.170823][ T5897] usbhid 3-1:1.0: can't add hid device: -71 [ 372.176992][ T5897] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 372.191222][ T5897] usb 3-1: USB disconnect, device number 56 [ 372.298821][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 372.398069][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 372.488992][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 372.501314][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.549226][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 372.590220][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.615924][ T24] usb 1-1: config 0 descriptor?? [ 372.644238][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 372.658164][ T8888] program syz.1.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.765037][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 373.028963][ T5897] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 373.041999][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.050966][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.060904][ T24] gspca_vc032x: reg_w err -71 [ 373.065734][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 373.101815][ T5895] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 373.120110][ T24] usb 1-1: USB disconnect, device number 61 [ 373.188974][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 373.235081][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.256479][ T5897] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 373.273513][ T5895] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 373.273959][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.298901][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.301834][ T5897] usb 2-1: config 0 descriptor?? [ 373.322571][ T5895] usb 3-1: Product: syz [ 373.326811][ T5895] usb 3-1: Manufacturer: syz [ 373.333765][ T5895] usb 3-1: SerialNumber: syz [ 373.346104][ T5895] usb 3-1: config 0 descriptor?? [ 373.356641][ T5895] ch341 3-1:0.0: ch341-uart converter detected [ 373.456724][ T8896] FAULT_INJECTION: forcing a failure. [ 373.456724][ T8896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.471830][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.4.904 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 373.471864][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 373.471875][ T8896] Call Trace: [ 373.471882][ T8896] [ 373.471890][ T8896] dump_stack_lvl+0x241/0x360 [ 373.471925][ T8896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.471952][ T8896] ? __pfx__printk+0x10/0x10 [ 373.471993][ T8896] should_fail_ex+0x424/0x570 [ 373.472019][ T8896] _copy_from_iter+0x211/0x1c70 [ 373.472048][ T8896] ? __build_skb_around+0x247/0x3d0 [ 373.472082][ T8896] ? __alloc_skb+0x298/0x480 [ 373.472108][ T8896] ? __pfx__copy_from_iter+0x10/0x10 [ 373.472137][ T8896] ? __pfx___alloc_skb+0x10/0x10 [ 373.472165][ T8896] ? skb_put+0x114/0x1f0 [ 373.472187][ T8896] netlink_sendmsg+0x73c/0xcd0 [ 373.472226][ T8896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.472256][ T8896] ? __import_iovec+0x585/0x830 [ 373.472280][ T8896] ? aa_sock_msg_perm+0x91/0x160 [ 373.472311][ T8896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.472334][ T8896] __sock_sendmsg+0x221/0x270 [ 373.472362][ T8896] ____sys_sendmsg+0x523/0x860 [ 373.472392][ T8896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.472430][ T8896] __sys_sendmsg+0x271/0x360 [ 373.472454][ T8896] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.472530][ T8896] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 373.472551][ T8896] ? lockdep_hardirqs_on+0x9d/0x150 [ 373.472575][ T8896] __do_fast_syscall_32+0xb4/0x110 [ 373.472595][ T8896] ? exc_page_fault+0x5f8/0x920 [ 373.472620][ T8896] do_fast_syscall_32+0x34/0x80 [ 373.472651][ T8896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 373.472673][ T8896] RIP: 0023:0xf73dd579 [ 373.472690][ T8896] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 373.472707][ T8896] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 373.472728][ T8896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 373.472741][ T8896] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.472753][ T8896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 373.472764][ T8896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 373.472775][ T8896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 373.472805][ T8896] [ 373.715206][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.940811][ T5897] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 373.957364][ T5897] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 373.980809][ T5897] hid-steam 0003:28DE:1102.003C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 374.079532][ T5897] hid-steam 0003:28DE:1102.003C: Steam Controller 'XXXXXXXXXX' connected [ 374.128453][ T5897] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.003C/input/input21 [ 374.174720][ T5897] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 374.185431][ T5897] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 374.194222][ T47] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 374.196521][ T5897] hid-steam 0003:28DE:1102.003D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 374.261458][ T5897] usb 2-1: USB disconnect, device number 52 [ 374.297658][ T5897] hid-steam 0003:28DE:1102.003C: Steam Controller 'XXXXXXXXXX' disconnected [ 374.466681][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 374.528257][ T47] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.558232][ T47] usb 5-1: config 1 interface 0 has no altsetting 0 [ 374.596013][ T47] usb 5-1: string descriptor 0 read error: -22 [ 374.607015][ T47] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 374.632118][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.659147][ T8908] veth21: entered allmulticast mode [ 374.722093][ T8908] veth21: left allmulticast mode [ 374.814337][ T8911] blktrace: Concurrent blktraces are not allowed on sg0 [ 374.842054][ T5895] ch341-uart ttyUSB0: failed to read break control: -71 [ 374.849930][ T5895] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 374.873985][ T5895] usb 3-1: USB disconnect, device number 57 [ 374.892589][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.901814][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.912099][ T5895] ch341 3-1:0.0: device disconnected [ 375.123171][ T5897] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 375.290661][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.339120][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.426803][ T5897] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 375.435392][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 375.450098][ T5897] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 375.488505][ T5897] usb 2-1: Manufacturer: syz [ 375.558149][ T5897] usb 2-1: config 0 descriptor?? [ 