last executing test programs: 10.688137509s ago: executing program 3 (id=546): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @local, 0xffffff7f}}, 0x40, 0x7, 0xa7a, 0x8001, 0x40, 0x7, 0x15}, &(0x7f0000000280)=0x9c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) (async) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000440)={r6, 0x487d60c11958e33, 0x4, 0x4000, &(0x7f0000000340)}) (async) r7 = socket$alg(0x26, 0x5, 0x0) accept$alg(r7, 0x0, 0x0) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x701602, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r9, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) unshare(0x20000400) futex(0x0, 0xa, 0x100000, 0x0, 0x0, 0x3000000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, 0x0, 0x94) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e000000000003000000000000004000deffffffffff970100000000000000010000000038"], 0x78) (async) close(r10) 10.545101319s ago: executing program 2 (id=547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 10.544579707s ago: executing program 4 (id=548): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.319929189s ago: executing program 3 (id=549): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='\x00'}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) 9.950903753s ago: executing program 3 (id=551): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x3f2e, 0x10180, 0x8000000, 0xc}, &(0x7f0000000100), &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000005f000000050000000100000000000000", @ANYRES32, @ANYBLOB="000230de21087b345dc47229b72bac3e91d20000a4546a17ee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f00000002c0)='%-010d \x00'}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{0x0, 0x4, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x400000000, 0xb, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3bcc9942, 0x1, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100000000000000c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x1, 0x0, 0x5, 0x7, 0x0, 0x0, 0x2000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x8, 0xfffffffffffffffe, 0x3be5, 0x0, 0x0, 0x0, 0x0, 0x751, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc]}) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) r6 = fanotify_init(0x200, 0x0) r7 = dup(r5) fanotify_mark(r6, 0x201, 0x48001003, r7, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x1cf, 0x3, 0x1, 0x5bd5841a, 0x4, 0x6, 0x1}, &(0x7f0000000240)={0x9, 0x4, 0x1, 0x0, 0x80000001, 0x7, 0x100000001, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000e00)=ANY=[@ANYRES64=r8, @ANYBLOB="0bce64f5d35eedce1ca89c4919c20ae3741a263abafc43a6bd4e6c353b8e013ef7e69ba502b13630eac801521953dabe4dd2a9d576959f8da6467c9d5497d89870f4d744b854e89b235e6ff0dfc1e4afb2576a6d801bf450d6ee8e18aa79fa154a0fee5446", @ANYRES32=r5, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESHEX=r4, @ANYRESHEX=r6, @ANYBLOB="49af485136db162b59218c13cce76805e3df5ff58b086279a6cb4b5b3f7b771b980a7fd4be9f33cb0b700841caa86389a3805d4edfd70fbd66caec22f5b85b21dbbf58c72ab9397e1c9ccf087c23ac98f93c834131f1f6723f15b40bdf5105ef17d6e23734512c17685df1b2a56943d36c51b1e6bf101c966d33fe80f95fd63901a07470c9a022bc9405f45fd871bb1ad1d6a91137f44e86734f9b7bcde4325da991ea1cf414bb14bf56cc30999d223d36aeb2a778fd36c0429ce53070c5c5580ccd", @ANYRESHEX=r2]) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) recvmmsg(r9, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x400000000000165, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x2000000000af4, 0xc) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x6, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r11) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2000000c}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$xdp(0x2c, 0x3, 0x0) r12 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x9) fallocate(r12, 0xa6, 0x0, 0x400001) 8.799487683s ago: executing program 1 (id=553): socket$inet_udplite(0x2, 0x2, 0x88) r0 = fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x240080d0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}) socket$inet(0x2, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x22, 0x0, "1367f6edeb76fe9a7f7ab9a4fc9410504000b09cba9595e96b640f861765dd939a863f881fc06e04deef14b3acc252b95e66bab8af834ccd6b028404aec388bbed79ad99e3c578724a3af889fd58f0b6"}, 0xd8) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.692007538s ago: executing program 4 (id=554): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00='], 0x58}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) r3 = syz_pidfd_open(r1, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x0, 0x0, 0x80}}) socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000002740)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x24, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x7, 0xbb, [@multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7d}}], 0x80}}], 0x1, 0x40) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r9, 0xae80, 0x0) connect$inet6(r6, &(0x7f0000002100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2) r10 = fcntl$dupfd(r0, 0x406, r5) write$P9_RLOPEN(r10, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x2, 0x403, 0x4000006}, 0x4}}, 0x18) finit_module(r10, &(0x7f00000000c0)='/dev/kvm\x00', 0x0) socket$inet(0x2, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) 8.648990576s ago: executing program 0 (id=555): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020"], 0x80}}, 0x4814) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xffe3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4, 0x0, 0x1, 0x10, 0xff, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 8.014158169s ago: executing program 0 (id=556): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.831695082s ago: executing program 4 (id=557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r6, r4, r5, 0x2000000, 0x4000000, 0x80000001, 0x0, 0x2, 0x4000000, 0xd, 0x20000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = dup(r7) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.81394905s ago: executing program 1 (id=558): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc"], 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000480)={0x2, 0x0, 0x2, "bf20d1d4c30be84a33144d497f9cc745ec2c1a1a5c4b0b1ed70a6411551f7300", 0x49433553}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7ff}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xe1aa}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000004) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x4, 0x1d, {0x1d, 0xc, "de1d241326a0295f0de7136435bc6dd4af80c82e69fac516137ebb"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x49}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x15, 0x8e, "28468f993ded078cac645e582dc5547a55c0ed1fcc56227a9f6bc56d7f70066970e0295bf3ff728a7219c34210cdda7b554ef756277d74d1226e15f7944505dd29e904fe198ba488b62b8c80c562ab78f4670e134283abdb3d33a692d9fc8bdd65e1476647ec3b49b491105c0d1d3bb00893299e674d523e4949ba150785e7f5f6df3422368572f4e527751fa6e1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x45}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'T'}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "ce67"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "f0"}, &(0x7f0000000440)=ANY=[@ANYBLOB="20840300000029aee5d163"], &(0x7f0000000380)={0x20, 0x85, 0x3, "33ca05"}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.765244663s ago: executing program 2 (id=559): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 6.643497251s ago: executing program 0 (id=560): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x504, 0xfffffffffffffffb) keyctl$update(0x2, r5, &(0x7f0000000000)="11868a0fceae284c", 0x8) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b8", 0xc, r6) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x8000, 0x8, 0x1, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r8, 0xfffa, 0x3, 0x0, 0xffffffff, 0x10}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r9, 0x100, 0x8, 0x36b}, 0x10) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) 6.593510217s ago: executing program 2 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000500000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000910000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b9af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.484785465s ago: executing program 1 (id=562): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000480)=0xffffffffffffffff) close(r6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611134000000000017000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8100, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, 0x0, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @local}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xffffff3d) socket(0x29, 0x3, 0x3) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x3c, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xffff, 0x8}, {0xe, 0xe}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x20040000) 6.421536888s ago: executing program 2 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x94}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88}, {0x0, 0x0, 0x9, 0x0, 0xb, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet(0x2, 0x4000000000000001, 0x0) 6.072442862s ago: executing program 4 (id=564): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.565688365s ago: executing program 2 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x2000006) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socket$rxrpc(0x21, 0x2, 0x5) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x190) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24044005) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000340)=""/198, 0xc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$vim2m(0x0, 0xd2, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x3, r6, 0xcccccccc}) shutdown(r1, 0x0) socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r7, 0x101, 0x20, 0xd6}, &(0x7f0000000180)=0x18) socket$inet6(0xa, 0x5, 0x80000000) 3.58100703s ago: executing program 3 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x6, &(0x7f0000000240)=[{0x5, 0x4, 0x7}, {0x2, 0x7d, 0xe, 0x2000000}, {0x9, 0x70, 0x1, 0x4}, {0x3, 0xfb, 0xf9, 0x2}, {0x9, 0x2, 0xc1, 0x8c3d}, {0x974f, 0x2, 0xa4}]}) fstatfs(r4, &(0x7f0000000140)=""/166) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind(r3, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0x4140aecd, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001b40)=ANY=[@ANYBLOB="00000000100013070000000004000000fe880000000000000b00000000000001fe88000000000000000000000000070000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000033000000ac1414fd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200020000000000000000004c0014007368613338342d61726d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000001440)={0x0, 0x5, 0x0, 0x5}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000060a010200000000000000000100000008000b400000000038000480340001800b0001006e756d67656e00002400028008000340000000010800014000000000080004400000000008000240000000000900010073792cacf1e20000140000001100010000000000000000000000000a"], 0xd4}}, 0x40840) 3.461592343s ago: executing program 0 (id=567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000005000000000000ac1414bb00000000000000000000000000000400100000000a0062003b000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004fe12386819108ea000000000000000000000000000000000000000000000000000000000900000000000000000000000000000002d5c2d8992b19102ea88797395e5480ad3c45cf3eb6e68e813d3a1927013d03f5add91868824c901bf6cee5cd5fc52a2460f54f26bb3d2243024164e60ef63a4980f49d8d111c5847dcd41cdef10de519bc654f05f96f359dce643932c7ccea0c1a7a2487a5c1832e4f9ad6a81dafacbfa652e0"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000030000a0040"], 0xb8}}, 0x4000) 3.160974887s ago: executing program 0 (id=568): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b2", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f00000028c0)='\v', 0x1}, {&(0x7f0000000400)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) write(r0, &(0x7f0000000100)='$', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x80}}) r2 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x8, 0x0, 0x9, 0x9, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x68, 0x0, 0xc, 0x2f, 0x0, @remote, @local, {[@ssrr={0x89, 0x2b, 0x88, [@private=0xa010100, @loopback, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @local, @loopback, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x18}]}, @rr={0x7, 0x7, 0x9, [@private=0xa010102]}]}}}}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d00)="02", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)) syz_open_dev$video(&(0x7f0000000280), 0x3, 0x20001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.869274047s ago: executing program 3 (id=569): keyctl$negate(0xd, 0x0, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) 2.718884117s ago: executing program 4 (id=570): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c00", @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.577616797s ago: executing program 1 (id=571): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)='H', 0xfffffcc2}], 0x10000000000000c5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x16, r4, 0x1, 0xff, 0x6, @local}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x9) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000001200)) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8005, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0xc, 0x2, 0x47425247, 0x1, 0x2, 0x6, 0x2, 0x9, 0x0, 0x0, 0x2, 0x4}}) io_uring_enter(0xffffffffffffffff, 0x4638, 0x1c92, 0x4, &(0x7f0000000100)={[0x7ff]}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="1f00000008"], 0x5d) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) 1.476005588s ago: executing program 2 (id=572): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000023c0)="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", 0xc57}], 0x1}}], 0x1, 0x40040d0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) r4 = dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000406d0423c60000000000010902240e010000c0000904000601eee75f5a90bfaa324d19fde73703000200092100000001ef6d63c822050009058103000000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000b40)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x410002, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000002c0)={0xa00000, 0x0, 0xe81d, r4, 0x0, 0x0}) r7 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0xb4f037ad250eaece}) syz_io_uring_setup(0x239, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r10 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x404400, 0x90) setsockopt$inet6_tcp_int(r10, 0x6, 0xb, &(0x7f0000000180)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r2, &(0x7f0000000240)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1.326956101s ago: executing program 1 (id=573): syz_emit_ethernet(0x3f3, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x3bd, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x25, "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"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x2) 1.219898257s ago: executing program 4 (id=574): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 1.152755075s ago: executing program 3 (id=575): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c0, 0xfffffffffffffffb) keyctl$update(0x2, r7, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x8000, 0x8, 0x1, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r9, 0xfffa, 0x3, 0x0, 0xffffffff, 