last executing test programs: 18.92390805s ago: executing program 2 (id=1779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e09"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32, @ANYBLOB="0300"/13], 0x50) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = gettid() r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}) io_uring_enter(r5, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0xf5}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 18.523313461s ago: executing program 0 (id=1781): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_io_uring_setup(0xbc6, &(0x7f0000001480)={0x0, 0x1061, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x22, 0xa580, 0x31713}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) syz_usb_connect(0x0, 0xe08, &(0x7f0000000bc0)={{0x12, 0x1, 0x200, 0xb2, 0xd6, 0xf, 0x10, 0x1b3d, 0x1eb, 0xff50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf6, 0x4, 0x8, 0xff, 0x80, 0xfc, [{{0x9, 0x4, 0xf1, 0xd0, 0xe, 0xf1, 0x91, 0x39, 0x4, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x0, 0x10, 'nUE', "ad90"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x7}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3, 0x81, 'O'}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "63117c1875"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x83, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0x7, 0x8, 0x20, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0x1, 0x56}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0xd, 0xe}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x4, 0x5, 0x2c}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb2, 0x7f}, @generic={0x9d, 0x8, "c77dcdff1693574d664db412aeeb58feb10d339ac9ddfc4d46434ad9e351d19cdc18ccb45440fcc214c4e26f18526084ffb9d4947ed1a251fe0f6e9e9a1c079957756093d5cc78fe22302a9d6d2f1e862330c42fe0086447f61a76f58f3d543b587273d6442d5e4ea1db4b797b6d8bfad370d41ed45c52bde0a325c749f95ac095f87432fe9c85587e0f9b192a8c06e6d31d18700688560ec152e8"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x9, 0xc4, 0x9, [@generic={0x7c, 0x0, "bf438b79b20690c8e5a0969321405809dfd76429700910e538429ee2bb6c94713e4193667c711e0a35e7571348a6e81286a095e884fa9f9c2607d7aa7bad9940e75730133ce68a38376d23fa2a7b3281f734b22dbfacfa35fba1573e5fe8f34e4dde08b26e4bb610bccc8fa526c75a0a02e8fd487389a1516ef9"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xd, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}, @generic={0xef, 0x5, "5b6e23a4965648063744626f1655f476ca944414a3d39a22a903c1096bd0c58c6e3c9362375a0cb47e4f7c29ad0a436d8d6d34912382bf50d913d7ab065e8c903e49f42dcd399bd170ef3bd6cab64fc56d66b2673d1201d51a93f05f985ea7b968511836b962b38460fa8fa1b2ff1d3db17f1147bf281104f12b8d0d039445722fe7d43e369659c1eb425d1af62ee39bb44bf3f96d01085fdd973d4c5fb0e0977f122df709ce9b371bc310a45ff5829df90a8d446c9730637478d2213de4a86a1236ab66e3fddb3a9705913aec0b928693c506919703aef1d010067885d3c3748aec1e91880c4cb732c386b7e8"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xff, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xe}]}}, {{0x9, 0x5, 0xc, 0x0, 0xc00, 0x0, 0x4, 0x3, [@generic={0x60, 0xb, "469ed27e7632aa649b9cb10d715e631b694afc6cc32b82c40aec0be64dad1bffa69ad732b57717bff0a727f70b4acd278ffa1402d07fe79b232548015247fe2fe4aba292ff0e2655f866e7a5c14f1cd9ab85e893a83573649aeb898d8f41"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x3f, 0x6, 0x2, [@generic={0x1b, 0x4, "8bc17ee172c745b9a54480bdaa858e76cfe7f4400580a28f6a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0x40, 0x43}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x2, 0x7, 0xfa, [@generic={0x39, 0x10, "fd9189e8395821f3afdf8917522ed6661faff14ebeb35541af1dc23b230b178d18883f3308557895a87dd860526139f516091f90de806f"}, @generic={0x69, 0x30, "e5535252df8104c0c91da3b8a81e463d0d54d0b448cac1a22012078fb1001e904d70492534204192bf0c1581509ee36ea3da1602299b8e645bf5591c07001d89224195ed0e2e8d499c2a38fcb8a328181820ba76b00c69b82f4403071cfc4f340e2fdb7775186a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x6, 0xf8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0xd, 0x7, 0x7}}]}}, {{0x9, 0x4, 0x47, 0x1, 0x4, 0x3b, 0x9c, 0xf7, 0xa3, [], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0x9, 0xaf}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6}, @generic={0xdf, 0x0, "5bf42dab3152050385c15b3bc79d5fefc81f53e84797fb6e66b0d90e2833c8f4e90dfb32a67fa5ad295611ee13c96532adc721e87749aa64028f304ebc77354812e9bde519785a702b244dff88220fb43b450277035468e813f0a5991c0b768a0695c21d366886fa413dc02cfb25a52841533c522f6cf58818e8518a75247659b626a4575c809ac96b08ba2fddeb8d9c2ab7f1beba696059c0951ee15b3f718e607edff163234abc8da5012d5f24d62e5556ec0b90b56386894354e0daf6735b108be3f128cc68990a3c7c6b4e83dbf1bcea971a63c4e7158ac2a99950"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xf5, 0xd4, 0x78, [@generic={0xbc, 0x23, "e5dc67035345b4e30fd8ad699e037f9eb96e129b9cd9ab8c28ebfd1940c0e17d284003881e154e2b02b7634f4dbf7c3bcd57ff69e6a0c925b295d745fe5c889b65c83ee9da427714e4cc6c45c6306484f08ecc39a5747aefa2a2a6b7ac59e6d32ccae35ec928920fc38d5f106ac9803f447dd7e193c8eae135f051a7fe46b7eea434d2e4a51dc40268c05d58f603ad56a068fe277298a55cc8b11b30904da169d7f3f75b83ba019426f8f15f23cb3ee01af6179fb110dc369de8"}, @generic={0x80, 0x0, "8d23295c47dd6bb02e3e0158427fa1fe22f0c361468a63cb605b0ac3d8dc019c3cb5143f841d69904888ded29513caaaa5c19252198eb76b16920c218d7616a73784c850c7454c0d49368d41527411ed43c84e4a3527ace2fc427a67f78091a00ff704ef3d62e1317e667d4544777b097b0b19d0c438ff42a5a2a36c39d2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x0, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0x6, 0xfff9}, @generic={0xda, 0x4, "b1a128769c7747602cf4218bf7ca7a1283adc9dd4758a0ab894e4b3f1649e94f67498068aa3ff259186c528f5bac950262cd27a71a54372cf52a60e27efc3f5453f417044c0d921c6d2684953929c588275ee2db0fac6ad7e47fa9f61149736a5e1cede5dfa959efe0aa2cc29f4bf8ea42b74a35663d7f7b2d18388940aa0f9175e803a8c3692097b15147b6a017fabff66d0394e887a28b28ad95b8614f898ab484101d4431fc845d2b13314ab16f8c9593302937db413b7a3a12108ecb34de988d05ec2c9d6d664c11e58b9514fad9107e908572e89191"}]}}]}}, {{0x9, 0x4, 0xf, 0x98, 0xc, 0x52, 0xad, 0xfc, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x746}}], [{{0x9, 0x5, 0x8, 0x12, 0x10, 0x2, 0xf, 0x9f}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xe7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x6, 0x61, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xac, 0x200}, @generic={0xb2, 0x8, "b7d7432ef89e2a7342002a8ce6320b079c191f1659001fbcdc4f7844a491c485e4093365a87a4a758485bd198d8580b29ec464a9f6dab1d420111f6b940c0e83156b99764ea3acc6779548f644f13ac1349360685a3db7c191614a0d47fcfc5adee3accf637c620655f09b4d4ac552c5a8500709568a8626a235140003819a1ac382bcdf7172586bda5fae716eddd9fb57ccec7d0415dab217fa2de263a3aca48133aadaedf6073b10a463187d471fbd"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0xe, 0x20, 0x2, 0x4b, 0x5, [@generic={0x71, 0x5, "8c015482e18ed24aaa4f450f884300db8ab189a4c012e681d86ff4804055cb8b3dc021f9e9c7f48e3ea448c3efb9800c65d92dc8b5ae09b7e08e9190bcab9526f31253acbdaeb88edf00dfe409ea3fa054f0b7f899f93b2083d1e687342e41da716e5875d477ada9c62411bfd1ccf9"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xb}}, {{0x9, 0x5, 0xcc6fa8c86f7d039f, 0x10, 0x200, 0x3, 0xfb, 0x7a, [@generic={0xc, 0xe, "930a17ab10c912873f9d"}, @generic={0xcb, 0x11, "20c58df8ebec6106b5b34007a2c3c136a690f0aea84f6c0e0b5e925ce1a8ae98de875b7c5ee42c88b53ff8806658e10f3aac9d89cb32f6e29ec16925361a6dcc4393f76b85db82da203eb439e90cfe3607c7c97965a25f1ec2cfac7acfd5ac92345eb08ff98b05ef1e458299e8a340203f7d1de3a010a20458cdb862dd918b2d653a8f446d4c0bcdd550025a3fac39bfa8ad18cbd98ba6d65199a339655eb411ae211bb2b01363b2ca85b2a8714205fe558b81db13c7c9dc7e12de8ea84868e41d2c44ddb3227de2e6"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x0, 0x30}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x5, 0xc0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x401}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x4, 0xfa, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xfff4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x7, 0x4, [@generic={0x4c, 0x23, "12df2d357d857e416449d21244ccae8e418a3cea1584daece6d9dca314ef103eb66e340233888258320bda7e33ae0327f83f52756a526c129f6dcb5f9a0e2296add2db4d9494b10e73a2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x8}]}}, {{0x9, 0x5, 0x7, 0xa14668e57aa9c5, 0x8, 0x4, 0x9, 0x2, [@generic={0x27, 0x7, "9758c491090ab421a9e3c0b5253311f3b265b5e305b3bb6123b78f6efa7ee6e82607a02c51"}]}}]}}, {{0x9, 0x4, 0xf8, 0xe1, 0xc, 0xd, 0x84, 0x2c, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5c00, 0xb, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0xfc, 0xfc, 0xde, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x6fc}, @mbim_extended={0x8, 0x24, 0x1c, 0x44, 0x4, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xfd, 0x9, 0x8000}, @obex={0x5, 0x24, 0x15, 0xa26e}]}], [{{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x3, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x9, 0x1, 0x3, [@generic={0x87, 0x21, "75fd4371878b46860919c69b66268ef78b7c1ccdf14d16bf262c90281667023ee0e2d3f6a7d2043a1bf4b022919d0258a225000df9ee28e0658797e33207196922d93e41694a43f9b85428cbedfdb7b217c3f0191263039964db768d1747e7cf8548c9a3628884af41817b8b61745ba9880c0cdb93cdbcb017ee5062fe589d83ce01f1370f"}, @generic={0xdb, 0xb, "696f5fd1af1250c82e57d931a956b4861e02287f4b285ec6383a98b94220c0be4187cc50cf6af39dc1c31b23413380625195362558125a56138bddaebde6bc7ce468ff56462fa32ab8afeb373669132cdf5e33f859bd4777911114d47068a0d92fa5f4c974c00425912fe25b68abd68aa79f7c2815ef1ffe8e4e66fd7295cd18e1c5d03188420f1f15cdd0c2f42f4a76520c67d42e910cdd2f0385f4286018aa6e9a0e185f1581faceca438d905e038ea33c702401c00f2f8f9bfbbcb31c2b94417abc6ce6270ade433b92e6c81378084ce5f96a86012d82b0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x0, 0xe7, 0x40}}, {{0x9, 0x5, 0x2, 0x0, 0x7ff, 0xc0, 0x3, 0x1, [@generic={0xc0, 0xf, "e1588d9f51cc9d19e56e9056ddfff36f9a49955f3a3147c38f0c7d1dd4707b4fad65868ff46062604d5ee5ce9c7cb167cf379cc1dbbe4dcfc0b03b95d6a7ac2616c8d57b54eafc616b5e009bda66cbc75c8bbe55635b2f0bdced2b9c2c035258a8ee7c61508a57b0af83962db661de53eda78511d56ad8d46381a4ec130f9ebc81a7528d22cc6a8322b699914c0b4fb2db8089503d74e1667f166b5954839440cef2e64bb660d813044cbc8c1ba0f0b9af58ae9625c944abac64799e9744"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x61, 0x5, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x7c, 0x0, [@generic={0xa4, 0x21, "0e2e6a59588beec877141e7c93e5053e7df1b5cb5a84bb1624010e1e9471cf05b28787007c76dc631beb483513f20ad6bb573f7c40e474846a78c58d8426f34f3dfc4e607a1f00cb19b4f0f72675375997fe26f84f748f0eb5eda33e812b1c4122a7b69b31502980187f7e703f5d4f7d326329aa6b024490ed2d3915976cff7a96b5b7248391d23ec1c1a20e3d77ad844b4707f879c91fe49f37a1dbecc290c93640"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xf, 0x7c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x3, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x10, 0xd}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xa, 0xaa, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x6, 0x47, 0x8}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x5, 0x4, 0xc}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x1, 0x9, 0x2, 0x10, 0x5}, 0x27, &(0x7f0000000200)={0x5, 0xf, 0x27, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x3, 0xec}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0x1, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x9, 0x4, 0x401, 0x1}]}, 0x2, [{0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="2d03e509a3261f47362e1b7653496b41ab937816bf8b2e35986b4ca56faadcaf05389591366889b077fd04febb32f00600000052190a0933955cb36971e3c666e2033de2d2851442b68a2113b711b3a5bcce1636f9b873f6b5aa62422850fb01da74d58ec01b2f3281c726658e837a6e65f025365baabadbf5a94e0793e84d186847b858fc5f6139f0c9739439f78a9cc209039b16ab2767d99816d411ab08e891fb728a49917731b7c83d69e31dd9ad422f1a082e815607742bfdc59bbdda22b60029cde1386408846f8b4595c11f0dbd544181d1dd82f3705c71dc18952d5a1aa9b3e985c8e6cdc66c17ea51bb71a618471c4184fb9b8cf33b461b64b79b7c580a2d98076416b16b9fcd05190b4c351e3b4edfb05c69f97e431733b753"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x447}}]}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000000)={0x1, 0x27, 0x1, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "adb157bea92e3d57"}}, 0x48}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r12, 0xc048aec8, &(0x7f0000000980)={0x0, 0x0, @ioapic={0x2000, 0x401, 0x16, 0x1318d12a, 0x0, [{0x3, 0xc, 0x7, '\x00', 0x3}, {0x6, 0x81, 0x1, '\x00', 0x7}, {0x80, 0x8, 0x9}, {0x5, 0xc9, 0x9, '\x00', 0x6}, {0x7, 0x10, 0x2, '\x00', 0x6d}, {0x3, 0x33, 0x5, '\x00', 0x3}, {0x1, 0xd6, 0x3, '\x00', 0x8}, {0x1, 0x9, 0x3, '\x00', 0x7}, {0x2, 0x3, 0x8, '\x00', 0x7}, {0x0, 0x7, 0x81, '\x00', 0xff}, {0x6, 0x4, 0x5, '\x00', 0xd}, {0x7c, 0x0, 0x20}, {0xe, 0x2, 0x1}, {0x0, 0x2, 0x3, '\x00', 0xa8}, {0x64, 0x5, 0x7f, '\x00', 0x4}, {0x7, 0xe5, 0x5, '\x00', 0x79}, {0x4, 0x8, 0x32, '\x00', 0x40}, {0x6c, 0x3, 0x7}, {0x7, 0x20, 0x1, '\x00', 0xc}, {0x5, 0xe, 0xd, '\x00', 0x6}, {0x8, 0x0, 0x2, '\x00', 0x1}, {0xf4, 0x9, 0x5, '\x00', 0x7}, {0x81, 0xfe, 0xb, '\x00', 0x7}, {0xff, 0x0, 0x4, '\x00', 0x65}]}}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r13, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) 15.673733033s ago: executing program 1 