375.567834][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 376.014287][ T5897] cougar 0003:060B:700A.003E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 376.442486][ T5897] usb 2-1: USB disconnect, device number 53 [ 376.659484][ T3407] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 376.899174][ T3407] usb 1-1: config 0 has no interfaces? [ 376.921916][ T3407] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 376.934372][ T3407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.943752][ T3407] usb 1-1: Product: syz [ 376.951344][ T3407] usb 1-1: Manufacturer: syz [ 376.961076][ T3407] usb 1-1: SerialNumber: syz [ 376.980712][ T3407] usb 1-1: config 0 descriptor?? [ 377.279727][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 377.679992][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 377.839044][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 377.850618][ T47] usbhid 5-1:1.0: can't add hid device: -71 [ 377.861005][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.891221][ T47] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 377.927870][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 377.944706][ T47] usb 5-1: USB disconnect, device number 51 [ 377.951600][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.973083][ T24] usb 3-1: config 0 descriptor?? [ 377.981336][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 378.390097][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.414666][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.480727][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 378.486647][ T24] gspca_vc032x: reg_w err -71 [ 378.494471][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 378.519875][ T24] usb 3-1: USB disconnect, device number 58 [ 378.758889][ T5957] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 378.848961][ T3407] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 378.861942][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.872635][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.909016][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 378.918305][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.931965][ T5957] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 378.941468][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.954308][ T5957] usb 5-1: config 0 descriptor?? [ 379.014180][ T3407] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 379.023856][ T3407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.032477][ T3407] usb 2-1: Product: syz [ 379.036838][ T3407] usb 2-1: Manufacturer: syz [ 379.041661][ T3407] usb 2-1: SerialNumber: syz [ 379.049697][ T3407] usb 2-1: config 0 descriptor?? [ 379.057326][ T3407] ch341 2-1:0.0: ch341-uart converter detected [ 379.373206][ T5957] hid-steam 0003:28DE:1102.003F: unknown main item tag 0x0 [ 379.380607][ T5957] hid-steam 0003:28DE:1102.003F: unknown main item tag 0x0 [ 379.389089][ T5957] hid-steam 0003:28DE:1102.003F: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 379.472248][ T5957] hid-steam 0003:28DE:1102.003F: Steam Controller 'XXXXXXXXXX' connected [ 379.487097][ T5957] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.003F/input/input22 [ 379.524548][ T5957] hid-steam 0003:28DE:1102.0040: unknown main item tag 0x0 [ 379.533416][ T5957] hid-steam 0003:28DE:1102.0040: unknown main item tag 0x0 [ 379.546856][ T5957] hid-steam 0003:28DE:1102.0040: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 379.583106][ T5957] usb 5-1: USB disconnect, device number 52 [ 379.607959][ T5957] hid-steam 0003:28DE:1102.003F: Steam Controller 'XXXXXXXXXX' disconnected [ 379.687457][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 379.693018][ T5894] usb 1-1: USB disconnect, device number 62 [ 379.885304][ T8951] blktrace: Concurrent blktraces are not allowed on sg0 [ 380.140463][ T47] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 380.277196][ T3407] ch341-uart ttyUSB0: failed to read break control: -71 [ 380.292674][ T3407] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 380.315367][ T3407] usb 2-1: USB disconnect, device number 54 [ 380.409734][ T3407] ch341 2-1:0.0: device disconnected [ 380.467640][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.493620][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.516303][ T47] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 380.528899][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.925'. [ 380.538168][ T47] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 380.552704][ T47] usb 3-1: Manufacturer: syz [ 380.574862][ T47] usb 3-1: config 0 descriptor?? [ 381.279589][ T47] cougar 0003:060B:700A.0041: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 381.444680][ T5894] usb 3-1: USB disconnect, device number 59 [ 381.512510][ T5957] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 381.689718][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 381.747311][ T5957] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.795650][ T5957] usb 2-1: config 1 interface 0 has no altsetting 0 [ 381.837913][ T5957] usb 2-1: string descriptor 0 read error: -22 [ 381.853713][ T5957] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 381.888492][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.156429][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.166464][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.415298][ T8978] FAULT_INJECTION: forcing a failure. [ 382.415298][ T8978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.474535][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.0.933 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 382.474567][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.474574][ T8978] Call Trace: [ 382.474581][ T8978] [ 382.474586][ T8978] dump_stack_lvl+0x241/0x360 [ 382.474614][ T8978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.474640][ T8978] ? __pfx__printk+0x10/0x10 [ 382.474679][ T8978] should_fail_ex+0x424/0x570 [ 382.474705][ T8978] _copy_from_iter+0x211/0x1c70 [ 382.474729][ T8978] ? __build_skb_around+0x247/0x3d0 [ 382.474748][ T8978] ? __alloc_skb+0x298/0x480 [ 382.474774][ T8978] ? __pfx__copy_from_iter+0x10/0x10 [ 382.474800][ T8978] ? __pfx___alloc_skb+0x10/0x10 [ 382.474828][ T8978] ? skb_put+0x114/0x1f0 [ 382.474850][ T8978] netlink_sendmsg+0x73c/0xcd0 [ 382.474887][ T8978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.474916][ T8978] ? __import_iovec+0x585/0x830 [ 382.474938][ T8978] ? aa_sock_msg_perm+0x91/0x160 [ 382.474968][ T8978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.474989][ T8978] __sock_sendmsg+0x221/0x270 [ 382.475016][ T8978] ____sys_sendmsg+0x523/0x860 [ 382.475047][ T8978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.475085][ T8978] __sys_sendmsg+0x271/0x360 [ 382.475108][ T8978] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.475183][ T8978] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 