0x10}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r10, 0x100, 0x8, 0x36b}, 0x10) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 1.083341495s ago: executing program 1 (id=576): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$kcm(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5bf, 0xfffffffffffffffb) keyctl$update(0x2, r7, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000001ff6943b80000000800000014f200000000861f4104bfeacd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r8) keyctl$KEYCTL_MOVE(0x1e, r7, r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x8000, 0x8, 0x1, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r9, 0xfffa, 0x3, 0x0, 0xffffffff, 0x10}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r10, 0x100, 0x8, 0x36b}, 0x10) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 0s ago: executing program 0 (id=577): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x800) socket$inet(0x2, 0x1, 0x100) (async) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000006c0)="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", 0x241}], 0x1}}], 0x1, 0x800) (async) kernel console output (not intermixed with test programs): escriptor?? [ 175.283992][ T976] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 175.446835][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.490847][ T976] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 175.541248][ T976] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 175.550464][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.582186][ T976] usb 4-1: SerialNumber: syz [ 175.620695][ T976] usb 4-1: config 0 descriptor?? [ 175.642340][ T976] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 175.845370][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.855271][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.871189][ T5895] usb 4-1: USB disconnect, device number 22 [ 176.464358][ T5898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 176.569065][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 176.569082][ T30] audit: type=1326 audit(1743667478.939:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 176.569530][ T30] audit: type=1326 audit(1743667478.939:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 176.571433][ T30] audit: type=1326 audit(1743667478.939:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 176.572671][ T30] audit: type=1326 audit(1743667478.939:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 176.573037][ T30] audit: type=1326 audit(1743667478.939:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 176.576106][ T30] audit: type=1326 audit(1743667478.949:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6ee18bad0 code=0x7ffc0000 [ 176.578685][ T30] audit: type=1326 audit(1743667478.949:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6ee18cd6b code=0x7ffc0000 [ 176.582177][ T30] audit: type=1326 audit(1743667478.949:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6ee18cd6b code=0x7ffc0000 [ 176.600257][ T30] audit: type=1326 audit(1743667478.969:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6ee18cd6b code=0x7ffc0000 [ 176.603701][ T30] audit: type=1326 audit(1743667478.969:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6ee18cd6b code=0x7ffc0000 [ 176.627377][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 176.673737][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.676180][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.676217][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.703779][ T5898] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 176.703810][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.703831][ T5898] usb 1-1: Product: syz [ 176.703852][ T5898] usb 1-1: Manufacturer: syz [ 176.703867][ T5898] usb 1-1: SerialNumber: syz [ 176.706859][ T5898] usb 1-1: config 0 descriptor?? [ 176.804918][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.834006][ T5895] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 176.954707][ T5898] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 176.994377][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.994774][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.994966][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.995151][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.995334][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.995504][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.995672][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.995870][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996039][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996209][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996380][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996550][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996721][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.996892][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997063][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997233][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997411][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997603][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997776][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.997963][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.998364][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.998511][ T5197] usb 1-1: control msg error: -71 [ 176.998552][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 176.998769][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 177.025834][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.026036][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.026427][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.026731][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.026914][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.027101][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.027243][ T5197] usb 1-1: control msg error: -71 [ 177.027285][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.027474][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 177.029406][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.029635][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.029949][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.030183][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.030287][ T5197] usb 1-1: control msg error: -71 [ 177.030370][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 177.031442][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.031628][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.031829][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.032023][ C1] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 177.032100][ T5197] usb 1-1: control msg error: -71 [ 177.032203][ C1] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 177.041236][ T5898] usb 1-1: USB disconnect, device number 16 [ 177.137232][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 177.139648][ T5895] usb 4-1: config 0 has an invalid interface number: 141 but max is 12 [ 177.139674][ T5895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 177.139689][ T5895] usb 4-1: config 0 has no interface number 0 [ 177.139708][ T5895] usb 4-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 177.139751][ T5895] usb 4-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 177.139770][ T5895] usb 4-1: config 0 interface 141 has no altsetting 0 [ 177.145484][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 177.145504][ T5895] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 177.145518][ T5895] usb 4-1: Product: syz [ 177.145528][ T5895] usb 4-1: Manufacturer: syz [ 177.145538][ T5895] usb 4-1: SerialNumber: syz [ 177.147987][ T5895] usb 4-1: config 0 descriptor?? [ 177.433475][ T5895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 177.433986][ T5895] gspca_zc3xx: reg_w_i err -71 [ 177.446665][ T5898] usb 3-1: USB disconnect, device number 12 [ 177.982099][ T7005] netlink: 23 bytes leftover after parsing attributes in process `syz.2.313'. [ 178.024272][ T5895] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 178.024360][ T5895] gspca_zc3xx 4-1:0.141: probe with driver gspca_zc3xx failed with error -71 [ 178.054190][ T5895] usb 4-1: USB disconnect, device number 23 [ 178.275542][ T7011] xt_hashlimit: size too large, truncated to 1048576 [ 178.305056][ T7015] syzkaller1: entered promiscuous mode [ 178.305074][ T7015] syzkaller1: entered allmulticast mode [ 178.360634][ T7012] netlink: 11 bytes leftover after parsing attributes in process `syz.2.316'. [ 179.263871][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.403439][ T7030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.320'. [ 179.454663][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 179.465748][ T5898] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 179.775742][ T5898] usb 3-1: config 0 has no interface number 0 [ 179.782080][ T5898] usb 3-1: config 0 interface 184 has no altsetting 0 [ 179.816293][ T5898] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 179.836392][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.850727][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.866513][ T5898] usb 3-1: Product: syz [ 179.870741][ T5898] usb 3-1: Manufacturer: syz [ 179.885710][ T5898] usb 3-1: SerialNumber: syz [ 179.914694][ T5898] usb 3-1: config 0 descriptor?? [ 179.946228][ T5898] smsc75xx v1.0.0 [ 180.019126][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 180.034921][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.060081][ T24] usb 2-1: config 0 descriptor?? [ 180.172899][ T7039] program syz.3.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.700023][ T24] usb 2-1: Cannot set autoneg [ 180.707645][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 180.747809][ T24] usb 2-1: USB disconnect, device number 17 [ 181.374232][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 181.437960][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 181.491803][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.563110][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.658303][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 181.743684][ T5898] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.864475][ T5898] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.900757][ T5898] usb 3-1: USB disconnect, device number 13 [ 182.503866][ T5898] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.653876][ T976] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.735234][ T5898] usb 2-1: config 0 has no interfaces? [ 182.889769][ T5898] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 182.898888][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 182.914589][ T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.926808][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.984013][ T976] usb 3-1: config 0 has no interfaces? [ 182.995174][ T5898] usb 2-1: Product: syz [ 183.007812][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 183.018618][ T5898] usb 2-1: Manufacturer: syz [ 183.023234][ T5898] usb 2-1: SerialNumber: syz [ 183.056882][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.067896][ T5898] usb 2-1: config 0 descriptor?? [ 183.106237][ T976] usb 3-1: config 0 descriptor?? [ 183.478752][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.495458][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.173869][ T976] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.333842][ T976] usb 1-1: Using ep0 maxpacket: 32 [ 184.339147][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 184.366802][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.409813][ T976] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.448506][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.531890][ T976] usb 1-1: config 0 descriptor?? [ 184.569209][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 184.660414][ T976] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 184.669798][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.730184][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.776174][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 184.822768][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 184.841495][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.876230][ T24] usb 4-1: config 0 descriptor?? [ 185.161654][ T5893] usb 2-1: USB disconnect, device number 18 [ 185.227692][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 185.227712][ T30] audit: type=1326 audit(1743667487.599:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 185.336832][ T30] audit: type=1326 audit(1743667487.629:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 185.420096][ T30] audit: type=1326 audit(1743667487.649:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 185.471034][ T24] hid-picolcd 0003:04D8:C002.0007: item fetching failed at offset 3/7 [ 185.480559][ T24] hid-picolcd 0003:04D8:C002.0007: device report parse failed [ 185.488508][ T24] hid-picolcd 0003:04D8:C002.0007: probe with driver hid-picolcd failed with error -22 [ 185.504054][ T30] audit: type=1326 audit(1743667487.649:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 185.587080][ T30] audit: type=1326 audit(1743667487.649:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 185.651407][ T5893] usb 4-1: USB disconnect, device number 24 [ 185.683015][ T5895] usb 3-1: USB disconnect, device number 14 [ 185.802400][ T7103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.413896][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.500924][ T5893] usb 1-1: USB disconnect, device number 17 [ 187.650654][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 187.690688][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.709797][ T24] usb 2-1: config 8 has an invalid interface number: 64 but max is 0 [ 187.743657][ T24] usb 2-1: config 8 has no interface number 0 [ 187.762062][ T24] usb 2-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 187.774081][ T24] usb 2-1: config 8 interface 64 has no altsetting 0 [ 187.783344][ T24] usb 2-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 187.792677][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.801372][ T24] usb 2-1: Product: syz [ 187.805683][ T24] usb 2-1: Manufacturer: syz [ 187.813886][ T24] usb 2-1: SerialNumber: syz [ 188.026358][ T5893] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 188.288537][ T24] cdc_ether 2-1:8.64: invalid descriptor buffer length [ 188.306967][ T24] usb 2-1: bad CDC descriptors [ 188.403101][ T24] usb 2-1: USB disconnect, device number 19 [ 188.404179][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 188.422106][ T5893] usb 1-1: config 12 has an invalid interface number: 174 but max is 2 [ 188.443390][ T5893] usb 1-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 188.461259][ T5893] usb 1-1: config 12 has an invalid interface number: 125 but max is 2 [ 188.486368][ T5893] usb 1-1: config 12 has an invalid interface number: 134 but max is 2 [ 188.603516][ T5893] usb 1-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 188.621284][ T5893] usb 1-1: config 12 has no interface number 0 [ 188.637927][ T5893] usb 1-1: config 12 has no interface number 1 [ 188.681615][ T5893] usb 1-1: config 12 has no interface number 2 [ 188.734377][ T5893] usb 1-1: config 12 interface 174 altsetting 9 bulk endpoint 0x7 has invalid maxpacket 16 [ 188.789694][ T5893] usb 1-1: config 12 interface 174 altsetting 9 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 188.895626][ T5893] usb 1-1: config 12 interface 174 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 