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@gettaction={0x240, 0x32, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x14b1e0cd}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x680}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x13bd, &(0x7f0000000300)={0x0, 0x3468, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15.30880422s ago: executing program 2 (id=1785): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 13.411880158s ago: executing program 3 (id=1789): r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x5423, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r8, r8}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={'poly1305-simd\x00'}}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x21, &(0x7f0000000100)={0x0, 0x3, 0x0, {[0x87]}}, 0x0, 0x8, &(0x7f0000000600)) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r3], 0x58}}], 0x2, 0x20001c00) 12.584392007s ago: executing program 1 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x10000, 0x2b}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_io_uring_setup(0x518, &(0x7f0000000100)={0x0, 0x2562, 0x8, 0x0, 0x15e}, &(0x7f0000000180), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000000240), 0x1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6c25fb949ab38e40153a452f03fbb8ce"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "890cbacb89c61f2d1bb5d76d176a288c"}, @NL80211_ATTR_SSID={0x7, 0x34, @random='~}\\'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x10000, 0x2b}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) syz_io_uring_setup(0x518, &(0x7f0000000100)={0x0, 0x2562, 0x8, 0x0, 0x15e}, &(0x7f0000000180), &(0x7f0000000200)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) (async) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, &(0x7f0000000240), 0x1) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6c25fb949ab38e40153a452f03fbb8ce"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "890cbacb89c61f2d1bb5d76d176a288c"}, @NL80211_ATTR_SSID={0x7, 0x34, @random='~}\\'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) 12.432781565s ago: executing program 4 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/11, 0xb) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x20040800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x450140, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0\x00') r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) unshare(0x24020400) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES16=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf8f07000000000000080000000000008500000007000000b7000000000000009500000000000004"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.403387292s ago: executing program 0 (id=1792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3f0109050e03000002"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x5, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x138, 0x1a, 0x713, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x4e21}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@remote, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, {}, {}, 0x0, 0x4, 0xa, 0x1, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)="ff49957d"}) add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb7ed7f3de04ecfa32cc19ddaf311c5482c1bee22bf03bb305d95d708a9232943961c34028bf748729435c3313f8502acdfccb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab", 0xc0, 0xfffffffffffffffd) 12.187835163s ago: executing program 1 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x139840, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_aout(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2259], 0x8d9) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbedffffc, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000700), 0xeba, 0x101283) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x42c903) ppoll(&(0x7f0000000200)=[{r7, 0x1002}], 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034024000000080001400000000d0500020095000000080006400000000408000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 11.159437523s ago: executing program 2 (id=1794): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x78}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1], &(0x7f0000000300)='GPL\x00', 0x1, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/*@', 0x20, 0xffffffffffffff01}, 0x2e, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffa}, &(0x7f0000000080)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200, 0x40, 0x1}, 0x18) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000180)=[0x1, 0x4], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r6, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x44}}, 0x0) 10.466882329s ago: executing program 2 (id=1795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701"], 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) io_setup(0xffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000004000800000", @ANYBLOB="feffffff00"/14, @ANYRES32, @ANYBLOB="0300"/13], 0x50) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/51, 0x33, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = gettid() r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}) io_uring_enter(r5, 0x1, 0x2, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0xf5}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) 10.135668489s ago: executing program 1 (id=1796): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000008480)={&(0x7f0000000180), 0xc, &(0x7f00000041c0)={&(0x7f0000008340)={0x134, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcbb0}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5af6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x374e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x528}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58e00}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc4}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r5, r6, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) sync_file_range(r7, 0x2249, 0x7, 0x6) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.971654773s ago: executing program 3 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xc3, 0x1b1c07}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, ':,'}, {0x20, '@'}, {0x20, 'syz0\x00'}, {0x20, 'syz2\x00'}, {0x20, '[$,'}], 0xa, "7192a9c1116f"}, 0x27) openat$sequencer(0xffffffffffffff9c, 0x0, 0x82, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4, 0x88a, 0x6, {0x77359400}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x3}, 0x26, 0x1, 0x0, 0x0, "91d83dfcda2081e6d58d2ec80b1c1592bf8ec9d97b2cdc38f64cdaa340bf3a84cf666ca3e0df6f7feb7570531bbee56c5e680a4b3be9e60aa7da8008dc98907f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000801}, 0x20040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) 8.758248048s ago: executing program 3 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000a06010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 8.62700537s ago: executing program 4 (id=1799): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x80002, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000001fff0000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 8.134627335s ago: executing program 3 (id=1800): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x80002, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000001fff0000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 8.105127872s ago: executing program 0 (id=1801): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc1a, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x38}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @private2, 0x3, 0x2, 0x5, 0x500, 0xb7, 0x84c30021}) 7.772811577s ago: executing program 0 (id=1802): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) 7.609526463s ago: executing program 4 (id=1803): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x1200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x400c0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2, 0x1000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (fail_nth: 10) 7.495849101s ago: executing program 0 (id=1804): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.023764983s ago: executing program 3 (id=1805): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x69}, "d6776e9dd487e236962dc3c2fc18f1b9de55e28073ffe5f847da25098d87fc8226eb89245a8072f8af010c9e6b1e562e08571651038e5bf4a3d910536cd1027962e7f4c75f6403d612b0adf39105a3cbc28eba820cecf155dc7d2c1a62390a05e6721861ebf9005e33"}, 0x6d) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0x3, [@enum={0x9, 0x9, 0x0, 0x6, 0x4, [{0xd, 0x6}, {0xf, 0x100}, {0x10, 0x40}, {0xf, 0x3}, {0xb, 0x2}, {0x4, 0xe0}, {0x1, 0x7}, {0xf, 0x8000}, {0x0, 0x40000000}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @union={0x8, 0x2, 0x0, 0x5, 0x0, 0xa, [{0xf, 0x2, 0x8}, {0x6, 0x2, 0x40}]}, @enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x10, 0x1}, {0x7, 0x100}, {0x10, 0x7}, {0x1, 0x3}, {0x10, 0x3}, {0x8, 0x82}, {0x4, 0x7}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x4, 0x2}, {0xa, 0x2}, {0x2, 0xff}, {0x4, 0x1}, {0x1, 0x2}, {0xe}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/3, 0x15b, 0x3, 0x0, 0x2, 0x10000, @value}, 0x28) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7b}, "4bd551ab005dfca3c499fedf7dd3ad66198cee79d59e378f88c73f68a477c400a028d4c5a4a9944b3b3615ec44e8f7d61d8038f589be4646ff0a426b03fc68b02c0d4bd0bd14695a86c40063b5bbb09b2a8839b2c89c4b23d50e78a674df0f2632e1385bf41a36673e4af1290ec34871fe5c8e7283da869ab4da82"}, 0x7f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r1, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000003c0)={0x9, 0xd}) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x1, @any, 0x8a}}}, 0xb) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000440)={0x2}) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r6 = syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1834c0, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '}-+#]!^'}}]}}, 0x1, 0x0, &(0x7f0000000680)="830f394c84ba5bb126be5a4c202116b2d427da7ae6acab393f449b098c373bdbe5c9704bdac4095e92b04323a833d307054d819bb81d72d8d01709e79ab91d0d271fa8a45613084ee71df2b1dead7b2261d3b55ef84d4f7238c262c8cfd42dfdd53aca0946f77308af5686fc3e8a93e1344f97374ab7f6bf2ff780f244cea1d2d7bcc6d67f888b21934d88864b1a12f0166fc29bdcae992d1935374c07330600e99814a332c96a64c17bb098116893ce70e88cf1f06e960a81cdb15c464d3e8292d8bb79fa1099eee50d8dfc71de175c7d26bf4c09b113e5be01633e33bf9cf6829ef72ae99bec2ab4b51d") openat$incfs(r6, &(0x7f0000000780)='.log\x00', 0x400001, 0x90) syz_open_dev$swradio(&(0x7f00000007c0), 0x0, 0x2) syz_emit_vhci(&(0x7f0000000800)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x9, 0xc8, 0xe622e7e26076479a, 0x2}}}, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000840)={0x1, 0xc6, {0xffffffffffffffff}, {0xee01}, 0x5, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000880)) symlinkat(&(0x7f00000008c0)='./file0\x00', r6, &(0x7f0000000900)='./file0\x00') openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x780, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000980)=0x9, 0x4) r9 = dup2(r3, r1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 7.00513032s ago: executing program 4 (id=1806): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000280)=0x6, 0x4) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b00000000ff"]) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1}) 6.574198231s ago: executing program 1 (id=1807): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) close(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r1, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r6, &(0x7f0000000200), 0x0) shutdown(r6, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) sendmmsg$inet(r5, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000a00)="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", 0xfe5}], 0x1}}], 0x1, 0xf00) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0x109000}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 6.463701489s ago: executing program 3 (id=1808): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="d07e7047e9b2795a0300000004000000000a0000002ac00400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x101, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x7, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffdfffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd8010203010902"], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000000080)=@un=@abs, 0x80) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xfffffffffffffe7f) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x100004, 0x4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000620108000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.98039428s ago: executing program 2 (id=1809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (fail_nth: 3) 4.064801443s ago: executing program 4 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000a06010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 3.689227038s ago: executing program 4 (id=1811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3f0109050e03000002"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x99) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x3, 0x5, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x138, 