last executing test programs: 11m45.219972738s ago: executing program 4 (id=89): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000007580)="731623f1f50ef2bdf6ceffd5e4ebe4c66927d63b970ef26440cf433c53b6", 0x1e) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/16, 0x10}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/27, 0x1b}, 0x8}], 0x3, 0x0, 0x0) 11m43.970635874s ago: executing program 4 (id=91): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000480)={0x9, @pix_mp={0x6, 0xc, 0x20385655, 0x6, 0x2, [{0x7, 0xfffffeff}, {0x8000, 0x101}, {0x8, 0x3}, {0x0, 0x3}, {0x114, 0xfffffffc}, {0x3ff, 0x3}, {0x8, 0x2}, {0x4, 0x8}], 0x4, 0x7, 0x2, 0x0, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r3, 0x18, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) socket$nl_route(0x10, 0x3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200), &(0x7f0000000040)=""/217, 0xd9, 0x0) 11m41.880745011s ago: executing program 4 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0x4, 0xffffffff}}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x5f, 0x2, "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"}}}}}}, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @local, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x27, 0xfffff02c}, {0x16, 0x4}]}) 11m40.567485057s ago: executing program 4 (id=102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000007580)="731623f1f50ef2bdf6ceffd5e4ebe4c66927d63b970ef26440cf433c53b6", 0x1e) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/16, 0x10}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/27, 0x1b}, 0x8}], 0x3, 0x0, 0x0) 11m39.807841864s ago: executing program 4 (id=104): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x15}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x10}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x0, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x3c}}, 0x0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, r4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00010028bd7000ffdbdf25000000007af34efd28b5de3a1a2f557c7a6719c17446f61630f3d2d5a9aeba5068eec382419e7776e90b66537a0c800a0dd7897babbfd464394ea485c41b093a219ced5368b90bec88337ad1b8687154361f708ccd22c48f58583e2acadcec721b297b7e92e6fac648027873a267e974e479a9fbe0bad40b3fcf794752f7e8e01172079b9840fcfe2d610c72", @ANYRES32=r6, @ANYBLOB="f2d20a"], 0x1c}}, 0x0) 11m39.58682002s ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0x4, 0xffffffff}}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x5f, 0x2, "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"}}}}}}, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @local, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x27, 0xfffff02c}, {0x16, 0x4}]}) 11m23.718017176s ago: executing program 32 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x0, 0x4, 0xffffffff}}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x5f, 0x2, "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"}}}}}}, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x2, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x1, 0x66c, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @local, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x27, 0xfffff02c}, {0x16, 0x4}]}) 20.029170628s ago: executing program 1 (id=1801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) 16.894805168s ago: executing program 1 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x1c, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(0xffffffffffffffff, 0x404c4701, 0x20000000) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb0100180000000000000028000000281f000004000000020000000100000f0300000000000000000000000000000044942d000000000000000f010000008400002e00"], 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.298350149s ago: executing program 1 (id=1816): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400002, 0x55) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100"/27], 0xb8}}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80, 0x601) migrate_pages(0x0, 0x8, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x1) 15.183325152s ago: executing program 1 (id=1818): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0xc01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x2101c84, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x167) fallocate(r1, 0x0, 0x0, 0x100000003) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x8, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) 11.833678004s ago: executing program 0 (id=1822): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x51, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000100003050000000000000000000007", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x40000) 11.783814226s ago: executing program 1 (id=1824): signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11.690003537s ago: executing program 5 (id=1825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000, 0x0, 0xc}, {0x0, 0x0, 0xf, 0x0, 0x6, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0xf000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x340030, 0x80000a, 0x0, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.615073977s ago: executing program 0 (id=1826): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="305119cbba3f138f3d499e4a3c94524662cd280ab8ebb3d25bd4"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_opaque(&(0x7f0000005b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000006b00), 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x300, 0x1, 0x7ff, 0xfffffffffffffffe}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x9, 0x7c7, 0xb, 0x3, 0xa5, 0x30e, 0x7, 0x1}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000080)=@x86={0x5, 0x1, 0x2, 0x0, 0x40, 0x6, 0xfb, 0x89, 0x18, 0xd, 0x7, 0x4, 0x0, 0x1000, 0x1000, 0x2, 0xc, 0x7, 0x19, '\x00', 0x3, 0x8000000000000001}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) 11.145477022s ago: executing program 1 (id=1830): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f0000004000), 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) socket(0x10, 0x80003, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) 11.001483775s ago: executing program 33 (id=1830): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200003a000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f0000004000), 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000080)}) socket(0x10, 0x80003, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) 9.510806432s ago: executing program 0 (id=1833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d491", 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000140)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x0, 0x17, "afee3aaaba9a7afcf637553cd6c46c11cef163"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030c3b040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r0, 0x0, 0x0, 0x80000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x91, 0x91, 0x7, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x1, 0x0, 0x80}, {0x4, 0x3, 0x8}, {0x10, 0x4000003}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x1, [{0x4, 0x383fe825, 0x3}, {0x2, 0x1000, 0xff}, {0x1, 0x6, 0x1aea4}, {0x5, 0xffffffc5}, {0x1, 0x2, 0x7}, {0x5, 0x6}], '{'}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000400)=""/197, 0xb3, 0xc5, 0x0, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xfffffff9, 0x0, 0x10, 0xac48, 0xffffffffffffffff, 0x66a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0xb, @value=r5, @void, @void, @value}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 8.424889475s ago: executing program 3 (id=1835): clock_gettime(0x0, &(0x7f0000001ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000240)=""/23, 0x37}, {&(0x7f0000000380)=""/163, 0xab}, {&(0x7f0000000680)=""/40, 0x28}, {&(0x7f00000006c0)=""/29, 0x1d}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001700)=""/161, 0xa1}, {&(0x7f00000017c0)=""/31, 0x1f}, {&(0x7f0000001800)=""/189, 0xbd}], 0x8, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b00)=""/180, 0xb4}, {&(0x7f0000001bc0)=""/138, 0x8a}, {&(0x7f0000001c80)=""/49, 0x31}], 0x3, &(0x7f0000001d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x2, 0x0, &(0x7f0000001f00)) iopl(0x3) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x88}}, 0x0) r2 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xd898, 0xc2, 0x2000, 0x2}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) iopl(0x64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a20000000000a01030004000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a30000000003800048034"], 0xe8}}, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\xff\xff', 0x3a, '\xff\xff', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x2d) syz_emit_ethernet(0x18a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x16, 0x20000002, r3) 8.356333298s ago: executing program 3 (id=1836): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x2040400) poll(&(0x7f0000000200)=[{r0, 0x210}], 0x1, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000000)) 8.201087573s ago: executing program 5 (id=1837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0xffffffffffffffff, 0x0) 8.06340655s ago: executing program 3 (id=1838): open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f00000000c0)='./file1\x00', 0xf164388e587ce7f8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.760491156s ago: executing program 3 (id=1839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x47f9, 0x0, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10) pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x4b) 7.582122424s ago: executing program 0 (id=1840): signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r0 = syz_io_uring_setup(0x4ba5, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) 7.431649665s ago: executing program 5 (id=1841): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex_waitv(&(0x7f00000031c0)=[{0x6, 0xfffffffffffffffc, 0x2}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40440420}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r4, 0x1ace60b1de01722a, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x40100) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 6.765390071s ago: executing program 0 (id=1842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x0, 0x23, 0x1e, {0x1e, 0x21, "2b4985d56be0135fc89abb31241a7eb664850ae5a80ff1cdae5bb78f"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x40, 0x11, 0x9a, "5579a5bddad79308a3a49b2e155bdf98cae54875283b46ecc26020c2ac8ae20c78026d57cd52f4131d7ebaba187f6a46926684ea7de6526b098480e395e57c747ac9581efd725cf0cf45acd46f49aa3f1738208785cb6bf6494d01774168557673fc401c63f4341f5d2355481ab7d867532574df2ed1002bc8796ba90ea954cbb200b740f311d2bc87537db6e6df369bc7c46914f842c419146c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000040000005bac791a"], 0x0, 0x0}) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000580)={'veth0_to_batadv', 0x32, 0x35}, 0x12) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000080000030000000500020002000000050002"], 0x34}}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1, 0xd29, 0x9e64, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9dc35700d5295ebc07a620284b8ddfcc446b57e6bbd78d75343f4a7df070cbf9f45507eef0471e0e2fe76973295f8e816e18a99c908adaf90e99efb07f0bedce"}}, 0x80}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/63, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x8, @vifc_lcl_addr=@empty, @rand_addr=0x64010101}, 0x10) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, r11, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 6.700228335s ago: executing program 3 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x127f, 0x0) listen(r4, 0x400) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 5.074277297s ago: executing program 2 (id=1845): socket(0x10, 0x3, 0x0) pipe2$watch_queue(0x0, 0x80) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000, @empty}, {0xa, 0x0, 0xffffffff, @remote}, r2}}, 0x48) (fail_nth: 11) 5.072368287s ago: executing program 5 (id=1846): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.799606679s ago: executing program 2 (id=1847): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) 4.001866334s ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008"], 0x34}}, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept(r2, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200001400000000000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f0000001a00)=[0x0], 0x0, 0x69, &(0x7f0000001a40), 0x0, 0x10, &(0x7f0000001a80), 0x0, 0x0, 0x95, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x0) 3.92176847s ago: executing program 5 (id=1849): open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) mkdir(&(0x7f00000000c0)='./file1\x00', 0xf164388e587ce7f8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.964566293s ago: executing program 2 (id=1850): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast2}, {@in=@broadcast}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) getpgid(r0) shmdt(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00'}, 0x10) setrlimit(0x1, &(0x7f00000001c0)={0x0, 0x59f}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) landlock_restrict_self(r5, 0x0) 2.383451424s ago: executing program 3 (id=1851): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18020000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x78, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'ip_vti0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x1d}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3], 0x158}, 0x1, 0xba01}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008aec1, &(0x7f0000000040)=ANY=[@ANYRES32=r7]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x8000005, 0xb0, &(0x7f0000000240)=""/176, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x38, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000009c0)={'tunl0\x00', r9, 0x10, 0x700, 0x4, 0xf2, {{0x52, 0x4, 0x3, 0x0, 0x148, 0x68, 0x2, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0xc, [{@broadcast, 0xef2}, {@multicast2}]}, @cipso={0x86, 0x6a, 0x1, [{0x2, 0x5, 'D!1'}, {0x6, 0x3, '@'}, {0x2, 0x7, "d9aee0d35c"}, {0x5, 0x12, "b48040498d248eda798c48b364019a64"}, {0x0, 0x10, "6b55d1a4608d76186da346ad197d"}, {0x1, 0x12, "3ed331a08b09a61e5d94ada71ebd47a3"}, {0x6, 0x7, "3aee01e3e3"}, {0x1, 0xa, "917bb09e034c57c3"}, {0x2, 0x10, "a7f0ef8439f2e0cf04cc69fd3fe3"}]}, @rr={0x7, 0x13, 0xa1, [@local, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x42}]}, @noop, @rr={0x7, 0x7, 0x4a, [@broadcast]}, @rr={0x7, 0x1b, 0x44, [@loopback, @local, @empty, @loopback, @remote, @multicast2]}, @rr={0x7, 0x1f, 0x44, [@multicast2, @rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x1, [{@remote, 0x4}, {@remote, 0x1000}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8}, {@local, 0x3}, {@private=0xa010101, 0x3}]}, @end, @timestamp_prespec={0x44, 0x2c, 0x83, 0x3, 0x4, [{@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) syz_usb_connect(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xe8, 0x58, 0x4b, 0x40, 0x11ba, 0x1003, 0xc4b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0xce, 0xc, 0x10, 0x9, [{{0x9, 0x4, 0xf1, 0x4, 0x0, 0x16, 0x64, 0x2, 0x1}}, {{0x9, 0x4, 0xe4, 0x4, 0x0, 0xce, 0x5c, 0xf4, 0xfd}}, {{0x9, 0x4, 0x4f, 0x81, 0x0, 0x1c, 0x6e, 0x6e, 0x1}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0x0) sched_setscheduler(r11, 0x6, &(0x7f00000000c0)=0x7a) sendmmsg(r10, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="ac", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}}], 0x2, 0x4008800) 1.868990644s ago: executing program 2 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x6, 0x8, 0xb42c) r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000380)=0x3, 0x1000) prctl$PR_MPX_DISABLE_MANAGEMENT(0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000400)={0x0, r4, 0x4, 0x27476e02, 0x9, 0x2, 0x9, 0x392d, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x9000000}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe57, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0xa}}, 0x20) 1.73472029s ago: executing program 5 (id=1853): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001200010a0b000000000000f77f02000017fddb2faefb787a6aedacb94522aae82dd5ab2d5f2546b197041ca612103de4ddf36d311daad99422eb88d9797f1f8818a11193f2c19eac67c1267c71a97ede851ea5501cf7e44d995c14a6ae4c6b4a01c48b61ef71590ea4bb541700b4f8e02b8d737d40699c3653b4dde282d486e65dc94b74e999"], 0x14}}, 0x0) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x12, &(0x7f0000000440)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b89}, @generic={0x2, 0xe, 0x7, 0xe7, 0x8001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000300)=@newtaction={0x50, 0x31, 0x1, 0x70bd27, 0x0, {}, [{0x3c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000240)=""/4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x24, r8, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000229bd700098b6473f227cd30706002800030000ccb4930641389201003b00ffffff0a09003100000000000800320001f0ffff05002a000000000005002e0001000000050035000800000005003800010000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40014) 1.145470498s ago: executing program 0 (id=1854): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4b5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x20000000, 0x21, &(0x7f00000003c0)=""/33, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xa, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r2, r0, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x3, 0x2}], 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, &(0x7f0000000480)) syz_open_procfs$userns(0x0, &(0x7f0000000040)) 0s ago: executing program 2 (id=1855): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) (fail_nth: 2) kernel console output (not intermixed with test programs): 616.626341][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 616.658196][ T9] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 616.690488][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 616.699649][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.750883][ T5914] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 616.757941][ T5914] [drm] Initialized udl on minor 2 [ 617.818402][ T5914] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.828436][ T5914] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 617.837954][ T9] ath6kl: Failed to submit usb control message: -110 [ 617.844893][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 617.852058][ T9] ath6kl: Unable to send get target info: -110 [ 617.953073][ T977] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.961602][ T9] ath6kl: Failed to init ath6kl core: -110 [ 617.968249][ T9] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 617.980078][ T977] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 617.988261][ T5914] usb 6-1: USB disconnect, device number 36 [ 617.994450][ T977] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 618.003042][ T9] usb 3-1: USB disconnect, device number 68 [ 621.832152][T11289] syzkaller1: entered promiscuous mode [ 621.846419][T11289] syzkaller1: entered allmulticast mode [ 621.944485][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 621.944505][ T29] audit: type=1326 audit(1734755127.654:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11290 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 622.104210][ T29] audit: type=1326 audit(1734755127.654:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11290 comm="syz.5.