382.475203][ T8978] ? lockdep_hardirqs_on+0x9d/0x150 [ 382.475227][ T8978] __do_fast_syscall_32+0xb4/0x110 [ 382.475247][ T8978] ? exc_page_fault+0x5f8/0x920 [ 382.475272][ T8978] do_fast_syscall_32+0x34/0x80 [ 382.475294][ T8978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.475316][ T8978] RIP: 0023:0xf743d579 [ 382.475333][ T8978] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 382.475349][ T8978] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 382.475371][ T8978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 382.475384][ T8978] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.475395][ T8978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.475405][ T8978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 382.475417][ T8978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.475446][ T8978] [ 382.715305][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.885078][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 383.024314][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 383.128869][ T5894] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 383.139055][ T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 383.284687][ T5894] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 383.298835][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.298842][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 383.298867][ T5894] usb 5-1: Product: syz [ 383.321285][ T5894] usb 5-1: Manufacturer: syz [ 383.323434][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.326289][ T5894] usb 5-1: SerialNumber: syz [ 383.394446][ T5894] usb 5-1: config 0 descriptor?? [ 383.394530][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 383.410150][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.415905][ T5894] ch341 5-1:0.0: ch341-uart converter detected [ 383.421615][ T24] usb 1-1: config 0 descriptor?? [ 384.107187][ T24] hid-steam 0003:28DE:1102.0042: unknown main item tag 0x0 [ 384.148848][ T24] hid-steam 0003:28DE:1102.0042: unknown main item tag 0x0 [ 384.189152][ T24] hid-steam 0003:28DE:1102.0042: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 384.206219][ T5957] usbhid 2-1:1.0: can't add hid device: -71 [ 384.212436][ T5957] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 384.268475][ T5957] usb 2-1: USB disconnect, device number 55 [ 384.289214][ T24] hid-steam 0003:28DE:1102.0042: Steam Controller 'XXXXXXXXXX' connected [ 384.352742][ T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0042/input/input23 [ 384.380030][ T24] hid-steam 0003:28DE:1102.0043: unknown main item tag 0x0 [ 384.387606][ T24] hid-steam 0003:28DE:1102.0043: unknown main item tag 0x0 [ 384.428940][ T24] hid-steam 0003:28DE:1102.0043: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 384.445281][ T24] usb 1-1: USB disconnect, device number 63 [ 384.473642][ T24] hid-steam 0003:28DE:1102.0042: Steam Controller 'XXXXXXXXXX' disconnected [ 384.476885][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.938'. [ 384.638889][ T5957] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 384.809036][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 384.817502][ T5894] ch341-uart ttyUSB0: failed to read break control: -71 [ 384.828435][ T5894] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 384.855450][ T5957] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 384.879552][ T5894] usb 5-1: USB disconnect, device number 53 [ 384.887268][ T5894] ch341 5-1:0.0: device disconnected [ 384.893411][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.905196][ T5957] usb 2-1: Product: syz [ 384.916935][ T5957] usb 2-1: Manufacturer: syz [ 384.927252][ T5957] usb 2-1: SerialNumber: syz [ 384.948481][ T5957] usb 2-1: config 0 descriptor?? [ 385.173617][ T5957] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.358904][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 385.391853][ T9001] fuse: Unknown parameter 'user_i00000000000000000004' [ 385.532567][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.543659][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.558967][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.568211][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.585302][ T24] usb 1-1: Manufacturer: syz [ 385.598056][ T24] usb 1-1: config 0 descriptor?? [ 385.671409][ T24] rc_core: IR keymap rc-hauppauge not found [ 385.677426][ T24] Registered IR keymap rc-empty [ 385.685253][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 385.703148][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 385.719073][ T3407] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 385.904309][ T3407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.934093][ T3407] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 385.985384][ T3407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.006896][ T3407] usb 3-1: config 0 descriptor?? [ 386.130119][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 386.403438][ T5957] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 386.416874][ T5957] usb 2-1: USB disconnect, device number 56 [ 386.431517][ T3407] cypress 0003:04B4:BCA1.0044: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.2-1/input0 [ 386.525548][ T3407] usb 1-1: USB disconnect, device number 64 [ 386.626083][ T47] usb 3-1: USB disconnect, device number 60 [ 386.706940][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 387.039066][ T3407] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 387.198780][ T3407] usb 1-1: Using ep0 maxpacket: 16 [ 387.211876][ T3407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.308859][ T3407] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 387.318150][ T3407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.389933][ T3407] usb 1-1: config 0 descriptor?? [ 387.654556][ T9035] fuse: Unknown parameter 'user_i00000000000000000004' [ 387.977655][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.954'. [ 387.994878][ T3407] hid-steam 0003:28DE:1102.0045: unknown main item tag 0x0 [ 388.004692][ T3407] hid-steam 0003:28DE:1102.0045: unknown main item tag 0x0 [ 388.017988][ T3407] hid-steam 0003:28DE:1102.0045: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 388.139030][ T3407] hid-steam 0003:28DE:1102.0045: Steam Controller 'XXXXXXXXXX' connected [ 388.223583][ T3407] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0045/input/input25 [ 388.256477][ T3407] hid-steam 0003:28DE:1102.0046: unknown main item tag 0x0 [ 388.264270][ T3407] hid-steam 0003:28DE:1102.0046: unknown main item tag 0x0 [ 388.274941][ T3407] hid-steam 0003:28DE:1102.0046: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 388.295925][ T3407] usb 1-1: USB disconnect, device number 65 [ 388.540608][ T3407] hid-steam 0003:28DE:1102.0045: Steam Controller 'XXXXXXXXXX' disconnected [ 389.236672][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 389.369781][ T3407] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 389.708904][ T3407] usb 1-1: Using ep0 maxpacket: 8 [ 389.794469][ T3407] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.815704][ T9065] fuse: Unknown parameter 'user_i00000000000000000004' [ 389.819102][ T3407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.847679][ T3407] usb 1-1: Product: syz [ 389.858279][ T3407] usb 1-1: Manufacturer: syz [ 389.876273][ T3407] usb 1-1: SerialNumber: syz [ 389.896239][ T3407] usb 1-1: config 0 descriptor?? [ 390.123340][ T3407] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 390.253046][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 390.262073][ T5957] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 390.313549][ T9074] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 390.335714][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.343741][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.352236][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.361059][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.368617][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.376260][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.383903][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.391432][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.399654][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.407180][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.415318][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.423067][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.431153][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.438738][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.446449][ T5894] hid-generic 00A0:0006:0003.0047: unknown main item tag 0x0 [ 390.454247][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 390.461553][ T5957] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 390.474350][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 390.484832][ T5894] hid-generic 00A0:0006:0003.0047: hidraw0: HID v0.05 Device [syz1] on syz0 [ 390.495103][ T5957] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.505357][ T5957] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.518864][ T5957] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 390.527936][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.536110][ T974] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 390.578853][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 390.688944][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 390.696438][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.707796][ T974] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 390.717256][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.729026][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 390.729274][ T974] usb 2-1: config 0 descriptor?? [ 390.742167][ T24] usb 3-1: config 0 has no interfaces? [ 390.754234][ T5957] usb 5-1: GET_CAPABILITIES returned 0 [ 390.760134][ T5957] usbtmc 5-1:16.0: can't read capabilities [ 390.769264][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 390.778432][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.786711][ T24] usb 3-1: Product: syz [ 390.791250][ T24] usb 3-1: Manufacturer: syz [ 390.796213][ T24] usb 3-1: SerialNumber: syz [ 390.805743][ T24] usb 3-1: config 0 descriptor?? [ 390.961720][ T5957] usb 5-1: USB disconnect, device number 54 [ 391.022716][ T24] usb 3-1: USB disconnect, device number 61 [ 391.147878][ T974] hid-steam 0003:28DE:1102.0048: unknown main item tag 0x0 [ 391.155372][ T974] hid-steam 0003:28DE:1102.0048: unknown main item tag 0x0 [ 391.164690][ T974] hid-steam 0003:28DE:1102.0048: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 391.228991][ T974] hid-steam 0003:28DE:1102.0048: Steam Controller 'XXXXXXXXXX' connected [ 391.242716][ T974] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0048/input/input26 [ 391.267252][ T974] hid-steam 0003:28DE:1102.0049: unknown main item tag 0x0 [ 391.274892][ T974] hid-steam 0003:28DE:1102.0049: unknown main item tag 0x0 [ 391.285084][ T974] hid-steam 0003:28DE:1102.0049: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 391.357733][ T3407] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.370105][ T974] usb 2-1: USB disconnect, device number 57 [ 391.374829][ T3407] usb 1-1: USB disconnect, device number 66 [ 391.394462][ T974] hid-steam 0003:28DE:1102.0048: Steam Controller 'XXXXXXXXXX' disconnected [ 391.604717][ T9080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.969'. [ 391.657604][ T9078] netlink: 'syz.4.968': attribute type 12 has an invalid length. [ 391.671146][ T9078] netlink: 132 bytes leftover after parsing attributes in process `syz.4.968'. [ 392.071521][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 392.228966][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 392.251609][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 392.278962][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.304880][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.329118][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.358843][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.378042][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.606643][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 392.618927][ T24] usbtmc 5-1:16.0: can't read capabilities [ 392.823831][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.010960][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.085518][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 394.192855][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 394.358841][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 394.362470][ T5895] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.373995][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.391054][ T5895] usb 2-1: Product: syz [ 394.399906][ T5895] usb 2-1: Manufacturer: syz [ 394.408866][ T974] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 394.409044][ T5895] usb 2-1: SerialNumber: syz [ 394.440284][ T5895] usb 2-1: config 0 descriptor?? [ 394.592402][ T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.619117][ T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.641382][ T974] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.656008][ T5895] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.658750][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 394.698465][ T974] usb 3-1: SerialNumber: syz [ 394.846025][ T5957] usb 5-1: USB disconnect, device number 55 [ 394.915437][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 394.966636][ T9113] dccp_close: ABORT with 28 bytes unread [ 395.015262][ T974] usb 3-1: 0:2 : does not exist [ 395.085948][ T974] usb 3-1: USB disconnect, device number 62 [ 395.269259][ T5957] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 395.455286][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 