0x1a, 0x713, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x4e21}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@remote, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, {}, {}, 0x0, 0x4, 0xa, 0x1, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x3, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)="ff49957d"}) add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb7ed7f3de04ecfa32cc19ddaf311c5482c1bee22bf03bb305d95d708a9232943961c34028bf748729435c3313f8502acdfccb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab", 0xc0, 0xfffffffffffffffd) 3.143105459s ago: executing program 0 (id=1812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d0002080910030904180202b41d3f0109050e03000002"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x138, 0x1a, 0x713, 0x0, 0xfffffffc, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x4e21}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@remote, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4d}, {}, {}, 0x0, 0x4, 0xa, 0x1, 0x0, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)="ff49957d"}) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000580)="21ac2d15c078ace9e7fdbde93cb30798f7f0908051a28e6b682170f0f2cc203c78177710db9d200e2587d5799483b5a2b5736c80418ddc07f6f47ba67ae4dd6da5c64def2b1c5a9bcb7037ef3fbc9f34bd4a7f16766d06cdcd5c01d514190eb7ed7f3de04ecfa32cc19ddaf311c5482c1bee22bf03bb305d95d708a9232943961c34028bf748729435c3313f8502acdfccb1e3e384bc59d4ec38e59243965dd94c55c14ac28301345559b20fc62c23817d7995b500e5c5ce601eb56b8a83d1ab", 0xc0, 0xfffffffffffffffd) 2.033310662s ago: executing program 1 (id=1813): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x18000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000280)={0x1, 0xa, 0x4, 0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x3ff, 0x3, 0xa, 0x3}]}) listxattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x8, 0x3, 0x2, 0x4, 'syz1\x00', 0x2}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x0, 0x0}) unshare(0x40000000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r9, 0x8, 0x30}, &(0x7f0000000040)=0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) close_range(r4, r6, 0x2) 0s ago: executing program 2 (id=1814): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x30, &(0x7f00000000c0), &(0x7f0000000140)=0x68) kernel console output (not intermixed with test programs): 2-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 768.029995][ T9] m920x_read = error: -19 [ 768.034640][ T9] dvb-usb: error -19 while querying for an remote control event. [ 768.417086][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 768.498845][ T5895] usb 2-1: config 8 has no interface number 0 [ 768.509389][ T5895] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 768.577602][ T30] audit: type=1326 audit(1744838074.920:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 768.649279][ T5895] usb 2-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.734911][ T5895] usb 2-1: config 8 interface 24 has no altsetting 0 [ 768.738143][ T30] audit: type=1326 audit(1744838074.920:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 768.768319][ T9] m920x_read = error: -19 [ 768.790911][ T9] dvb-usb: error -19 while querying for an remote control event. [ 768.961775][ T9] m920x_read = error: -19 [ 768.969827][ T9] dvb-usb: error -19 while querying for an remote control event. [ 769.010733][ T5895] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 769.028812][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.039078][ T5895] usb 2-1: Product: syz [ 769.047292][ T5895] usb 2-1: Manufacturer: syz [ 769.052850][ T30] audit: type=1326 audit(1744838074.920:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 769.089566][ T5895] usb 2-1: SerialNumber: syz [ 769.199587][ T9] m920x_read = error: -19 [ 769.228471][ T9] dvb-usb: error -19 while querying for an remote control event. [ 769.256955][ T30] audit: type=1326 audit(1744838074.920:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 769.359732][ T30] audit: type=1326 audit(1744838074.920:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 769.389506][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.492595][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 769.503501][ T9] m920x_read = error: -19 [ 769.561938][ T9] dvb-usb: error -19 while querying for an remote control event. [ 769.628419][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.728893][ T5892] m920x_read = error: -19 [ 769.766659][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 769.782866][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 769.851118][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 769.886796][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 769.902450][ T5892] usb 1-1: USB disconnect, device number 116 [ 769.959244][ T9] m920x_read = error: -19 [ 769.963749][ T9] dvb-usb: error -19 while querying for an remote control event. [ 769.990505][ T5912] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 770.027027][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 770.056312][ T30] audit: type=1326 audit(1744838074.920:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.110427][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.128266][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.149029][ T5892] m920x_read = error: -19 [ 770.153424][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 770.184847][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.228587][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 770.237383][ T5912] usb 3-1: SerialNumber: syz [ 770.239825][ T30] audit: type=1326 audit(1744838074.920:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74cf98cad0 code=0x7ffc0000 [ 770.274154][T12131] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 770.329074][ T5892] m920x_read = error: -19 [ 770.333589][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 770.356888][ T30] audit: type=1326 audit(1744838074.920:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.382933][ T30] audit: type=1326 audit(1744838074.920:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.475984][ T30] audit: type=1326 audit(1744838074.920:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.527874][ T5837] usbhid 4-1:1.0: can't add hid device: -71 [ 770.559888][ T5837] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 770.588004][ T5837] usb 4-1: USB disconnect, device number 8 [ 770.596680][ T30] audit: type=1326 audit(1744838074.920:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.608942][ T5892] m920x_read = error: -19 [ 770.675794][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 770.692485][ T30] audit: type=1326 audit(1744838074.920:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.715598][ T30] audit: type=1326 audit(1744838074.920:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12117 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 770.895670][ T47] usb 5-1: USB disconnect, device number 12 [ 770.978989][ T5892] m920x_read = error: -19 [ 770.983432][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 771.125643][ T5837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 771.198904][ T5892] m920x_read = error: -19 [ 771.204133][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 771.228895][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 771.260209][ T5838] Bluetooth: hci3: unexpected event for opcode 0x080f [ 771.341611][ T5912] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 771.384420][ T5912] usb 3-1: USB disconnect, device number 8 [ 771.391424][ T5837] usb 4-1: Using ep0 maxpacket: 16 [ 771.402105][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 771.409413][ T5892] m920x_read = error: -19 [ 771.422517][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 771.434875][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 771.437565][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 771.457976][ T5837] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 771.469945][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.479783][ T5837] usb 4-1: Product: syz [ 771.484203][ T5837] usb 4-1: Manufacturer: syz [ 771.491452][ T5837] usb 4-1: SerialNumber: syz [ 771.505874][ T5837] usb 4-1: config 0 descriptor?? [ 771.596793][ T5895] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 771.650800][ T5895] usb 2-1: USB disconnect, device number 16 [ 771.651642][ T5892] m920x_read = error: -19 [ 771.689129][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 771.898932][ T5892] m920x_read = error: -19 [ 771.903467][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 772.129461][ T5895] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 772.328016][ T5892] m920x_read = error: -19 [ 772.489935][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 772.695914][ T5895] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 772.705194][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.716347][ T5895] usb 2-1: config 0 descriptor?? [ 772.719370][ T5890] m920x_read = error: -19 [ 772.744409][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 772.792189][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 773.019247][ T5892] m920x_read = error: -19 [ 773.023668][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 773.249589][ T5892] m920x_read = error: -19 [ 773.257359][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 773.269090][ T5890] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 773.473844][T12171] delete_channel: no stack [ 773.499977][ T5892] m920x_read = error: -19 [ 773.507465][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 773.519039][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 773.555014][ T5890] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 773.589643][ T5890] usb 1-1: config 0 has no interface number 0 [ 773.601504][ T5890] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 773.615716][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.641194][ T5890] usb 1-1: config 0 descriptor?? [ 773.698971][ T5892] m920x_read = error: -19 [ 773.703430][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 773.756785][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 773.799965][ T5895] ath6kl: Failed to submit usb control message: -110 [ 773.806820][ T5895] ath6kl: unable to send the bmi data to the device: -110 [ 773.979060][ T5892] m920x_read = error: -19 [ 773.984239][ T5837] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 773.994519][ T5890] viperboard 1-1:0.143: version 0.00 found at bus 001 address 117 [ 774.053578][ T5837] usb 4-1: USB disconnect, device number 9 [ 774.059693][ T5895] ath6kl: Unable to send get target info: -110 [ 774.074479][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 774.100260][ T5895] ath6kl: Failed to init ath6kl core: -110 [ 774.109751][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.118284][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 774.155919][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 774.158797][ T5895] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 774.171902][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.296894][ T5890] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 774.308988][ T5892] m920x_read = error: -19 [ 774.313476][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 774.333836][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 774.355589][ T5890] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 774.376281][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 774.417893][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.548679][T12171] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 774.557015][ T5892] m920x_read = error: -19 [ 774.574136][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 774.629922][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 774.709541][ T5895] usb 2-1: USB disconnect, device number 17 [ 774.788966][ T9] m920x_read = error: -19 [ 774.798923][ T9] dvb-usb: error -19 while querying for an remote control event. [ 774.886649][T12177] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1689'. [ 774.957505][ T9] usb 3-1: USB disconnect, device number 9 [ 775.029463][ T5892] m920x_read = error: -19 [ 775.050124][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 775.059144][ T5892] usb 1-1: USB disconnect, device number 117 [ 775.217517][ T5889] m920x_read = error: -19 [ 775.222239][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 775.313323][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.323438][ T5838] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 775.333302][ T5838] Bluetooth: hci3: Injecting HCI hardware error event [ 775.342820][ T5838] Bluetooth: hci3: hardware error 0x00 [ 775.457611][ T5889] m920x_read = error: -19 [ 775.465278][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 775.511493][ T7032] udevd[7032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.628934][ T5892] m920x_read = error: -19 [ 775.633386][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 775.800543][ T9] m920x_read = error: -19 [ 775.805108][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.022985][ T9] m920x_read = error: -19 [ 776.029493][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 