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 622.239267][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 622.431596][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 622.911237][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 622.922628][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 622.932558][ T47] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 622.941864][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.963276][ T47] usb 1-1: config 0 descriptor?? [ 623.458895][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.821329][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.993743][ T47] hid (null): bogus close delimiter [ 624.000460][ T47] hid (null): nested delimiters [ 624.008570][ T47] hid-generic 0003:0158:0100.000E: bogus close delimiter [ 624.015682][ T47] hid-generic 0003:0158:0100.000E: item 0 0 2 10 parsing failed [ 624.024007][ T47] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 625.330413][T11320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.396848][T11320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.419829][T11284] syz.1.1367: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 625.452423][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.1.1367 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 625.463260][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 625.473423][T11284] Call Trace: [ 625.476700][T11284] [ 625.479624][T11284] dump_stack_lvl+0x241/0x360 [ 625.484296][T11284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.489487][T11284] ? __pfx__printk+0x10/0x10 [ 625.494066][T11284] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 625.500562][T11284] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 625.507058][T11284] warn_alloc+0x278/0x410 [ 625.511386][T11284] ? __pfx_warn_alloc+0x10/0x10 [ 625.516231][T11284] ? vb2_vmalloc_alloc+0xf2/0x340 [ 625.521259][T11284] ? __get_vm_area_node+0x1c8/0x2d0 [ 625.526446][T11284] ? __get_vm_area_node+0x25c/0x2d0 [ 625.531638][T11284] __vmalloc_node_range_noprof+0x62f/0x1380 [ 625.537536][T11284] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 625.543886][T11284] ? __kasan_kmalloc+0x98/0xb0 [ 625.548647][T11284] vmalloc_user_noprof+0x74/0x80 [ 625.553581][T11284] ? vb2_vmalloc_alloc+0xf2/0x340 [ 625.558680][T11284] vb2_vmalloc_alloc+0xf2/0x340 [ 625.563526][T11284] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 625.568998][T11284] __vb2_queue_alloc+0xa0b/0x16f0 [ 625.574038][T11284] vb2_core_reqbufs+0xd2e/0x17c0 [ 625.578979][T11284] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 625.584363][T11284] ? __lock_acquire+0x1397/0x2100 [ 625.589385][T11284] ? __video_do_ioctl+0x4ea/0xdd0 [ 625.594434][T11284] ? vb2_verify_memory_type+0x1f7/0x570 [ 625.599978][T11284] vb2_ioctl_reqbufs+0x4e3/0x830 [ 625.604916][T11284] __video_do_ioctl+0xc23/0xdd0 [ 625.609769][T11284] ? __pfx___video_do_ioctl+0x10/0x10 [ 625.615134][T11284] ? smack_log+0x123/0x540 [ 625.619571][T11284] ? __might_fault+0xc6/0x120 [ 625.624247][T11284] video_usercopy+0x89b/0x1180 [ 625.629015][T11284] ? __pfx___video_do_ioctl+0x10/0x10 [ 625.634464][T11284] ? __pfx_video_usercopy+0x10/0x10 [ 625.639655][T11284] ? smack_file_ioctl+0x2f7/0x3a0 [ 625.644774][T11284] ? __fget_files+0x2a/0x410 [ 625.649386][T11284] ? __fget_files+0x2a/0x410 [ 625.654006][T11284] v4l2_ioctl+0x189/0x1e0 [ 625.658353][T11284] ? __pfx_v4l2_ioctl+0x10/0x10 [ 625.663204][T11284] __se_sys_ioctl+0xf5/0x170 [ 625.667793][T11284] do_syscall_64+0xf3/0x230 [ 625.672327][T11284] ? clear_bhb_loop+0x35/0x90 [ 625.676997][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.683407][T11284] RIP: 0033:0x7f4573b85d29 [ 625.687812][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.707415][T11284] RSP: 002b:00007f45719f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.715847][T11284] RAX: ffffffffffffffda RBX: 00007f4573d75fa0 RCX: 00007f4573b85d29 [ 625.723812][T11284] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 625.731774][T11284] RBP: 00007f4573c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 625.739749][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.747725][T11284] R13: 0000000000000000 R14: 00007f4573d75fa0 R15: 00007ffd62ca6dd8 [ 625.755733][T11284] [ 625.770126][ T9] usb 1-1: USB disconnect, device number 45 [ 625.779643][T11327] binder: BINDER_SET_CONTEXT_MGR already set [ 625.798527][T11327] binder: 11322:11327 ioctl 4018620d 20000040 returned -16 [ 625.914055][T11284] Mem-Info: [ 625.959275][T11284] active_anon:6113 inactive_anon:23368 isolated_anon:0 [ 625.959275][T11284] active_file:25381 inactive_file:36395 isolated_file:0 [ 625.959275][T11284] unevictable:768 dirty:120 writeback:25 [ 625.959275][T11284] slab_reclaimable:9847 slab_unreclaimable:101375 [ 625.959275][T11284] mapped:39284 shmem:26243 pagetables:1009 [ 625.959275][T11284] sec_pagetables:0 bounce:0 [ 625.959275][T11284] kernel_misc_reclaimable:0 [ 625.959275][T11284] free:1262761 free_pcp:2694 free_cma:0 [ 626.076659][T11284] Node 0 active_anon:24452kB inactive_anon:101372kB active_file:101452kB inactive_file:145580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158636kB dirty:480kB writeback:0kB shmem:111236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no [ 626.117912][T11284] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 626.165492][T11284] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 626.212174][T11284] lowmem_reserve[]: 0 2465 2466 0 0 [ 626.225388][T11284] Node 0 DMA32 free:1120952kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:24448kB inactive_anon:110636kB active_file:100664kB inactive_file:145528kB unevictable:1536kB writepending:480kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:11208kB local_pcp:796kB free_cma:0kB [ 626.274193][ T977] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 626.292551][ T5914] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 626.319317][T11284] lowmem_reserve[]: 0 0 0 0 0 [ 626.327908][T11284] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 626.441656][ T5914] usb 4-1: device descriptor read/64, error -71 [ 626.558801][ T977] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 626.572869][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.585685][ T977] usb 6-1: Product: syz [ 626.590516][ T977] usb 6-1: Manufacturer: syz [ 626.596273][ T977] usb 6-1: SerialNumber: syz [ 626.628965][ T977] usb 6-1: config 0 descriptor?? [ 626.859172][ T5914] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 626.933106][ T977] hso 6-1:0.0: Failed to find BULK IN ep [ 626.942451][T11284] lowmem_reserve[]: 0 0 0 0 0 [ 626.947222][ T977] usb-storage 6-1:0.0: USB Mass Storage device detected [ 627.102888][T11284] Node 1 Normal free:3899332kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 627.138815][ T5914] usb 4-1: device descriptor read/64, error -71 [ 627.163418][T11284] lowmem_reserve[]: 0 0 0 0 0 [ 627.184749][T11284] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 627.210707][T11284] Node 0 DMA32: 3*4kB (UME) 1*8kB (U) 1*16kB (U) 3*32kB (UME) 1*64kB (M) 3*128kB (UME) 6*256kB (UE) 2*512kB (ME) 3*1024kB (UE) 3*2048kB (U) 263*4096kB (M) = 1089604kB [ 627.262123][T11284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 627.284516][T11284] Node 1 Normal: 5*4kB (UME) 54*8kB (UME) 42*16kB (UME) 205*32kB (UME) 91*64kB (UME) 30*128kB (UME) 16*256kB (UME) 12*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3899332kB [ 627.327539][T11284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.348732][T11284] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 627.370235][T11284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 627.390368][T11284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 627.401170][T11284] 95385 total pagecache pages [ 627.411661][T11284] 0 pages in swap cache [ 627.419470][T11284] Free swap = 124376kB [ 627.430238][T11284] Total swap = 124996kB [ 627.444910][T11284] 2097051 pages RAM [ 627.449083][T11284] 0 pages HighMem/MovableOnly [ 627.454063][T11284] 427006 pages reserved [ 627.477627][T11284] 0 pages cma reserved [ 628.449058][ T5914] usb usb4-port1: attempt power cycle [ 628.593634][ T977] usb 6-1: USB disconnect, device number 37 [ 628.909630][ T5914] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 629.269899][ T5914] usb 4-1: device descriptor read/8, error -71 [ 630.609031][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 631.464733][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 631.471718][ T25] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 631.511035][ T25] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 631.559245][ T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 631.615410][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 631.646330][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.681927][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 632.121524][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 632.133156][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 632.154960][ T25] usb 6-1: string descriptor 0 read error: -22 [ 632.165147][ T25] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 632.177134][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.235172][ T25] usb 6-1: config 0 descriptor?? [ 632.249897][T11367] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 632.259548][ T25] hub 6-1:0.0: bad descriptor, ignoring hub [ 632.265515][ T25] hub 6-1:0.0: probe with driver hub failed with error -5 [ 632.295484][ T25] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18 [ 632.315968][ C1] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.5-1/input0, status -1 [ 632.435715][ T974] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 632.484182][ T977] usb 6-1: USB disconnect, device number 38 [ 632.579775][T11393] syzkaller1: entered promiscuous mode [ 632.585391][T11393] syzkaller1: entered allmulticast mode [ 632.745235][ T974] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 632.754549][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.770798][ T974] usb 4-1: config 0 descriptor?? [ 633.970405][ T977] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 634.297823][ T977] usb 6-1: Using ep0 maxpacket: 16 [ 634.315103][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.315157][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.315218][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.315308][ T977] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.315368][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.623238][ T977] usb 6-1: config 0 descriptor?? [ 635.277486][ T974] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 635.633943][ T974] [drm] Initialized udl on minor 2 [ 635.687493][ T974] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 635.751005][ T974] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 635.919487][ T977] microsoft 0003:045E:07DA.000F: item fetching failed at offset 32/34 [ 636.122211][ T5829] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 636.142412][ T5829] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 636.211422][ T977] microsoft 0003:045E:07DA.000F: parse failed [ 636.218218][ T974] usb 4-1: USB disconnect, device number 47 [ 636.249660][ T977] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 636.272312][ T977] usb 6-1: USB disconnect, device number 39 [ 639.152829][ T5829] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 639.298064][T11444] vlan2: entered allmulticast mode [ 640.746508][ T5829] usb 3-1: device descriptor read/all, error -71 [ 640.818996][ T5914] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 641.310050][T11460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 641.977471][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 641.989000][ T5914] usb 1-1: config 206 has an invalid interface number: 241 but max is 2 [ 642.043420][ T5914] usb 1-1: config 206 has an invalid interface number: 228 but max is 2 [ 642.170055][ T5914] usb 1-1: config 206 has an invalid interface number: 79 but max is 2 [ 642.187511][ T5914] usb 1-1: config 206 has no interface number 0 [ 642.203566][ T5914] usb 1-1: config 206 has no interface number 1 [ 642.317290][ T5914] usb 1-1: config 206 has no interface number 2 [ 642.323998][ T5914] usb 1-1: config 206 interface 241 has no altsetting 0 [ 642.331329][ T5914] usb 1-1: config 206 interface 228 has no altsetting 0 [ 642.338492][ T5914] usb 1-1: config 206 interface 79 has no altsetting 0 [ 642.348513][ T5914] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 642.369057][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.400962][ T5914] usb 1-1: Product: syz [ 642.405501][ T5914] usb 1-1: Manufacturer: syz [ 642.411873][ T5914] usb 1-1: SerialNumber: syz [ 643.272799][ T5914] usb 1-1: can't set config #206, error -71 [ 643.278881][ T9286] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 643.294547][ T5914] usb 1-1: USB disconnect, device number 46 [ 644.047224][ T9286] usb 4-1: device descriptor read/64, error -71 [ 644.528596][ T9286] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 644.667664][ T9286] usb 4-1: device descriptor read/64, error -71 [ 645.470033][ T9286] usb usb4-port1: attempt power cycle [ 645.657415][T11486] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 648.521457][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 654.052654][ T5829] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 654.409371][ T5829] usb 2-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 654.423707][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.578112][ T5829] usb 2-1: config 0 descriptor?? [ 654.738051][ T9286] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 654.877302][ T9286] usb 6-1: device descriptor read/64, error -71 [ 655.774566][ T5829] wacom 0003:056A:00B1.0010: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 655.805975][ T5829] wacom 0003:056A:00B1.0010: hidraw0: USB HID v1.01 Device [HID 056a:00b1] on usb-dummy_hcd.1-1/input0 [ 655.828512][ T9286] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 655.828795][ T5829] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B1.0010/input/input19 [ 656.131105][ T9286] usb 6-1: device descriptor read/64, error -71 [ 656.258771][ T9286] usb usb6-port1: attempt power cycle [ 656.397022][ T5829] usb 2-1: USB disconnect, device number 57 [ 656.812052][ T974] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 657.007183][ T9286] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 657.045740][ T974] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 657.065279][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.178672][ T974] usb 1-1: Product: syz [ 657.635562][ T9286] usb 6-1: device descriptor read/8, error -71 [ 657.701107][ T974] usb 1-1: Manufacturer: syz [ 657.705780][ T974] usb 1-1: SerialNumber: syz [ 657.712837][ T974] usb 1-1: config 0 descriptor?? [ 657.720598][ T974] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 657.892072][T11635] xt_hashlimit: size too large, truncated to 1048576 [ 657.899155][T11635] xt_hashlimit: max too large, truncated to 1048576 [ 658.174743][ T47] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 658.383835][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 658.396896][ T47] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 658.458404][ T47] usb 2-1: config 0 has no interface number 0 [ 658.468618][ T47] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.483721][ T47] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 658.492964][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.501660][ T47] usb 2-1: Product: syz [ 658.505952][ T47] usb 2-1: Manufacturer: syz [ 658.510819][ T47] usb 2-1: SerialNumber: syz [ 658.517835][ T47] usb 2-1: config 0 descriptor?? [ 658.550238][ T47] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 658.779191][ T9] usb 2-1: USB disconnect, device number 58 [ 658.786416][ T6035] usb 2-1: Failed to submit usb control message: -71 [ 658.799357][ T6035] usb 2-1: unable to send the bmi data to the device: -71 [ 658.828541][ T6035] usb 2-1: unable to get target info from device [ 658.855363][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1459'. [ 658.872722][ T6035] usb 2-1: could not get target info (-71) [ 658.882344][ T6035] usb 2-1: could not probe fw (-71) [ 659.893985][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.923407][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.933091][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.939770][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.239427][ T5821] usb 1-1: USB disconnect, device number 47 [ 661.270587][ T47] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 661.304954][T11674] random: crng reseeded on system resumption [ 662.789048][ T47] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 662.809478][ T47] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 662.895064][ T47] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 663.370594][ T47] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 663.384018][ T47] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 663.393316][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.808685][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 664.822432][ T47] ath6kl: Failed to submit usb control message: -71 [ 664.829254][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 664.836450][ T47] ath6kl: Unable to send get target info: -71 [ 664.849837][ T47] ath6kl: Failed to init ath6kl core: -71 [ 664.865324][ T47] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 664.979851][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 664.999366][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 665.006748][ T47] usb 6-1: USB disconnect, device number 44 [ 665.049588][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 665.088525][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 665.114331][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 665.150139][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.189282][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 665.220124][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 665.696226][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 665.776827][ T9] usb 3-1: string descriptor 0 read error: -22 [ 665.805076][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 665.838677][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.860472][ T9] usb 3-1: config 0 descriptor?? [ 665.882321][T11691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 665.890719][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 665.903048][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 665.924467][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 666.711601][ T25] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 666.733055][ T5914] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 667.037308][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 667.071651][ T25] usb 6-1: config 206 has an invalid interface number: 241 but max is 2 [ 667.118837][ T5914] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 667.158766][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.495209][ T5914] usb 2-1: Product: syz [ 667.499438][ T5914] usb 2-1: Manufacturer: syz [ 667.504273][ T5914] usb 2-1: SerialNumber: syz [ 667.511887][ T9] usb 3-1: USB disconnect, device number 71 [ 667.518289][ T25] usb 6-1: config 206 has an invalid interface number: 228 but max is 2 [ 667.519884][ T5914] usb 2-1: config 0 descriptor?? [ 667.534384][ T5914] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 059 [ 667.632904][ T25] usb 6-1: config 206 has an invalid interface number: 79 but max is 2 [ 667.641233][ T25] usb 6-1: config 206 has no interface number 0 [ 667.647630][ T25] usb 6-1: config 206 has no interface number 1 [ 667.654223][ T25] usb 6-1: config 206 has no interface number 2 [ 667.660525][ T25] usb 6-1: config 206 interface 241 has no altsetting 0 [ 667.667775][ T25] usb 6-1: config 206 interface 228 has no altsetting 0 [ 667.674942][ T25] usb 6-1: config 206 interface 79 has no altsetting 0 [ 667.684884][ T25] usb 6-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 667.693959][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.702208][ T25] usb 6-1: Product: syz [ 667.706503][ T25] usb 6-1: Manufacturer: syz [ 667.711165][ T25] usb 6-1: SerialNumber: syz [ 668.083722][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 668.792261][ T5914] i2c i2c-1: connected i2c-tiny-usb device [ 668.890530][ T25] usb 6-1: selecting invalid altsetting 0 [ 668.902258][ T2342] pvrusb2: Invalid write control endpoint [ 668.907919][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 668.918832][ T25] usb 6-1: selecting invalid altsetting 0 [ 668.931239][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 668.967568][ T25] usb 6-1: selecting invalid altsetting 0 [ 668.984461][ T25] usb 6-1: USB disconnect, device number 45 [ 669.005362][T11747] dummy0: entered promiscuous mode [ 669.008201][ T2342] pvrusb2: Invalid write control endpoint [ 669.048108][ T2342] pvrusb2: Invalid write control endpoint [ 669.053897][T11747] dummy0: left promiscuous mode [ 669.077728][ T2342] pvrusb2: Invalid write control endpoint [ 669.083821][ T2342] pvrusb2: Invalid write control endpoint [ 669.093385][ T2342] pvrusb2: Invalid write control endpoint [ 669.102943][ T2342] pvrusb2: Invalid write control endpoint [ 669.127887][ T2342] pvrusb2: Invalid write control endpoint [ 669.134972][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.143866][ T2342] pvrusb2: Invalid write control endpoint [ 669.150197][ T2342] pvrusb2: Invalid write control endpoint [ 669.155974][ T2342] pvrusb2: Invalid write control endpoint [ 669.157096][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.162465][ T2342] pvrusb2: Invalid write control endpoint [ 669.176068][ T2342] pvrusb2: Invalid write control endpoint [ 669.182374][ T2342] pvrusb2: Invalid write control endpoint [ 669.188138][ T2342] pvrusb2: Invalid write control endpoint [ 669.194406][ T2342] pvrusb2: Invalid write control endpoint [ 669.200171][ T2342] pvrusb2: Invalid write control endpoint [ 669.206408][ T2342] pvrusb2: Invalid write control endpoint [ 669.212165][ T2342] pvrusb2: Invalid write control endpoint [ 669.218455][ T2342] pvrusb2: Invalid write control endpoint [ 669.224611][ T2342] pvrusb2: Invalid write control endpoint [ 669.230362][ T2342] pvrusb2: Invalid write control endpoint [ 669.236392][ T2342] pvrusb2: Invalid write control endpoint [ 669.242155][ T2342] pvrusb2: Invalid write control endpoint [ 669.248151][ T2342] pvrusb2: Invalid write control endpoint [ 669.253921][ T2342] pvrusb2: Invalid write control endpoint [ 669.259994][ T2342] pvrusb2: Invalid write control endpoint [ 669.265749][ T2342] pvrusb2: Invalid write control endpoint [ 669.271771][ T2342] pvrusb2: Invalid write control endpoint [ 669.277666][ T2342] pvrusb2: Invalid write control endpoint [ 669.283536][ T2342] pvrusb2: Invalid write control endpoint [ 669.289390][ T2342] pvrusb2: Invalid write control endpoint [ 669.295137][ T2342] pvrusb2: Invalid write control endpoint [ 669.301554][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 669.369512][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 669.382499][ T2342] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a) [ 669.390211][ T2342] pvrusb2: Invalid write control endpoint [ 669.402847][ T2342] pvrusb2: Invalid write control endpoint [ 669.409959][ T2342] pvrusb2: Invalid write control endpoint [ 669.754122][ T2342] pvrusb2: Invalid write control endpoint [ 669.883991][ T2342] pvrusb2: Invalid write control endpoint [ 670.078488][ T2342] pvrusb2: Invalid write control endpoint [ 670.084555][ T2342] pvrusb2: Invalid write control endpoint [ 670.094350][ T47] usb 2-1: USB disconnect, device number 59 [ 670.100597][ T2342] pvrusb2: Invalid write control endpoint [ 670.110550][ T2342] pvrusb2: Invalid write control endpoint [ 670.130058][ T2342] pvrusb2: Invalid write control endpoint [ 670.226019][ T2342] pvrusb2: Invalid write control endpoint [ 670.232620][ T2342] pvrusb2: Invalid write control endpoint [ 670.238429][ T2342] pvrusb2: Invalid write control endpoint [ 670.244350][ T2342] pvrusb2: Invalid write control endpoint [ 670.251479][ T2342] pvrusb2: Invalid write control endpoint [ 670.257261][ T2342] pvrusb2: Invalid write control endpoint [ 670.263795][ T2342] pvrusb2: Invalid write control endpoint [ 670.269586][ T2342] pvrusb2: Invalid write control endpoint [ 670.275452][ T2342] pvrusb2: Invalid write control endpoint [ 670.281437][ T2342] pvrusb2: Invalid write control endpoint [ 670.302950][ T2342] pvrusb2: Invalid write control endpoint [ 670.328431][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 670.345453][ T5832] Bluetooth: hci3: sending frame failed (-49) [ 670.355277][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 670.598648][ T2342] pvrusb2: Invalid write control endpoint [ 670.610709][ T2342] pvrusb2: Invalid write control endpoint [ 670.617253][ T2342] pvrusb2: Invalid write control endpoint [ 670.623129][ T2342] pvrusb2: Invalid write control endpoint [ 670.628990][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 670.646276][ T2342] pvrusb2: Device being rendered inoperable [ 670.652213][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 670.665109][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 670.681951][ T2342] pvrusb2: Invalid write control endpoint [ 671.326048][ T2342] pvrusb2: Invalid write control endpoint [ 671.332000][ T2342] pvrusb2: Invalid write control endpoint [ 671.337802][ T2342] pvrusb2: Invalid write control endpoint [ 671.592395][ T2342] pvrusb2: Invalid write control endpoint [ 671.843876][ T2342] pvrusb2: Invalid write control endpoint [ 671.849780][ T2342] pvrusb2: Invalid write control endpoint [ 672.436983][ T2342] pvrusb2: Invalid write control endpoint [ 672.529690][ T2342] pvrusb2: Invalid write control endpoint [ 672.535602][ T2342] pvrusb2: Invalid write control endpoint [ 672.563857][ T2342] pvrusb2: Invalid write control endpoint [ 672.569762][ T2342] pvrusb2: Invalid write control endpoint [ 672.675927][ T2342] pvrusb2: Invalid write control endpoint [ 672.756648][ T2342] pvrusb2: Invalid write control endpoint [ 672.770427][ T2342] pvrusb2: Invalid write control endpoint [ 672.790913][ T2342] pvrusb2: Invalid write control endpoint [ 672.798395][ T2342] pvrusb2: Invalid write control endpoint [ 672.804195][ T2342] pvrusb2: Invalid write control endpoint [ 672.865991][ T2342] pvrusb2: Invalid write control endpoint [ 673.650220][ T47] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 673.660240][ T2342] pvrusb2: Invalid write control endpoint [ 673.843692][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 673.848621][ T2342] pvrusb2: Invalid write control endpoint [ 673.850615][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.861440][ T2342] pvrusb2: Invalid write control endpoint [ 673.865897][ T5905] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 674.036223][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 674.077379][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.088224][ T2342] pvrusb2: Invalid write control endpoint [ 674.090733][ T47] usb 4-1: config 0 descriptor?? [ 674.099083][ T2342] pvrusb2: Invalid write control endpoint [ 674.290448][ T2342] pvrusb2: Invalid write control endpoint [ 674.545888][ T5905] usb 2-1: device descriptor read/64, error -71 [ 674.563759][ T47] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 674.590711][ T2342] pvrusb2: Invalid write control endpoint [ 674.597875][ T2342] pvrusb2: Invalid write control endpoint [ 674.605753][ T2342] pvrusb2: Invalid write control endpoint [ 674.647729][ T2342] pvrusb2: Invalid write control endpoint [ 674.993019][ T2342] pvrusb2: Invalid write control endpoint [ 675.044866][ T2342] pvrusb2: Invalid write control endpoint [ 675.058577][ T2342] pvrusb2: Invalid write control endpoint [ 675.067414][ T2342] pvrusb2: Invalid write control endpoint [ 675.086905][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 675.096969][ T5905] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 675.230049][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 675.242001][ T2342] pvrusb2: Invalid write control endpoint [ 675.251498][ T2342] pvrusb2: Invalid write control endpoint [ 675.262180][ T2342] pvrusb2: Invalid write control endpoint [ 675.269545][ T2342] pvrusb2: Invalid write control endpoint [ 675.279025][ T2342] pvrusb2: Invalid write control endpoint [ 675.284812][ T2342] pvrusb2: Invalid write control endpoint [ 675.293801][ T2342] pvrusb2: Invalid write control endpoint [ 675.303260][ T2342] pvrusb2: Invalid write control endpoint [ 675.309280][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 675.323807][ T2342] pvrusb2: Invalid write control endpoint [ 675.330776][ T2342] pvrusb2: Invalid write control endpoint [ 675.336772][ T2342] pvrusb2: Invalid write control endpoint [ 675.348445][ T2342] pvrusb2: Invalid write control endpoint [ 675.354692][ T2342] pvrusb2: Invalid write control endpoint [ 675.367406][ T2342] pvrusb2: Invalid write control endpoint [ 675.373263][ T5905] usb 2-1: device descriptor read/64, error -71 [ 675.416285][ T9286] usb 4-1: USB disconnect, device number 51 [ 675.422392][ T2342] pvrusb2: Invalid write control endpoint [ 675.428350][ T2342] pvrusb2: Invalid write control endpoint [ 675.434218][ T2342] pvrusb2: Invalid write control endpoint [ 675.440201][ T2342] pvrusb2: Invalid write control endpoint [ 675.499616][ T5905] usb usb2-port1: attempt power cycle [ 675.586936][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 675.597594][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.607301][ T2342] pvrusb2: Invalid write control endpoint [ 675.614575][ T2342] pvrusb2: Invalid write control endpoint [ 675.617166][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.642231][ T2342] pvrusb2: Invalid write control endpoint [ 675.653692][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 675.663862][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 675.670331][ T9] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 675.695753][ T9] usb 1-1: Product: syz [ 675.699975][ T9] usb 1-1: Manufacturer: syz [ 675.707239][ T9] usb 1-1: config 0 descriptor?? [ 675.737102][ T2342] pvrusb2: Invalid write control endpoint [ 675.743307][ T2342] pvrusb2: Invalid write control endpoint [ 675.754168][ T2342] pvrusb2: Invalid write control endpoint [ 675.763935][ T2342] pvrusb2: Invalid write control endpoint [ 675.773069][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 675.804771][ T2342] pvrusb2: Device being rendered inoperable [ 675.830707][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 675.869735][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 675.932108][T11784] [U] ^C [ 675.940598][ T2342] pvrusb2: Invalid write control endpoint [ 676.765785][ T9] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0xe [ 676.775260][ T9] kovaplus 0003:1E7D:2D50.0011: item fetching failed at offset 6/7 [ 676.807507][ T9] kovaplus 0003:1E7D:2D50.0011: parse failed [ 676.843159][ T9] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -22 [ 676.861583][ T2342] pvrusb2: Invalid write control endpoint [ 676.878580][ T2342] pvrusb2: Invalid write control endpoint [ 676.892072][ T2342] pvrusb2: Invalid write control endpoint [ 676.905032][ T2342] pvrusb2: Invalid write control endpoint [ 676.917805][ T2342] pvrusb2: Invalid write control endpoint [ 677.149775][ T2342] pvrusb2: Invalid write control endpoint [ 677.155705][ T2342] pvrusb2: Invalid write control endpoint [ 677.161660][ T2342] pvrusb2: Invalid write control endpoint [ 677.170495][ T2342] pvrusb2: Invalid write control endpoint [ 677.176277][ T2342] pvrusb2: Invalid write control endpoint [ 677.182257][ T2342] pvrusb2: Invalid write control endpoint [ 677.191587][ T2342] pvrusb2: Invalid write control endpoint [ 677.197378][ T2342] pvrusb2: Invalid write control endpoint [ 677.252270][ T2342] pvrusb2: Invalid write control endpoint [ 677.265743][ T2342] pvrusb2: Invalid write control endpoint [ 677.294153][ T2342] pvrusb2: Invalid write control endpoint [ 677.316335][ T2342] pvrusb2: Invalid write control endpoint [ 677.327098][ T2342] pvrusb2: Invalid write control endpoint [ 677.334380][ T2342] pvrusb2: Invalid write control endpoint [ 677.346081][ T2342] pvrusb2: Invalid write control endpoint [ 677.352854][ T2342] pvrusb2: Invalid write control endpoint [ 677.358746][ T2342] pvrusb2: Invalid write control endpoint [ 677.364753][ T2342] pvrusb2: Invalid write control endpoint [ 677.370586][ T2342] pvrusb2: Invalid write control endpoint [ 677.376361][ T2342] pvrusb2: Invalid write control endpoint [ 678.460501][ T2342] pvrusb2: Invalid write control endpoint [ 678.476725][ T2342] pvrusb2: Invalid write control endpoint [ 678.487406][ T2342] pvrusb2: Invalid write control endpoint [ 678.496855][ T2342] pvrusb2: Invalid write control endpoint [ 678.509274][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 678.520771][ T2342] pvrusb2: Invalid write control endpoint [ 678.529381][ T2342] pvrusb2: Invalid write control endpoint [ 678.535170][ T2342] pvrusb2: Invalid write control endpoint [ 678.544889][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 678.555070][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 678.630995][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_d) [ 678.652169][ T2342] pvrusb2: Invalid write control endpoint [ 678.665415][ T2342] pvrusb2: Invalid write control endpoint [ 678.677173][ T2342] pvrusb2: Invalid write control endpoint [ 678.694883][ T2342] pvrusb2: Invalid write control endpoint [ 678.713763][ T2342] pvrusb2: Invalid write control endpoint [ 678.734267][ T2342] pvrusb2: Invalid write control endpoint [ 678.747313][ T2342] pvrusb2: Invalid write control endpoint [ 678.780194][ T2342] pvrusb2: Invalid write control endpoint [ 678.793392][ T2342] pvrusb2: Invalid write control endpoint [ 678.805682][ T2342] pvrusb2: Invalid write control endpoint [ 678.818579][ T2342] pvrusb2: Invalid write control endpoint [ 678.830818][ T2342] pvrusb2: Invalid write control endpoint [ 678.851794][ T2342] pvrusb2: Invalid write control endpoint [ 678.866097][ T2342] pvrusb2: Invalid write control endpoint [ 678.975717][ T2342] pvrusb2: Invalid write control endpoint [ 678.981516][ T2342] pvrusb2: Invalid write control endpoint [ 678.987656][ T2342] pvrusb2: Invalid write control endpoint [ 678.993560][ T2342] pvrusb2: Invalid write control endpoint [ 678.999782][ T2342] pvrusb2: Invalid write control endpoint [ 679.005922][ T2342] pvrusb2: Invalid write control endpoint [ 679.011700][ T2342] pvrusb2: Invalid write control endpoint [ 679.017981][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 679.088220][ T2342] pvrusb2: Invalid write control endpoint [ 679.094624][ T2342] pvrusb2: Invalid write control endpoint [ 679.145554][ T2342] pvrusb2: Invalid write control endpoint [ 679.159823][ T2342] pvrusb2: Invalid write control endpoint [ 679.186768][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 679.384235][ T2342] pvrusb2: Device being rendered inoperable [ 679.428216][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 679.528780][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 679.809075][ T9286] usb 1-1: USB disconnect, device number 48 [ 680.459693][ T9286] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 681.210947][ T9286] usb 1-1: Using ep0 maxpacket: 32 [ 681.225564][ T9286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.368684][ T25] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 681.390470][ T9286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.409855][ T9286] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 681.585532][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 681.589732][ T9286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.594654][ T25] usb 2-1: config 206 has an invalid interface number: 241 but max is 2 [ 681.661447][ T25] usb 2-1: config 206 has an invalid interface number: 228 but max is 2 [ 681.700929][ T25] usb 2-1: config 206 has an invalid interface number: 79 but max is 2 [ 681.793822][ T9286] usb 1-1: config 0 descriptor?? [ 681.797579][ T25] usb 2-1: config 206 has no interface number 0 [ 681.805258][ T25] usb 2-1: config 206 has no interface number 1 [ 681.811846][ T25] usb 2-1: config 206 has no interface number 2 [ 681.827894][T11862] fuse: Bad value for 'fd' [ 682.002230][ T25] usb 2-1: config 206 interface 241 has no altsetting 0 [ 682.305855][ T25] usb 2-1: config 206 interface 228 has no altsetting 0 [ 682.312955][ T25] usb 2-1: config 206 interface 79 has no altsetting 0 [ 682.363518][ T25] usb 2-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 682.373002][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.392358][ T25] usb 2-1: Product: syz [ 682.404637][ T25] usb 2-1: Manufacturer: syz [ 682.416336][ T25] usb 2-1: SerialNumber: syz [ 683.013244][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 683.029006][ T25] usb 2-1: selecting invalid altsetting 0 [ 683.043346][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 683.057193][ T2342] pvrusb2: Invalid write control endpoint [ 683.063587][ T25] usb 2-1: selecting invalid altsetting 0 [ 683.102293][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 683.111186][ T25] usb 2-1: selecting invalid altsetting 0 [ 683.124105][ T9286] usb 1-1: string descriptor 0 read error: -71 [ 683.152988][ T9286] uclogic 0003:5543:3031.0012: failed retrieving string descriptor #200: -71 [ 683.158843][ T25] usb 2-1: USB disconnect, device number 63 [ 683.169328][ T2342] pvrusb2: Invalid write control endpoint [ 683.175413][ T2342] pvrusb2: Invalid write control endpoint [ 683.181428][ T2342] pvrusb2: Invalid write control endpoint [ 683.181515][ T9286] uclogic 0003:5543:3031.0012: failed retrieving pen parameters: -71 [ 683.187548][ T2342] pvrusb2: Invalid write control endpoint [ 683.201735][ T2342] pvrusb2: Invalid write control endpoint [ 683.207727][ T2342] pvrusb2: Invalid write control endpoint [ 683.213488][ T2342] pvrusb2: Invalid write control endpoint [ 683.219447][ T2342] pvrusb2: Invalid write control endpoint [ 683.225215][ T2342] pvrusb2: Invalid write control endpoint [ 683.231063][ T2342] pvrusb2: Invalid write control endpoint [ 683.236845][ T2342] pvrusb2: Invalid write control endpoint [ 683.242712][ T2342] pvrusb2: Invalid write control endpoint [ 683.248463][ T2342] pvrusb2: Invalid write control endpoint [ 683.253483][ T9286] uclogic 0003:5543:3031.0012: failed probing pen v2 parameters: -71 [ 683.254254][ T2342] pvrusb2: Invalid write control endpoint [ 683.268037][ T2342] pvrusb2: Invalid write control endpoint [ 683.273878][ T2342] pvrusb2: Invalid write control endpoint [ 683.275161][ T9286] uclogic 0003:5543:3031.0012: failed probing parameters: -71 [ 683.279604][ T2342] pvrusb2: Invalid write control endpoint [ 683.292972][ T2342] pvrusb2: Invalid write control endpoint [ 683.298735][ T2342] pvrusb2: Invalid write control endpoint [ 683.304533][ T2342] pvrusb2: Invalid write control endpoint [ 683.310317][ T2342] pvrusb2: Invalid write control endpoint [ 683.316106][ T2342] pvrusb2: Invalid write control endpoint [ 683.321863][ T2342] pvrusb2: Invalid write control endpoint [ 683.327715][ T2342] pvrusb2: Invalid write control endpoint [ 683.333475][ T2342] pvrusb2: Invalid write control endpoint [ 683.339312][ T2342] pvrusb2: Invalid write control endpoint [ 683.345125][ T2342] pvrusb2: Invalid write control endpoint [ 683.350937][ T2342] pvrusb2: Invalid write control endpoint [ 683.356765][ T2342] pvrusb2: Invalid write control endpoint [ 683.362539][ T2342] pvrusb2: Invalid write control endpoint [ 683.368464][ T2342] pvrusb2: Invalid write control endpoint [ 683.374437][ T9286] uclogic 0003:5543:3031.0012: probe with driver uclogic failed with error -71 [ 683.374705][ T2342] pvrusb2: Invalid write control endpoint [ 683.389847][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 683.410122][ T9286] usb 1-1: USB disconnect, device number 49 [ 683.453659][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 683.460108][ T2342] pvrusb2: Invalid write control endpoint [ 683.467983][ T2342] pvrusb2: Invalid write control endpoint [ 683.473799][ T2342] pvrusb2: Invalid write control endpoint [ 683.516769][ T2342] pvrusb2: Invalid write control endpoint [ 683.524084][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 683.549643][ T2342] pvrusb2: Invalid write control endpoint [ 683.555513][ T2342] pvrusb2: Invalid write control endpoint [ 683.567540][T11876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1525'. [ 683.587710][ T2342] pvrusb2: Invalid write control endpoint [ 683.600043][ T2342] pvrusb2: Invalid write control endpoint [ 683.606124][ T2342] pvrusb2: Invalid write control endpoint [ 683.618928][ T2342] pvrusb2: Invalid write control endpoint [ 683.626236][ T2342] pvrusb2: Invalid write control endpoint [ 683.632053][ T2342] pvrusb2: Invalid write control endpoint [ 683.642872][ T2342] pvrusb2: Invalid write control endpoint [ 683.649348][ T2342] pvrusb2: Invalid write control endpoint [ 683.661982][ T2342] pvrusb2: Invalid write control endpoint [ 683.668152][ T2342] pvrusb2: Invalid write control endpoint [ 683.674446][ T2342] pvrusb2: Invalid write control endpoint [ 683.684873][ T2342] pvrusb2: Invalid write control endpoint [ 683.691836][ T2342] pvrusb2: Invalid write control endpoint [ 683.697736][ T2342] pvrusb2: Invalid write control endpoint [ 683.703817][ T2342] pvrusb2: Invalid write control endpoint [ 683.713641][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 683.917517][T11888] random: crng reseeded on system resumption [ 685.821174][ T2342] pvrusb2: Invalid write control endpoint [ 685.828343][ T2342] pvrusb2: Invalid write control endpoint [ 686.132919][ T2342] pvrusb2: Invalid write control endpoint [ 686.297144][ T2342] pvrusb2: Invalid write control endpoint [ 686.318417][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 686.388760][ T2342] pvrusb2: Device being rendered inoperable [ 686.412081][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 686.433724][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 686.497665][ T25] pvrusb2: Device being rendered inoperable [ 686.505259][ T25] pvrusb2: Device being rendered inoperable [ 687.275039][ T29] audit: type=1326 audit(1734755188.764:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11896 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 687.418979][ T29] audit: type=1326 audit(1734755188.764:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11896 comm="syz.5.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 688.025153][T11915] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1533'. [ 689.285788][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 689.306698][T11921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1537'. [ 692.322444][ T29] audit: type=1326 audit(1734755193.478:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 692.870895][ T29] audit: type=1326 audit(1734755193.478:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11942 comm="syz.5.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 693.212955][ T8] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 693.504226][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1553'. [ 693.513448][T11971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1553'. [ 693.557564][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 693.656850][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 693.682004][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 693.694710][ T8] usb 4-1: config 0 has no interface number 0 [ 693.724985][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 693.748273][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.762139][ T8] usb 4-1: Product: syz [ 693.766409][ T8] usb 4-1: Manufacturer: syz [ 693.952485][ T8] usb 4-1: SerialNumber: syz [ 694.722097][ T8] usb 4-1: config 0 descriptor?? [ 694.729095][ T8] smsc95xx v2.0.0 [ 695.482524][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 695.500672][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.270515][T12002] random: crng reseeded on system resumption [ 697.647521][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 697.659784][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 697.693314][ T8] usb 4-1: USB disconnect, device number 52 [ 698.107282][T12013] netlink: 'syz.2.1562': attribute type 1 has an invalid length. [ 698.115273][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 698.719299][ T29] audit: type=1326 audit(1734755198.922:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12007 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7bd85d29 code=0x7ffc0000 [ 698.834870][ T29] audit: type=1326 audit(1734755198.922:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12007 comm="syz.2.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7bd85d29 code=0x7ffc0000 [ 699.420063][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 699.550864][T12016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1565'. [ 699.716802][T12028] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 700.770723][ T25] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 700.963638][ T25] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 700.982973][ T25] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 701.033965][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 701.080293][ T25] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 701.171418][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 701.217505][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.023744][ T35] Bluetooth: hci3: Frame reassembly failed (-84) [ 703.584063][ T25] ath6kl: Failed to submit usb control message: -110 [ 703.609069][ T25] ath6kl: unable to send the bmi data to the device: -110 [ 703.646008][ T25] ath6kl: Unable to send get target info: -110 [ 703.996555][ T25] ath6kl: Failed to init ath6kl core: -110 [ 704.005714][ T25] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 704.077407][ T9286] usb 3-1: USB disconnect, device number 72 [ 704.184663][ T5821] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 704.193016][ T5834] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 704.193485][ T5832] Bluetooth: hci3: command 0x1003 tx timeout [ 704.636972][ T5821] usb 6-1: config 0 has an invalid interface number: 178 but max is 0 [ 704.645707][ T5821] usb 6-1: config 0 has no interface number 0 [ 704.652187][ T5821] usb 6-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 704.834889][ T5821] usb 6-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 704.984349][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.144941][ T5821] usb 6-1: config 0 descriptor?? [ 705.196995][T12057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 707.440734][ T5821] usb 6-1: string descriptor 0 read error: -71 [ 707.450513][ T5821] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 707.460754][ T5821] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 707.470835][ T5821] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 707.485567][ T5821] usb 6-1: USB disconnect, device number 46 [ 707.742104][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 707.987211][ T25] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 708.042883][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.110898][ T9286] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 708.113933][ T25] usb 2-1: Product: syz [ 708.151412][ T25] usb 2-1: Manufacturer: syz [ 708.156056][ T25] usb 2-1: SerialNumber: syz [ 708.181354][ T25] usb 2-1: config 0 descriptor?? [ 708.195335][ T25] ch341 2-1:0.0: ch341-uart converter detected [ 708.351810][ T9286] usb 3-1: Using ep0 maxpacket: 8 [ 708.823163][ T25] usb 2-1: failed to receive control message: -121 [ 708.829771][ T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 708.846131][ T9286] usb 3-1: config 0 has no interfaces? [ 708.854000][ T9286] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 708.869065][ T9286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.878856][ T9286] usb 3-1: Product: syz [ 708.883153][ T9286] usb 3-1: Manufacturer: syz [ 708.892925][ T9286] usb 3-1: SerialNumber: syz [ 709.453919][ T9286] usb 3-1: config 0 descriptor?? [ 710.398555][ T8] usb 3-1: USB disconnect, device number 73 [ 711.943902][ T25] usb 2-1: USB disconnect, device number 64 [ 711.950697][ T25] ch341 2-1:0.0: device disconnected [ 713.323434][ T5821] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 713.819044][T12132] FAULT_INJECTION: forcing a failure. [ 713.819044][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 713.831926][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.3.1595 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 713.842749][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 713.852837][T12132] Call Trace: [ 713.856144][T12132] [ 713.859104][T12132] dump_stack_lvl+0x241/0x360 [ 713.863824][T12132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.869056][T12132] ? __pfx__printk+0x10/0x10 [ 713.873681][T12132] ? __kmalloc_cache_noprof+0x48/0x390 [ 713.879170][T12132] ? __pfx___might_resched+0x10/0x10 [ 713.884485][T12132] should_fail_ex+0x3b0/0x4e0 [ 713.889235][T12132] should_failslab+0xac/0x100 [ 713.893962][T12132] __kmalloc_cache_noprof+0x70/0x390 [ 713.899265][T12132] ? snd_card_file_add+0x5b/0x270 [ 713.904319][T12132] snd_card_file_add+0x5b/0x270 [ 713.909207][T12132] snd_mixer_oss_open+0xa7/0x240 [ 