395.473676][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.505689][ T5957] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 395.531631][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.559970][ T5957] usb 5-1: config 0 descriptor?? [ 395.892079][ T5895] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 395.921390][ T5895] usb 2-1: USB disconnect, device number 58 [ 395.993552][ T5957] hid-steam 0003:28DE:1102.004A: unknown main item tag 0x0 [ 396.112397][ T5957] hid-steam 0003:28DE:1102.004A: unknown main item tag 0x0 [ 396.125844][ T5957] hid-steam 0003:28DE:1102.004A: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 396.319155][ T5957] hid-steam 0003:28DE:1102.004A: Steam Controller 'XXXXXXXXXX' connected [ 396.344749][ T5957] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.004A/input/input27 [ 396.403719][ T5957] hid-steam 0003:28DE:1102.004B: unknown main item tag 0x0 [ 396.415298][ T5957] hid-steam 0003:28DE:1102.004B: unknown main item tag 0x0 [ 396.424984][ T5957] hid-steam 0003:28DE:1102.004B: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 396.443352][ T5957] usb 5-1: USB disconnect, device number 56 [ 396.484875][ T5957] hid-steam 0003:28DE:1102.004A: Steam Controller 'XXXXXXXXXX' disconnected [ 397.314847][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 397.794058][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 397.988965][ T47] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 398.139339][ T47] usb 1-1: device descriptor read/64, error -71 [ 398.173322][ T5957] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 398.362800][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 398.390606][ T5957] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.418945][ T47] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 398.428180][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 398.450978][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.509800][ T5957] usb 2-1: config 0 descriptor?? [ 398.534309][ T5957] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 398.609991][ T47] usb 1-1: device descriptor read/64, error -71 [ 398.675539][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 398.740420][ T47] usb usb1-port1: attempt power cycle [ 398.939041][ T974] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 398.948555][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.957506][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.970051][ T5957] gspca_vc032x: reg_w err -71 [ 398.974871][ T5957] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 398.986071][ T5957] usb 2-1: USB disconnect, device number 59 [ 399.088891][ T47] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 399.096772][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 399.104727][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.112051][ T47] usb 1-1: device descriptor read/8, error -71 [ 399.116833][ T974] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 399.131403][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.142773][ T974] usb 3-1: config 0 descriptor?? [ 399.158862][ T5894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 399.319017][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 399.328654][ T5894] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.337973][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.347430][ T5894] usb 5-1: Product: syz [ 399.351937][ T5894] usb 5-1: Manufacturer: syz [ 399.356800][ T5894] usb 5-1: SerialNumber: syz [ 399.358922][ T47] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 399.365116][ T5894] usb 5-1: config 0 descriptor?? [ 399.389684][ T47] usb 1-1: device descriptor read/8, error -71 [ 399.502759][ T47] usb usb1-port1: unable to enumerate USB device [ 399.563315][ T974] hid-steam 0003:28DE:1102.004C: unknown main item tag 0x0 [ 399.572033][ T974] hid-steam 0003:28DE:1102.004C: unknown main item tag 0x0 [ 399.581068][ T974] hid-steam 0003:28DE:1102.004C: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 399.592405][ T5894] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.659258][ T974] hid-steam 0003:28DE:1102.004C: Steam Controller 'XXXXXXXXXX' connected [ 399.672995][ T974] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.004C/input/input28 [ 399.699385][ T974] hid-steam 0003:28DE:1102.004D: unknown main item tag 0x0 [ 399.706878][ T974] hid-steam 0003:28DE:1102.004D: unknown main item tag 0x0 [ 399.719056][ T974] hid-steam 0003:28DE:1102.004D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 399.769446][ T974] usb 3-1: USB disconnect, device number 63 [ 399.791382][ T974] hid-steam 0003:28DE:1102.004C: Steam Controller 'XXXXXXXXXX' disconnected [ 399.998903][ T47] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 400.149097][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 400.160551][ T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 400.170063][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.178150][ T47] usb 2-1: Product: syz [ 400.182721][ T47] usb 2-1: Manufacturer: syz [ 400.187458][ T47] usb 2-1: SerialNumber: syz [ 400.195124][ T47] usb 2-1: config 0 descriptor?? [ 400.421888][ T47] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.849353][ T5894] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 400.872107][ T5894] usb 5-1: USB disconnect, device number 57 [ 401.805011][ T47] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 401.818503][ T47] usb 2-1: USB disconnect, device number 60 [ 402.109948][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 402.212063][ T9195] blktrace: Concurrent blktraces are not allowed on sg0 [ 402.489947][ T47] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 402.674034][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.693980][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 402.707585][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.730834][ T47] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 402.743330][ T47] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 402.752232][ T47] usb 3-1: Manufacturer: syz [ 402.760376][ T47] usb 3-1: config 0 descriptor?? [ 402.968870][ T5895] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 403.138921][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 403.149892][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.175827][ T5895] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 403.208103][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.216729][ T47] cougar 0003:060B:700A.004E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 403.239366][ T5895] usb 2-1: config 0 descriptor?? [ 403.405893][ T47] usb 3-1: USB disconnect, device number 64 [ 403.654373][ T5895] hid-steam 0003:28DE:1102.004F: unknown main item tag 0x0 [ 403.662267][ T5895] hid-steam 0003:28DE:1102.004F: unknown main item tag 0x0 [ 403.671009][ T5895] hid-steam 0003:28DE:1102.004F: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 