776.029515][ T30] audit: type=1326 audit(1744838083.930:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 776.041087][ T9] dvb-usb: error -19 while querying for an remote control event. [ 776.089965][ T5892] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 776.134009][T12188] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 776.279012][ T5889] m920x_read = error: -19 [ 776.345585][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 776.387405][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 776.396937][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 776.407818][ T30] audit: type=1326 audit(1744838083.930:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 776.419015][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 776.476504][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 776.508401][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 776.519049][ T5895] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 776.528880][ T5889] m920x_read = error: -19 [ 776.534107][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 776.594478][ T5892] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 776.624027][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.645464][ T5892] usb 2-1: Product: syz [ 776.651439][ T30] audit: type=1326 audit(1744838083.940:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 776.656048][ T5892] usb 2-1: Manufacturer: syz [ 776.700306][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 776.710635][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 776.748836][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 776.748888][ T9] usb 5-1: config 0 has no interfaces? [ 776.772573][ T5889] m920x_read = error: -19 [ 776.777211][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 776.804477][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 776.857012][ T30] audit: type=1326 audit(1744838083.940:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 776.857368][ T5892] usb 2-1: SerialNumber: syz [ 776.910380][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.913105][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 776.964424][ T5895] usb 1-1: config 1 interface 0 has no altsetting 0 [ 776.971375][ T9] usb 5-1: Product: syz [ 776.980445][ T5890] m920x_read = error: -19 [ 776.982660][ T5895] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 776.985048][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 777.014452][ T9] usb 5-1: Manufacturer: syz [ 777.014496][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.031261][ T9] usb 5-1: SerialNumber: syz [ 777.055961][ T30] audit: type=1326 audit(1744838083.940:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.080165][ T5892] usb 2-1: config 0 descriptor?? [ 777.118854][ T5895] usb 1-1: Product: syz [ 777.120658][ T9] usb 5-1: config 0 descriptor?? [ 777.154083][ T5895] usb 1-1: Manufacturer: syz [ 777.178812][ T5895] usb 1-1: SerialNumber: syz [ 777.189132][ T30] audit: type=1326 audit(1744838083.940:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.240289][ T9] m920x_read = error: -19 [ 777.245792][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.268876][ T30] audit: type=1326 audit(1744838083.940:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.400176][ T5838] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 777.427242][ T30] audit: type=1326 audit(1744838083.940:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.522145][ T9] m920x_read = error: -19 [ 777.529249][ T9] dvb-usb: error -19 while querying for an remote control event. [ 777.728132][ T30] audit: type=1326 audit(1744838083.940:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.946674][ T30] audit: type=1326 audit(1744838083.940:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12182 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 777.947718][ T5889] m920x_read = error: -19 [ 778.045924][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 778.314399][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 778.407447][ T9] m920x_read = error: -19 [ 778.412273][ T9] dvb-usb: error -19 while querying for an remote control event. [ 778.579121][ T9] m920x_read = error: -19 [ 778.584092][ T9] dvb-usb: error -19 while querying for an remote control event. [ 778.679115][ T5889] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 778.749257][ T9] m920x_read = error: -19 [ 778.753664][ T9] dvb-usb: error -19 while querying for an remote control event. [ 779.036030][ T9] m920x_read = error: -19 [ 779.057182][ T9] dvb-usb: error -19 while querying for an remote control event. [ 779.074454][ T5890] usb 5-1: USB disconnect, device number 13 [ 779.157498][ T5889] usb 4-1: config 0 has no interfaces? [ 779.195645][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 779.218975][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.240258][ T5889] usb 4-1: Product: syz [ 779.250221][ T5889] usb 4-1: Manufacturer: syz [ 779.323644][ T5889] usb 4-1: SerialNumber: syz [ 779.328909][ T5890] m920x_read = error: -19 [ 779.333500][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 779.345756][ T5889] usb 4-1: config 0 descriptor?? [ 779.513538][ T5889] m920x_read = error: -19 [ 779.518098][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 779.621572][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 779.750989][ T5889] m920x_read = error: -19 [ 779.769877][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 779.928895][ T5895] usbhid 1-1:1.0: can't add hid device: -71 [ 779.941809][ T5895] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 779.966872][ T5895] usb 1-1: USB disconnect, device number 118 [ 779.978988][ T5889] m920x_read = error: -19 [ 779.983521][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 780.418601][ T5889] m920x_read = error: -19 [ 780.472711][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 780.969731][ T5889] m920x_read = error: -19 [ 780.977870][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 781.249205][ T5889] m920x_read = error: -19 [ 781.260518][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 781.341423][T12233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.459106][ T5889] m920x_read = error: -19 [ 781.463721][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 781.559580][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 781.600280][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 781.628962][ T5889] m920x_read = error: -19 [ 781.635656][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 781.722561][ T9] usb 5-1: config 0 has no interfaces? [ 781.742509][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 781.753292][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.799742][ T5889] m920x_read = error: -19 [ 781.804521][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 781.865622][ T9] usb 5-1: Product: syz [ 781.903136][ T9] usb 5-1: Manufacturer: syz [ 781.926020][ T9] usb 5-1: SerialNumber: syz [ 782.008982][ T5889] m920x_read = error: -19 [ 782.020237][ T9] usb 5-1: config 0 descriptor?? [ 782.030586][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 782.185311][ T9] usb 4-1: USB disconnect, device number 10 [ 782.207995][ T5892] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 782.281942][ T5890] m920x_read = error: -19 [ 782.286363][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 782.576597][ T5837] usb 2-1: USB disconnect, device number 18 [ 782.720763][ T5890] m920x_read = error: -19 [ 782.725180][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 782.882078][T12241] FAULT_INJECTION: forcing a failure. [ 782.882078][T12241] name failslab, interval 1, probability 0, space 0, times 0 [ 783.125050][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 783.158900][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.1.1705 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 783.158935][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 783.158947][T12241] Call Trace: [ 783.158956][T12241] [ 783.158965][T12241] dump_stack_lvl+0x241/0x360 [ 783.159005][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.159036][T12241] ? __pfx__printk+0x10/0x10 [ 783.159068][T12241] ? __pfx___might_resched+0x10/0x10 [ 783.159098][T12241] should_fail_ex+0x424/0x570 [ 783.159126][T12241] should_failslab+0xac/0x100 [ 783.159156][T12241] __kmalloc_noprof+0xdf/0x4d0 [ 783.159186][T12241] ? ima_alloc_init_template+0x162/0x6e0 [ 783.159213][T12241] ima_alloc_init_template+0x162/0x6e0 [ 783.159233][T12241] ? take_dentry_name_snapshot+0x2b/0x530 [ 783.159270][T12241] ima_store_measurement+0x286/0x6f0 [ 783.159298][T12241] ? __pfx_ima_store_measurement+0x10/0x10 [ 783.159319][T12241] ? ima_d_path+0x224/0x280 [ 783.159376][T12241] process_measurement+0x1570/0x1fe0 [ 783.159427][T12241] ? __pfx_process_measurement+0x10/0x10 [ 783.159454][T12241] ? __lock_acquire+0xad5/0xd80 [ 783.159526][T12241] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 783.159556][T12241] ima_file_mmap+0x1cf/0x220 [ 783.159588][T12241] ? __pfx_ima_file_mmap+0x10/0x10 [ 783.159625][T12241] ? end_current_label_crit_section+0x151/0x180 [ 783.159654][T12241] ? common_file_perm+0x1a6/0x210 [ 783.159685][T12241] security_mmap_file+0x7aa/0xa40 [ 783.159712][T12241] vm_mmap_pgoff+0x151/0x530 [ 783.159744][T12241] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 783.159763][T12241] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 783.159789][T12241] ? hugetlbfs_get_inode+0x45f/0x690 [ 783.159819][T12241] ? hugetlb_file_setup+0x3dc/0x5c0 [ 783.159844][T12241] ksys_mmap_pgoff+0x541/0x720 [ 783.159879][T12241] do_syscall_64+0xf3/0x230 [ 783.159904][T12241] ? clear_bhb_loop+0x45/0xa0 [ 783.159930][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.159949][T12241] RIP: 0033:0x7f911ff8e169 [ 783.159966][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.159983][T12241] RSP: 002b:00007f9120da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 783.160004][T12241] RAX: ffffffffffffffda RBX: 00007f91201b5fa0 RCX: 00007f911ff8e169 [ 783.160019][T12241] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000200000 [ 783.160031][T12241] RBP: 00007f9120da0090 R08: ffffffffffffffff R09: 0000000000000000 [ 783.160044][T12241] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 783.160057][T12241] R13: 0000000000000000 R14: 00007f91201b5fa0 R15: 00007f91202dfa28 [ 783.160086][T12241] [ 783.439061][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 783.439081][ T30] audit: type=1804 audit(1744838091.400:1966): pid=12241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1705" name="anon_hugepage" dev="hugetlbfs" ino=36341 res=0 errno=0 [ 783.642250][ T5890] m920x_read = error: -19 [ 783.646671][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 783.678074][ T30] audit: type=1400 audit(1744838091.640:1967): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12249 comm="syz.1.1706" [ 783.809531][ T5890] m920x_read = error: -19 [ 783.813967][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 783.876922][T12252] xt_CONNSECMARK: invalid mode: 0 [ 783.978931][ T5892] m920x_read = error: -19 [ 783.983387][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 784.169420][ T5892] m920x_read = error: -19 [ 784.173838][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 784.294999][T12262] netlink: 'syz.1.1708': attribute type 10 has an invalid length. [ 784.451391][ T5890] m920x_read = error: -19 [ 784.470480][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 784.564047][ T5837] usb 5-1: USB disconnect, device number 14 [ 784.741374][ T5892] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 784.753719][ T5890] m920x_read = error: -19 [ 784.758301][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 784.771426][ T30] audit: type=1326 audit(1744838092.610:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 784.869571][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 784.982407][ T5889] m920x_read = error: -19 [ 785.001712][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 785.009640][ T30] audit: type=1326 audit(1744838092.610:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.059189][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 785.092902][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.133533][ T5892] usb 2-1: config 0 has no interfaces? [ 785.152670][ T5892] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 785.165124][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.176549][ T30] audit: type=1326 audit(1744838092.610:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.224347][ T5892] usb 2-1: Product: syz [ 785.228657][ T5892] usb 2-1: Manufacturer: syz [ 785.239906][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 785.248193][ T5892] usb 2-1: SerialNumber: syz [ 785.259662][ T5889] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 785.271451][ T5890] m920x_read = error: -19 [ 785.275852][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 785.289881][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 785.300796][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 785.313881][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 785.323394][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.377223][ T9] usb 4-1: Product: syz [ 785.404470][ T5892] usb 