188.909485][ T5893] usb 1-1: config 12 interface 174 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 188.946154][ T5893] usb 1-1: config 12 interface 174 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 188.963595][ T5893] usb 1-1: config 12 interface 125 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 188.983859][ T5893] usb 1-1: config 12 interface 125 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 189.006258][ T5893] usb 1-1: config 12 interface 125 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 189.019146][ T5893] usb 1-1: config 12 interface 125 altsetting 9 endpoint 0x8B has invalid maxpacket 33710, setting to 64 [ 189.030763][ T5893] usb 1-1: config 12 interface 125 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 189.064460][ T5893] usb 1-1: config 12 interface 125 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 189.187311][ T5893] usb 1-1: config 12 interface 134 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 189.212275][ T5893] usb 1-1: config 12 interface 134 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 189.232245][ T5893] usb 1-1: config 12 interface 174 has no altsetting 0 [ 189.242347][ T5893] usb 1-1: config 12 interface 125 has no altsetting 0 [ 189.277966][ T5893] usb 1-1: config 12 interface 134 has no altsetting 0 [ 189.379826][ T5893] usb 1-1: New USB device found, idVendor=1a8d, idProduct=1010, bcdDevice=fa.7b [ 189.396690][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.459717][ T5893] usb 1-1: Product: 㡃갶竕ပ巃筵뎕㻬룘è«ã§¨êº˜ì…”î夂䣠樀쳼㵑è˜êŠªë€¦â¡‰ä¯Ÿî›’噘ﳬꎖ嵞쟩梗å¤ç·ì®¶ì—•ç»§è‡æ‚£åŒšì²¸Ö™ï¢á•éˆ¢à¥«å¸žá¹–窵牌ꯠ鿉ⱗ᪞⸠[ 189.571732][ T5893] usb 1-1: Manufacturer: 㴖喎曶Ἓ斸姾咜⠞퓪懻鉱줒늇åœì‹£ê¬«î¢®îŽ´è¾™çˆ»â±›á›­Å‰ï¨´ì˜†é—¬ç–Ÿëƒí§æ‡’툱쑕硋쯎࿭栺ﻲ智䂣翉윪縢賮æ†Ú„ê貽甫扗᮲籌狪⧾ [ 189.611205][ T5893] usb 1-1: SerialNumber: 戡똵ãšé˜¯æ˜Œã˜¼â™£ã¨¸ç›®è°…æ•å °å„ﺀ戳å¸ì°€ï•¤âš˜É½ìŽ·â”Žêž£à¹‚䘸㇣ç…窵 [ 189.677480][ T7134] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 189.954203][ T976] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 190.135978][ T976] usb 5-1: Using ep0 maxpacket: 16 [ 190.164521][ T976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.167369][ T5893] option 1-1:12.174: GSM modem (1-port) converter detected [ 190.185718][ T976] usb 5-1: config 0 has no interface number 0 [ 190.209196][ T24] IPVS: starting estimator thread 0... [ 190.221527][ T976] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 190.234119][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.245561][ T976] usb 5-1: Product: syz [ 190.250892][ T976] usb 5-1: Manufacturer: syz [ 190.265999][ T976] usb 5-1: SerialNumber: syz [ 190.304275][ T7160] IPVS: using max 28 ests per chain, 67200 per kthread [ 190.324423][ T976] usb 5-1: config 0 descriptor?? [ 190.352702][ T5893] usb 1-1: USB disconnect, device number 18 [ 190.381568][ T976] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 190.466203][ T5893] option 1-1:12.174: device disconnected [ 191.101986][ T7168] netlink: 76 bytes leftover after parsing attributes in process `syz.4.350'. [ 191.167820][ T976] gspca_spca1528: reg_w err -71 [ 191.193942][ T976] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 191.237120][ T976] usb 5-1: USB disconnect, device number 17 [ 191.335132][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 191.500159][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.523071][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 191.557002][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 191.583982][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 980, setting to 64 [ 191.614442][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.660975][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 191.700802][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.734018][ T10] usb 3-1: Product: syz [ 191.740040][ T10] usb 3-1: Manufacturer: syz [ 191.764136][ T10] usb 3-1: SerialNumber: syz [ 191.784777][ T10] usb 3-1: config 0 descriptor?? [ 191.801614][ T7169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.935355][ T10] rc_core: IR keymap rc-xbox-dvd not found [ 191.935371][ T10] Registered IR keymap rc-empty [ 191.937035][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 191.943690][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 192.075749][ T7169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 192.075823][ T7169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.077061][ T7169] vhci_hcd vhci_hcd.0: Device attached [ 192.255878][ T24] vhci_hcd: vhci_device speed not set [ 192.314064][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 192.953928][ T5893] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.151567][ T5893] usb 2-1: config 0 has no interfaces? [ 193.222377][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.358255][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.376856][ T5893] usb 2-1: Product: syz [ 193.387061][ T5893] usb 2-1: Manufacturer: syz [ 193.468231][ T5893] usb 2-1: SerialNumber: syz [ 193.500531][ T5893] usb 2-1: config 0 descriptor?? [ 193.940724][ T7180] vhci_hcd: connection reset by peer [ 193.949361][ T976] usb 3-1: USB disconnect, device number 15 [ 193.949361][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 193.995202][ T13] vhci_hcd: stop threads [ 194.002345][ T13] vhci_hcd: release socket [ 194.026120][ T13] vhci_hcd: disconnect device [ 194.158833][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289302][ T52] IPVS: starting estimator thread 0... [ 194.384398][ T7202] IPVS: using max 41 ests per chain, 98400 per kthread [ 194.584365][ T976] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.590553][ T7207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.615600][ T7207] xt_cluster: you have exceeded the maximum number of cluster nodes (969 > 32) [ 194.723420][ T30] audit: type=1326 audit(1743667497.079:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 194.758113][ T976] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.806584][ T30] audit: type=1326 audit(1743667497.079:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 194.835036][ T976] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.859815][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.885466][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.890117][ T30] audit: type=1326 audit(1743667497.079:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 194.921778][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.945415][ T976] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.960391][ T976] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.974207][ T976] usb 3-1: Product: syz [ 194.981963][ T976] usb 3-1: Manufacturer: syz [ 195.012350][ T30] audit: type=1326 audit(1743667497.079:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 195.014635][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 195.083009][ T976] cdc_wdm 3-1:1.0: skipping garbage [ 195.112896][ T976] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 195.119302][ T5898] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 195.129249][ T30] audit: type=1326 audit(1743667497.079:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 195.154810][ T976] cdc_wdm 3-1:1.0: Unknown control protocol [ 195.274937][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 195.281649][ T30] audit: type=1326 audit(1743667497.079:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 195.284402][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.362927][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.382444][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.391036][ T30] audit: type=1326 audit(1743667497.079:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 195.413236][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.422247][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 195.424284][ T5898] usb 5-1: Product: syz [ 195.443323][ T5898] usb 5-1: Manufacturer: syz [ 195.448512][ T5898] usb 5-1: SerialNumber: syz [ 195.470653][ T5898] usb 5-1: config 0 descriptor?? [ 195.480472][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 195.482864][ T52] usb 3-1: USB disconnect, device number 16 [ 195.487298][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 195.499121][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 195.526274][ T7201] delete_channel: no stack [ 195.606213][ T5898] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.622177][ T7213] ipt_ECN: cannot use operation on non-tcp rule [ 195.688320][ T5898] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 196.190565][ T5898] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 196.612290][ T7221] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 32 [ 196.659155][ T5898] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 196.675503][ T5898] em28xx 5-1:0.0: board has no eeprom [ 196.922760][ T5895] usb 2-1: USB disconnect, device number 20 [ 197.443944][ T24] vhci_hcd: vhci_device speed not set [ 197.757549][ T7211] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 197.833893][ T5898] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 197.844082][ T5898] em28xx 5-1:0.0: dvb set to bulk mode. [ 197.850095][ T5897] em28xx 5-1:0.0: Binding DVB extension [ 197.933890][ T976] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.048320][ T5897] em28xx 5-1:0.0: Registering input extension [ 198.083909][ T976] usb 2-1: device descriptor read/64, error -71 [ 198.130650][ T7242] kvm: pic: non byte write [ 198.326868][ T5897] usb 5-1: USB disconnect, device number 18 [ 198.334044][ T976] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 198.365381][ T5897] em28xx 5-1:0.0: Disconnecting em28xx [ 198.375179][ T5897] em28xx 5-1:0.0: Closing input extension [ 198.443637][ T5897] em28xx 5-1:0.0: Freeing device [ 198.458386][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.488873][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.504031][ T976] usb 2-1: device descriptor read/64, error -71 [ 198.637095][ T976] usb usb2-port1: attempt power cycle [ 198.684008][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 198.866954][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 198.896608][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 198.914378][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 198.945252][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.961740][ T10] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.975067][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 198.981884][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 8.00 [ 198.985055][ T976] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 198.992143][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.049311][ T10] usb 4-1: config 0 descriptor?? [ 199.074002][ T976] usb 2-1: device descriptor read/8, error -71 [ 199.101425][ T24] usb 1-1: config 0 has no interfaces? [ 199.191412][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 199.206171][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.236840][ T24] usb 1-1: Product: syz [ 199.252413][ T24] usb 1-1: Manufacturer: syz [ 199.270840][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 199.279141][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.311027][ T10] usb 4-1: USB disconnect, device number 25 [ 199.314871][ T24] usb 1-1: SerialNumber: syz [ 199.338470][ T976] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 199.649531][ T24] usb 1-1: config 0 descriptor?? [ 199.676726][ T976] usb 2-1: device descriptor read/8, error -71 [ 199.794192][ T976] usb usb2-port1: unable to enumerate USB device [ 199.945089][ T30] audit: type=1326 audit(1743667502.319:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59ab8d169 code=0x7ffc0000 [ 200.114905][ T30] audit: type=1326 audit(1743667502.339:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59ab8d169 code=0x7ffc0000 [ 200.137803][ T30] audit: type=1326 audit(1743667502.349:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd59ab8d169 code=0x7ffc0000 [ 200.160570][ T30] audit: type=1326 audit(1743667502.349:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59ab8d169 code=0x7ffc0000 [ 200.223272][ T30] audit: type=1326 audit(1743667502.349:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59ab8d169 code=0x7ffc0000 [ 200.245582][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.277947][ T7277] FAULT_INJECTION: forcing a failure. [ 200.277947][ T7277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.291367][ T7277] CPU: 0 UID: 0 PID: 7277 Comm: syz.3.382 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 200.291402][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.291419][ T7277] Call Trace: [ 200.291427][ T7277] [ 200.291436][ T7277] dump_stack_lvl+0x241/0x360 [ 200.291485][ T7277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.291513][ T7277] ? __pfx__printk+0x10/0x10 [ 200.291565][ T7277] should_fail_ex+0x424/0x570 [ 200.291600][ T7277] _copy_from_user+0x2d/0xb0 [ 200.291626][ T7277] get_user_ifreq+0xc3/0x200 [ 200.291650][ T7277] sock_ioctl+0x7b6/0x900 [ 200.291673][ T7277] ? __pfx_sock_ioctl+0x10/0x10 [ 200.291692][ T7277] ? __fget_files+0x2a/0x420 [ 200.291722][ T7277] ? __pfx_sock_ioctl+0x10/0x10 [ 200.291744][ T7277] __se_sys_ioctl+0xf1/0x160 [ 200.291770][ T7277] do_syscall_64+0xf3/0x230 [ 200.291790][ T7277] ? clear_bhb_loop+0x45/0xa0 [ 200.291813][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.291831][ T7277] RIP: 0033:0x7fb6ee18d169 [ 200.291852][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.291869][ T7277] RSP: 002b:00007fb6eef8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.291889][ T7277] RAX: ffffffffffffffda RBX: 00007fb6ee3a5fa0 RCX: 00007fb6ee18d169 [ 200.291903][ T7277] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000005 [ 200.291916][ T7277] RBP: 00007fb6eef8c090 R08: 0000000000000000 R09: 0000000000000000 [ 200.291928][ T7277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.291939][ T7277] R13: 0000000000000000 R14: 00007fb6ee3a5fa0 R15: 00007fb6ee4cfa28 [ 200.291968][ T7277] [ 200.623831][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 200.776151][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.787645][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.805561][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.834831][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.855008][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.878317][ T10] usb 3-1: config 0 descriptor?? [ 200.993879][ T5895] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 201.134684][ T5895] usb 2-1: device descriptor read/64, error -71 [ 201.332150][ T10] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 201.350439][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.383919][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 201.513880][ T5895] usb 2-1: device descriptor read/64, error -71 [ 201.597170][ T10] usb 3-1: USB disconnect, device number 17 [ 201.627429][ T5895] usb usb2-port1: attempt power cycle [ 201.627857][ T5897] usb 1-1: USB disconnect, device number 19 [ 201.821248][ T7294] sg_write: process 243 (syz.0.387) changed security contexts after opening file descriptor, this is not allowed. [ 201.843895][ T7293] sctp: [Deprecated]: syz.3.386 (pid 7293) Use of int in maxseg socket option. [ 201.843895][ T7293] Use struct sctp_assoc_value instead [ 201.877434][ T30] audit: type=1326 audit(1743667504.249:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 201.935645][ T30] audit: type=1326 audit(1743667504.249:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 201.979141][ T30] audit: type=1326 audit(1743667504.249:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 