403.738844][ T5895] hid-steam 0003:28DE:1102.004F: Steam Controller 'XXXXXXXXXX' connected [ 403.750421][ T5895] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.004F/input/input29 [ 403.770914][ T5895] hid-steam 0003:28DE:1102.0050: unknown main item tag 0x0 [ 403.778205][ T5895] hid-steam 0003:28DE:1102.0050: unknown main item tag 0x0 [ 403.787889][ T5895] hid-steam 0003:28DE:1102.0050: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 403.858152][ T5895] usb 2-1: USB disconnect, device number 61 [ 403.875357][ T5895] hid-steam 0003:28DE:1102.004F: Steam Controller 'XXXXXXXXXX' disconnected [ 440.301366][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.307709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.138926][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 492.146530][ T31] Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 [ 492.153946][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.162708][ T31] task:kworker/0:1 state:D stack:19384 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 492.175074][ T31] Workqueue: events rfkill_sync_work [ 492.180538][ T31] Call Trace: [ 492.183877][ T31] [ 492.186841][ T31] __schedule+0x1b88/0x5240 [ 492.191463][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 492.196697][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.202264][ T31] ? schedule+0x163/0x360 [ 492.206643][ T31] ? __pfx___schedule+0x10/0x10 [ 492.211748][ T31] ? schedule+0x90/0x360 [ 492.216168][ T31] ? schedule+0x90/0x360 [ 492.220730][ T31] schedule+0x163/0x360 [ 492.224968][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.230261][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.235803][ T31] __mutex_lock+0x805/0x10c0 [ 492.240780][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.245764][ T31] ? nfc_rfkill_set_block+0x50/0x310 [ 492.251185][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.256264][ T31] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 492.262674][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 492.269121][ T31] ? __lock_acquire+0xad5/0xd80 [ 492.274027][ T31] nfc_rfkill_set_block+0x50/0x310 [ 492.279462][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 492.285262][ T31] rfkill_set_block+0x1f1/0x440 [ 492.290201][ T31] rfkill_sync_work+0x12c/0x220 [ 492.295137][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 492.301051][ T31] process_scheduled_works+0xac3/0x18e0 [ 492.306672][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.312902][ T31] ? assign_work+0x367/0x3d0 [ 492.317638][ T31] worker_thread+0x870/0xd50 [ 492.322554][ T31] ? __kthread_parkme+0x1a8/0x200 [ 492.327715][ T31] ? __pfx_worker_thread+0x10/0x10 [ 492.333046][ T31] kthread+0x7b7/0x940 [ 492.337340][ T31] ? __pfx_worker_thread+0x10/0x10 [ 492.342572][ T31] ? __pfx_kthread+0x10/0x10 [ 492.347204][ T31] ? __pfx_kthread+0x10/0x10 [ 492.351914][ T31] ? __pfx_kthread+0x10/0x10 [ 492.356645][ T31] ? __pfx_kthread+0x10/0x10 [ 492.361340][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.366700][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 492.372090][ T31] ? __pfx_kthread+0x10/0x10 [ 492.376740][ T31] ret_from_fork+0x4b/0x80 [ 492.381428][ T31] ? __pfx_kthread+0x10/0x10 [ 492.386097][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.391281][ T31] [ 492.394466][ T31] INFO: task udevd:5213 blocked for more than 143 seconds. [ 492.402007][ T31] Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 [ 492.409365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.418166][ T31] task:udevd state:D stack:21704 pid:5213 tgid:5213 ppid:1 task_flags:0x400140 flags:0x00004002 [ 492.430267][ T31] Call Trace: [ 492.433616][ T31] [ 492.436584][ T31] __schedule+0x1b88/0x5240 [ 492.441245][ T31] ? schedule+0x163/0x360 [ 492.445621][ T31] ? __pfx___schedule+0x10/0x10 [ 492.450740][ T31] ? schedule+0x90/0x360 [ 492.455024][ T31] ? schedule+0x90/0x360 [ 492.459342][ T31] schedule+0x163/0x360 [ 492.463622][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.468486][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.474298][ T31] __mutex_lock+0x805/0x10c0 [ 492.478984][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.483821][ T31] ? uevent_show+0x17d/0x340 [ 492.488471][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.493657][ T31] ? __kasan_kmalloc+0x9d/0xb0 [ 492.498921][ T31] ? uevent_show+0x163/0x340 [ 492.503570][ T31] uevent_show+0x17d/0x340 [ 492.508065][ T31] dev_attr_show+0x55/0xc0 [ 492.512685][ T31] sysfs_kf_seq_show+0x32b/0x4a0 [ 492.517714][ T31] ? __pfx_dev_attr_show+0x10/0x10 [ 492.523034][ T31] seq_read_iter+0x461/0xda0 [ 492.527690][ T31] vfs_read+0x9a0/0xb90 [ 492.532067][ T31] ? __pfx_vfs_read+0x10/0x10 [ 492.536814][ T31] ksys_read+0x19d/0x2d0 [ 492.541141][ T31] ? __pfx_ksys_read+0x10/0x10 [ 492.545953][ T31] ? do_syscall_64+0xb6/0x230 [ 492.550776][ T31] do_syscall_64+0xf3/0x230 [ 492.555298][ T31] ? clear_bhb_loop+0x45/0xa0 [ 492.560087][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.566287][ T31] RIP: 0033:0x7f66bcb16b6a [ 492.570842][ T31] RSP: 002b:00007ffee908e0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.579367][ T31] RAX: ffffffffffffffda RBX: 0000564793094c00 RCX: 00007f66bcb16b6a [ 492.587569][ T31] RDX: 0000000000001000 RSI: 00005647930a1b20 RDI: 000000000000000c [ 492.595626][ T31] RBP: 0000564793094c00 R08: 000000000000000c R09: 0000000000000000 [ 492.603684][ T31] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 492.611921][ T31] R13: 0000000000003fff R14: 00007ffee908e598 R15: 000000000000000a [ 492.621187][ T31] [ 492.624373][ T31] INFO: task kworker/0:3:5838 blocked for more than 143 seconds. [ 492.632218][ T31] Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 [ 492.639911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.648637][ T31] task:kworker/0:3 state:D stack:19160 pid:5838 tgid:5838 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 492.660944][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 492.667648][ T31] Call Trace: [ 492.670987][ T31] [ 492.673965][ T31] __schedule+0x1b88/0x5240 [ 492.678489][ T31] ? do_raw_spin_lock+0xc1/0x370 [ 492.683545][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.689011][ T31] ? schedule+0x163/0x360 [ 492.693369][ T31] ? __pfx___schedule+0x10/0x10 [ 492.698264][ T31] ? schedule+0x90/0x360 [ 492.702619][ T31] ? schedule+0x90/0x360 [ 492.706920][ T31] schedule+0x163/0x360 [ 492.711152][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.716049][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.721909][ T31] __mutex_lock+0x805/0x10c0 [ 492.726545][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 492.731524][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 492.737790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.742887][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 492.748170][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 