2-1: config 0 descriptor?? [ 785.410742][ T30] audit: type=1326 audit(1744838092.610:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.451193][ T5890] m920x_read = error: -19 [ 785.470226][ T9] usb 4-1: Manufacturer: syz [ 785.479558][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 785.499566][ T9] usb 4-1: SerialNumber: syz [ 785.550473][ T30] audit: type=1326 audit(1744838092.610:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.589006][ T5837] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 785.664548][ T5889] usb 5-1: config 0 has no interfaces? [ 785.682727][ T5890] m920x_read = error: -19 [ 785.687231][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 785.846653][ T30] audit: type=1326 audit(1744838092.610:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.883347][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 785.912887][ T5837] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 785.932910][ T30] audit: type=1326 audit(1744838092.610:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 785.955647][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.955679][ T5837] usb 1-1: Product: syz [ 785.955698][ T5837] usb 1-1: Manufacturer: syz [ 785.955714][ T5837] usb 1-1: SerialNumber: syz [ 785.959527][ T5837] usb 1-1: config 0 descriptor?? [ 785.994076][ T5837] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 785.999003][ T5890] m920x_read = error: -19 [ 786.005304][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 786.322933][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 786.398966][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.434286][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 786.668903][ T5889] usb 5-1: Product: syz [ 786.778531][ T5889] usb 5-1: Manufacturer: syz [ 786.785067][ T5892] m920x_read = error: -19 [ 786.798465][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 786.859007][ T5889] usb 5-1: SerialNumber: syz [ 786.880332][ T30] audit: type=1326 audit(1744838092.610:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.3.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 786.949225][ T5889] usb 5-1: config 0 descriptor?? [ 787.073578][ T5889] m920x_read = error: -19 [ 787.095422][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 787.110348][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 787.328943][ T5889] m920x_read = error: -19 [ 787.340148][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 787.456787][ T5890] usb 3-1: config 0 has no interfaces? [ 787.476248][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 787.486487][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.508907][ T5889] m920x_read = error: -19 [ 787.513358][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 787.528934][ T5890] usb 3-1: Product: syz [ 787.541757][ T5890] usb 3-1: Manufacturer: syz [ 787.578517][ T5890] usb 3-1: SerialNumber: syz [ 787.652220][ T5890] usb 3-1: config 0 descriptor?? [ 787.691146][ T5890] m920x_read = error: -19 [ 787.698524][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 787.709754][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 787.868041][ T5890] usb 2-1: USB disconnect, device number 19 [ 788.409673][ T5837] gspca_stk1135: reg_w 0x200 err -110 [ 788.416341][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.468613][ T5889] m920x_read = error: -19 [ 788.473275][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 788.706165][ T5837] gspca_stk1135: Sensor write failed [ 788.742549][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.758184][ T5837] gspca_stk1135: Sensor write failed [ 788.769463][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.777891][ T5837] gspca_stk1135: Sensor read failed [ 788.789087][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.795921][ T5837] gspca_stk1135: Sensor read failed [ 788.808376][ T5837] gspca_stk1135: Detected sensor type unknown (0x0) [ 788.839568][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.845991][ T5837] gspca_stk1135: Sensor read failed [ 788.851607][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.857955][ T5837] gspca_stk1135: Sensor read failed [ 788.868950][ T5889] m920x_read = error: -19 [ 788.873357][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 788.896399][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.933444][ T5837] gspca_stk1135: Sensor write failed [ 788.949394][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1715'. [ 788.964919][ T5837] gspca_stk1135: serial bus timeout: status=0x00 [ 788.989812][ T5837] gspca_stk1135: Sensor write failed [ 789.016113][ T5837] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 789.089050][ T5889] m920x_read = error: -19 [ 789.101897][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 789.133500][ T5837] usb 1-1: USB disconnect, device number 119 [ 789.294195][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 789.300575][ T5889] m920x_read = error: -19 [ 789.304974][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 789.334774][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 789.384502][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 789.384518][ T30] audit: type=1400 audit(1744838097.350:2025): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12290 comm="syz.1.1717" [ 789.442397][ T9] usb 4-1: USB disconnect, device number 11 [ 789.475875][ T30] audit: type=1326 audit(1744838097.380:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.514830][ T30] audit: type=1326 audit(1744838097.380:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.541590][ T30] audit: type=1326 audit(1744838097.390:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.564411][ T30] audit: type=1326 audit(1744838097.390:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.617084][ T5889] m920x_read = error: -19 [ 789.657392][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 789.659434][ T5837] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 789.751429][ T30] audit: type=1326 audit(1744838097.390:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.779797][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 789.837749][T12296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.839165][ T5889] m920x_read = error: -19 [ 789.853269][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 789.882351][ T30] audit: type=1326 audit(1744838097.390:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 789.909047][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 789.922040][ T5837] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 789.957235][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.985183][ T5889] usb 3-1: USB disconnect, device number 10 [ 790.007615][ T5895] usb 5-1: USB disconnect, device number 15 [ 790.029627][ T30] audit: type=1326 audit(1744838097.390:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 790.034786][ T5890] m920x_read = error: -19 [ 790.079018][ T5837] usb 1-1: config 0 descriptor?? [ 790.085978][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 790.103084][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 790.119697][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 790.147248][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 790.151784][ T30] audit: type=1326 audit(1744838097.390:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 790.183911][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 790.194096][ T9] usb 4-1: Product: syz [ 790.198316][ T9] usb 4-1: Manufacturer: syz [ 790.220235][ T30] audit: type=1326 audit(1744838097.390:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.1.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 790.229883][ T9] usb 4-1: SerialNumber: syz [ 790.280653][ T5889] m920x_read = error: -19 [ 790.286822][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 790.315873][ T9] usb 4-1: config 0 descriptor?? [ 790.343604][ T9] usb 4-1: selecting invalid altsetting 0 [ 790.492905][ T9] m920x_read = error: -19 [ 790.501594][ T9] dvb-usb: error -19 while querying for an remote control event. [ 790.506608][ T5837] ath6kl: Failed to read usb control message: -32 [ 790.515925][ T5837] ath6kl: Unable to read the bmi data from the device: -32 [ 790.563021][ T9] usb 4-1: USB disconnect, device number 12 [ 790.589067][ T5837] ath6kl: Unable to recv target info: -32 [ 790.615059][ T5837] ath6kl: Failed to init ath6kl core: -32 [ 790.636325][ T5837] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 790.673573][ T5889] m920x_read = error: -19 [ 790.680325][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 790.710124][ T5837] usb 1-1: USB disconnect, device number 120 [ 790.859070][ T5889] m920x_read = error: -19 [ 790.864696][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 790.951529][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 791.069119][ T5889] m920x_read = error: -19 [ 791.073550][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 791.238949][ T5889] m920x_read = error: -19 [ 791.243365][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 791.433343][ T5889] m920x_read = error: -19 [ 791.446772][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 791.629029][T12318] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 791.768994][ T5889] m920x_read = error: -19 [ 791.783926][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 791.964536][ T5889] m920x_read = error: -19 [ 791.974561][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 792.058876][ T5837] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 792.267924][T12322] FAULT_INJECTION: forcing a failure. [ 792.267924][T12322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.281402][ T5889] m920x_read = error: -19 [ 792.285817][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 792.311580][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.359494][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 792.373230][T12322] CPU: 0 UID: 0 PID: 12322 Comm: syz.2.1727 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 792.373260][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 792.373271][T12322] Call Trace: [ 792.373280][T12322] [ 792.373290][T12322] dump_stack_lvl+0x241/0x360 [ 792.373328][T12322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.373359][T12322] ? __pfx__printk+0x10/0x10 [ 792.373402][T12322] should_fail_ex+0x424/0x570 [ 792.373430][T12322] prepare_alloc_pages+0x220/0x610 [ 792.373472][T12322] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 792.373501][T12322] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 792.373548][T12322] alloc_pages_mpol+0x339/0x690 [ 792.373585][T12322] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 792.373626][T12322] vma_alloc_folio_noprof+0x12d/0x260 [ 792.373659][T12322] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 792.373699][T12322] folio_prealloc+0x2e/0x170 [ 792.373721][T12322] handle_pte_fault+0x2e45/0x61c0 [ 792.373765][T12322] ? __pfx_handle_pte_fault+0x10/0x10 [ 792.373799][T12322] ? rcu_is_watching+0x15/0xb0 [ 792.373831][T12322] ? __lock_acquire+0xad5/0xd80 [ 792.373870][T12322] ? __lock_acquire+0xad5/0xd80 [ 792.373898][T12322] ? do_raw_spin_lock+0x151/0x370 [ 792.373939][T12322] handle_mm_fault+0x1129/0x1bf0 [ 792.374012][T12322] ? __pfx_handle_mm_fault+0x10/0x10 [ 792.374044][T12322] ? follow_page_pte+0x9ff/0x15e0 [ 792.374082][T12322] ? vma_is_secretmem+0xd/0x50 [ 792.374109][T12322] ? check_vma_flags+0x51b/0x590 [ 792.374147][T12322] __get_user_pages+0x1adc/0x4180 [ 792.374203][T12322] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 792.374248][T12322] ? __pfx___get_user_pages+0x10/0x10 [ 792.374310][T12322] faultin_page_range+0x204/0x850 [ 792.374341][T12322] ? __asan_memset+0x23/0x50 [ 792.374364][T12322] ? blk_start_plug+0x70/0x1b0 [ 792.374395][T12322] madvise_do_behavior+0x23a/0x4640 [ 792.374426][T12322] ? is_bpf_text_address+0x288/0x2a0 [ 792.374455][T12322] ? is_bpf_text_address+0x26/0x2a0 [ 792.374485][T12322] ? kernel_text_address+0xa7/0xe0 [ 792.374519][T12322] ? kstrtoull+0x1d3/0x2f0 [ 792.374546][T12322] ? __pfx_kstrtoull+0x10/0x10 [ 792.374576][T12322] ? __pfx_madvise_do_behavior+0x10/0x10 [ 792.374613][T12322] ? kstrtouint+0xfc/0x190 [ 792.374645][T12322] ? __lock_acquire+0xad5/0xd80 [ 792.374694][T12322] ? __lock_acquire+0xad5/0xd80 [ 792.374757][T12322] ? down_read+0x813/0xa50 [ 792.374788][T12322] ? __mutex_unlock_slowpath+0x229/0x800 [ 792.374818][T12322] ? __pfx_down_read+0x10/0x10 [ 792.374850][T12322] ? __fget_files+0x2a/0x420 [ 792.374886][T12322] __x64_sys_madvise+0x185/0x220 [ 792.374920][T12322] ? __pfx___x64_sys_madvise+0x10/0x10 [ 792.374969][T12322] ? do_syscall_64+0xb6/0x230 [ 792.375017][T12322] do_syscall_64+0xf3/0x230 [ 792.375045][T12322] ? clear_bhb_loop+0x45/0xa0 [ 792.375071][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.375092][T12322] RIP: 0033:0x7fc3ce38e169 [ 792.375111][T12322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.375130][T12322] RSP: 002b:00007fc3cf284038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 792.375154][T12322] RAX: ffffffffffffffda RBX: 00007fc3ce5b5fa0 RCX: 00007fc3ce38e169 [ 792.375170][T12322] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 792.375184][T12322] RBP: 00007fc3cf284090 R08: 0000000000000000 R09: 0000000000000000 [ 