713.914179][T12132] ? soundcore_open+0x2d5/0x490 [ 713.919059][T12132] chrdev_open+0x521/0x600 [ 713.923520][T12132] ? __pfx_chrdev_open+0x10/0x10 [ 713.928491][T12132] ? do_raw_spin_unlock+0x13c/0x8b0 [ 713.933737][T12132] ? __pfx_chrdev_open+0x10/0x10 [ 713.938717][T12132] do_dentry_open+0xbe1/0x1b70 [ 713.943536][T12132] vfs_open+0x3e/0x330 [ 713.947666][T12132] path_openat+0x2c84/0x3590 [ 713.952340][T12132] ? __pfx_path_openat+0x10/0x10 [ 713.957333][T12132] do_filp_open+0x27f/0x4e0 [ 713.961874][T12132] ? __pfx_do_filp_open+0x10/0x10 [ 713.966928][T12132] ? do_raw_spin_lock+0x14f/0x370 [ 713.972018][T12132] do_sys_openat2+0x13e/0x1d0 [ 713.976729][T12132] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.981957][T12132] ? __fget_files+0x2a/0x410 [ 713.986578][T12132] ? __fget_files+0x2a/0x410 [ 713.991202][T12132] __x64_sys_openat+0x247/0x2a0 [ 713.996083][T12132] ? __pfx___x64_sys_openat+0x10/0x10 [ 714.001746][T12132] ? do_syscall_64+0x100/0x230 [ 714.006549][T12132] ? do_syscall_64+0xb6/0x230 [ 714.011264][T12132] do_syscall_64+0xf3/0x230 [ 714.015809][T12132] ? clear_bhb_loop+0x35/0x90 [ 714.020514][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.026442][T12132] RIP: 0033:0x7f5958385d29 [ 714.030884][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.050520][T12132] RSP: 002b:00007f5959179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 714.058982][T12132] RAX: ffffffffffffffda RBX: 00007f5958576160 RCX: 00007f5958385d29 [ 714.066983][T12132] RDX: 0000000000080002 RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 714.074986][T12132] RBP: 00007f5959179090 R08: 0000000000000000 R09: 0000000000000000 [ 714.082998][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.090998][T12132] R13: 0000000000000000 R14: 00007f5958576160 R15: 00007ffc970a0e18 [ 714.099019][T12132] [ 714.862982][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 714.869940][ T5821] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 714.878323][ T5821] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 714.908261][ T5821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 714.931155][T12138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 714.952584][ T5821] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 715.063595][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.086575][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 715.098467][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 715.137568][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 715.308116][ T5821] usb 6-1: string descriptor 0 read error: -71 [ 715.353591][ T5821] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 715.431120][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.646303][ T5821] usb 6-1: config 0 descriptor?? [ 715.651788][ T5821] usb 6-1: can't set config #0, error -71 [ 715.659181][ T5821] usb 6-1: USB disconnect, device number 47 [ 718.422088][ T974] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 719.522391][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 719.565334][ T974] usb 1-1: device descriptor read/all, error -71 [ 720.143376][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 721.201078][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 721.210302][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.378102][ T47] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 722.219188][ T9] usb 4-1: config 0 descriptor?? [ 722.495428][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 722.509839][ T47] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 722.518416][ T47] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 722.528457][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 722.538487][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 722.548620][ T47] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.562004][ T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 722.571313][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.857206][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.886086][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.927218][ T47] usb 6-1: GET_CAPABILITIES returned 0 [ 722.932936][ T47] usbtmc 6-1:16.0: can't read capabilities [ 723.038278][ T974] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 723.056717][T12194] input: syz1 as /devices/virtual/input/input24 [ 723.239295][ T974] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 723.251585][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.394160][ T47] usb 6-1: USB disconnect, device number 48 [ 723.400802][ T974] usb 1-1: config 0 descriptor?? [ 723.403361][ T974] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 723.827010][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.846658][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.860644][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.875916][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.158187][ T974] gspca_cpia1: usb_control_msg 03, error -71 [ 724.190971][ T974] gspca_cpia1: usb_control_msg 01, error -71 [ 724.214691][ T974] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 724.333565][ T974] usb 1-1: USB disconnect, device number 52 [ 724.554897][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 724.603095][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 724.611908][ T9] [drm] Initialized udl on minor 2 [ 724.623055][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.650457][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 724.666055][ T9] usb 4-1: USB disconnect, device number 53 [ 724.678110][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 724.686270][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 725.244072][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.250574][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.955692][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 725.969273][T12231] affs: No valid root block on device nullb0 [ 726.076495][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 726.578997][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 726.588859][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.600386][ T9] usb 1-1: Product: syz [ 726.604649][ T9] usb 1-1: Manufacturer: syz [ 726.609407][ T9] usb 1-1: SerialNumber: syz [ 726.623064][ T9] usb 1-1: config 0 descriptor?? [ 726.663828][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 053 [ 728.767504][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 728.847643][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 729.139286][T12220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.175294][T12220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.305829][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 729.423038][ T5821] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 729.661515][ T5821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 729.672104][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.680552][ T25] usb 1-1: USB disconnect, device number 53 [ 729.687422][ T5821] usb 2-1: Product: syz [ 729.693558][ T5821] usb 2-1: Manufacturer: syz [ 729.717380][ T5821] usb 2-1: SerialNumber: syz [ 729.773871][ T5821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 729.838707][ T974] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 730.322588][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 730.522474][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 730.969233][ T974] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 731.097865][ T974] ath9k_htc: Failed to initialize the device [ 731.204774][ T974] usb 2-1: ath9k_htc: USB layer deinitialized [ 731.240348][T12270] 9pnet: p9_errstr2errno: server reported unknown error @b [ 731.532321][T12269] affs: No valid root block on device nullb0 [ 731.996951][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 732.844179][T12303] fuse: Bad value for 'fd' [ 733.332248][ T974] usb 2-1: USB disconnect, device number 65 [ 735.016759][T12322] random: crng reseeded on system resumption [ 735.142234][ T9286] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 736.831838][ T9286] usb 1-1: Using ep0 maxpacket: 32 [ 736.838571][ T9286] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 736.846868][ T9286] usb 1-1: config 0 has no interface number 0 [ 736.909150][ T9286] usb 1-1: config 0 interface 12 has no altsetting 0 [ 737.135722][ T9286] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 737.151698][ T9286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.161549][ T9286] usb 1-1: Product: syz [ 737.250087][ T9286] usb 1-1: config 0 descriptor?? [ 737.257217][ T9286] usb 1-1: can't set config #0, error -71 [ 737.469153][ T29] audit: type=1326 audit(1734755235.683:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12334 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 737.469294][ T9286] usb 1-1: USB disconnect, device number 54 [ 737.566833][ T29] audit: type=1326 audit(1734755235.683:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12334 comm="syz.5.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6726385d29 code=0x7ffc0000 [ 737.588522][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.162841][T12345] FAULT_INJECTION: forcing a failure. [ 738.162841][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 738.189234][T12345] CPU: 0 UID: 0 PID: 12345 Comm: syz.0.1661 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 738.200068][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 738.210154][T12345] Call Trace: [ 738.213455][T12345] [ 738.216401][T12345] dump_stack_lvl+0x241/0x360 [ 738.221108][T12345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.226335][T12345] ? __pfx__printk+0x10/0x10 [ 738.230964][T12345] ? fs_reclaim_acquire+0x93/0x130 [ 738.236082][T12345] ? __pfx___might_resched+0x10/0x10 [ 738.241360][T12345] should_fail_ex+0x3b0/0x4e0 [ 738.246031][T12345] should_failslab+0xac/0x100 [ 738.250702][T12345] __kmalloc_noprof+0xdd/0x4c0 [ 738.255472][T12345] ? kstrtouint_from_user+0x128/0x190 [ 738.260878][T12345] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 738.266627][T12345] tomoyo_realpath_from_path+0xcf/0x5e0 [ 738.272212][T12345] tomoyo_path_number_perm+0x236/0x860 [ 738.277709][T12345] ? __lock_acquire+0x1397/0x2100 [ 738.282773][T12345] ? tomoyo_path_number_perm+0x206/0x860 [ 738.288434][T12345] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 738.294482][T12345] ? __fget_files+0x2a/0x410 [ 738.299094][T12345] ? __fget_files+0x2a/0x410 [ 738.303709][T12345] security_file_ioctl+0xc6/0x2a0 [ 738.308754][T12345] __se_sys_ioctl+0x46/0x170 [ 738.313366][T12345] do_syscall_64+0xf3/0x230 [ 738.317893][T12345] ? clear_bhb_loop+0x35/0x90 [ 738.322590][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.328508][T12345] RIP: 0033:0x7f144ef85d29 [ 738.332947][T12345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.352573][T12345] RSP: 002b:00007f144fe99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.361012][T12345] RAX: ffffffffffffffda RBX: 00007f144f175fa0 RCX: 00007f144ef85d29 [ 738.368998][T12345] RDX: 0000000020000440 RSI: 0000000000003b83 RDI: 000000000000000a [ 738.376986][T12345] RBP: 00007f144fe99090 R08: 0000000000000000 R09: 0000000000000000 [ 738.384974][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.392959][T12345] R13: 0000000000000000 R14: 00007f144f175fa0 R15: 00007ffcf1abc1a8 [ 738.400962][T12345] [ 739.303437][T12345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 740.113405][ T974] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 740.287276][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 740.991492][ T974] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 741.096659][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.127670][ T974] usb 3-1: Product: syz [ 741.132071][ T974] usb 3-1: Manufacturer: syz [ 741.139613][ T974] usb 3-1: SerialNumber: syz [ 741.201164][T12375] xt_TCPMSS: Only works on TCP SYN packets [ 742.132436][ T974] usb 3-1: config 0 descriptor?? [ 742.208775][ T974] usb 3-1: can't set config #0, error -71 [ 742.215771][ T974] usb 3-1: USB disconnect, device number 74 [ 742.309059][T12379] nbd: must specify an index to disconnect [ 743.667849][ T8] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 743.838879][ T8] usb 2-1: config 7 has an invalid interface number: 109 but max is 0 [ 744.862855][ T8] usb 2-1: config 7 has no interface number 0 [ 744.869040][ T8] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 744.880186][ T8] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 744.891155][ T8] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 744.891333][ T974] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 744.902191][ T8] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 744.902226][ T8] usb 2-1: config 7 interface 109 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 744.955412][ T8] usb 2-1: config 7 interface 109 has no altsetting 0 [ 744.970303][ T8] usb 2-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=d9.4d [ 744.979564][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.993587][ T8] usb 2-1: Product: syz [ 744.998050][ T8] usb 2-1: Manufacturer: syz [ 745.003119][ T8] usb 2-1: SerialNumber: syz [ 745.017165][T12383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 745.025043][T12383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 746.083086][ T8] usbhid 2-1:7.109: couldn't find an input interrupt endpoint [ 746.095018][ T8] usb 2-1: USB disconnect, device number 66 [ 746.485094][T12411] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 746.510522][T12417] 9pnet_fd: Insufficient options for proto=fd [ 746.837935][ T5914] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 747.664899][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 748.514214][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.538530][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.697969][ T5914] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 748.728962][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.753605][ T5914] usb 4-1: config 0 descriptor?? [ 749.797043][ T5914] samsung 0003:0419:0001.0013: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 752.361588][ T974] usb 4-1: USB disconnect, device number 54 [ 752.775555][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 752.977890][ T9] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 752.987574][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.011018][ T9] usb 6-1: Product: syz [ 753.028445][ T974] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 753.029653][ T9] usb 6-1: Manufacturer: syz [ 753.079908][ T9] usb 6-1: SerialNumber: syz [ 753.456772][ T9] usb 6-1: config 0 descriptor?? [ 753.953196][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 753.964354][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.980557][ T974] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 753.997424][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.013178][ T974] usb 4-1: config 0 descriptor?? [ 754.034733][ T974] hub 4-1:0.0: USB hub found [ 754.038367][ T9] usb-storage 6-1:0.0: USB Mass Storage device detected [ 754.083090][T12482] QAT: Invalid ioctl 1075883590 [ 754.088460][T12482] QAT: Invalid ioctl 1075883590 [ 754.093474][T12482] QAT: Invalid ioctl 1075883590 [ 754.098699][T12482] QAT: Invalid ioctl 1075883590 [ 754.103745][T12482] QAT: Invalid ioctl 1075883590 [ 754.108865][T12482] QAT: Invalid ioctl 1075883590 [ 754.113958][T12482] QAT: Invalid ioctl 1075883590 [ 754.119182][T12482] QAT: Invalid ioctl 1075883590 [ 754.124232][T12482] QAT: Invalid ioctl 1075883590 [ 754.129407][T12482] QAT: Invalid ioctl 1075883590 [ 754.211963][T12489] FAULT_INJECTION: forcing a failure. [ 754.211963][T12489] name failslab, interval 1, probability 0, space 0, times 0 [ 754.225824][T12489] CPU: 1 UID: 0 PID: 12489 Comm: syz.0.1701 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 754.236719][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 754.246796][T12489] Call Trace: [ 754.250100][T12489] [ 754.253046][T12489] dump_stack_lvl+0x241/0x360 [ 754.257759][T12489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.262991][T12489] ? __pfx__printk+0x10/0x10 [ 754.267614][T12489] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 754.273022][T12489] ? __pfx___might_resched+0x10/0x10 [ 754.278339][T12489] ? __asan_memset+0x23/0x50 [ 754.282953][T12489] should_fail_ex+0x3b0/0x4e0 [ 754.287635][T12489] should_failslab+0xac/0x100 [ 754.292317][T12489] __kmalloc_node_noprof+0xe1/0x4d0 [ 754.297520][T12489] ? __kvmalloc_node_noprof+0x72/0x190 [ 754.302980][T12489] __kvmalloc_node_noprof+0x72/0x190 [ 754.308262][T12489] rhashtable_init_noprof+0x534/0xa60 [ 754.313674][T12489] nft_rhash_init+0x138/0x430 [ 754.318349][T12489] ? __pfx_nft_rhash_init+0x10/0x10 [ 754.323554][T12489] ? __pfx_nft_rhash_key+0x10/0x10 [ 754.328674][T12489] ? __pfx_nft_rhash_obj+0x10/0x10 [ 754.333786][T12489] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 754.338909][T12489] ? nf_tables_newset+0x17de/0x2ee0 [ 754.344106][T12489] ? nf_tables_newset+0x17de/0x2ee0 [ 754.349303][T12489] nf_tables_newset+0x2218/0x2ee0 [ 754.354338][T12489] ? __pfx_nf_tables_newset+0x10/0x10 [ 754.359800][T12489] ? __pfx_lock_release+0x10/0x10 [ 754.364832][T12489] ? __nla_parse+0x40/0x60 [ 754.369250][T12489] nfnetlink_rcv+0x14e3/0x2ab0 [ 