492.754001][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 492.760157][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 492.765918][ T31] process_scheduled_works+0xac3/0x18e0 [ 492.771582][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.777592][ T31] ? assign_work+0x367/0x3d0 [ 492.782355][ T31] worker_thread+0x870/0xd50 [ 492.786980][ T31] ? __kthread_parkme+0x1a8/0x200 [ 492.792377][ T31] ? __pfx_worker_thread+0x10/0x10 [ 492.797541][ T31] kthread+0x7b7/0x940 [ 492.801719][ T31] ? __pfx_worker_thread+0x10/0x10 [ 492.806939][ T31] ? __pfx_kthread+0x10/0x10 [ 492.811665][ T31] ? __pfx_kthread+0x10/0x10 [ 492.816311][ T31] ? __pfx_kthread+0x10/0x10 [ 492.820992][ T31] ? __pfx_kthread+0x10/0x10 [ 492.825609][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.831152][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 492.836485][ T31] ? __pfx_kthread+0x10/0x10 [ 492.841174][ T31] ret_from_fork+0x4b/0x80 [ 492.845612][ T31] ? __pfx_kthread+0x10/0x10 [ 492.850283][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.855087][ T31] [ 492.858141][ T31] INFO: task syz.3.761:8451 blocked for more than 144 seconds. [ 492.865811][ T31] Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 [ 492.873243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.882029][ T31] task:syz.3.761 state:D stack:26752 pid:8451 tgid:8451 ppid:5860 task_flags:0x400040 flags:0x20004006 [ 492.894144][ T31] Call Trace: [ 492.897460][ T31] [ 492.900498][ T31] __schedule+0x1b88/0x5240 [ 492.905043][ T31] ? schedule+0x163/0x360 [ 492.909442][ T31] ? __pfx___schedule+0x10/0x10 [ 492.914346][ T31] ? register_lock_class+0x54/0x330 [ 492.919689][ T31] ? schedule+0x90/0x360 [ 492.923994][ T31] ? schedule+0x90/0x360 [ 492.928246][ T31] schedule+0x163/0x360 [ 492.932508][ T31] schedule_timeout+0xb1/0x2b0 [ 492.937496][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 492.943148][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.948416][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 492.953703][ T31] ? wait_for_completion+0x2d4/0x600 [ 492.959098][ T31] wait_for_completion+0x32f/0x600 [ 492.964260][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 492.970036][ T31] ? __flush_work+0xee/0xc60 [ 492.974704][ T31] __flush_work+0xa48/0xc60 [ 492.979360][ T31] ? __flush_work+0xee/0xc60 [ 492.984031][ T31] ? __pfx___flush_work+0x10/0x10 [ 492.989151][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 492.994497][ T31] ? __pfx___cancel_work+0x10/0x10 [ 492.999692][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.004752][ T31] ? nfc_genl_device_removed+0x266/0x380 [ 493.010539][ T31] __cancel_work_sync+0xbc/0x110 [ 493.015655][ T31] rfkill_unregister+0x96/0x230 [ 493.020637][ T31] nfc_unregister_device+0x96/0x2a0 [ 493.025952][ T31] virtual_ncidev_close+0x56/0x90 [ 493.031228][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 493.037091][ T31] __fput+0x3e9/0x9f0 [ 493.041204][ T31] task_work_run+0x251/0x310 [ 493.045856][ T31] ? __pfx_task_work_run+0x10/0x10 [ 493.051277][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 493.057117][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 493.062814][ T31] __do_fast_syscall_32+0xc1/0x110 [ 493.068061][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.074323][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 493.079638][ T31] do_fast_syscall_32+0x34/0x80 [ 493.084551][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.091386][ T31] RIP: 0023:0xf743d579 [ 493.095562][ T31] RSP: 002b:00000000f758fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 493.104261][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 493.112312][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.120432][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.128437][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.136839][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.144889][ T31] [ 493.147945][ T31] INFO: task syz-executor:8594 blocked for more than 144 seconds. [ 493.156242][ T31] Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 [ 493.163794][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.172689][ T31] task:syz-executor state:D stack:23592 pid:8594 tgid:8594 ppid:5828 task_flags:0x400000 flags:0x20004004 [ 493.184797][ T31] Call Trace: [ 493.188097][ T31] [ 493.191115][ T31] __schedule+0x1b88/0x5240 [ 493.195651][ T31] ? __lock_acquire+0xa11/0xd80 [ 493.200619][ T31] ? schedule+0x163/0x360 [ 493.204973][ T31] ? __pfx___schedule+0x10/0x10 [ 493.209919][ T31] ? schedule+0x90/0x360 [ 493.214200][ T31] ? schedule+0x90/0x360 [ 493.218510][ T31] schedule+0x163/0x360 [ 493.222749][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 493.227906][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.233536][ T31] __mutex_lock+0x805/0x10c0 [ 493.238357][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 493.243180][ T31] ? rfkill_register+0x34/0x8c0 [ 493.248085][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.253213][ T31] ? device_initialize+0x266/0x460 [ 493.258364][ T31] rfkill_register+0x34/0x8c0 [ 493.263248][ T31] hci_register_dev+0x407/0x8b0 [ 493.268167][ T31] vhci_create_device+0x38b/0x6e0 [ 493.273464][ T31] vhci_write+0x3c8/0x4a0 [ 493.278017][ T31] vfs_write+0x70f/0xd10 [ 493.282390][ T31] ? __pfx_vhci_write+0x10/0x10 [ 493.287360][ T31] ? __pfx_vfs_write+0x10/0x10 [ 493.292225][ T31] ksys_write+0x19d/0x2d0 [ 493.296686][ T31] ? __pfx_ksys_write+0x10/0x10 [ 493.301830][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 493.308762][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 493.313995][ T31] __do_fast_syscall_32+0xb4/0x110 [ 493.319203][ T31] ? exc_page_fault+0x5f8/0x920 [ 493.324250][ T31] do_fast_syscall_32+0x34/0x80 [ 493.329249][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.335625][ T31] RIP: 0023:0xf73bd579 [ 493.339778][ T31] RSP: 002b:00000000ffdaa610 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 493.348250][ T31] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 00000000ffdaa66a [ 493.356308][ T31] RDX: 0000000000000002 RSI: 00000000f73acff4 RDI: 00000000f73e5468 [ 493.364354][ T31] RBP: 00000000ffdaa7f8 R08: 0000000000000000 R09: 0000000000000000 [ 493.372517][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.380763][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.388906][ T31] [ 493.391967][ T31] [ 493.391967][ T31] Showing all locks held in the system: [ 493.399863][ T31] 4 locks held by kworker/0:1/10: [ 493.404884][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 493.415965][ T31] #1: ffffc900000f7c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 493.428549][ T31] #2: ffffffff903d7388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x23/0x220 [ 493.438784][ T31] #3: ffff88805c739100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x310 [ 493.448717][ T31] 1 lock held by khungtaskd/31: [ 493.453782][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 