792.375198][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.375211][T12322] R13: 0000000000000000 R14: 00007fc3ce5b5fa0 R15: 00007fc3ce6dfa28 [ 792.375244][T12322] [ 792.388892][ T5837] usb 2-1: config 0 has no interfaces? [ 792.469122][ T5889] m920x_read = error: -19 [ 792.469154][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 792.628991][ T5889] m920x_read = error: -19 [ 792.629021][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 792.790220][ T5889] m920x_read = error: -19 [ 792.794671][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 792.878179][ T5837] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 792.899075][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.913125][ T5837] usb 2-1: Product: syz [ 792.940422][ T5837] usb 2-1: Manufacturer: syz [ 792.955566][ T5837] usb 2-1: SerialNumber: syz [ 793.019122][ T5889] m920x_read = error: -19 [ 793.132120][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 793.148992][ T5912] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 793.202544][ T5837] usb 2-1: config 0 descriptor?? [ 793.308903][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 793.336740][ T5889] m920x_read = error: -19 [ 793.346261][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 793.358676][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.364901][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 793.523268][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 793.529592][ T5912] usb 3-1: Product: syz [ 793.555490][ T5912] usb 3-1: Manufacturer: syz [ 793.578482][ T5912] usb 3-1: SerialNumber: syz [ 793.594587][ T5912] usb 3-1: config 0 descriptor?? [ 793.607930][ T5912] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 793.708966][ T5889] m920x_read = error: -19 [ 793.714221][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 793.722607][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 793.815382][ T5912] gspca_sunplus: reg_w_riv err -71 [ 793.823374][ T5912] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 793.837948][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 793.850812][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 793.855806][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 793.880753][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 793.892901][ T5912] usb 3-1: USB disconnect, device number 11 [ 793.904896][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.914889][ T5889] m920x_read = error: -19 [ 793.927080][ T9] usb 4-1: Product: syz [ 793.931929][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 793.940660][ T9] usb 4-1: Manufacturer: syz [ 793.945300][ T9] usb 4-1: SerialNumber: syz [ 794.025736][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 794.119215][ T5889] m920x_read = error: -19 [ 794.123625][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.296058][ T5889] m920x_read = error: -19 [ 794.314052][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.488998][ T974] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 794.605014][ T5889] m920x_read = error: -19 [ 794.723157][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.751771][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 794.751793][ T30] audit: type=1326 audit(1744838102.710:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12326 comm="syz.3.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 794.789081][ T5912] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 794.811780][ T30] audit: type=1326 audit(1744838102.710:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12326 comm="syz.3.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cf98e169 code=0x7ffc0000 [ 794.867669][ T974] usb 1-1: config 0 has no interfaces? [ 794.885998][ T974] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 794.914384][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.922722][ T5889] m920x_read = error: -19 [ 794.927122][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 794.955143][ T5912] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 794.969834][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.978408][ T5912] usb 5-1: Product: syz [ 794.985931][ T5912] usb 5-1: Manufacturer: syz [ 794.991829][ T5912] usb 5-1: SerialNumber: syz [ 794.992817][ T974] usb 1-1: Product: syz [ 795.023187][ T5912] usb 5-1: config 0 descriptor?? [ 795.035100][ T974] usb 1-1: Manufacturer: syz [ 795.047166][ T974] usb 1-1: SerialNumber: syz [ 795.082768][ T974] usb 1-1: config 0 descriptor?? [ 795.109166][ T5889] m920x_read = error: -19 [ 795.113632][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 795.160929][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 795.528887][ T5889] m920x_read = error: -19 [ 795.533426][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 795.594756][ T5912] hso 5-1:0.0: Failed to find BULK IN ep [ 795.678266][ T5912] usb-storage 5-1:0.0: USB Mass Storage device detected [ 795.759105][ T5889] m920x_read = error: -19 [ 795.763747][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 795.860461][ T5889] usb 2-1: USB disconnect, device number 20 [ 795.941074][ T974] m920x_read = error: -19 [ 795.973047][ T974] dvb-usb: error -19 while querying for an remote control event. [ 796.012858][ T5912] usb 5-1: USB disconnect, device number 16 [ 796.149476][ T5889] m920x_read = error: -19 [ 796.157318][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 796.338988][ T974] m920x_read = error: -19 [ 796.344663][ T974] dvb-usb: error -19 while querying for an remote control event. [ 796.491415][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.519225][ T974] m920x_read = error: -19 [ 796.523962][ T974] dvb-usb: error -19 while querying for an remote control event. [ 796.681033][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 796.742708][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 796.790656][ T9] usb 4-1: USB disconnect, device number 13 [ 796.834141][ T974] m920x_read = error: -19 [ 796.846759][ T974] dvb-usb: error -19 while querying for an remote control event. [ 796.902643][T12358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1734'. [ 797.059045][ T974] m920x_read = error: -19 [ 797.064163][ T974] dvb-usb: error -19 while querying for an remote control event. [ 797.239676][ T9] m920x_read = error: -19 [ 797.244143][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.419009][ T9] m920x_read = error: -19 [ 797.423672][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.588992][ T9] m920x_read = error: -19 [ 797.647195][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.658994][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 797.842332][ T9] m920x_read = error: -19 [ 797.856940][ T9] dvb-usb: error -19 while querying for an remote control event. [ 797.991763][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 798.024393][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 798.036138][T12372] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1738'. [ 798.053926][T12373] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1738'. [ 798.062675][ T5838] Bluetooth: hci2: unexpected event for opcode 0x041b [ 798.089686][ T9] m920x_read = error: -19 [ 798.101139][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.249327][ T5895] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 798.269036][ T9] m920x_read = error: -19 [ 798.273600][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.330003][ T5837] usb 1-1: USB disconnect, device number 121 [ 798.408829][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 798.436298][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.459949][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 798.477912][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 798.491806][ T5895] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 798.501642][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.513408][ T5895] usb 3-1: Product: syz [ 798.519103][ T5895] usb 3-1: Manufacturer: syz [ 798.523754][ T5895] usb 3-1: SerialNumber: syz [ 798.555384][ T974] m920x_read = error: -19 [ 798.557306][ T5895] usb 3-1: config 0 descriptor?? [ 798.560028][ T974] dvb-usb: error -19 while querying for an remote control event. [ 798.622655][ T5838] Bluetooth: hci2: ISO packet too small [ 798.738947][ T9] m920x_read = error: -19 [ 798.743491][ T9] dvb-usb: error -19 while querying for an remote control event. [ 798.810430][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 798.948915][ T9] m920x_read = error: -19 [ 798.953995][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.038835][ T5837] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 799.168948][ T9] m920x_read = error: -19 [ 799.183561][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.359014][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 799.369540][ T5837] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 799.378639][ T5837] usb 4-1: config 0 has no interface number 0 [ 799.388274][ T5837] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 799.403628][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.408922][ T9] m920x_read = error: -19 [ 799.472067][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.638940][ T9] m920x_read = error: -19 [ 799.643543][ T9] dvb-usb: error -19 while querying for an remote control event. [ 799.681532][ T5837] usb 4-1: config 0 descriptor?? [ 799.845050][ T5837] viperboard 4-1:0.143: version 0.00 found at bus 004 address 014 [ 799.900040][ T9] m920x_read = error: -19 [ 799.904801][ T9] dvb-usb: error -19 while querying for an remote control event. [ 800.068984][ T9] m920x_read = error: -19 [ 800.075015][ T9] dvb-usb: error -19 while querying for an remote control event. [ 800.098622][ T5837] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 800.159797][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 800.279381][ T9] m920x_read = error: -19 [ 800.286723][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.297312][ T5837] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 800.316080][ T9] dvb-usb: error -19 while querying for an remote control event. [ 800.344396][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.509176][ T9] m920x_read = error: -19 [ 800.514577][ T9] dvb-usb: error -19 while querying for an remote control event. [ 800.588061][ T9] usb 4-1: USB disconnect, device number 14 [ 800.712692][ T5889] m920x_read = error: -19 [ 800.717154][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 800.979281][ T5889] m920x_read = error: -19 [ 800.983824][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 801.249390][ T5889] m920x_read = error: -19 [ 801.253794][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 801.340835][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 801.576134][ T5895] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 801.628485][ T5889] m920x_read = error: -19 [ 801.657768][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 801.689604][ T30] audit: type=1326 audit(1744838109.640:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 801.737569][ T5895] usb 3-1: USB disconnect, device number 12 [ 801.844077][ T30] audit: type=1326 audit(1744838109.640:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 801.900302][ T30] audit: type=1326 audit(1744838109.640:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 801.902614][ T5889] m920x_read = error: -19 [ 801.925413][ T30] audit: type=1326 audit(1744838109.640:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 802.050609][ T24] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 802.055360][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 802.160040][ T30] audit: type=1326 audit(1744838109.640:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 802.232592][ T5889] m920x_read = error: -19 [ 802.236987][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 802.282353][T12407] FAULT_INJECTION: forcing a failure. [ 802.282353][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 802.296640][T12407] CPU: 0 UID: 0 PID: 12407 Comm: syz.2.1745 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 802.296670][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 802.296685][T12407] Call Trace: [ 802.296694][T12407] [ 802.296704][T12407] dump_stack_lvl+0x241/0x360 [ 802.296744][T12407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.296776][T12407] ? __pfx__printk+0x10/0x10 [ 802.296809][T12407] ? __pfx___might_resched+0x10/0x10 [ 802.296840][T12407] should_fail_ex+0x424/0x570 [ 802.296870][T12407] should_failslab+0xac/0x100 [ 802.296902][T12407] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 802.296935][T12407] ? __alloc_skb+0x1c2/0x480 [ 802.296961][T12407] __alloc_skb+0x1c2/0x480 [ 802.296986][T12407] ? __pfx___alloc_skb+0x10/0x10 [ 802.297008][T12407] ? if_nlmsg_size+0x510/0x820 [ 802.297031][T12407] ? if_nlmsg_size+0x7ce/0x820 [ 802.297057][T12407] ? if_nlmsg_size+0x5b9/0x820 [ 802.297088][T12407] rtmsg_ifinfo_build_skb+0x84/0x260 [ 802.297124][T12407] rtnetlink_event+0x1b1/0x260 [ 802.297162][T12407] notifier_call_chain+0x1a5/0x3f0 [ 802.297199][T12407] netif_set_mac_address+0x3db/0x510 [ 802.297229][T12407] ? __pfx_netif_set_mac_address+0x10/0x10 [ 802.297250][T12407] ? __lock_acquire+0xad5/0xd80 [ 802.297292][T12407] dev_set_mac_address+0x148/0x270 [ 