202.014437][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 202.045919][ T5895] usb 2-1: device descriptor read/8, error -71 [ 202.052083][ T30] audit: type=1326 audit(1743667504.249:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 202.083436][ T30] audit: type=1326 audit(1743667504.269:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 202.263925][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.304380][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 202.324896][ T5895] usb 2-1: device descriptor read/8, error -71 [ 202.439637][ T5895] usb usb2-port1: unable to enumerate USB device [ 202.459704][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 202.482613][ T10] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 202.491185][ T10] usb 4-1: config 0 has no interface number 0 [ 202.503481][ T10] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.523856][ T10] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 202.563835][ T10] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 202.588264][ T10] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.588365][ T5897] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 202.643849][ T10] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 202.664193][ T10] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.706285][ T10] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 202.715761][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.741436][ T10] usb 4-1: Product: syz [ 202.748766][ T10] usb 4-1: Manufacturer: syz [ 202.761662][ T10] usb 4-1: SerialNumber: syz [ 202.793853][ T5897] usb 1-1: device descriptor read/64, error -71 [ 202.844111][ T10] usb 4-1: config 0 descriptor?? [ 202.884759][ T7293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.892268][ T7293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.053837][ T5897] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 203.107472][ T10] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 203.121349][ T10] etas_es58x 4-1:0.219: could not retrieve the product info string [ 203.145964][ T10] usb 4-1: USB disconnect, device number 26 [ 203.162531][ T10] etas_es58x 4-1:0.219: Disconnecting syz syz [ 203.298191][ T5897] usb 1-1: device descriptor read/64, error -71 [ 203.428474][ T5897] usb usb1-port1: attempt power cycle [ 203.806319][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 203.815527][ T5897] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 203.856552][ T5897] usb 1-1: device descriptor read/8, error -71 [ 203.966320][ T7321] FAULT_INJECTION: forcing a failure. [ 203.966320][ T7321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.018141][ T7321] CPU: 0 UID: 0 PID: 7321 Comm: syz.1.394 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 204.018180][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.018193][ T7321] Call Trace: [ 204.018202][ T7321] [ 204.018211][ T7321] dump_stack_lvl+0x241/0x360 [ 204.018251][ T7321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.018281][ T7321] ? __pfx__printk+0x10/0x10 [ 204.018324][ T7321] should_fail_ex+0x424/0x570 [ 204.018364][ T7321] _copy_from_user+0x2d/0xb0 [ 204.018395][ T7321] ip_tunnel_parm_from_user+0xa5/0x4e0 [ 204.018428][ T7321] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 204.018458][ T7321] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.018480][ T7321] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 204.018512][ T7321] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 204.018551][ T7321] ? rcu_is_watching+0x15/0xb0 [ 204.018586][ T7321] ip_tunnel_siocdevprivate+0x9e/0x1a0 [ 204.018611][ T7321] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 204.018639][ T7321] ? full_name_hash+0x93/0xe0 [ 204.018667][ T7321] dev_ifsioc+0xc04/0x1010 [ 204.018698][ T7321] ? dev_load+0x21/0x1f0 [ 204.018725][ T7321] dev_ioctl+0x8c3/0x1380 [ 204.018754][ T7321] sock_ioctl+0x819/0x900 [ 204.018781][ T7321] ? __pfx_sock_ioctl+0x10/0x10 [ 204.018813][ T7321] ? __fget_files+0x2a/0x420 [ 204.018846][ T7321] ? __pfx_sock_ioctl+0x10/0x10 [ 204.018870][ T7321] __se_sys_ioctl+0xf1/0x160 [ 204.018898][ T7321] do_syscall_64+0xf3/0x230 [ 204.018920][ T7321] ? clear_bhb_loop+0x45/0xa0 [ 204.018945][ T7321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.018965][ T7321] RIP: 0033:0x7fdc5418d169 [ 204.018983][ T7321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.019001][ T7321] RSP: 002b:00007fdc54fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.019023][ T7321] RAX: ffffffffffffffda RBX: 00007fdc543a5fa0 RCX: 00007fdc5418d169 [ 204.019038][ T7321] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000005 [ 204.019050][ T7321] RBP: 00007fdc54fca090 R08: 0000000000000000 R09: 0000000000000000 [ 204.019064][ T7321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.019076][ T7321] R13: 0000000000000000 R14: 00007fdc543a5fa0 R15: 00007fdc544cfa28 [ 204.019107][ T7321] [ 204.488564][ T5897] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 204.582013][ T5897] usb 1-1: device descriptor read/8, error -71 [ 204.694831][ T5897] usb usb1-port1: unable to enumerate USB device [ 204.913252][ T7335] fuse: Bad value for 'group_id' [ 204.918799][ T7335] fuse: Bad value for 'group_id' [ 205.224545][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 205.234392][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 205.259912][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.279478][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.391997][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 205.392012][ T30] audit: type=1326 audit(1743667507.759:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.430834][ T30] audit: type=1326 audit(1743667507.799:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.465737][ T30] audit: type=1326 audit(1743667507.839:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.513829][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 205.585009][ T30] audit: type=1326 audit(1743667507.839:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.687776][ T30] audit: type=1326 audit(1743667507.919:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.714762][ T30] audit: type=1326 audit(1743667507.919:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.739656][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.750908][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.760416][ T30] audit: type=1326 audit(1743667507.919:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.784033][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.793113][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.801252][ T5895] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 205.845082][ T10] usb 3-1: SerialNumber: syz [ 205.860345][ T30] audit: type=1326 audit(1743667507.919:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 205.964020][ T30] audit: type=1326 audit(1743667507.999:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6a529359 code=0x7ffc0000 [ 206.041687][ T7351] trusted_key: syz.3.403 sent an empty control message without MSG_MORE. [ 206.062871][ T30] audit: type=1326 audit(1743667507.999:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac6a529359 code=0x7ffc0000 [ 206.108885][ T10] usb 3-1: 0:2 : does not exist [ 206.127271][ T10] usb 3-1: unit 5 not found! [ 206.147069][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 206.187947][ T10] usb 3-1: USB disconnect, device number 18 [ 206.408348][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.624047][ T5893] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 206.748504][ T7359] FAULT_INJECTION: forcing a failure. [ 206.748504][ T7359] name failslab, interval 1, probability 0, space 0, times 1 [ 206.796504][ T5893] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 206.812666][ T5893] usb 2-1: config 0 has no interface number 0 [ 206.821661][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.4.406 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 206.821692][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.821705][ T7359] Call Trace: [ 206.821713][ T7359] [ 206.821722][ T7359] dump_stack_lvl+0x241/0x360 [ 206.821759][ T7359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.821789][ T7359] ? __pfx__printk+0x10/0x10 [ 206.821822][ T7359] ? __pfx___might_resched+0x10/0x10 [ 206.821853][ T7359] should_fail_ex+0x424/0x570 [ 206.821893][ T7359] should_failslab+0xac/0x100 [ 206.821924][ T7359] __kmalloc_noprof+0xdf/0x4d0 [ 206.821955][ T7359] ? unregister_netdevice_many_notify+0x819/0x2510 [ 206.821985][ T7359] unregister_netdevice_many_notify+0x819/0x2510 [ 206.822021][ T7359] ? stack_trace_save+0x11a/0x1d0 [ 206.822060][ T7359] ? __pfx_stack_trace_save+0x10/0x10 [ 206.822089][ T7359] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 206.822113][ T7359] ? stack_depot_save_flags+0x44/0x940 [ 206.822142][ T7359] ? aa_get_newest_label+0x101/0x6f0 [ 206.822176][ T7359] ? __pfx_aa_get_newest_label+0x10/0x10 [ 206.822210][ T7359] unregister_netdevice_queue+0x383/0x400 [ 206.822236][ T7359] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 206.822259][ T7359] ? bpf_lsm_capable+0x9/0x10 [ 206.822310][ T7359] ip_tunnel_ctl+0x1f6/0xc40 [ 206.822341][ T7359] ? ip_tunnel_parm_from_user+0x313/0x4e0 [ 206.822382][ T7359] vti_tunnel_ctl+0x423/0x530 [ 206.822415][ T7359] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 206.822440][ T7359] ? rcu_is_watching+0x15/0xb0 [ 206.822475][ T7359] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 206.822500][ T7359] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 206.822529][ T7359] ? full_name_hash+0x93/0xe0 [ 206.822559][ T7359] dev_ifsioc+0xc04/0x1010 [ 206.822590][ T7359] ? dev_load+0x21/0x1f0 [ 206.822616][ T7359] dev_ioctl+0x8c3/0x1380 [ 206.822646][ T7359] sock_ioctl+0x819/0x900 [ 206.822674][ T7359] ? __pfx_sock_ioctl+0x10/0x10 [ 206.822694][ T7359] ? __fget_files+0x2a/0x420 [ 206.822729][ T7359] ? __pfx_sock_ioctl+0x10/0x10 [ 206.822754][ T7359] __se_sys_ioctl+0xf1/0x160 [ 206.822783][ T7359] do_syscall_64+0xf3/0x230 [ 206.822806][ T7359] ? clear_bhb_loop+0x45/0xa0 [ 206.822832][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.822852][ T7359] RIP: 0033:0x7f420b78d169 [ 206.822871][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.822889][ T7359] RSP: 002b:00007f420c564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.822913][ T7359] RAX: ffffffffffffffda RBX: 00007f420b9a5fa0 RCX: 00007f420b78d169 [ 206.822928][ T7359] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000005 [ 206.822942][ T7359] RBP: 00007f420c564090 R08: 0000000000000000 R09: 0000000000000000 [ 206.822956][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.822968][ T7359] R13: 0000000000000000 R14: 00007f420b9a5fa0 R15: 00007f420bacfa28 [ 206.823000][ T7359] [ 206.824047][ T5893] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 207.133702][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.153576][ T5893] usb 2-1: Product: syz [ 207.158802][ T5893] usb 2-1: Manufacturer: syz [ 207.167743][ T5893] usb 2-1: SerialNumber: syz [ 207.202506][ T5893] usb 2-1: config 0 descriptor?? [ 207.253931][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 207.404021][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 207.411868][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 207.424020][ T10] usb 3-1: config 0 has no interface number 0 [ 207.440441][ T24] usb 2-1: USB disconnect, device number 29 [ 207.446779][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 207.476144][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 207.486857][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.495233][ T10] usb 3-1: Product: syz [ 207.499421][ T10] usb 3-1: Manufacturer: syz [ 207.504944][ T10] usb 3-1: SerialNumber: syz [ 207.522833][ T10] usb 3-1: config 0 descriptor?? [ 207.724401][ T7369] FAULT_INJECTION: forcing a failure. [ 207.724401][ T7369] name failslab, interval 1, probability 0, space 0, times 0 [ 207.740300][ T7369] CPU: 1 UID: 0 PID: 7369 Comm: syz.0.410 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 207.740327][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.740339][ T7369] Call Trace: [ 207.740346][ T7369] [ 207.740353][ T7369] dump_stack_lvl+0x241/0x360 [ 207.740387][ T7369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.740416][ T7369] ? __pfx__printk+0x10/0x10 [ 207.740446][ T7369] ? __pfx___might_resched+0x10/0x10 [ 207.740473][ T7369] should_fail_ex+0x424/0x570 [ 207.740507][ T7369] should_failslab+0xac/0x100 [ 207.740535][ T7369] __kmalloc_noprof+0xdf/0x4d0 [ 207.740560][ T7369] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 207.740586][ T7369] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 207.740617][ T7369] tomoyo_realpath_from_path+0xcf/0x5e0 [ 207.740665][ T7369] tomoyo_path_number_perm+0x245/0x790 [ 207.740687][ T7369] ? look_up_lock_class+0x7b/0x170 [ 207.740708][ T7369] ? tomoyo_path_number_perm+0x215/0x790 [ 207.740733][ T7369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.740757][ T7369] ? __lock_acquire+0xad5/0xd80 [ 207.740779][ T7369] ? do_raw_spin_lock+0x151/0x370 [ 207.740840][ T7369] ? __pfx_current_check_access_path+0x10/0x10 [ 207.740865][ T7369] ? lookup_one_qstr_excl+0x1de/0x3a0 [ 207.740887][ T7369] tomoyo_path_mknod+0x178/0x1c0 [ 207.740904][ T7369] ? __lock_acquire+0xad5/0xd80 [ 207.740924][ T7369] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 207.740943][ T7369] ? __pfx_filename_create+0x10/0x10 [ 207.740972][ T7369] security_path_mknod+0x181/0x3a0 [ 207.741004][ T7369] do_mknodat+0x2b9/0x600 [ 207.741028][ T7369] ? __pfx_do_mknodat+0x10/0x10 [ 207.741050][ T7369] ? getname_flags+0x1e2/0x530 [ 207.741080][ T7369] __x64_sys_mknod+0x8c/0xa0 [ 207.741104][ T7369] do_syscall_64+0xf3/0x230 [ 207.741124][ T7369] ? clear_bhb_loop+0x45/0xa0 [ 207.741146][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.741164][ T7369] RIP: 0033:0x7fac6a58d169 [ 207.741180][ T7369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.741195][ T7369] RSP: 002b:00007fac683f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 207.741215][ T7369] RAX: ffffffffffffffda RBX: 00007fac6a7a5fa0 RCX: 00007fac6a58d169 [ 207.741229][ T7369] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000200000000040 [ 207.741241][ T7369] RBP: 00007fac683f6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.741252][ T7369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.741263][ T7369] R13: 0000000000000000 R14: 00007fac6a7a5fa0 R15: 00007fac6a8cfa28 [ 207.741293][ T7369] [ 207.741302][ T7369] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.084098][ T5891] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 208.124969][ T7372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.255178][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.286611][ T5891] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 208.309176][ T5891] usb 5-1: config 7 has no interface number 0 [ 208.335064][ T5891] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 208.348814][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.357516][ T5891] usb 5-1: Product: 㯑 [ 208.844888][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 209.026358][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.055984][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.077682][ T24] usb 1-1: Product: syz [ 209.087812][ T24] usb 1-1: Manufacturer: syz [ 209.100797][ T24] usb 1-1: SerialNumber: syz [ 209.206863][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.293893][ T976] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.373534][ T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 209.383325][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 209.425189][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 209.448137][ T7398] FAULT_INJECTION: forcing a failure. [ 209.448137][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 209.451303][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 209.463259][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.3.418 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 209.463285][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.463298][ T7398] Call Trace: [ 209.463305][ T7398] [ 209.463313][ T7398] dump_stack_lvl+0x241/0x360 [ 209.463349][ T7398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.463381][ T7398] ? __pfx__printk+0x10/0x10 [ 209.463406][ T7398] ? unregister_netdevice_queue+0x383/0x400 [ 209.463430][ T7398] ? __pfx___might_resched+0x10/0x10 [ 209.463459][ T7398] should_fail_ex+0x424/0x570 [ 209.463495][ T7398] should_failslab+0xac/0x100 [ 209.463523][ T7398] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 209.463550][ T7398] ? __alloc_skb+0x1c2/0x480 [ 209.463581][ T7398] __alloc_skb+0x1c2/0x480 [ 209.463714][ T7398] ? __pfx___alloc_skb+0x10/0x10 [ 209.463747][ T7398] ? lockdep_hardirqs_on+0x9d/0x150 [ 209.463777][ T7398] inet_netconf_notify_devconf+0x15a/0x220 [ 209.463812][ T7398] inetdev_event+0x855/0x1740 [ 209.463860][ T7398] ? __pfx_inetdev_event+0x10/0x10 [ 209.463900][ T7398] notifier_call_chain+0x1a5/0x3f0 [ 209.463934][ T7398] unregister_netdevice_many_notify+0x1572/0x2510 [ 209.463979][ T7398] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 209.464003][ T7398] ? stack_depot_save_flags+0x44/0x940 [ 209.464033][ T7398] ? aa_get_newest_label+0x101/0x6f0 [ 209.464066][ T7398] ? __pfx_aa_get_newest_label+0x10/0x10 [ 209.464101][ T7398] unregister_netdevice_queue+0x383/0x400 [ 209.464125][ T7398] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 209.464149][ T7398] ? bpf_lsm_capable+0x9/0x10 [ 209.464185][ T7398] ip_tunnel_ctl+0x1f6/0xc40 [ 209.464215][ T7398] ? ip_tunnel_parm_from_user+0x313/0x4e0 [ 209.464252][ T7398] vti_tunnel_ctl+0x423/0x530 [ 209.464283][ T7398] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 209.464306][ T7398] ? rcu_is_watching+0x15/0xb0 [ 209.464339][ T7398] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 209.464363][ T7398] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 209.464390][ T7398] ? full_name_hash+0x93/0xe0 [ 209.464417][ T7398] dev_ifsioc+0xc04/0x1010 [ 209.464446][ T7398] ? dev_load+0x21/0x1f0 [ 209.464472][ T7398] dev_ioctl+0x8c3/0x1380 [ 209.464500][ T7398] sock_ioctl+0x819/0x900 [ 209.464525][ T7398] ? __pfx_sock_ioctl+0x10/0x10 [ 209.464545][ T7398] ? __fget_files+0x2a/0x420 [ 209.464577][ T7398] ? __pfx_sock_ioctl+0x10/0x10 [ 209.464600][ T7398] __se_sys_ioctl+0xf1/0x160 [ 209.464627][ T7398] do_syscall_64+0xf3/0x230 [ 209.464648][ T7398] ? clear_bhb_loop+0x45/0xa0 [ 209.464673][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.464711][ T7398] RIP: 0033:0x7fb6ee18d169 [ 209.464731][ T7398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.464751][ T7398] RSP: 002b:00007fb6eef8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.464773][ T7398] RAX: ffffffffffffffda RBX: 00007fb6ee3a5fa0 RCX: 00007fb6ee18d169 [ 209.464790][ T7398] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000005 [ 209.464804][ T7398] RBP: 00007fb6eef8c090 R08: 0000000000000000 R09: 0000000000000000 [ 209.464817][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.464830][ T7398] R13: 0000000000000000 R14: 00007fb6ee3a5fa0 R15: 00007fb6ee4cfa28 [ 209.464871][ T7398] [ 210.137793][ T5891] usb 5-1: USB disconnect, device number 19 [ 210.174003][ T24] usb 1-1: USB disconnect, device number 25 [ 210.357041][ T10] usb 3-1: USB disconnect, device number 19 [ 210.414062][ T976] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 210.422190][ T976] ath9k_htc: Failed to initialize the device [ 210.456055][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 210.494040][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 211.148899][ T7433] xt_socket: unknown flags 0x4 [ 211.746325][ T7437] loop2: detected capacity change from 0 to 7 [ 211.812159][ T7439] netlink: 'syz.1.427': attribute type 3 has an invalid length. [ 211.905179][ T7437] Dev loop2: unable to read RDB block 7 [ 211.911456][ T7437] loop2: unable to read partition table [ 211.917384][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 211.923693][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 211.930072][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.937145][ T5152] Bluetooth: hci4: command 0x0406 tx timeout [ 211.947085][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 211.965488][ T7437] loop2: partition table beyond EOD, truncated [ 211.983500][ T7437] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.373989][ T976] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 212.663834][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 212.670944][ T976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.748258][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.833029][ T976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.873015][ T976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.003071][ T976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.070702][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.224020][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 213.375436][ T976] usb 5-1: GET_CAPABILITIES returned 0 [ 213.380999][ T976] usbtmc 5-1:16.0: can't read capabilities [ 213.472482][ T24] usb 2-1: config 0 has no interfaces? [ 213.506597][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 213.527194][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.554599][ T24] usb 2-1: Product: syz [ 213.577417][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.588318][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.598822][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.607898][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.616989][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.626148][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.701804][ T24] usb 2-1: Manufacturer: syz [ 213.708726][ T24] usb 2-1: SerialNumber: syz [ 213.763896][ T976] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 213.775592][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.784666][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.793727][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.802828][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.811878][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.821609][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.830679][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.839735][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.848808][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.857853][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 213.881769][ T5891] usb 5-1: USB disconnect, device number 20 [ 213.975768][ T24] usb 2-1: config 0 descriptor?? [ 214.235452][ T976] usb 1-1: config 0 has no interfaces? [ 214.265532][ T976] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 214.354407][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.404787][ T976] usb 1-1: Product: syz [ 214.408996][ T976] usb 1-1: Manufacturer: syz [ 214.413587][ T976] usb 1-1: SerialNumber: syz [ 214.502470][ T976] usb 1-1: config 0 descriptor?? [ 214.624650][ T5891] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 214.793935][ T5891] usb 3-1: device descriptor read/64, error -71 [ 215.094844][ T5891] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 215.234147][ T5891] usb 3-1: device descriptor read/64, error -71 [ 215.383307][ T5891] usb usb3-port1: attempt power cycle [ 215.503847][ T976] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 215.669676][ T976] usb 5-1: config 0 has no interfaces? [ 215.677058][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 215.691924][ T976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 215.702037][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.743933][ T5891] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 215.761460][ T976] usb 5-1: Product: syz [ 215.775970][ T5891] usb 3-1: device descriptor read/8, error -71 [ 215.812019][ T976] usb 5-1: Manufacturer: syz [ 215.853382][ T976] usb 5-1: SerialNumber: syz [ 215.859267][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 215.878616][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.905132][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.932099][ T976] usb 5-1: config 0 descriptor?? [ 215.943709][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 215.955382][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.971489][ T24] usb 4-1: config 0 descriptor?? [ 216.023966][ T5891] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 216.073617][ T5891] usb 3-1: device descriptor read/8, error -71 [ 216.305035][ T5891] usb usb3-port1: unable to enumerate USB device [ 216.522167][ T5891] usb 1-1: USB disconnect, device number 26 [ 216.740194][ T976] usb 2-1: USB disconnect, device number 30 [ 217.037624][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.442'. [ 217.050210][ T7484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.442'. [ 217.062158][ T7484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.442'. [ 217.343013][ T7497] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 217.351683][ T7497] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 217.390172][ T7497] netlink: 'syz.1.445': attribute type 29 has an invalid length. [ 217.562386][ T7503] FAULT_INJECTION: forcing a failure. [ 217.562386][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.576727][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.1.446 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 217.576756][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.576768][ T7503] Call Trace: [ 217.576780][ T7503] [ 217.576788][ T7503] dump_stack_lvl+0x241/0x360 [ 217.576825][ T7503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.576853][ T7503] ? __pfx__printk+0x10/0x10 [ 217.576893][ T7503] should_fail_ex+0x424/0x570 [ 217.576930][ T7503] _copy_to_user+0x31/0xb0 [ 217.576959][ T7503] simple_read_from_buffer+0xc4/0x170 [ 217.576992][ T7503] proc_fail_nth_read+0x1ef/0x260 [ 217.577016][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.577041][ T7503] ? rw_verify_area+0x246/0x630 [ 217.577062][ T7503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.577084][ T7503] vfs_read+0x21f/0xb90 [ 217.577113][ T7503] ? __pfx___mutex_lock+0x10/0x10 [ 217.577135][ T7503] ? __pfx_vfs_read+0x10/0x10 [ 217.577162][ T7503] ? __fget_files+0x2a/0x420 [ 217.577182][ T7503] ? __fget_files+0x39d/0x420 [ 217.577198][ T7503] ? __fget_files+0x2a/0x420 [ 217.577226][ T7503] ksys_read+0x19d/0x2d0 [ 217.577251][ T7503] ? __pfx_ksys_read+0x10/0x10 [ 217.577286][ T7503] ? do_syscall_64+0xb6/0x230 [ 217.577311][ T7503] do_syscall_64+0xf3/0x230 [ 217.577331][ T7503] ? clear_bhb_loop+0x45/0xa0 [ 217.577355][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.577374][ T7503] RIP: 0033:0x7fdc5418bb7c [ 217.577391][ T7503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.577409][ T7503] RSP: 002b:00007fdc54fca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.577431][ T7503] RAX: ffffffffffffffda RBX: 00007fdc543a5fa0 RCX: 00007fdc5418bb7c [ 217.577446][ T7503] RDX: 000000000000000f RSI: 00007fdc54fca0a0 RDI: 0000000000000005 [ 217.577458][ T7503] RBP: 00007fdc54fca090 R08: 0000000000000000 R09: 0000000000000000 [ 217.577470][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.577481][ T7503] R13: 0000000000000000 R14: 00007fdc543a5fa0 R15: 00007fdc544cfa28 [ 217.577513][ T7503] [ 218.354010][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 218.382317][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 218.395476][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 218.412991][ T7495] netlink: 'syz.0.443': attribute type 15 has an invalid length. [ 218.519636][ T10] usb 3-1: config 0 has no interfaces? [ 218.533570][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.562858][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.630116][ T10] usb 3-1: Product: syz [ 218.691598][ T10] usb 3-1: Manufacturer: syz [ 218.715905][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 218.728623][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 218.782779][ T10] usb 3-1: SerialNumber: syz [ 218.817908][ T10] usb 3-1: config 0 descriptor?? [ 218.818772][ T24] usb 4-1: USB disconnect, device number 27 [ 218.901648][ T976] usb 5-1: USB disconnect, device number 21 [ 218.982276][ T7516] syzkaller1: entered promiscuous mode [ 218.988009][ T30] kauditd_printk_skb: 1384 callbacks suppressed [ 218.988121][ T30] audit: type=1326 audit(1743667521.349:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 219.063943][ T7516] syzkaller1: entered allmulticast mode [ 219.115406][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 219.141489][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 219.180979][ T30] audit: type=1326 audit(1743667521.419:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 219.240367][ T30] audit: type=1326 audit(1743667521.419:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 219.339426][ T30] audit: type=1326 audit(1743667521.419:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 219.543965][ T30] audit: type=1326 audit(1743667521.429:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 219.698466][ T30] audit: type=1800 audit(1743667522.059:2045): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.454" name="bus" dev="tmpfs" ino=526 res=0 errno=0 [ 219.933953][ T5898] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 220.102792][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 220.112024][ T5898] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 220.135840][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.182827][ T5898] usb 2-1: can't read configurations, error -61 [ 220.289133][ T7536] netlink: 96 bytes leftover after parsing attributes in process `syz.0.458'. [ 220.323877][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.363936][ T5898] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 220.474051][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 220.483700][ T24] usb 5-1: config 53 has an invalid interface number: 240 but max is 0 [ 220.496543][ T24] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 220.507069][ T24] usb 5-1: config 53 has no interface number 0 [ 220.513285][ T24] usb 5-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 220.525299][ T976] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 220.532873][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 220.543518][ T5898] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 220.553560][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.571891][ T5898] usb 2-1: can't read configurations, error -61 [ 220.578469][ T24] usb 5-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 220.592984][ T5898] usb usb2-port1: attempt power cycle [ 220.610004][ T24] usb 5-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 220.628330][ T24] usb 5-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0x1F, changing to 0xF [ 220.645931][ T24] usb 5-1: config 53 interface 240 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 220.660458][ T24] usb 5-1: config 53 interface 240 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 220.681482][ T24] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89 [ 