493.463863][ T31] 1 lock held by klogd/5202: [ 493.468703][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 493.478756][ T31] 4 locks held by udevd/5213: [ 493.483501][ T31] #0: ffff88802d5e7418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xda0 [ 493.492704][ T31] #1: ffff888035f68888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 493.502449][ T31] #2: ffff88805705cc38 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 493.512147][ T31] #3: ffff88805c739100 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 493.521361][ T31] 2 locks held by getty/5599: [ 493.526064][ T31] #0: ffff88814ce770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 493.536008][ T31] #1: ffffc9000334b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 493.546257][ T31] 3 locks held by kworker/0:3/5838: [ 493.551798][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 493.562991][ T31] #1: ffffc90003d4fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 493.576724][ T31] #2: ffffffff903d7388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 493.588308][ T31] 1 lock held by syz.3.761/8451: [ 493.593408][ T31] #0: ffff88805c739100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 493.603610][ T31] 2 locks held by syz-executor/8594: [ 493.608968][ T31] #0: ffff8880256a8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 493.619109][ T31] #1: ffffffff903d7388 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x34/0x8c0 [ 493.629206][ T31] [ 493.631575][ T31] ============================================= [ 493.631575][ T31] [ 493.640613][ T31] NMI backtrace for cpu 1 [ 493.640628][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 493.640650][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.640661][ T31] Call Trace: [ 493.640670][ T31] [ 493.640677][ T31] dump_stack_lvl+0x241/0x360 [ 493.640710][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.640736][ T31] ? __pfx__printk+0x10/0x10 [ 493.640768][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 493.640801][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 493.640824][ T31] ? _printk+0xd5/0x120 [ 493.640849][ T31] ? __wake_up_klogd+0xcc/0x110 [ 493.640877][ T31] ? __pfx__printk+0x10/0x10 [ 493.640907][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 493.640929][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 493.640959][ T31] watchdog+0x1058/0x10a0 [ 493.640981][ T31] ? watchdog+0x1ea/0x10a0 [ 493.641007][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.641026][ T31] kthread+0x7b7/0x940 [ 493.641055][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.641077][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641100][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641126][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641149][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641181][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.641198][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 493.641219][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641244][ T31] ret_from_fork+0x4b/0x80 [ 493.641264][ T31] ? __pfx_kthread+0x10/0x10 [ 493.641286][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.641320][ T31] [ 493.641329][ T31] Sending NMI from CPU 1 to CPUs 0: [ 493.803142][ C0] NMI backtrace for cpu 0 [ 493.803162][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 493.803180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.803190][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 493.803211][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 01 18 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 493.803224][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c2 [ 493.803241][ C0] RAX: 22879320d38ef200 RBX: ffffffff8197afbe RCX: ffffffff8c30393c [ 493.803253][ C0] RDX: 0000000000000001 RSI: ffffffff8e69b738 RDI: ffffffff8ca1b120 [ 493.803264][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 493.803275][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 493.803286][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 493.803298][ C0] FS: 0000000000000000(0000) GS:ffff888124f97000(0000) knlGS:0000000000000000 [ 493.803311][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.803323][ C0] CR2: 00000000f7460048 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 493.803339][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.803349][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 493.803359][ C0] Call Trace: [ 493.803366][ C0] [ 493.803372][ C0] default_idle+0x13/0x20 [ 493.803390][ C0] default_idle_call+0x74/0xb0 [ 493.803408][ C0] do_idle+0x22e/0x5d0 [ 493.803429][ C0] ? __pfx_do_idle+0x10/0x10 [ 493.803447][ C0] ? rest_init+0x31/0x300 [ 493.803469][ C0] ? rest_init+0x31/0x300 [ 493.803486][ C0] cpu_startup_entry+0x42/0x60 [ 493.803503][ C0] rest_init+0x2dc/0x300 [ 493.803521][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 493.803540][ C0] start_kernel+0x484/0x510 [ 493.803563][ C0] x86_64_start_reservations+0x2a/0x30 [ 493.803579][ C0] x86_64_start_kernel+0x66/0x70 [ 493.803594][ C0] common_startup_64+0x13e/0x147 [ 493.803620][ C0] [ 493.804645][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 494.019736][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) [ 494.031298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.041359][ T31] Call Trace: [ 494.044649][ T31] [ 494.047635][ T31] dump_stack_lvl+0x241/0x360 [ 494.052356][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.057582][ T31] ? __pfx__printk+0x10/0x10 [ 494.062195][ T31] ? vscnprintf+0x5d/0x90 [ 494.066629][ T31] panic+0x349/0x880 [ 494.070532][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 494.076012][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 494.082272][ T31] ? __pfx_panic+0x10/0x10 [ 494.086753][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 494.092148][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 494.098309][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 494.104474][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 494.110641][ T31] watchdog+0x1097/0x10a0 [ 494.115064][ T31] ? watchdog+0x1ea/0x10a0 [ 494.119493][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.124172][ T31] kthread+0x7b7/0x940 [ 494.128251][ T31] ? __pfx_watchdog+0x10/0x10 [ 494.132931][ T31] ? __pfx_kthread+0x10/0x10 [ 494.137531][ T31] ? __pfx_kthread+0x10/0x10 [ 494.142128][ T31] ? __pfx_kthread+0x10/0x10 [ 494.146725][ T31] ? __pfx_kthread+0x10/0x10 [ 494.151409][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.156721][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 494.162241][ T31] ? __pfx_kthread+0x10/0x10 [ 494.166975][ T31] ret_from_fork+0x4b/0x80 [ 494.171401][ T31] ? __pfx_kthread+0x10/0x10 [ 494.176028][ T31] ret_from_fork_asm+0x1a/0x30 [ 494.180830][ T31] [ 494.184181][ T31] Kernel Offset: disabled [ 494.188561][ T31] Rebooting in 86400 seconds..