802.297321][T12407] bond_set_mac_address+0x2b1/0x850 [ 802.297352][T12407] ? __pfx_bond_set_mac_address+0x10/0x10 [ 802.297373][T12407] ? hsr_netdev_notify+0x293/0xb50 [ 802.297416][T12407] ? notifier_call_chain+0x15a/0x3f0 [ 802.297475][T12407] ? notifier_call_chain+0x3cc/0x3f0 [ 802.297511][T12407] netif_set_mac_address+0x329/0x510 [ 802.297541][T12407] ? __pfx_netif_set_mac_address+0x10/0x10 [ 802.297565][T12407] ? down_write+0x18d/0x220 [ 802.297595][T12407] ? rcu_is_watching+0x15/0xb0 [ 802.297624][T12407] ? trace_kmalloc+0x1f/0xd0 [ 802.297652][T12407] ? do_setlink+0xacf/0x4390 [ 802.297678][T12407] do_setlink+0xae9/0x4390 [ 802.297715][T12407] ? __pfx_stack_trace_save+0x10/0x10 [ 802.297756][T12407] ? __pfx_do_setlink+0x10/0x10 [ 802.297782][T12407] ? __lock_acquire+0xad5/0xd80 [ 802.297817][T12407] ? __pfx___mutex_trylock_common+0x10/0x10 [ 802.297851][T12407] ? rcu_is_watching+0x15/0xb0 [ 802.297878][T12407] ? trace_contention_end+0x3c/0x120 [ 802.297908][T12407] ? __mutex_lock+0x380/0x10c0 [ 802.297938][T12407] ? __pfx_aa_get_newest_label+0x10/0x10 [ 802.297975][T12407] ? rcu_is_watching+0x15/0xb0 [ 802.297998][T12407] ? rtnl_newlink+0xd68/0x1fe0 [ 802.298029][T12407] ? __pfx___mutex_lock+0x10/0x10 [ 802.298068][T12407] ? ns_capable+0x8a/0xf0 [ 802.298092][T12407] ? rtnl_link_get_net_capable+0x168/0x340 [ 802.298116][T12407] rtnl_newlink+0x17e2/0x1fe0 [ 802.298145][T12407] ? stack_depot_save_flags+0x44/0x940 [ 802.298184][T12407] ? __pfx_rtnl_newlink+0x10/0x10 [ 802.298213][T12407] ? __netlink_deliver_tap+0x561/0x7f0 [ 802.298241][T12407] ? netlink_deliver_tap+0x19d/0x1b0 [ 802.298269][T12407] ? netlink_unicast+0x7c6/0x9a0 [ 802.298293][T12407] ? netlink_sendmsg+0x8c3/0xcd0 [ 802.298324][T12407] ? __sock_sendmsg+0x221/0x270 [ 802.298349][T12407] ? ____sys_sendmsg+0x523/0x860 [ 802.298369][T12407] ? __sys_sendmsg+0x271/0x360 [ 802.298389][T12407] ? do_syscall_64+0xf3/0x230 [ 802.298413][T12407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.298482][T12407] ? kasan_quarantine_put+0xdc/0x230 [ 802.298505][T12407] ? lockdep_hardirqs_on+0x9d/0x150 [ 802.298533][T12407] ? nlmon_xmit+0xaf/0x100 [ 802.298573][T12407] ? __local_bh_enable_ip+0x168/0x200 [ 802.298594][T12407] ? lockdep_hardirqs_on+0x9d/0x150 [ 802.298629][T12407] ? aa_get_newest_label+0x101/0x6f0 [ 802.298666][T12407] ? __lock_acquire+0xad5/0xd80 [ 802.298716][T12407] ? __pfx_rtnl_newlink+0x10/0x10 [ 802.298747][T12407] rtnetlink_rcv_msg+0x80f/0xd70 [ 802.298775][T12407] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 802.298811][T12407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 802.298848][T12407] ? ref_tracker_free+0x63e/0x7e0 [ 802.298880][T12407] netlink_rcv_skb+0x208/0x480 [ 802.298914][T12407] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 802.298947][T12407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 802.298999][T12407] ? netlink_deliver_tap+0x2e/0x1b0 [ 802.299034][T12407] ? netlink_deliver_tap+0x2e/0x1b0 [ 802.299069][T12407] netlink_unicast+0x7f8/0x9a0 [ 802.299109][T12407] ? __pfx_netlink_unicast+0x10/0x10 [ 802.299140][T12407] ? skb_put+0x114/0x1f0 [ 802.299167][T12407] netlink_sendmsg+0x8c3/0xcd0 [ 802.299214][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.299252][T12407] ? aa_sock_msg_perm+0x91/0x160 [ 802.299289][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.299319][T12407] __sock_sendmsg+0x221/0x270 [ 802.299353][T12407] ____sys_sendmsg+0x523/0x860 [ 802.299388][T12407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 802.299421][T12407] ? rcu_read_lock_any_held+0xbb/0x160 [ 802.299459][T12407] __sys_sendmsg+0x271/0x360 [ 802.299497][T12407] ? __pfx___sys_sendmsg+0x10/0x10 [ 802.299519][T12407] ? vfs_write+0xb29/0xd10 [ 802.299558][T12407] ? __pfx_vfs_write+0x10/0x10 [ 802.299581][T12407] ? do_sys_openat2+0x165/0x1d0 [ 802.299656][T12407] ? do_syscall_64+0xb6/0x230 [ 802.299688][T12407] do_syscall_64+0xf3/0x230 [ 802.299717][T12407] ? clear_bhb_loop+0x45/0xa0 [ 802.299744][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.299765][T12407] RIP: 0033:0x7fc3ce38e169 [ 802.299786][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.299805][T12407] RSP: 002b:00007fc3cf263038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.299828][T12407] RAX: ffffffffffffffda RBX: 00007fc3ce5b6080 RCX: 00007fc3ce38e169 [ 802.299844][T12407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 802.299858][T12407] RBP: 00007fc3cf263090 R08: 0000000000000000 R09: 0000000000000000 [ 802.299872][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.299885][T12407] R13: 0000000000000000 R14: 00007fc3ce5b6080 R15: 00007fc3ce6dfa28 [ 802.299918][T12407] [ 802.477995][ T30] audit: type=1326 audit(1744838109.650:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 802.809730][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 802.953665][ T5889] m920x_read = error: -19 [ 802.966373][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 802.982457][T12407] bond0: entered promiscuous mode [ 802.987594][T12407] bond_slave_0: entered promiscuous mode [ 803.028808][T12407] bond_slave_1: entered promiscuous mode [ 803.088863][ T30] audit: type=1326 audit(1744838109.650:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 803.128973][ T5889] m920x_read = error: -19 [ 803.133384][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 803.181295][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 803.299205][ T30] audit: type=1326 audit(1744838109.650:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 803.332734][ T5889] m920x_read = error: -19 [ 803.337154][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 803.364316][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 803.408486][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 803.507644][ T30] audit: type=1326 audit(1744838109.650:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 803.559110][ T5889] m920x_read = error: -19 [ 803.564071][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 803.654215][T12411] xt_hashlimit: size too large, truncated to 1048576 [ 803.705304][ T30] audit: type=1326 audit(1744838109.650:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12401 comm="syz.0.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 803.731426][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 803.738981][ T5889] m920x_read = error: -19 [ 803.744894][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 803.748694][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.771297][ T24] usb 1-1: Product: syz [ 803.775661][ T24] usb 1-1: Manufacturer: syz [ 803.786623][ T24] usb 1-1: SerialNumber: syz [ 804.015113][ T5889] m920x_read = error: -19 [ 804.468653][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 804.617920][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.660078][ T974] m920x_read = error: -19 [ 804.664483][ T974] dvb-usb: error -19 while querying for an remote control event. [ 804.880936][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 804.919513][ T9] m920x_read = error: -19 [ 804.923968][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.128977][ T9] m920x_read = error: -19 [ 805.148700][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.317457][ T9] m920x_read = error: -19 [ 805.334621][ T9] dvb-usb: error -19 while querying for an remote control event. [ 805.378856][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 805.572738][ T5889] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 805.581278][ T974] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 805.589060][ T5889] usb 4-1: config 0 has no interface number 0 [ 805.599486][ T5889] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 805.619897][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.654337][ T5889] usb 4-1: config 0 descriptor?? [ 805.678929][ T5890] m920x_read = error: -19 [ 805.683373][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 805.849459][ T5890] m920x_read = error: -19 [ 805.853270][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 805.853848][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 805.908881][ T5889] viperboard 4-1:0.143: version 0.00 found at bus 004 address 015 [ 805.937550][ T974] usb 3-1: config 0 has no interfaces? [ 806.027047][ T5890] m920x_read = error: -19 [ 806.031894][ T5889] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 806.051008][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 806.067389][ T5889] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 806.100537][ T974] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 806.111484][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.151866][ T974] usb 3-1: Product: syz [ 806.156146][ T974] usb 3-1: Manufacturer: syz [ 806.249856][ T5889] m920x_read = error: -19 [ 806.254374][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 806.292929][ T974] usb 3-1: SerialNumber: syz [ 806.350531][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 806.376973][ T974] usb 3-1: config 0 descriptor?? [ 806.383212][ T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 806.444936][ T24] usb 1-1: USB disconnect, device number 122 [ 806.570783][ T974] m920x_read = error: -19 [ 806.668367][ T974] dvb-usb: error -19 while querying for an remote control event. [ 807.270164][T12416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.394257][T12416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.418932][ T974] m920x_read = error: -19 [ 807.423354][ T974] dvb-usb: error -19 while querying for an remote control event. [ 807.548470][ T974] usb 4-1: USB disconnect, device number 15 [ 807.568900][ T24] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 807.629152][ T5889] m920x_read = error: -19 [ 807.637184][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 807.670240][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 807.762629][ T24] usb 1-1: config 0 has no interfaces? [ 807.772776][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 807.787809][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.806523][ T24] usb 1-1: Product: syz [ 807.819534][ T974] m920x_read = error: -19 [ 807.824873][ T974] dvb-usb: error -19 while querying for an remote control event. [ 807.844275][ T24] usb 1-1: Manufacturer: syz [ 807.876091][ T24] usb 1-1: SerialNumber: syz [ 807.920728][ T24] usb 1-1: config 0 descriptor?? [ 808.029101][ T974] m920x_read = error: -19 [ 808.036167][ T974] dvb-usb: error -19 while querying for an remote control event. [ 808.209770][ T974] m920x_read = error: -19 [ 808.214979][ T974] dvb-usb: error -19 while querying for an remote control event. [ 808.378978][ T974] m920x_read = error: -19 [ 808.385737][ T974] dvb-usb: error -19 while querying for an remote control event. [ 808.666524][ T974] m920x_read = error: -19 [ 808.675638][ T974] dvb-usb: error -19 while querying for an remote control event. [ 808.813542][ T974] usb 3-1: USB disconnect, device number 13 [ 808.909465][ T9] m920x_read = error: -19 [ 808.913946][ T9] dvb-usb: error -19 while querying for an remote control event. [ 808.928674][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 809.125072][ T974] m920x_read = error: -19 [ 809.188898][ T974] dvb-usb: error -19 while querying for an remote control event. [ 809.501865][ T974] m920x_read = error: -19 [ 809.510820][ T974] dvb-usb: error -19 while querying for an remote control event. [ 809.668954][ T974] m920x_read = error: -19 [ 809.679066][ T974] dvb-usb: error -19 while querying for an remote control event. [ 809.903636][ T974] m920x_read = error: -19 [ 809.908017][ T974] dvb-usb: error -19 while querying for an remote control event. [ 810.045491][T12470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.078975][ T974] m920x_read = error: -19 [ 810.083385][ T974] dvb-usb: error -19 while querying for an remote control event. [ 810.255355][ T974] m920x_read = error: -19 [ 810.262980][ T974] dvb-usb: error -19 while querying for an remote control event. [ 810.373179][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 810.438952][ T974] m920x_read = error: -19 [ 810.443428][ T974] dvb-usb: error -19 while querying for an remote control event. [ 810.540805][ T974] usb 1-1: USB disconnect, device number 123 [ 810.644704][ T9] m920x_read = error: -19 [ 810.649466][ T9] dvb-usb: error -19 while querying for an remote control event. [ 810.809414][ T9] m920x_read = error: -19 [ 810.816221][ T9] dvb-usb: error -19 while querying for an remote control event. [ 810.999256][ T9] m920x_read = error: -19 [ 811.004179][ T9] dvb-usb: error -19 while querying for an remote control event. [ 811.037048][T12494] xt_hashlimit: size too large, truncated to 1048576 [ 811.202999][T12499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 811.224322][ T974] m920x_read = error: -19 [ 811.229094][ T974] dvb-usb: error -19 while querying for an remote control event. [ 811.299214][T12498] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 811.400640][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 811.400662][ T30] audit: type=1326 audit(1744838119.360:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.400819][ T974] m920x_read = error: -19 [ 811.406807][ T30] audit: type=1326 audit(1744838119.360:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.406856][ T30] audit: type=1326 