754.374031][T12489] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 754.379173][T12489] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.384450][T12489] ? skb_clone+0x240/0x390 [ 754.388868][T12489] ? __pfx_lock_release+0x10/0x10 [ 754.393899][T12489] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.399099][T12489] netlink_unicast+0x7f6/0x990 [ 754.403874][T12489] ? __pfx_netlink_unicast+0x10/0x10 [ 754.409159][T12489] ? __virt_addr_valid+0x45f/0x530 [ 754.414266][T12489] ? __phys_addr_symbol+0x2f/0x70 [ 754.419301][T12489] ? __check_object_size+0x47a/0x730 [ 754.424604][T12489] netlink_sendmsg+0x8e4/0xcb0 [ 754.429386][T12489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.434686][T12489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.439989][T12489] __sock_sendmsg+0x221/0x270 [ 754.444716][T12489] ____sys_sendmsg+0x52a/0x7e0 [ 754.449500][T12489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.454787][T12489] ? __fget_files+0x2a/0x410 [ 754.459403][T12489] ? __fget_files+0x2a/0x410 [ 754.464000][T12489] __sys_sendmsg+0x269/0x350 [ 754.468592][T12489] ? __pfx_lock_release+0x10/0x10 [ 754.473638][T12489] ? __pfx___sys_sendmsg+0x10/0x10 [ 754.478796][T12489] ? __pfx_vfs_write+0x10/0x10 [ 754.483623][T12489] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.489958][T12489] ? do_syscall_64+0x100/0x230 [ 754.494732][T12489] ? do_syscall_64+0xb6/0x230 [ 754.499410][T12489] do_syscall_64+0xf3/0x230 [ 754.503914][T12489] ? clear_bhb_loop+0x35/0x90 [ 754.508591][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.514484][T12489] RIP: 0033:0x7f144ef85d29 [ 754.518894][T12489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.538495][T12489] RSP: 002b:00007f144fe99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.546909][T12489] RAX: ffffffffffffffda RBX: 00007f144f175fa0 RCX: 00007f144ef85d29 [ 754.554873][T12489] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 754.562840][T12489] RBP: 00007f144fe99090 R08: 0000000000000000 R09: 0000000000000000 [ 754.570806][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.578771][T12489] R13: 0000000000000000 R14: 00007f144f175fa0 R15: 00007ffcf1abc1a8 [ 754.586752][T12489] [ 754.589786][ C1] vkms_vblank_simulate: vblank timer overrun [ 754.695565][ T974] hub 4-1:0.0: 1 port detected [ 754.731452][T12494] pim6reg1: entered promiscuous mode [ 754.737022][T12494] pim6reg1: entered allmulticast mode [ 754.769184][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 756.414537][ T974] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 756.866992][ T974] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 756.878614][ T974] usbhid 4-1:0.0: can't add hid device: -32 [ 756.884749][ T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 756.904878][ T25] usb 6-1: USB disconnect, device number 49 [ 758.608363][ T47] usb 4-1: USB disconnect, device number 55 [ 762.256025][T12557] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 762.263910][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'. [ 762.274545][ T29] audit: type=1326 audit(1734755258.909:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12543 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144ef85d29 code=0x7ffc0000 [ 762.375874][ T29] audit: type=1326 audit(1734755258.909:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12543 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144ef85d29 code=0x7ffc0000 [ 764.173974][T12568] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1725'. [ 766.922436][ T25] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 767.705821][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 767.722052][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 767.780112][ T25] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 767.790635][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.822139][ T25] usb 1-1: Product: syz [ 767.832630][ T25] usb 1-1: Manufacturer: syz [ 767.837587][ T25] usb 1-1: SerialNumber: syz [ 767.864859][ T25] usb 1-1: config 0 descriptor?? [ 767.890482][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 767.896846][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 767.935454][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 768.811725][ T9286] usb 1-1: USB disconnect, device number 55 [ 768.946358][T12610] rdma_rxe: rxe_newlink: failed to add lo [ 770.308350][T12621] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1738'. [ 771.692365][T12640] vlan2: entered allmulticast mode [ 772.024847][ T8] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 772.110316][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 772.187248][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 772.196394][ T8] usb 3-1: config 206 has an invalid interface number: 241 but max is 2 [ 772.204864][ T8] usb 3-1: config 206 has an invalid interface number: 228 but max is 2 [ 772.213494][ T8] usb 3-1: config 206 has an invalid interface number: 79 but max is 2 [ 772.222369][ T8] usb 3-1: config 206 has no interface number 0 [ 772.228894][ T8] usb 3-1: config 206 has no interface number 1 [ 772.235300][ T8] usb 3-1: config 206 has no interface number 2 [ 772.241905][ T8] usb 3-1: config 206 interface 241 has no altsetting 0 [ 772.249045][ T8] usb 3-1: config 206 interface 228 has no altsetting 0 [ 772.257356][ T8] usb 3-1: config 206 interface 79 has no altsetting 0 [ 772.267016][ T8] usb 3-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 772.276591][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.285559][ T8] usb 3-1: Product: syz [ 772.286889][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 772.289924][ T8] usb 3-1: Manufacturer: syz [ 772.303352][ T8] usb 3-1: SerialNumber: syz [ 772.310829][ T25] usb 6-1: config 206 has an invalid interface number: 241 but max is 2 [ 772.324172][ T25] usb 6-1: config 206 has an invalid interface number: 228 but max is 2 [ 772.340353][ T25] usb 6-1: config 206 has an invalid interface number: 79 but max is 2 [ 772.354571][ T25] usb 6-1: config 206 has no interface number 0 [ 772.361067][ T25] usb 6-1: config 206 has no interface number 1 [ 772.373448][ T25] usb 6-1: config 206 has no interface number 2 [ 772.380200][ T25] usb 6-1: config 206 interface 241 has no altsetting 0 [ 772.387208][ T25] usb 6-1: config 206 interface 228 has no altsetting 0 [ 772.398569][ T25] usb 6-1: config 206 interface 79 has no altsetting 0 [ 772.409313][ T25] usb 6-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 772.422158][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.430334][ T25] usb 6-1: Product: syz [ 772.438275][ T25] usb 6-1: Manufacturer: syz [ 772.453112][ T25] usb 6-1: SerialNumber: syz [ 772.555532][ T8] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.581038][ T8] usb 3-1: selecting invalid altsetting 0 [ 772.589180][ T2342] pvrusb2: Invalid write control endpoint [ 772.597117][ T8] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.607323][ T8] usb 3-1: selecting invalid altsetting 0 [ 772.641895][ T8] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.661333][ T8] usb 3-1: selecting invalid altsetting 0 [ 772.671429][ T2342] pvrusb2: Invalid write control endpoint [ 772.679425][ T2342] pvrusb2: Invalid write control endpoint [ 772.685194][ T2342] pvrusb2: Invalid write control endpoint [ 772.696887][ T8] usb 3-1: USB disconnect, device number 76 [ 772.712324][ T2342] pvrusb2: Invalid write control endpoint [ 772.714333][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.727113][ T2342] pvrusb2: Invalid write control endpoint [ 772.733097][ T2342] pvrusb2: Invalid write control endpoint [ 772.738869][ T2342] pvrusb2: Invalid write control endpoint [ 772.744872][ T2342] pvrusb2: Invalid write control endpoint [ 772.750617][ T2342] pvrusb2: Invalid write control endpoint [ 772.756819][ T25] usb 6-1: selecting invalid altsetting 0 [ 772.764689][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.769527][ T2342] pvrusb2: Invalid write control endpoint [ 772.779449][ T2342] pvrusb2: Invalid write control endpoint [ 772.783866][ T25] usb 6-1: selecting invalid altsetting 0 [ 772.789550][ T2342] pvrusb2: Invalid write control endpoint [ 772.796904][ T2342] pvrusb2: Invalid write control endpoint [ 772.798156][ T25] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 772.802792][ T2342] pvrusb2: Invalid write control endpoint [ 772.816495][ T2342] pvrusb2: Invalid write control endpoint [ 772.822253][ T2342] pvrusb2: Invalid write control endpoint [ 772.828687][ T2342] pvrusb2: Invalid write control endpoint [ 772.834526][ T2342] pvrusb2: Invalid write control endpoint [ 772.841515][ T2342] pvrusb2: Invalid write control endpoint [ 772.847302][ T2342] pvrusb2: Invalid write control endpoint [ 772.848347][ T25] usb 6-1: selecting invalid altsetting 0 [ 772.883086][ T25] usb 6-1: USB disconnect, device number 50 [ 772.889486][ T25] pvrusb2: Device being rendered inoperable [ 772.916643][ T2342] pvrusb2: Invalid write control endpoint [ 772.922761][ T5904] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 772.930679][ T2342] pvrusb2: Invalid write control endpoint [ 772.931264][ T25] pvrusb2: Device being rendered inoperable [ 772.942648][ T2342] pvrusb2: Invalid write control endpoint [ 772.959513][ T2342] pvrusb2: Invalid write control endpoint [ 772.965155][ T25] pvrusb2: Device being rendered inoperable [ 772.971542][ T2342] pvrusb2: Invalid write control endpoint [ 772.989279][ T2342] pvrusb2: Invalid write control endpoint [ 773.005556][ T2342] pvrusb2: Invalid write control endpoint [ 773.018776][ T2342] pvrusb2: Invalid write control endpoint [ 773.028289][ T2342] pvrusb2: Invalid write control endpoint [ 773.036986][ T2342] pvrusb2: Invalid write control endpoint [ 773.047235][ T2342] pvrusb2: Invalid write control endpoint [ 773.056313][ T2342] pvrusb2: Invalid write control endpoint [ 773.066314][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 773.131304][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 773.137875][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 773.139166][ T5904] usb 4-1: config 206 has an invalid interface number: 241 but max is 2 [ 773.146555][ T2342] pvrusb2: Invalid write control endpoint [ 773.160414][ T2342] pvrusb2: Invalid write control endpoint [ 773.166254][ T2342] pvrusb2: Invalid write control endpoint [ 773.172418][ T2342] pvrusb2: Invalid write control endpoint [ 773.178256][ T2342] pvrusb2: Invalid write control endpoint [ 773.186922][ T5904] usb 4-1: config 206 has an invalid interface number: 228 but max is 2 [ 773.195533][ T5904] usb 4-1: config 206 has an invalid interface number: 79 but max is 2 [ 773.203909][ T5904] usb 4-1: config 206 has no interface number 0 [ 773.206040][ T2342] pvrusb2: Invalid write control endpoint [ 773.210195][ T5904] usb 4-1: config 206 has no interface number 1 [ 773.222425][ T5904] usb 4-1: config 206 has no interface number 2 [ 773.228761][ T5904] usb 4-1: config 206 interface 241 has no altsetting 0 [ 773.235855][ T5904] usb 4-1: config 206 interface 228 has no altsetting 0 [ 773.242917][ T5904] usb 4-1: config 206 interface 79 has no altsetting 0 [ 773.243633][ T2342] pvrusb2: Invalid write control endpoint [ 773.264430][ T5904] usb 4-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 773.271102][ T2342] pvrusb2: Invalid write control endpoint [ 773.273854][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.287440][ T5904] usb 4-1: Product: syz [ 773.291634][ T5904] usb 4-1: Manufacturer: syz [ 773.295934][ T2342] pvrusb2: Invalid write control endpoint [ 773.296259][ T5904] usb 4-1: SerialNumber: syz [ 773.313240][ T2342] pvrusb2: Invalid write control endpoint [ 773.330519][ T2342] pvrusb2: Invalid write control endpoint [ 773.349332][ T2342] pvrusb2: Invalid write control endpoint [ 773.367099][ T2342] pvrusb2: Invalid write control endpoint [ 773.382672][ T2342] pvrusb2: Invalid write control endpoint [ 773.415751][ T2342] pvrusb2: Invalid write control endpoint [ 773.441086][ T2342] pvrusb2: Invalid write control endpoint [ 773.454603][ T2342] pvrusb2: Invalid write control endpoint [ 773.464338][ T2342] pvrusb2: Invalid write control endpoint [ 773.478785][ T2342] pvrusb2: Invalid write control endpoint [ 773.516071][ T2342] pvrusb2: Invalid write control endpoint [ 773.548587][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 773.549073][ T2342] pvrusb2: Invalid write control endpoint [ 773.556533][ T5904] usb 4-1: selecting invalid altsetting 0 [ 773.592270][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 773.620601][ T5904] usb 4-1: selecting invalid altsetting 0 [ 773.630347][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 774.145980][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 774.180867][ T5904] usb 4-1: selecting invalid altsetting 0 [ 774.220351][ T5904] usb 4-1: USB disconnect, device number 56 [ 774.239114][ T2342] pvrusb2: Invalid write control endpoint [ 774.251492][ T5904] pvrusb2: Device being rendered inoperable [ 774.261835][ T2342] pvrusb2: Invalid write control endpoint [ 774.267621][ T2342] pvrusb2: Invalid write control endpoint [ 774.278794][ T5904] pvrusb2: Device being rendered inoperable [ 774.287368][ T5904] pvrusb2: Device being rendered inoperable [ 774.294708][ T2342] pvrusb2: Invalid write control endpoint [ 774.305510][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 774.354986][ T25] IPVS: starting estimator thread 0... [ 774.377516][ T2342] pvrusb2: Device being rendered inoperable [ 774.383602][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 774.430287][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 774.451666][T12678] IPVS: using max 26 ests per chain, 62400 per kthread [ 774.469184][ T2342] pvrusb2: Invalid write control endpoint [ 774.858581][T12686] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1757'. [ 774.867721][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 774.888226][ T2342] pvrusb2: Invalid write control endpoint [ 774.894349][ T2342] pvrusb2: Invalid write control endpoint [ 774.900674][ T2342] pvrusb2: Invalid write control endpoint [ 774.906431][ T2342] pvrusb2: Invalid write control endpoint [ 774.912535][ T2342] pvrusb2: Invalid write control endpoint [ 774.918290][ T2342] pvrusb2: Invalid write control endpoint [ 774.924372][ T2342] pvrusb2: Invalid write control endpoint [ 774.930523][ T2342] pvrusb2: Invalid write control endpoint [ 774.936630][ T2342] pvrusb2: Invalid write control endpoint [ 774.936698][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'. [ 774.942457][ T2342] pvrusb2: Invalid write control endpoint [ 774.959562][ T2342] pvrusb2: Invalid write control endpoint [ 774.965558][ T2342] pvrusb2: Invalid write control endpoint [ 774.971399][ T2342] pvrusb2: Invalid write control endpoint [ 774.977343][ T2342] pvrusb2: Invalid write control endpoint [ 774.983179][ T2342] pvrusb2: Invalid write control endpoint [ 774.989085][ T2342] pvrusb2: Invalid write control endpoint [ 774.994943][ T2342] pvrusb2: Invalid write control endpoint [ 775.001027][ T2342] pvrusb2: Invalid write control endpoint [ 775.007176][ T2342] pvrusb2: Invalid write control endpoint [ 775.013094][ T2342] pvrusb2: Invalid write control endpoint [ 775.019008][ T2342] pvrusb2: Invalid write control endpoint [ 775.024834][ T2342] pvrusb2: Invalid write control endpoint [ 775.030708][ T2342] pvrusb2: Invalid write control endpoint [ 775.036544][ T2342] pvrusb2: Invalid write control endpoint [ 775.042463][ T2342] pvrusb2: Invalid write control endpoint [ 775.048708][ T2342] pvrusb2: Invalid write control endpoint [ 775.054701][ T2342] pvrusb2: Invalid write control endpoint [ 775.060871][ T2342] pvrusb2: Invalid write control endpoint [ 775.067941][ T2342] pvrusb2: Invalid write control endpoint [ 775.073864][ T2342] pvrusb2: Invalid write control endpoint [ 775.079850][ T2342] pvrusb2: Invalid write control endpoint [ 775.085780][ T2342] pvrusb2: Invalid write control endpoint [ 775.092092][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 775.140172][ T2342] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 775.146943][ T2342] pvrusb2: Invalid write control endpoint [ 775.152780][ T2342] pvrusb2: Invalid write control endpoint [ 775.158869][ T2342] pvrusb2: Invalid write control endpoint [ 775.171382][ T2342] pvrusb2: Invalid write control endpoint [ 775.177443][ T2342] pvrusb2: Invalid write control endpoint [ 775.587788][ T5914] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 775.606218][ T2342] pvrusb2: Invalid write control endpoint [ 775.710881][ T2342] pvrusb2: Invalid write control endpoint [ 775.742332][ T2342] pvrusb2: Invalid write control endpoint [ 775.755822][ T2342] pvrusb2: Invalid write control endpoint [ 775.778226][ T2342] pvrusb2: Invalid write control endpoint [ 775.841304][ T2342] pvrusb2: Invalid write control endpoint [ 775.960102][ T2342] pvrusb2: Invalid write control endpoint [ 776.039246][ T2342] pvrusb2: Invalid write control endpoint [ 776.045516][ T2342] pvrusb2: Invalid write control endpoint [ 776.051293][ T2342] pvrusb2: Invalid write control endpoint [ 776.098057][ T2342] pvrusb2: Invalid write control endpoint [ 776.103924][ T2342] pvrusb2: Invalid write control endpoint [ 776.141004][ T2342] pvrusb2: Invalid write control endpoint [ 776.147287][ T5914] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 776.166011][ T2342] pvrusb2: Invalid write control endpoint [ 776.173604][ T5914] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 776.185778][ T2342] pvrusb2: Invalid write control endpoint [ 776.191587][ T2342] pvrusb2: Invalid write control endpoint [ 776.204966][ T5914] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 776.216745][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 776.239220][T12702] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1762'. [ 776.247640][ T5914] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 776.279872][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.354162][T12672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 776.361707][ T2342] pvrusb2: Invalid write control endpoint [ 776.388169][ T2342] pvrusb2: Invalid write control endpoint [ 776.415006][ T2342] pvrusb2: Invalid write control endpoint [ 776.440245][ T2342] pvrusb2: Invalid write control endpoint [ 776.469056][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 776.501084][ T2342] pvrusb2: Device being rendered inoperable [ 776.539497][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 776.587932][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 776.837708][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 776.909386][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 777.031316][ T9] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 777.038191][ T2342] pvrusb2: Invalid write control endpoint [ 777.116811][ T2342] pvrusb2: Invalid write control endpoint [ 777.122737][ T2342] pvrusb2: Invalid write control endpoint [ 777.143108][ T2342] pvrusb2: Invalid write control endpoint [ 777.171671][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 777.183401][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 777.198229][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 777.205167][ T2342] pvrusb2: Invalid write control endpoint [ 777.214516][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 777.215708][ T2342] pvrusb2: Invalid write control endpoint [ 777.263193][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 777.289431][ T9] usb 4-1: Manufacturer: syz [ 777.396406][ T9] usb 4-1: config 0 descriptor?? [ 777.403982][T12704] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 777.412961][ T2342] pvrusb2: Invalid write control endpoint [ 777.422754][ T2342] pvrusb2: Invalid write control endpoint [ 777.452657][ T2342] pvrusb2: Invalid write control endpoint [ 777.465027][ T2342] pvrusb2: Invalid write control endpoint [ 777.478125][ T2342] pvrusb2: Invalid write control endpoint [ 777.487557][ T2342] pvrusb2: Invalid write control endpoint [ 777.498974][ T2342] pvrusb2: Invalid write control endpoint [ 777.505818][ T2342] pvrusb2: Invalid write control endpoint [ 777.513850][ T2342] pvrusb2: Invalid write control endpoint [ 777.522589][ T2342] pvrusb2: Invalid write control endpoint [ 777.534120][ T2342] pvrusb2: Invalid write control endpoint [ 777.541116][ T2342] pvrusb2: Invalid write control endpoint [ 777.551395][ T2342] pvrusb2: Invalid write control endpoint [ 777.557461][ T2342] pvrusb2: Invalid write control endpoint [ 777.563300][ T2342] pvrusb2: Invalid write control endpoint [ 777.569064][ T2342] pvrusb2: Invalid write control endpoint [ 777.575485][ T2342] pvrusb2: Invalid write control endpoint [ 777.581379][ T2342] pvrusb2: Invalid write control endpoint [ 777.587231][ T2342] pvrusb2: Invalid write control endpoint [ 777.593024][ T2342] pvrusb2: Invalid write control endpoint [ 777.599009][ T2342] pvrusb2: Invalid write control endpoint [ 777.604789][ T2342] pvrusb2: Invalid write control endpoint [ 777.610745][ T2342] pvrusb2: Invalid write control endpoint [ 777.616714][ T2342] pvrusb2: Invalid write control endpoint [ 777.622500][ T2342] pvrusb2: Invalid write control endpoint [ 777.628431][ T2342] pvrusb2: Invalid write control endpoint [ 777.634251][ T2342] pvrusb2: Invalid write control endpoint [ 777.640763][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 778.938150][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_d) [ 778.945092][ T2342] pvrusb2: Invalid write control endpoint [ 778.950903][ T2342] pvrusb2: Invalid write control endpoint [ 778.964188][ T5914] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 778.972842][ T5914] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input26 [ 778.996786][ T2342] pvrusb2: Invalid write control endpoint [ 779.027296][ T2342] pvrusb2: Invalid write control endpoint [ 779.036582][ T5914] usb 6-1: USB disconnect, device number 51 [ 779.038824][T12724] pim6reg1: entered promiscuous mode [ 779.042673][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 779.047930][ T2342] pvrusb2: Invalid write control endpoint [ 779.078809][T12724] pim6reg1: entered allmulticast mode [ 779.101174][ T2342] pvrusb2: Invalid write control endpoint [ 779.108201][ T2342] pvrusb2: Invalid write control endpoint [ 779.137953][ T2342] pvrusb2: Invalid write control endpoint [ 779.143806][ T2342] pvrusb2: Invalid write control endpoint [ 779.152978][ T2342] pvrusb2: Invalid write control endpoint [ 779.160744][ T2342] pvrusb2: Invalid write control endpoint [ 779.168697][ T2342] pvrusb2: Invalid write control endpoint [ 779.174526][ T2342] pvrusb2: Invalid write control endpoint [ 779.181225][ T2342] pvrusb2: Invalid write control endpoint [ 779.647368][ T2342] pvrusb2: Invalid write control endpoint [ 779.665005][ T2342] pvrusb2: Invalid write control endpoint [ 779.674714][ T2342] pvrusb2: Invalid write control endpoint [ 779.683731][ T2342] pvrusb2: Invalid write control endpoint [ 779.705388][ T2342] pvrusb2: Invalid write control endpoint [ 779.721450][ T2342] pvrusb2: Invalid write control endpoint [ 779.738746][ T2342] pvrusb2: Invalid write control endpoint [ 780.198294][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 780.776582][ T2342] pvrusb2: Invalid write control endpoint [ 780.782604][ T2342] pvrusb2: Invalid write control endpoint [ 780.789905][ T2342] pvrusb2: Invalid write control endpoint [ 780.815296][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 780.850656][ T9] usb 4-1: USB disconnect, device number 57 [ 780.962415][ T2342] pvrusb2: Invalid write control endpoint [ 780.968197][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 780.994805][ T5914] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 781.009640][ T2342] pvrusb2: Device being rendered inoperable [ 781.040552][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 781.134307][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 781.184760][ T5914] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 781.218719][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.240319][ T5914] usb 6-1: config 0 descriptor?? [ 786.089575][ T5821] usb 6-1: USB disconnect, device number 52 [ 786.574775][ T5821] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 786.999164][ T5821] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 787.144377][ T5821] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 787.152936][ T5821] usb 6-1: Manufacturer: syz [ 787.157573][ T5821] usb 6-1: SerialNumber: syz [ 787.164280][ T5821] usb 6-1: config 0 descriptor?? [ 787.203284][T12783] pim6reg1: entered promiscuous mode [ 787.208871][T12783] pim6reg1: entered allmulticast mode [ 788.135608][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 788.599178][T12769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.631499][T12769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.682143][ T5821] usb 6-1: USB disconnect, device number 53 [ 791.092604][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.098990][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.138977][ T5914] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 793.512316][ T5914] usb 6-1: config 0 has an invalid interface number: 178 but max is 0 [ 793.530978][ T5914] usb 6-1: config 0 has no interface number 0 [ 793.540908][ T5914] usb 6-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 793.550950][ T5914] usb 6-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 793.560244][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.572106][ T5914] usb 6-1: config 0 descriptor?? [ 793.577761][T12816] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 794.118624][T12831] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 794.129356][T12831] macvlan0: entered promiscuous mode [ 794.138819][T12831] macvlan0: entered allmulticast mode [ 794.152139][T12831] veth1_vlan: entered allmulticast mode [ 794.163235][T12831] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 794.190931][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 794.204128][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 794.228307][T12832] pim6reg1: entered promiscuous mode [ 794.235070][T12832] pim6reg1: entered allmulticast mode [ 795.385336][ T5914] usb 6-1: string descriptor 0 read error: -71 [ 795.392634][ T5914] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 795.402512][ T5914] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 795.412389][ T5914] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 795.430452][ T5914] usb 6-1: USB disconnect, device number 54 [ 798.793829][T12885] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1810'. [ 800.843927][ T5821] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 801.079964][ T5821] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 801.092640][ T5821] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 801.196156][ T5821] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 801.249179][ T5821] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 801.309927][ T5821] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 801.357736][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.869896][ T5821] ath6kl: Failed to submit usb control message: -71 [ 801.882924][ T5821] ath6kl: unable to send the bmi data to the device: -71 [ 801.891989][ T5821] ath6kl: Unable to send get target info: -71 [ 801.911085][ T5821] ath6kl: Failed to init ath6kl core: -71 [ 801.917681][ T5821] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 802.920878][ T5821] usb 6-1: USB disconnect, device number 55 [ 804.372951][T12935] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1822'. [ 804.793550][T12946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 804.802402][T12946] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 804.810662][T12946] overlayfs: missing 'lowerdir' [ 804.864815][T12948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 805.132127][ T6143] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.334883][ T6143] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.418032][ T6143] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.474692][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.490238][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.499713][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.509413][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.517074][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 805.546066][ T6143] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.978971][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.176213][T12962] lo speed is unknown, defaulting to 1000 [ 806.414195][ T6143] bridge_slave_1: left allmulticast mode [ 806.455492][ T6143] bridge_slave_1: left promiscuous mode [ 806.494025][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.568930][ T6143] bridge_slave_0: left allmulticast mode [ 806.599175][ T6143] bridge_slave_0: left promiscuous mode [ 806.604997][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.883194][ T5904] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 807.058652][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 807.078569][ T5904] usb 3-1: config 206 has an invalid interface number: 241 but max is 2 [ 807.157506][ T5904] usb 3-1: config 206 has an invalid interface number: 228 but max is 2 [ 807.249724][ T5904] usb 3-1: config 206 has an invalid interface number: 79 but max is 2 [ 807.350908][ T5834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 807.387143][ T5904] usb 3-1: config 206 has no interface number 0 [ 807.393630][ T5904] usb 3-1: config 206 has no interface number 1 [ 807.400306][ T5904] usb 3-1: config 206 has no interface number 2 [ 807.412439][ T5904] usb 3-1: config 206 interface 241 has no altsetting 0 [ 807.419549][ T5904] usb 3-1: config 206 interface 228 has no altsetting 0 [ 807.428138][ T5904] usb 3-1: config 206 interface 79 has no altsetting 0 [ 807.437252][ T5904] usb 3-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 807.446526][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.454667][ T5904] usb 3-1: Product: syz [ 807.458935][ T5904] usb 3-1: Manufacturer: syz [ 807.463635][ T5904] usb 3-1: SerialNumber: syz [ 807.736202][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 807.753514][T12976] binfmt_misc: register: failed to install interpreter file ./file0 [ 808.191278][ T5832] Bluetooth: hci3: command tx timeout [ 808.264176][ T6143] bond0 (unregistering): left promiscuous mode [ 808.275431][ T6143] bond_slave_0: left promiscuous mode [ 808.287580][ T6143] bond_slave_1: left promiscuous mode [ 808.301439][ T6143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.323924][ T6143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.345690][ T6143] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 808.369349][ T6143] team0: left promiscuous mode [ 808.380773][ T6143] team_slave_0: left promiscuous mode [ 808.386822][ T6143] team_slave_1: left promiscuous mode [ 808.407392][ T6143] bond0 (unregistering): Released all slaves [ 808.477380][T12968] vlan2: entered allmulticast mode [ 808.700880][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 808.711448][ T5904] usb 3-1: selecting invalid altsetting 0 [ 808.781551][ T2342] pvrusb2: Invalid write control endpoint [ 808.854459][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 809.099181][ T5904] usb 3-1: selecting invalid altsetting 0 [ 809.312419][T12995] pim6reg1: entered promiscuous mode [ 809.318106][ T5904] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 809.374972][T12995] pim6reg1: entered allmulticast mode [ 809.428802][ T5904] usb 3-1: selecting invalid altsetting 0 [ 809.436712][ T5904] usb 3-1: USB disconnect, device number 77 [ 809.448840][ T2342] pvrusb2: Invalid write control endpoint [ 809.454765][ T2342] pvrusb2: Invalid write control endpoint [ 809.460538][ T2342] pvrusb2: Invalid write control endpoint [ 809.466381][ T2342] pvrusb2: Invalid write control endpoint [ 809.472142][ T2342] pvrusb2: Invalid write control endpoint [ 809.483788][ T2342] pvrusb2: Invalid write control endpoint [ 809.489666][ T2342] pvrusb2: Invalid write control endpoint [ 809.513434][ T2342] pvrusb2: Invalid write control endpoint [ 809.541047][ T2342] pvrusb2: Invalid write control endpoint [ 809.547178][ T2342] pvrusb2: Invalid write control endpoint [ 809.572203][ T2342] pvrusb2: Invalid write control endpoint [ 809.618909][ T2342] pvrusb2: Invalid write control endpoint [ 810.246231][ T2342] pvrusb2: Invalid write control endpoint [ 810.265660][ T2342] pvrusb2: Invalid write control endpoint [ 810.502890][ T2342] pvrusb2: Invalid write control endpoint [ 810.508679][ T2342] pvrusb2: Invalid write control endpoint [ 810.521833][ T5832] Bluetooth: hci3: command tx timeout [ 810.830975][ T2342] pvrusb2: Invalid write control endpoint [ 810.837172][ T2342] pvrusb2: Invalid write control endpoint [ 810.844424][ T2342] pvrusb2: Invalid write control endpoint [ 810.851540][ T2342] pvrusb2: Invalid write control endpoint [ 810.863799][ T2342] pvrusb2: Invalid write control endpoint [ 810.874718][ T2342] pvrusb2: Invalid write control endpoint [ 810.882322][ T2342] pvrusb2: Invalid write control endpoint [ 810.888910][ T2342] pvrusb2: Invalid write control endpoint [ 810.981568][ T2342] pvrusb2: Invalid write control endpoint [ 810.987357][ T2342] pvrusb2: Invalid write control endpoint [ 811.013435][ T2342] pvrusb2: Invalid write control endpoint [ 811.019219][ T2342] pvrusb2: Invalid write control endpoint [ 811.045513][ T2342] pvrusb2: Invalid write control endpoint [ 811.051292][ T2342] pvrusb2: Invalid write control endpoint [ 811.088474][ T2342] pvrusb2: Invalid write control endpoint [ 811.094257][ T2342] pvrusb2: Invalid write control endpoint [ 811.130799][ T2342] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 811.240713][T13009] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 811.334220][ T5821] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 811.458642][T13007] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.517810][ T5821] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 811.531962][ T2342] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 811.539271][ T2342] pvrusb2: Invalid write control endpoint [ 811.545248][ T2342] pvrusb2: Invalid write control endpoint [ 811.587312][ T2342] pvrusb2: Invalid write control endpoint [ 811.603221][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.611429][ T5821] usb 1-1: Product: syz [ 811.629722][ T5821] usb 1-1: Manufacturer: syz [ 811.648202][ T5821] usb 1-1: SerialNumber: syz [ 811.930763][ T2342] pvrusb2: Invalid write control endpoint [ 811.937027][ T2342] pvrusb2: Invalid write control endpoint [ 811.942845][ T2342] pvrusb2: Invalid write control endpoint [ 811.948854][ T2342] pvrusb2: Invalid write control endpoint [ 811.954769][ T2342] pvrusb2: Invalid write control endpoint [ 811.960514][ T2342] pvrusb2: Invalid write control endpoint [ 811.966367][ T2342] pvrusb2: Invalid write control endpoint [ 811.972108][ T2342] pvrusb2: Invalid write control endpoint [ 811.977935][ T2342] pvrusb2: Invalid write control endpoint [ 811.983676][ T2342] pvrusb2: Invalid write control endpoint [ 811.989515][ T2342] pvrusb2: Invalid write control endpoint [ 811.995276][ T2342] pvrusb2: Invalid write control endpoint [ 812.001157][ T2342] pvrusb2: Invalid write control endpoint [ 812.006911][ T2342] pvrusb2: Invalid write control endpoint [ 812.012838][ T2342] pvrusb2: Invalid write control endpoint [ 812.018694][ T2342] pvrusb2: Invalid write control endpoint [ 812.024530][ T2342] pvrusb2: Invalid write control endpoint [ 812.030817][ T5821] usb 1-1: config 0 descriptor?? [ 812.035802][ T2342] pvrusb2: Invalid write control endpoint [ 812.042144][ T2342] pvrusb2: Attached sub-driver cs53l32a [ 812.055477][ T5821] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 056 [ 812.109171][ T2342] pvrusb2: Invalid write control endpoint [ 812.115015][ T2342] pvrusb2: Invalid write control endpoint [ 812.120754][ T2342] pvrusb2: Invalid write control endpoint [ 812.130363][ T2342] pvrusb2: Invalid write control endpoint [ 812.136357][ T2342] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 812.157308][ T2342] pvrusb2: Device being rendered inoperable [ 812.163301][ T2342] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 812.176464][ T2342] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 812.183809][T13007] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.199286][ T5904] pvrusb2: Device being rendered inoperable [ 812.212968][ T5904] pvrusb2: Device being rendered inoperable [ 812.752907][ T5832] Bluetooth: hci3: command tx timeout [ 812.941870][T13007] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.163716][T13007] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.236274][ T5821] i2c i2c-1: connected i2c-tiny-usb device [ 813.275868][T12962] chnl_net:caif_netlink_parms(): no params data found [ 813.468458][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.484589][T13007] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.499055][T13007] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.513034][T13007] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.527420][T13007] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.317485][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.332027][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1842'. [ 814.341199][ T6143] veth0: left promiscuous mode [ 814.405239][ T6143] hsr_slave_0: left promiscuous mode [ 814.414545][ T25] usb 1-1: USB disconnect, device number 56 [ 814.425129][ T6143] hsr_slave_1: left promiscuous mode [ 814.433176][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.441692][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.452223][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.460912][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.482257][ T6143] veth1_macvtap: left promiscuous mode [ 814.487920][ T6143] veth0_macvtap: left promiscuous mode [ 814.493487][ T6143] veth1_vlan: left promiscuous mode [ 814.499851][ T6143] veth0_vlan: left promiscuous mode [ 814.694484][ T3013] smc: removing ib device syz2 [ 814.755205][ T5821] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 814.917775][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 814.933384][ T5821] usb 4-1: config 206 has an invalid interface number: 241 but max is 2 [ 814.941998][ T5904] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 814.950031][ T5832] Bluetooth: hci3: command tx timeout [ 814.969009][ T5821] usb 4-1: config 206 has an invalid interface number: 228 but max is 2 [ 814.978228][ T5821] usb 4-1: config 206 has an invalid interface number: 79 but max is 2 [ 814.992487][ T5821] usb 4-1: config 206 has no interface number 0 [ 814.998847][ T5821] usb 4-1: config 206 has no interface number 1 [ 815.005366][ T5821] usb 4-1: config 206 has no interface number 2 [ 815.012250][ T5821] usb 4-1: config 206 interface 241 has no altsetting 0 [ 815.020012][ T5821] usb 4-1: config 206 interface 228 has no altsetting 0 [ 815.027768][ T5821] usb 4-1: config 206 interface 79 has no altsetting 0 [ 815.037635][ T5821] usb 4-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 815.047048][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.055198][ T5821] usb 4-1: Product: syz [ 815.059508][ T5821] usb 4-1: Manufacturer: syz [ 815.064142][ T5821] usb 4-1: SerialNumber: syz [ 815.182889][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 815.202008][ T6143] team0 (unregistering): Port device team_slave_1 removed [ 815.203121][ T5904] usb 6-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 815.234503][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.244217][ T5904] usb 6-1: Product: syz [ 815.257121][ T5904] usb 6-1: Manufacturer: syz [ 815.268081][ T5904] usb 6-1: SerialNumber: syz [ 815.301940][ T5904] usb 6-1: config 0 descriptor?? [ 815.340859][ T6143] team0 (unregistering): Port device team_slave_0 removed [ 816.201035][T13038] vlan2: entered allmulticast mode [ 816.235575][T13050] FAULT_INJECTION: forcing a failure. [ 816.235575][T13050] name failslab, interval 1, probability 0, space 0, times 0 [ 816.249178][T13043] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1853'. [ 816.252326][T13050] CPU: 0 UID: 0 PID: 13050 Comm: syz.2.1855 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 816.268891][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.278950][T13050] Call Trace: [ 816.282223][T13050] [ 816.285151][T13050] dump_stack_lvl+0x241/0x360 [ 816.289843][T13050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.295037][T13050] ? __pfx__printk+0x10/0x10 [ 816.299629][T13050] ? __kmalloc_cache_noprof+0x48/0x390 [ 816.305091][T13050] ? __pfx___might_resched+0x10/0x10 [ 816.310378][T13050] should_fail_ex+0x3b0/0x4e0 [ 816.315062][T13050] should_failslab+0xac/0x100 [ 816.319743][T13050] __kmalloc_cache_noprof+0x70/0x390 [ 816.325024][T13050] ? io_ring_ctx_alloc+0x54/0x1990 [ 816.330133][T13050] io_ring_ctx_alloc+0x54/0x1990 [ 816.335065][T13050] ? io_uring_fill_params+0x442/0x840 [ 816.340447][T13050] io_uring_create+0x40/0xc00 [ 816.345121][T13050] __se_sys_io_uring_setup+0x2ba/0x330 [ 816.350584][T13050] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 816.356571][T13050] ? do_syscall_64+0x100/0x230 [ 816.361348][T13050] ? do_syscall_64+0xb6/0x230 [ 816.366022][T13050] do_syscall_64+0xf3/0x230 [ 816.370528][T13050] ? clear_bhb_loop+0x35/0x90 [ 816.375204][T13050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.381102][T13050] RIP: 0033:0x7f9c7bd85d29 [ 816.385525][T13050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.405135][T13050] RSP: 002b:00007f9c7cc98fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 816.413550][T13050] RAX: ffffffffffffffda RBX: 00007f9c7bf75fa0 RCX: 00007f9c7bd85d29 [ 816.421517][T13050] RDX: 0000000020000140 RSI: 0000000020000000 RDI: 00000000000046a8 [ 816.429573][T13050] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000020000140 [ 816.437554][T13050] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 816.445568][T13050] R13: 0000000020000100 R14: 00000000000046a8 R15: 0000000020000140 [ 816.453549][T13050] [ 816.456737][ C0] vkms_vblank_simulate: vblank timer overrun [ 816.465882][ T25] ================================================================== [ 816.473990][ T25] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 816.482790][ T25] Read of size 8 at addr ffff88807c8822e8 by task kworker/1:0/25 [ 816.490538][ T25] [ 816.492879][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 816.503486][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 816.513565][ T25] Workqueue: events smc_ib_port_event_work [ 816.519416][ T25] Call Trace: [ 816.522708][ T25] [ 816.525656][ T25] dump_stack_lvl+0x241/0x360 [ 816.530363][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.535579][ T25] ? __pfx__printk+0x10/0x10 [ 816.540194][ T25] ? _printk+0xd5/0x120 [ 816.544376][ T25] ? __virt_addr_valid+0x183/0x530 [ 816.549507][ T25] ? __virt_addr_valid+0x183/0x530 [ 816.554641][ T25] print_report+0x169/0x550 [ 816.559187][ T25] ? __virt_addr_valid+0x183/0x530 [ 816.564333][ T25] ? __virt_addr_valid+0x183/0x530 [ 816.569475][ T25] ? __virt_addr_valid+0x45f/0x530 [ 816.574617][ T25] ? __phys_addr+0xba/0x170 [ 816.579148][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 816.585156][ T25] kasan_report+0x143/0x180 [ 816.589693][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 816.595704][ T25] __ethtool_get_link_ksettings+0x6e/0x190 [ 816.601534][ T25] ib_get_eth_speed+0x160/0x800 [ 816.606407][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 816.611805][ T25] ? rxe_query_port+0x4f/0x260 [ 816.616594][ T25] rxe_query_port+0x76/0x260 [ 816.621200][ T25] ib_query_port+0x166/0x7d0 [ 816.625811][ T25] smc_ib_port_event_work+0x14e/0xa50 [ 816.631212][ T25] ? process_scheduled_works+0x976/0x1840 [ 816.636956][ T25] process_scheduled_works+0xa66/0x1840 [ 816.642542][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 816.648546][ T25] ? assign_work+0x364/0x3d0 [ 816.653158][ T25] worker_thread+0x870/0xd30 [ 816.657766][ T25] ? __kthread_parkme+0x169/0x1d0 [ 816.662807][ T25] ? __pfx_worker_thread+0x10/0x10 [ 816.667938][ T25] kthread+0x2f0/0x390 [ 816.672016][ T25] ? __pfx_worker_thread+0x10/0x10 [ 816.677138][ T25] ? __pfx_kthread+0x10/0x10 [ 816.681746][ T25] ret_from_fork+0x4b/0x80 [ 816.686177][ T25] ? __pfx_kthread+0x10/0x10 [ 816.690780][ T25] ret_from_fork_asm+0x1a/0x30 [ 816.695572][ T25] [ 816.698603][ T25] [ 816.700935][ T25] Allocated by task 5819: [ 816.705266][ T25] kasan_save_track+0x3f/0x80 [ 816.709957][ T25] __kasan_kmalloc+0x98/0xb0 [ 816.714558][ T25] __kmalloc_node_noprof+0x290/0x4d0 [ 816.719863][ T25] __kvmalloc_node_noprof+0x72/0x190 [ 816.725156][ T25] alloc_netdev_mqs+0xa4/0x1080 [ 816.729994][ T25] rtnl_create_link+0x2f9/0xc20 [ 816.734826][ T25] rtnl_newlink_create+0x210/0xa40 [ 816.739925][ T25] rtnl_newlink+0x1c7e/0x2210 [ 816.744598][ T25] rtnetlink_rcv_msg+0x791/0xcf0 [ 816.749552][ T25] netlink_rcv_skb+0x1e3/0x430 [ 816.754313][ T25] netlink_unicast+0x7f6/0x990 [ 816.759071][ T25] netlink_sendmsg+0x8e4/0xcb0 [ 816.763865][ T25] __sock_sendmsg+0x221/0x270 [ 816.768547][ T25] __sys_sendto+0x363/0x4c0 [ 816.773040][ T25] __x64_sys_sendto+0xde/0x100 [ 816.777795][ T25] do_syscall_64+0xf3/0x230 [ 816.782293][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.788204][ T25] [ 816.790529][ T25] Freed by task 6143: [ 816.794513][ T25] kasan_save_track+0x3f/0x80 [ 816.799206][ T25] kasan_save_free_info+0x40/0x50 [ 816.804236][ T25] __kasan_slab_free+0x59/0x70 [ 816.809005][ T25] kfree+0x196/0x430 [ 816.812903][ T25] device_release+0x99/0x1c0 [ 816.817486][ T25] kobject_put+0x22f/0x480 [ 816.821899][ T25] netdev_run_todo+0xe79/0x1000 [ 816.826742][ T25] default_device_exit_batch+0xa24/0xaa0 [ 816.832391][ T25] cleanup_net+0x89d/0xd50 [ 816.836799][ T25] process_scheduled_works+0xa66/0x1840 [ 816.842344][ T25] worker_thread+0x870/0xd30 [ 816.846921][ T25] kthread+0x2f0/0x390 [ 816.851009][ T25] ret_from_fork+0x4b/0x80 [ 816.855446][ T25] ret_from_fork_asm+0x1a/0x30 [ 816.860218][ T25] [ 816.862538][ T25] The buggy address belongs to the object at ffff88807c882000 [ 816.862538][ T25] which belongs to the cache kmalloc-cg-4k of size 4096 [ 816.876841][ T25] The buggy address is located 744 bytes inside of [ 816.876841][ T25] freed 4096-byte region [ffff88807c882000, ffff88807c883000) [ 816.890716][ T25] [ 816.893036][ T25] The buggy address belongs to the physical page: [ 816.899440][ T25] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c880 [ 816.908192][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 816.916701][ T25] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 816.924232][ T25] page_type: f5(slab) [ 816.928204][ T25] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 816.936776][ T25] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 816.945350][ T25] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 816.954036][ T25] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 816.962700][ T25] head: 00fff00000000003 ffffea0001f22001 ffffffffffffffff 0000000000000000 [ 816.971364][ T25] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 816.980040][ T25] page dumped because: kasan: bad access detected [ 816.986465][ T25] page_owner tracks the page as allocated [ 816.992179][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 69783167710, free_ts 69622359202 [ 817.015281][ T25] post_alloc_hook+0x1f3/0x230 [ 817.020052][ T25] get_page_from_freelist+0x3651/0x37a0 [ 817.025628][ T25] __alloc_pages_noprof+0x292/0x710 [ 817.030918][ T25] alloc_pages_mpol_noprof+0x3e8/0x680 [ 817.036406][ T25] alloc_slab_page+0x6a/0x110 [ 817.041089][ T25] allocate_slab+0x5a/0x2b0 [ 817.045596][ T25] ___slab_alloc+0xc27/0x14a0 [ 817.050265][ T25] __slab_alloc+0x58/0xa0 [ 817.054584][ T25] __kmalloc_node_noprof+0x2ee/0x4d0 [ 817.059859][ T25] __kvmalloc_node_noprof+0x72/0x190 [ 817.065135][ T25] alloc_netdev_mqs+0xa4/0x1080 [ 817.069975][ T25] rtnl_create_link+0x2f9/0xc20 [ 817.074823][ T25] veth_newlink+0x19f/0xb00 [ 817.079315][ T25] rtnl_newlink_create+0x2ee/0xa40 [ 817.084419][ T25] rtnl_newlink+0x1c7e/0x2210 [ 817.089085][ T25] rtnetlink_rcv_msg+0x791/0xcf0 [ 817.094031][ T25] page last free pid 5819 tgid 5819 stack trace: [ 817.100343][ T25] free_unref_page+0xd2c/0x1000 [ 817.105181][ T25] __put_partials+0x160/0x1c0 [ 817.109850][ T25] put_cpu_partial+0x17c/0x250 [ 817.114600][ T25] __slab_free+0x290/0x380 [ 817.119009][ T25] qlist_free_all+0x9a/0x140 [ 817.123593][ T25] kasan_quarantine_reduce+0x14f/0x170 [ 817.129044][ T25] __kasan_slab_alloc+0x23/0x80 [ 817.133883][ T25] __kmalloc_cache_noprof+0x1d9/0x390 [ 817.139244][ T25] netdevice_event+0x37d/0x950 [ 817.144001][ T25] notifier_call_chain+0x1a5/0x3f0 [ 817.149105][ T25] __netdev_upper_dev_link+0x4c3/0x670 [ 817.154556][ T25] netdev_upper_dev_link+0x9e/0xf0 [ 817.159667][ T25] virt_wifi_newlink+0x3f4/0x7c0 [ 817.164596][ T25] rtnl_newlink_create+0x2ee/0xa40 [ 817.169699][ T25] rtnl_newlink+0x1c7e/0x2210 [ 817.174367][ T25] rtnetlink_rcv_msg+0x791/0xcf0 [ 817.179305][ T25] [ 817.181619][ T25] Memory state around the buggy address: [ 817.187236][ T25] ffff88807c882180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.195285][ T25] ffff88807c882200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.203332][ T25] >ffff88807c882280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.211377][ T25] ^ [ 817.218815][ T25] ffff88807c882300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.226862][ T25] ffff88807c882380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 817.234918][ T25] ================================================================== [ 817.323392][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 817.330643][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 817.341252][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 817.351308][ T25] Workqueue: events smc_ib_port_event_work [ 817.357120][ T25] Call Trace: [ 817.360393][ T25] [ 817.363315][ T25] dump_stack_lvl+0x241/0x360 [ 817.367995][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.373208][ T25] ? __pfx__printk+0x10/0x10 [ 817.377817][ T25] ? vscnprintf+0x5d/0x90 [ 817.382154][ T25] panic+0x349/0x880 [ 817.386048][ T25] ? check_panic_on_warn+0x21/0xb0 [ 817.391161][ T25] ? __pfx_panic+0x10/0x10 [ 817.395572][ T25] ? check_panic_on_warn+0x21/0xb0 [ 817.400675][ T25] ? check_panic_on_warn+0x72/0xb0 [ 817.405866][ T25] check_panic_on_warn+0x86/0xb0 [ 817.410796][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 817.416770][ T25] end_report+0x77/0x160 [ 817.421015][ T25] kasan_report+0x154/0x180 [ 817.425514][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 817.431491][ T25] __ethtool_get_link_ksettings+0x6e/0x190 [ 817.437294][ T25] ib_get_eth_speed+0x160/0x800 [ 817.442138][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 817.447522][ T25] ? rxe_query_port+0x4f/0x260 [ 817.452291][ T25] rxe_query_port+0x76/0x260 [ 817.456878][ T25] ib_query_port+0x166/0x7d0 [ 817.461466][ T25] smc_ib_port_event_work+0x14e/0xa50 [ 817.466839][ T25] ? process_scheduled_works+0x976/0x1840 [ 817.472556][ T25] process_scheduled_works+0xa66/0x1840 [ 817.478104][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 817.484087][ T25] ? assign_work+0x364/0x3d0 [ 817.488675][ T25] worker_thread+0x870/0xd30 [ 817.493272][ T25] ? __kthread_parkme+0x169/0x1d0 [ 817.498286][ T25] ? __pfx_worker_thread+0x10/0x10 [ 817.503388][ T25] kthread+0x2f0/0x390 [ 817.507447][ T25] ? __pfx_worker_thread+0x10/0x10 [ 817.512554][ T25] ? __pfx_kthread+0x10/0x10 [ 817.517133][ T25] ret_from_fork+0x4b/0x80 [ 817.521554][ T25] ? __pfx_kthread+0x10/0x10 [ 817.526138][ T25] ret_from_fork_asm+0x1a/0x30 [ 817.530909][ T25] [ 817.534182][ T25] Kernel Offset: disabled [ 817.538500][ T25] Rebooting in 86400 seconds..