220.690658][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.702954][ T24] usb 5-1: Product: syz [ 220.707332][ T976] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.719257][ T976] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.731244][ T24] usb 5-1: Manufacturer: syz [ 220.736301][ T24] usb 5-1: SerialNumber: syz [ 220.741164][ T976] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.755162][ T976] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 220.764454][ T976] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 220.776156][ T976] usb 4-1: Manufacturer: syz [ 220.781224][ T7528] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 220.789424][ T976] usb 4-1: SerialNumber: syz [ 220.934983][ T5898] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 220.994212][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 221.028304][ T976] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 221.060841][ T5898] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 221.072015][ T976] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input21 [ 221.111145][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 221.138576][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.145604][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.152424][ T5898] usb 2-1: can't read configurations, error -61 [ 221.158703][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.165572][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.172385][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.179266][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.186094][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.192893][ C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 221.192906][ C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 221.268603][ T976] usb 4-1: USB disconnect, device number 28 [ 221.284128][ T24] kvaser_usb 5-1:53.240: error -ENODEV: Cannot get usb endpoint(s) [ 221.339966][ T24] usb 5-1: USB disconnect, device number 22 [ 221.353896][ T5898] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 221.379088][ T30] audit: type=1326 audit(1743667523.749:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 221.381304][ T5893] usb 3-1: USB disconnect, device number 24 [ 221.419076][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 221.440867][ T5898] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 221.480550][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 221.507397][ T5898] usb 2-1: can't read configurations, error -61 [ 221.516452][ T30] audit: type=1326 audit(1743667523.779:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 221.550716][ T5898] usb usb2-port1: unable to enumerate USB device [ 221.606573][ T30] audit: type=1326 audit(1743667523.779:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 221.715461][ T30] audit: type=1326 audit(1743667523.779:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.4.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 221.963905][ T5893] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 222.038309][ T7561] netlink: 44 bytes leftover after parsing attributes in process `syz.4.463'. [ 222.051784][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 222.062725][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 222.123953][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 222.139836][ T5893] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 222.311109][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 222.318854][ T5893] usb 3-1: config 0 has no interface number 1 [ 222.329604][ T5893] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 222.340123][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.380979][ T5893] usb 3-1: config 0 descriptor?? [ 222.496673][ T10] usb 4-1: config 0 has no interfaces? [ 222.506650][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 222.516347][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.524814][ T10] usb 4-1: Product: syz [ 222.536773][ T10] usb 4-1: Manufacturer: syz [ 222.543246][ T10] usb 4-1: SerialNumber: syz [ 222.557118][ T10] usb 4-1: config 0 descriptor?? [ 222.605430][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 222.619676][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 222.696645][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.708781][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.963709][ T5893] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 223.168862][ T5893] usb 3-1: USB disconnect, device number 25 [ 223.176915][ T5893] qcserial 3-1:0.2: device disconnected [ 223.202406][ T7575] input: syz0 as /devices/virtual/input/input22 [ 223.604083][ T976] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 223.914189][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.941101][ T976] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.955556][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.994727][ T976] usb 5-1: config 0 descriptor?? [ 224.163885][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 224.208654][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 224.227659][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 224.253002][ T976] usb 5-1: USB disconnect, device number 23 [ 224.318238][ T5893] usb 1-1: config 0 has no interfaces? [ 224.340629][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.356342][ T5898] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 224.363912][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.363939][ T5893] usb 1-1: Product: syz [ 224.363955][ T5893] usb 1-1: Manufacturer: syz [ 224.363970][ T5893] usb 1-1: SerialNumber: syz [ 224.366940][ T5893] usb 1-1: config 0 descriptor?? [ 224.391542][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 224.543890][ T10] usb 2-1: device descriptor read/64, error -71 [ 224.544143][ T5898] usb 3-1: device descriptor read/64, error -71 [ 224.760912][ T5893] usb 4-1: USB disconnect, device number 29 [ 224.774633][ T976] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 224.794159][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 224.804141][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 224.943946][ T5898] usb 3-1: device descriptor read/64, error -71 [ 224.952241][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.966330][ T976] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.980186][ T10] usb 2-1: device descriptor read/64, error -71 [ 224.980192][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.002296][ T976] usb 5-1: config 0 descriptor?? [ 225.065569][ T5898] usb usb3-port1: attempt power cycle [ 225.114894][ T10] usb usb2-port1: attempt power cycle [ 225.462568][ T5898] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 225.535767][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 225.575218][ T10] usb 2-1: device descriptor read/8, error -71 [ 225.588350][ T5898] usb 3-1: device descriptor read/8, error -71 [ 225.845491][ T5898] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 225.864062][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 225.918316][ T10] usb 2-1: device descriptor read/8, error -71 [ 225.930584][ T5898] usb 3-1: device descriptor read/8, error -71 [ 226.035874][ T10] usb usb2-port1: unable to enumerate USB device [ 226.054842][ T5898] usb usb3-port1: unable to enumerate USB device [ 226.735542][ T5897] usb 1-1: USB disconnect, device number 27 [ 226.971660][ T7599] syzkaller0: entered promiscuous mode [ 226.977474][ T7599] syzkaller0: entered allmulticast mode [ 227.159769][ T7578] syz.4.469 (7578): drop_caches: 2 [ 227.319886][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 227.357851][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 227.388365][ T976] usb 5-1: USB disconnect, device number 24 [ 227.413318][ T7604] netlink: 80 bytes leftover after parsing attributes in process `syz.1.477'. [ 229.364059][ T5891] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 229.523939][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 229.536677][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.608570][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.051862][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 230.063690][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 230.092567][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 230.118277][ T5891] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 230.130247][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.150018][ T5891] hub 4-1:1.0: bad descriptor, ignoring hub [ 230.183269][ T5891] hub 4-1:1.0: probe with driver hub failed with error -5 [ 230.202001][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 230.215002][ T7611] FAULT_INJECTION: forcing a failure. [ 230.215002][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 230.233881][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 230.249477][ T5891] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 230.267310][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.1.479 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 230.267338][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.267349][ T7611] Call Trace: [ 230.267357][ T7611] [ 230.267365][ T7611] dump_stack_lvl+0x241/0x360 [ 230.267401][ T7611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.267427][ T7611] ? __pfx__printk+0x10/0x10 [ 230.267452][ T7611] ? unregister_netdevice_many_notify+0x1572/0x2510 [ 230.267479][ T7611] ? __pfx___might_resched+0x10/0x10 [ 230.267506][ T7611] should_fail_ex+0x424/0x570 [ 230.267555][ T7611] should_failslab+0xac/0x100 [ 230.267602][ T7611] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 230.267632][ T7611] ? __alloc_skb+0x1c2/0x480 [ 230.267666][ T7611] __alloc_skb+0x1c2/0x480 [ 230.267702][ T7611] ? __pfx___alloc_skb+0x10/0x10 [ 230.267732][ T7611] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.267762][ T7611] inet6_netconf_notify_devconf+0xfc/0x1c0 [ 230.267798][ T7611] addrconf_ifdown+0x17c4/0x1b10 [ 230.267833][ T7611] ? __pfx_addrconf_ifdown+0x10/0x10 [ 230.267852][ T7611] ? tls_dev_event+0x8f8/0x10c0 [ 230.267903][ T7611] addrconf_notify+0x3cb/0x1020 [ 230.267936][ T7611] notifier_call_chain+0x1a5/0x3f0 [ 230.267969][ T7611] unregister_netdevice_many_notify+0x1572/0x2510 [ 230.268016][ T7611] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 230.268045][ T7611] ? finish_task_switch+0x1e5/0x870 [ 230.268063][ T7611] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.268086][ T7611] ? aa_get_newest_label+0x101/0x6f0 [ 230.268121][ T7611] ? __pfx_aa_get_newest_label+0x10/0x10 [ 230.268157][ T7611] unregister_netdevice_queue+0x383/0x400 [ 230.268184][ T7611] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 230.268208][ T7611] ? bpf_lsm_capable+0x9/0x10 [ 230.268243][ T7611] ip_tunnel_ctl+0x1f6/0xc40 [ 230.268273][ T7611] ? ip_tunnel_parm_from_user+0x313/0x4e0 [ 230.268312][ T7611] vti_tunnel_ctl+0x423/0x530 [ 230.268333][ T7611] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 230.268362][ T7611] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.268390][ T7611] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 230.268414][ T7611] ? rcu_is_watching+0x15/0xb0 [ 230.268448][ T7611] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 230.268471][ T7611] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 230.268499][ T7611] ? full_name_hash+0x93/0xe0 [ 230.268536][ T7611] dev_ifsioc+0xc04/0x1010 [ 230.268567][ T7611] ? dev_load+0x21/0x1f0 [ 230.268594][ T7611] dev_ioctl+0x8c3/0x1380 [ 230.268623][ T7611] sock_ioctl+0x819/0x900 [ 230.268649][ T7611] ? __pfx_sock_ioctl+0x10/0x10 [ 230.268670][ T7611] ? __fget_files+0x2a/0x420 [ 230.268704][ T7611] ? __pfx_sock_ioctl+0x10/0x10 [ 230.268728][ T7611] __se_sys_ioctl+0xf1/0x160 [ 230.268755][ T7611] do_syscall_64+0xf3/0x230 [ 230.268789][ T7611] ? clear_bhb_loop+0x45/0xa0 [ 230.268813][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.268832][ T7611] RIP: 0033:0x7fdc5418d169 [ 230.268850][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.268867][ T7611] RSP: 002b:00007fdc54fa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.268889][ T7611] RAX: ffffffffffffffda RBX: 00007fdc543a6080 RCX: 00007fdc5418d169 [ 230.268903][ T7611] RDX: 0000200000000180 RSI: 00000000000089f2 RDI: 0000000000000005 [ 230.268916][ T7611] RBP: 00007fdc54fa9090 R08: 0000000000000000 R09: 0000000000000000 [ 230.268928][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.268939][ T7611] R13: 0000000000000001 R14: 00007fdc543a6080 R15: 00007fdc544cfa28 [ 230.268970][ T7611] [ 230.785400][ T5897] usb 4-1: USB disconnect, device number 30 [ 231.094063][ T5898] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 231.214424][ T5891] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 231.233878][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 231.318865][ T5898] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 231.442372][ T5897] usb 1-1: config 0 has no interfaces? [ 231.452089][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.480145][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 231.504515][ T5891] usb 2-1: not running at top speed; connect to a high speed hub [ 231.522974][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.537212][ T5891] usb 2-1: config 7 has an invalid interface number: 246 but max is 0 [ 231.552609][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.562916][ T5898] usb 3-1: config 0 descriptor?? [ 231.569052][ T5891] usb 2-1: config 7 has no interface number 0 [ 231.591651][ T5897] usb 1-1: Product: syz [ 231.596000][ T5897] usb 1-1: Manufacturer: syz [ 231.600839][ T5897] usb 1-1: SerialNumber: syz [ 231.605432][ T5891] usb 2-1: config 7 interface 246 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 231.605476][ T5891] usb 2-1: config 7 interface 246 has no altsetting 0 [ 231.621409][ T5897] usb 1-1: config 0 descriptor?? [ 231.681947][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 231.765025][ T5891] usb 2-1: New USB device found, idVendor=24c6, idProduct=ad0e, bcdDevice=9d.4c [ 231.776961][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.798128][ T5898] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 231.815362][ T5891] usb 2-1: Product: syz [ 231.823590][ T5891] usb 2-1: Manufacturer: syz [ 231.883960][ T5891] usb 2-1: SerialNumber: syz [ 231.912798][ T7633] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 231.955700][ T10] usb 5-1: config 0 has no interfaces? [ 231.968315][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 232.015033][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.028441][ T10] usb 5-1: Product: syz [ 232.037172][ T10] usb 5-1: Manufacturer: syz [ 232.053414][ T10] usb 5-1: SerialNumber: syz [ 232.061347][ T5895] usb 3-1: USB disconnect, device number 30 [ 232.149718][ T7646] netlink: 'syz.2.487': attribute type 5 has an invalid length. [ 232.159296][ T10] usb 5-1: config 0 descriptor?? [ 232.203153][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.214741][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.227767][ T5893] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 232.455944][ T5893] usb 4-1: device descriptor read/64, error -71 [ 232.510658][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.519759][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.865249][ T5893] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 232.976533][ T5891] usb 2-1: USB disconnect, device number 39 [ 233.033908][ T5893] usb 4-1: device descriptor read/64, error -71 [ 233.164421][ T5893] usb usb4-port1: attempt power cycle [ 233.779247][ T5893] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 233.915744][ T5893] usb 4-1: device descriptor read/8, error -71 [ 234.153896][ T5893] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 234.184575][ T5893] usb 4-1: device descriptor read/8, error -71 [ 234.294291][ T5893] usb usb4-port1: unable to enumerate USB device [ 234.448084][ T5893] usb 5-1: USB disconnect, device number 25 [ 234.513901][ T5891] usb 1-1: USB disconnect, device number 28 [ 235.204077][ T5897] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 235.323944][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 235.430366][ T5897] usb 1-1: config 0 has no interfaces? [ 235.556624][ T5898] usb 4-1: config 0 has no interfaces? [ 235.610727][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.713843][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.817492][ T5898] usb 4-1: Product: syz [ 235.857089][ T5898] usb 4-1: Manufacturer: syz [ 235.861762][ T5898] usb 4-1: SerialNumber: syz [ 235.897956][ T5897] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.926447][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.941424][ T5898] usb 4-1: config 0 descriptor?? [ 235.969956][ T5897] usb 1-1: Product: syz [ 235.989989][ T5897] usb 1-1: Manufacturer: syz [ 236.005861][ T5897] usb 1-1: SerialNumber: syz [ 236.074024][ T5897] usb 1-1: config 0 descriptor?? [ 236.207643][ T7678] netlink: 56 bytes leftover after parsing attributes in process `syz.3.494'. [ 236.313933][ T5897] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 236.663494][ T5897] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 236.714472][ T5897] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 236.750490][ T7687] netlink: 18 bytes leftover after parsing attributes in process `syz.2.496'. [ 236.793494][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.859624][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.885018][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.938383][ T5897] usb 2-1: Product: syz [ 236.947113][ T5897] usb 2-1: Manufacturer: syz [ 236.962210][ T5897] usb 2-1: SerialNumber: syz [ 237.605426][ T5897] usb 2-1: 0:2 : does not exist [ 237.709051][ T5897] usb 2-1: USB disconnect, device number 40 [ 237.868919][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 237.868938][ T30] audit: type=1326 audit(1743667540.229:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 237.912102][ T7699] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 238.025992][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.042282][ T7699] audit: out of memory in audit_log_start [ 238.060681][ T30] audit: type=1326 audit(1743667540.239:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 238.159003][ T30] audit: type=1326 audit(1743667540.279:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc5418bad0 code=0x7ffc0000 [ 238.239532][ T30] audit: type=1326 audit(1743667540.279:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc5418bc1f code=0x7ffc0000 [ 238.330366][ T30] audit: type=1326 audit(1743667540.279:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 238.638516][ T30] audit: type=1326 audit(1743667540.479:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc5418bc1f code=0x7ffc0000 [ 238.749439][ T30] audit: type=1326 audit(1743667540.479:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc5418bdca code=0x7ffc0000 [ 238.874793][ T30] audit: type=1326 audit(1743667540.479:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5418d169 code=0x7ffc0000 [ 239.102648][ T5891] usb 1-1: USB disconnect, device number 29 [ 239.333936][ T5893] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 239.503834][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 239.532450][ T5893] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 239.558072][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.568559][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 239.624624][ T5893] usb 5-1: config 0 descriptor?? [ 239.661573][ T5897] usb 4-1: USB disconnect, device number 35 [ 239.703897][ T5891] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 239.766307][ T10] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 239.788158][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.827667][ T10] usb 3-1: config 0 has no interface number 0 [ 239.845300][ T10] usb 3-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.859181][ T5893] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 239.889686][ T5891] usb 1-1: config 0 has no interfaces? [ 239.911949][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.925529][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.933933][ T10] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 239.944500][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.953242][ T5891] usb 1-1: Product: syz [ 239.958259][ T10] usb 3-1: Product: syz [ 239.962511][ T5891] usb 1-1: Manufacturer: syz [ 239.967906][ T10] usb 3-1: Manufacturer: syz [ 239.972598][ T5891] usb 1-1: SerialNumber: syz [ 239.977985][ T10] usb 3-1: SerialNumber: syz [ 239.992341][ T5891] usb 1-1: config 0 descriptor?? [ 240.005092][ T10] usb 3-1: config 0 descriptor?? [ 240.233704][ T5897] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 240.468293][ T7713] No such timeout policy "syz0" [ 240.513579][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.565766][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.573685][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.603878][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 240.778402][ T10] usb 3-1: USB disconnect, device number 31 [ 241.156725][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.332787][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.370412][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.679542][ T7733] netlink: 'syz.2.506': attribute type 7 has an invalid length. [ 241.688187][ T7733] netlink: 'syz.2.506': attribute type 8 has an invalid length. [ 241.743992][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 242.195814][ T5893] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 242.207152][ T5893] asix 5-1:0.0: probe with driver asix failed with error -71 [ 242.285297][ T5893] usb 5-1: USB disconnect, device number 26 [ 242.753538][ T5893] usb 1-1: USB disconnect, device number 30 [ 243.258761][ T7754] netlink: 'syz.1.510': attribute type 5 has an invalid length. [ 243.374435][ T5893] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 243.707725][ T5893] usb 5-1: config 0 has no interfaces? [ 243.749453][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 243.774105][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.792971][ T5893] usb 5-1: Product: syz [ 243.797542][ T5893] usb 5-1: Manufacturer: syz [ 243.802295][ T5893] usb 5-1: SerialNumber: syz [ 243.886121][ T5893] usb 5-1: config 0 descriptor?? [ 244.153866][ T976] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 244.338993][ T7750] bridge0: entered promiscuous mode [ 244.473842][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 244.504447][ T7766] macvlan0: entered allmulticast mode [ 244.513970][ T7766] veth1_vlan: entered allmulticast mode [ 244.560972][ T976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 244.582510][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.850425][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.861165][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.897290][ T976] usb 4-1: Product: syz [ 244.910916][ T976] usb 4-1: Manufacturer: syz [ 244.931143][ T976] usb 4-1: SerialNumber: syz [ 245.035097][ T976] usb 4-1: config 0 descriptor?? [ 245.206025][ T976] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.224557][ T976] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 245.627276][ T976] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 245.634488][ T976] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 245.642176][ T976] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 245.699730][ T976] em28xx 4-1:0.0: No AC97 audio processor [ 245.887838][ T976] usb 4-1: USB disconnect, device number 37 [ 245.974130][ T976] em28xx 4-1:0.0: Disconnecting em28xx [ 246.134388][ T976] em28xx 4-1:0.0: Freeing device [ 246.233952][ T5893] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 246.371730][ T5895] usb 5-1: USB disconnect, device number 27 [ 246.383903][ T10] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 246.404360][ T5893] usb 3-1: config 2 has no interfaces? [ 246.409967][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0402, bcdDevice=33.b7 [ 246.486589][ T976] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 246.493335][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.534934][ T5893] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 246.550633][ T5893] usb 3-1: no configuration chosen from 1 choice [ 246.603814][ T10] usb 2-1: device descriptor read/64, error -71 [ 247.034657][ T10] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 247.135496][ T976] usb 4-1: config 0 has no interfaces? [ 247.303926][ T5895] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 247.315568][ T976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.326269][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.334332][ T976] usb 4-1: Product: syz [ 247.338593][ T976] usb 4-1: Manufacturer: syz [ 247.343187][ T976] usb 4-1: SerialNumber: syz [ 247.350569][ T976] usb 4-1: config 0 descriptor?? [ 247.415559][ T10] usb 2-1: device descriptor read/64, error -71 [ 247.604601][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 247.613903][ T10] usb usb2-port1: attempt power cycle [ 247.736750][ T5895] usb 1-1: config 0 has no interfaces? [ 247.749685][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.758879][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.769116][ T5895] usb 1-1: Product: syz [ 247.773873][ T5895] usb 1-1: Manufacturer: syz [ 247.781937][ T5895] usb 1-1: SerialNumber: syz [ 247.792426][ T5895] usb 1-1: config 0 descriptor?? [ 248.033926][ T10] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 248.055052][ T10] usb 2-1: device descriptor read/8, error -71 [ 248.293939][ T10] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 248.324932][ T10] usb 2-1: device descriptor read/8, error -71 [ 248.594896][ T10] usb usb2-port1: unable to enumerate USB device [ 248.872963][ T24] usb 4-1: USB disconnect, device number 38 [ 248.894454][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 248.894471][ T30] audit: type=1326 audit(1743667551.269:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 249.026229][ T30] audit: type=1326 audit(1743667551.299:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 249.097034][ T24] usb 3-1: USB disconnect, device number 32 [ 249.242981][ T30] audit: type=1326 audit(1743667551.309:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 249.351073][ T7810] netlink: 104 bytes leftover after parsing attributes in process `syz.1.525'. [ 249.498283][ T30] audit: type=1326 audit(1743667551.309:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 249.670244][ T30] audit: type=1326 audit(1743667551.309:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ee18d169 code=0x7ffc0000 [ 249.834026][ T5842] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 249.898513][ T10] usb 1-1: USB disconnect, device number 31 [ 249.997652][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.009129][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.037555][ T5842] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 250.072420][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.100638][ T5842] usb 5-1: config 0 descriptor?? [ 250.363941][ T976] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 250.503794][ T976] usb 1-1: device descriptor read/64, error -71 [ 250.843820][ T976] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 251.143847][ T976] usb 1-1: device descriptor read/64, error -71 [ 251.324676][ T976] usb usb1-port1: attempt power cycle [ 251.823825][ T976] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 251.901741][ T976] usb 1-1: device descriptor read/8, error -71 [ 252.172563][ T976] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 252.222972][ T976] usb 1-1: device descriptor read/8, error -71 [ 252.354049][ T976] usb usb1-port1: unable to enumerate USB device [ 252.938518][ T5842] usbhid 5-1:0.0: can't add hid device: -71 [ 252.946471][ T5842] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.010632][ T5842] usb 5-1: USB disconnect, device number 28 [ 253.257204][ T30] audit: type=1326 audit(1743667555.609:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 253.339718][ T30] audit: type=1326 audit(1743667555.619:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 253.405722][ T30] audit: type=1326 audit(1743667555.619:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 253.428424][ T5914] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 253.470115][ T30] audit: type=1326 audit(1743667555.619:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 253.521621][ T30] audit: type=1326 audit(1743667555.619:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6a58d169 code=0x7ffc0000 [ 253.598242][ T7853] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 253.624025][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 253.636777][ T5914] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 253.645565][ T7853] netlink: 'syz.4.536': attribute type 19 has an invalid length. [ 253.670039][ T5914] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.697509][ T7853] netlink: 156 bytes leftover after parsing attributes in process `syz.4.536'. [ 253.706990][ T5914] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.753804][ T5914] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 253.782471][ T5914] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 253.803782][ T5914] usb 3-1: config 0 has no interface number 0 [ 253.803821][ T5895] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 253.810127][ T5914] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 253.857881][ T5914] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 253.888294][ T5914] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.922532][ T5914] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.983802][ T5914] usb 3-1: config 0 interface 125 has no altsetting 0 [ 253.994398][ T5914] usb 3-1: config 0 interface 125 has no altsetting 2 [ 253.999489][ T5895] usb 1-1: device descriptor read/64, error -71 [ 254.016582][ T5914] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 254.035971][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.055533][ T5914] usb 3-1: Product: syz [ 254.064027][ T5842] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 254.064599][ T5914] usb 3-1: Manufacturer: syz [ 254.094445][ T5914] usb 3-1: SerialNumber: syz [ 254.120589][ T5914] usb 3-1: config 0 descriptor?? [ 254.132469][ T5914] usb 3-1: selecting invalid altsetting 2 [ 254.233886][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 254.240877][ T5842] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 254.253865][ T5895] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 254.269422][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.298856][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.323818][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.348851][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.363967][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.373053][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.413883][ T5895] usb 1-1: device descriptor read/64, error -71 [ 254.526579][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 254.554309][ T5895] usb usb1-port1: attempt power cycle [ 254.642883][ C1] usb 3-1: async_complete: urb error -71 [ 254.642967][ T5842] usb 4-1: usb_control_msg returned -32 [ 254.648701][ C1] usb 3-1: async_complete: urb error -71 [ 254.660111][ C1] usb 3-1: async_complete: urb error -71 [ 254.670810][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 254.673605][ T5914] get_1284_register: usb error -71 [ 254.707746][ T5914] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 254.732824][ T5914] usb 3-1: USB disconnect, device number 33 [ 254.745903][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.755646][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.786263][ T24] usb 2-1: config 0 descriptor?? [ 254.818597][ T24] cp210x 2-1:0.0: cp210x converter detected [ 254.894648][ T5895] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 254.928282][ T5895] usb 1-1: device descriptor read/8, error -71 [ 254.999030][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.008168][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.018000][ T24] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 255.028360][ T24] cp210x 2-1:0.0: querying part number failed [ 255.039340][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 255.184454][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 255.234434][ T976] usb 4-1: USB disconnect, device number 39 [ 255.301694][ T5895] usb 1-1: device descriptor read/8, error -71 [ 255.370860][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.384185][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.428229][ T24] usb 2-1: USB disconnect, device number 45 [ 255.444240][ T5895] usb usb1-port1: unable to enumerate USB device [ 255.453431][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.498673][ T24] cp210x 2-1:0.0: device disconnected [ 255.607287][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614584][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.802241][ T30] audit: type=1326 audit(1743667558.169:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 255.869804][ T30] audit: type=1326 audit(1743667558.169:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 255.959706][ T30] audit: type=1326 audit(1743667558.169:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 256.031566][ T30] audit: type=1326 audit(1743667558.169:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 256.076608][ T30] audit: type=1326 audit(1743667558.169:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420b78d169 code=0x7ffc0000 [ 256.100999][ T7896] syzkaller0: create flow: hash 2794719458 index 1 [ 256.332731][ T7891] syzkaller0: delete flow: hash 2794719458 index 1 [ 256.691839][ T7902] program syz.3.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.794140][ T7906] netlink: 104 bytes leftover after parsing attributes in process `syz.1.552'. [ 259.565988][ T7904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.605130][ T7904] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 259.701664][ T7904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.744133][ T7904] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 259.781005][ T7904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.824125][ T7904] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 259.907413][ T7904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.944238][ T7904] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 259.987305][ T7904] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.999495][ T7904] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 260.226262][ T7967] netlink: 104 bytes leftover after parsing attributes in process `syz.2.563'. [ 260.403880][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 260.478997][ T5893] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 260.614478][ T10] usb 1-1: config 0 has no interfaces? [ 260.640545][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.696523][ T5893] usb 2-1: config 0 has no interfaces? [ 260.718929][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.780610][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.799003][ T10] usb 1-1: Product: syz [ 260.815874][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.825015][ T10] usb 1-1: Manufacturer: syz [ 260.829652][ T10] usb 1-1: SerialNumber: syz [ 260.835021][ T5893] usb 2-1: Product: syz [ 260.845750][ T5893] usb 2-1: Manufacturer: syz [ 260.852148][ T10] usb 1-1: config 0 descriptor?? [ 260.863927][ T5893] usb 2-1: SerialNumber: syz [ 261.027116][ T5893] usb 2-1: config 0 descriptor?? [ 261.708179][ T976] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 261.886787][ T976] usb 3-1: config 0 has no interfaces? [ 261.913654][ T976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.923327][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.931686][ T976] usb 3-1: Product: syz [ 261.936666][ T976] usb 3-1: Manufacturer: syz [ 261.952739][ T976] usb 3-1: SerialNumber: syz [ 262.238507][ T976] usb 3-1: config 0 descriptor?? [ 262.989248][ T24] usb 1-1: USB disconnect, device number 40 [ 263.794498][ T5895] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 263.857902][ T5842] usb 2-1: USB disconnect, device number 46 [ 263.903101][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 263.991889][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 264.002084][ T5895] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 264.010653][ T5895] usb 1-1: config 0 has no interface number 0 [ 264.030969][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.080639][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 264.126553][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 264.189774][ T5893] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 264.211037][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 264.233851][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.239156][ T8014] tap0: tun_chr_ioctl cmd 2147767520 [ 264.243095][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 264.263876][ T5893] usb 4-1: Product: syz [ 264.276373][ T5893] usb 4-1: Manufacturer: syz [ 264.289191][ T5893] usb 4-1: SerialNumber: syz [ 264.310936][ T8014] hsr0: entered promiscuous mode [ 264.314370][ T5895] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 264.327151][ T5893] usb 4-1: config 0 descriptor?? [ 264.335418][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 264.345114][ T8006] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 264.369323][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 264.390785][ T5893] hub 4-1:0.0: bad descriptor, ignoring hub [ 264.403958][ T5893] hub 4-1:0.0: probe with driver hub failed with error -5 [ 264.413822][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.424465][ T8014] hsr_slave_0: left promiscuous mode [ 264.459421][ T5895] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 264.476703][ T5893] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 264.491478][ T8014] hsr_slave_1: left promiscuous mode [ 264.504287][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 116, changing to 10 [ 264.569778][ T5895] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25209, setting to 1024 [ 264.598909][ T5893] usb 4-1: USB disconnect, device number 40 [ 264.604932][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 264.629522][ T5895] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.652074][ T8014] hsr0 (unregistering): left promiscuous mode [ 264.672601][ T5895] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 264.685140][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.707935][ T5895] usb 1-1: Product: syz [ 264.719805][ T5895] usb 1-1: Manufacturer: syz [ 264.798285][ T5895] usb 1-1: SerialNumber: syz [ 264.833301][ T5895] usb 1-1: config 0 descriptor?? [ 264.844835][ T8003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.909078][ T5895] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 264.920967][ T5914] usb 3-1: USB disconnect, device number 34 [ 264.960898][ T5895] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 265.424270][ T5914] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 265.583972][ T5914] usb 3-1: device descriptor read/64, error -71 [ 265.583979][ T5895] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 265.733816][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 265.742837][ T5895] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 265.755490][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.766486][ T5895] usb 5-1: Product: syz [ 265.773957][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 265.873807][ T976] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 265.890691][ T5895] usb 5-1: Manufacturer: syz [ 265.903855][ T5914] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 265.969609][ T5895] usb 5-1: SerialNumber: syz [ 266.007440][ T24] usb 4-1: config 0 has no interfaces? [ 266.019030][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 266.028317][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.036562][ T24] usb 4-1: Product: syz [ 266.040974][ T24] usb 4-1: Manufacturer: syz [ 266.045702][ T5914] usb 3-1: device descriptor read/64, error -71 [ 266.054534][ T24] usb 4-1: SerialNumber: syz [ 266.083183][ T24] usb 4-1: config 0 descriptor?? [ 266.099383][ T5895] usb 5-1: config 0 descriptor?? [ 266.103593][ T976] usb 2-1: config 0 has no interfaces? [ 266.115913][ T976] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 266.118304][ T5895] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 266.125394][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.144983][ T976] usb 2-1: Product: syz [ 266.153685][ T976] usb 2-1: Manufacturer: syz [ 266.164084][ T5914] usb usb3-port1: attempt power cycle [ 266.176726][ T976] usb 2-1: SerialNumber: syz [ 266.194049][ T976] usb 2-1: config 0 descriptor?? [ 266.461765][ T5893] usb 1-1: USB disconnect, device number 41 [ 266.515668][ T5914] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 266.548278][ T5895] usb 5-1: USB disconnect, device number 29 [ 266.553142][ T5914] usb 3-1: device descriptor read/8, error -71 [ 266.661975][ T8067] [ 266.664339][ T8067] ====================================================== [ 266.671355][ T8067] WARNING: possible circular locking dependency detected [ 266.678371][ T8067] 6.14.0-syzkaller-12508-g92b71befc349 #0 Not tainted [ 266.685124][ T8067] ------------------------------------------------------ [ 266.692145][ T8067] syz.0.577/8067 is trying to acquire lock: [ 266.698042][ T8067] ffffffff900fc2c8 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.707021][ T8067] [ 266.707021][ T8067] but task is already holding lock: [ 266.714391][ T8067] ffff888059ad0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect+0xb7/0xde0 [ 266.723243][ T8067] [ 266.723243][ T8067] which lock already depends on the new lock. [ 266.723243][ T8067] [ 266.733669][ T8067] [ 266.733669][ T8067] the existing dependency chain (in reverse order) is: [ 266.742725][ T8067] [ 266.742725][ T8067] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 266.750403][ T8067] lock_acquire+0x116/0x2f0 [ 266.755428][ T8067] lock_sock_nested+0x48/0x100 [ 266.760708][ T8067] do_ip_setsockopt+0x17e9/0x39c0 [ 266.766253][ T8067] ip_setsockopt+0x63/0x100 [ 266.771286][ T8067] do_sock_setsockopt+0x3b1/0x710 [ 266.776833][ T8067] __x64_sys_setsockopt+0x1ee/0x280 [ 266.782558][ T8067] do_syscall_64+0xf3/0x230 [ 266.787581][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.794011][ T8067] [ 266.794011][ T8067] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 266.801253][ T8067] validate_chain+0xa69/0x24e0 [ 266.806563][ T8067] __lock_acquire+0xad5/0xd80 [ 266.811754][ T8067] lock_acquire+0x116/0x2f0 [ 266.816774][ T8067] __mutex_lock+0x1a5/0x10c0 [ 266.821880][ T8067] smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.827355][ T8067] __smc_connect+0x296/0x1920 [ 266.832555][ T8067] smc_connect+0x868/0xde0 [ 266.837487][ T8067] __sys_connect+0x28c/0x2d0 [ 266.842594][ T8067] __x64_sys_connect+0x7a/0x90 [ 266.847884][ T8067] do_syscall_64+0xf3/0x230 [ 266.852902][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.859317][ T8067] [ 266.859317][ T8067] other info that might help us debug this: [ 266.859317][ T8067] [ 266.869541][ T8067] Possible unsafe locking scenario: [ 266.869541][ T8067] [ 266.876992][ T8067] CPU0 CPU1 [ 266.882353][ T8067] ---- ---- [ 266.887720][ T8067] lock(sk_lock-AF_INET); [ 266.892143][ T8067] lock(rtnl_mutex); [ 266.898650][ T8067] lock(sk_lock-AF_INET); [ 266.905596][ T8067] lock(rtnl_mutex); [ 266.909599][ T8067] [ 266.909599][ T8067] *** DEADLOCK *** [ 266.909599][ T8067] [ 266.917741][ T8067] 1 lock held by syz.0.577/8067: [ 266.922672][ T8067] #0: ffff888059ad0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect+0xb7/0xde0 [ 266.931917][ T8067] [ 266.931917][ T8067] stack backtrace: [ 266.937807][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.0.577 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 266.937828][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.937850][ T8067] Call Trace: [ 266.937857][ T8067] [ 266.937865][ T8067] dump_stack_lvl+0x241/0x360 [ 266.937893][ T8067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.937922][ T8067] ? __pfx__printk+0x10/0x10 [ 266.937945][ T8067] ? print_lock+0x171/0x1a0 [ 266.937965][ T8067] print_circular_bug+0x2e1/0x300 [ 266.937988][ T8067] check_noncircular+0x142/0x160 [ 266.938012][ T8067] validate_chain+0xa69/0x24e0 [ 266.938034][ T8067] ? __kernel_text_address+0xd/0x40 [ 266.938050][ T8067] ? arch_stack_walk+0xff/0x150 [ 266.938077][ T8067] __lock_acquire+0xad5/0xd80 [ 266.938097][ T8067] lock_acquire+0x116/0x2f0 [ 266.938112][ T8067] ? smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.938132][ T8067] ? kasan_save_track+0x51/0x80 [ 266.938152][ T8067] __mutex_lock+0x1a5/0x10c0 [ 266.938170][ T8067] ? smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.938191][ T8067] ? smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.938209][ T8067] ? __pfx___mutex_lock+0x10/0x10 [ 266.938232][ T8067] smc_vlan_by_tcpsk+0x39b/0x4f0 [ 266.938250][ T8067] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 266.938269][ T8067] ? __kmalloc_cache_noprof+0x236/0x370 [ 266.938291][ T8067] ? __smc_connect+0x1c7/0x1920 [ 266.938317][ T8067] __smc_connect+0x296/0x1920 [ 266.938343][ T8067] ? do_raw_spin_unlock+0x13c/0x8b0 [ 266.938369][ T8067] smc_connect+0x868/0xde0 [ 266.938396][ T8067] __sys_connect+0x28c/0x2d0 [ 266.938420][ T8067] ? __pfx___sys_connect+0x10/0x10 [ 266.938451][ T8067] __x64_sys_connect+0x7a/0x90 [ 266.938473][ T8067] do_syscall_64+0xf3/0x230 [ 266.938490][ T8067] ? clear_bhb_loop+0x45/0xa0 [ 266.938508][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.938525][ T8067] RIP: 0033:0x7fac6a58d169 [ 266.938540][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.938554][ T8067] RSP: 002b:00007fac683f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.938571][ T8067] RAX: ffffffffffffffda RBX: 00007fac6a7a5fa0 RCX: 00007fac6a58d169 [ 266.938584][ T8067] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000003 [ 266.938595][ T8067] RBP: 00007fac6a60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.938605][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.938615][ T8067] R13: 0000000000000000 R14: 00007fac6a7a5fa0 R15: 00007fac6a8cfa28 [ 266.938632][ T8067] [ 267.486925][ T5914] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 267.643362][ T5914] usb 3-1: device descriptor read/8, error -71 [ 267.764087][ T5914] usb usb3-port1: unable to enumerate USB device [ 268.446652][ T5914] usb 2-1: USB disconnect, device number 47 [ 268.596548][ T5898] usb 4-1: USB disconnect, device number 41