audit(1744838119.370:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.406903][ T30] audit: type=1326 audit(1744838119.370:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.406949][ T30] audit: type=1326 audit(1744838119.370:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.568293][ T974] dvb-usb: error -19 while querying for an remote control event. [ 811.639021][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 811.719637][ T30] audit: type=1326 audit(1744838119.370:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.789003][ T974] m920x_read = error: -19 [ 811.793580][ T974] dvb-usb: error -19 while querying for an remote control event. [ 811.812664][ T30] audit: type=1326 audit(1744838119.490:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.835635][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 811.900602][ T30] audit: type=1326 audit(1744838119.490:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 811.975988][ T974] m920x_read = error: -19 [ 812.010049][ T974] dvb-usb: error -19 while querying for an remote control event. [ 812.121616][ T30] audit: type=1326 audit(1744838119.490:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 812.145064][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 812.179903][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 812.196954][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 812.210709][ T974] m920x_read = error: -19 [ 812.216785][ T974] dvb-usb: error -19 while querying for an remote control event. [ 812.237249][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 812.246693][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.257799][ T9] usb 1-1: Product: syz [ 812.262275][ T9] usb 1-1: Manufacturer: syz [ 812.272280][ T30] audit: type=1326 audit(1744838119.490:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12501 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f450f18e169 code=0x7ffc0000 [ 812.324347][ T9] usb 1-1: SerialNumber: syz [ 812.408882][ T974] m920x_read = error: -19 [ 812.414877][ T974] dvb-usb: error -19 while querying for an remote control event. [ 812.608940][ T974] m920x_read = error: -19 [ 812.616348][ T974] dvb-usb: error -19 while querying for an remote control event. [ 812.825051][ T974] m920x_read = error: -19 [ 812.849009][ T974] dvb-usb: error -19 while querying for an remote control event. [ 812.930272][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 813.008883][ T974] m920x_read = error: -19 [ 813.014293][ T974] dvb-usb: error -19 while querying for an remote control event. [ 813.179036][ T974] m920x_read = error: -19 [ 813.183762][ T974] dvb-usb: error -19 while querying for an remote control event. [ 813.349040][ T974] m920x_read = error: -19 [ 813.353589][ T974] dvb-usb: error -19 while querying for an remote control event. [ 813.809377][ T974] m920x_read = error: -19 [ 813.813817][ T974] dvb-usb: error -19 while querying for an remote control event. [ 813.954355][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 813.999368][ T974] m920x_read = error: -19 [ 814.006818][ T974] dvb-usb: error -19 while querying for an remote control event. [ 814.047723][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.054642][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.353759][ T974] m920x_read = error: -19 [ 814.358172][ T974] dvb-usb: error -19 while querying for an remote control event. [ 814.609330][ T974] m920x_read = error: -19 [ 814.613756][ T974] dvb-usb: error -19 while querying for an remote control event. [ 814.674725][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 814.715023][ T24] usb 3-1: config 0 has no interfaces? [ 814.839392][ T974] m920x_read = error: -19 [ 814.858914][ T974] dvb-usb: error -19 while querying for an remote control event. [ 814.958926][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 814.968039][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.049042][ T974] m920x_read = error: -19 [ 815.055784][ T974] dvb-usb: error -19 while querying for an remote control event. [ 815.439395][ T24] usb 3-1: Product: syz [ 815.443633][ T24] usb 3-1: Manufacturer: syz [ 815.493411][ T24] usb 3-1: SerialNumber: syz [ 815.574375][ T974] m920x_read = error: -19 [ 815.579213][ T974] dvb-usb: error -19 while querying for an remote control event. [ 815.582001][ T24] usb 3-1: config 0 descriptor?? [ 815.758948][ T974] m920x_read = error: -19 [ 815.793939][ T974] dvb-usb: error -19 while querying for an remote control event. [ 816.061993][ T974] m920x_read = error: -19 [ 816.066390][ T974] dvb-usb: error -19 while querying for an remote control event. [ 816.105956][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 816.119434][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 816.138616][ T9] usb 1-1: USB disconnect, device number 124 [ 816.152134][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 816.239728][ T974] m920x_read = error: -19 [ 816.244136][ T974] dvb-usb: error -19 while querying for an remote control event. [ 816.474174][ T974] m920x_read = error: -19 [ 816.499458][ T974] dvb-usb: error -19 while querying for an remote control event. [ 816.614301][ T5837] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 816.708931][ T9] m920x_read = error: -19 [ 816.723532][ T9] dvb-usb: error -19 while querying for an remote control event. [ 816.848814][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 816.860743][ T5837] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 816.875798][ T5837] usb 4-1: config 0 has no interface number 0 [ 816.883934][ T5837] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 816.897710][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.926142][ T9] m920x_read = error: -19 [ 816.931687][ T5837] usb 4-1: config 0 descriptor?? [ 816.938908][ T9] dvb-usb: error -19 while querying for an remote control event. [ 817.091525][ T5837] viperboard 4-1:0.143: version 0.00 found at bus 004 address 016 [ 817.129003][ T9] m920x_read = error: -19 [ 817.135603][ T5837] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 817.145995][ T9] dvb-usb: error -19 while querying for an remote control event. [ 817.154130][ T5837] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 817.181057][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.216133][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.829053][ T9] m920x_read = error: -19 [ 817.833484][ T9] dvb-usb: error -19 while querying for an remote control event. [ 817.839774][T12556] delete_channel: no stack [ 817.966853][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 817.966875][ T30] audit: type=1400 audit(1744838125.930:2218): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12557 comm="syz.4.1776" [ 817.990275][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 818.004489][ T30] audit: type=1326 audit(1744838125.940:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.030215][ T9] m920x_read = error: -19 [ 818.032430][ T30] audit: type=1326 audit(1744838126.000:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.034589][ T9] dvb-usb: error -19 while querying for an remote control event. [ 818.065263][ T30] audit: type=1326 audit(1744838126.000:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.126244][ T5895] usb 3-1: USB disconnect, device number 14 [ 818.128296][ T30] audit: type=1326 audit(1744838126.000:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.159297][ T9] usb 4-1: USB disconnect, device number 16 [ 818.190622][ T5890] m920x_read = error: -19 [ 818.196260][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 818.204594][T12561] FAULT_INJECTION: forcing a failure. [ 818.204594][T12561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.219421][T12561] CPU: 1 UID: 0 PID: 12561 Comm: syz.0.1777 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 818.219453][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 818.219467][T12561] Call Trace: [ 818.219477][T12561] [ 818.219486][T12561] dump_stack_lvl+0x241/0x360 [ 818.219527][T12561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.219558][T12561] ? __pfx__printk+0x10/0x10 [ 818.219600][T12561] should_fail_ex+0x424/0x570 [ 818.219628][T12561] _copy_to_user+0x31/0xb0 [ 818.219662][T12561] simple_read_from_buffer+0xc4/0x170 [ 818.219698][T12561] proc_fail_nth_read+0x1ef/0x260 [ 818.219724][T12561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.219750][T12561] ? rw_verify_area+0x246/0x630 [ 818.219773][T12561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.219797][T12561] vfs_read+0x21f/0xb90 [ 818.219826][T12561] ? __pfx___mutex_lock+0x10/0x10 [ 818.219855][T12561] ? __pfx_vfs_read+0x10/0x10 [ 818.219882][T12561] ? __fget_files+0x2a/0x420 [ 818.219904][T12561] ? __fget_files+0x39d/0x420 [ 818.219923][T12561] ? __fget_files+0x2a/0x420 [ 818.219953][T12561] ksys_read+0x19d/0x2d0 [ 818.219979][T12561] ? __pfx_ksys_read+0x10/0x10 [ 818.220010][T12561] ? do_syscall_64+0xb6/0x230 [ 818.220040][T12561] do_syscall_64+0xf3/0x230 [ 818.220066][T12561] ? clear_bhb_loop+0x45/0xa0 [ 818.220092][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.220113][T12561] RIP: 0033:0x7f450f18cb7c [ 818.220131][T12561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 818.220149][T12561] RSP: 002b:00007f451003b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.220179][T12561] RAX: ffffffffffffffda RBX: 00007f450f3b5fa0 RCX: 00007f450f18cb7c [ 818.220194][T12561] RDX: 000000000000000f RSI: 00007f451003b0a0 RDI: 0000000000000003 [ 818.220207][T12561] RBP: 00007f451003b090 R08: 0000000000000000 R09: 0000000000000000 [ 818.220221][T12561] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 818.220234][T12561] R13: 0000000000000001 R14: 00007f450f3b5fa0 R15: 00007f450f4dfa28 [ 818.220266][T12561] [ 818.449140][ T30] audit: type=1326 audit(1744838126.000:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.472606][ T30] audit: type=1326 audit(1744838126.010:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.503879][ T30] audit: type=1326 audit(1744838126.010:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.526923][ T5837] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 818.679373][ T974] m920x_read = error: -19 [ 818.692180][ T974] dvb-usb: error -19 while querying for an remote control event. [ 818.734430][ T30] audit: type=1326 audit(1744838126.010:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.769149][ T30] audit: type=1326 audit(1744838126.010:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f21f8e169 code=0x7ffc0000 [ 818.806538][ T5837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 818.840897][ T5837] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 818.863099][ T5837] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 818.878928][ T974] m920x_read = error: -19 [ 818.884096][ T974] dvb-usb: error -19 while querying for an remote control event. [ 818.948902][ T5890] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 818.966707][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.058983][ T974] m920x_read = error: -19 [ 819.063982][ T974] dvb-usb: error -19 while querying for an remote control event. [ 819.116659][T12556] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 819.286306][ T5837] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 819.334986][ T5890] usb 3-1: no configurations [ 819.378795][ T5890] usb 3-1: can't read configurations, error -22 [ 819.495975][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 819.539870][ T974] m920x_read = error: -19 [ 819.588885][ T5890] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 819.610104][ T974] dvb-usb: error -19 while querying for an remote control event. [ 819.704477][T12556] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1774'. [ 819.774345][ T974] m920x_read = error: -19 [ 819.780424][ T974] dvb-usb: error -19 while querying for an remote control event. [ 819.864402][ T5837] usb 2-1: USB disconnect, device number 21 [ 819.934140][ T5890] usb 3-1: no configurations [ 819.973121][ T5890] usb 3-1: can't read configurations, error -22 [ 819.979704][ T974] m920x_read = error: -19 [ 820.010234][ T974] dvb-usb: error -19 while querying for an remote control event. [ 820.049163][ T5890] usb usb3-port1: attempt power cycle [ 820.199053][ T24] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 820.248893][ T974] m920x_read = error: -19 [ 820.253853][ T974] dvb-usb: error -19 while querying for an remote control event. [ 820.443101][ T9] m920x_read = error: -19 [ 820.458046][ T9] dvb-usb: error -19 while querying for an remote control event. [ 820.569000][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 820.579020][ T5890] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 820.628157][ T24] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 820.648412][ T24] usb 1-1: config 0 has no interface number 0 [ 820.668811][ T974] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 820.682306][ T24] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 820.700341][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.727153][ T24] usb 1-1: config 0 descriptor?? [ 820.732432][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 820.809316][ T5890] usb 3-1: no configurations [ 820.819095][ T5890] usb 3-1: can't read configurations, error -22 [ 820.827025][ T9] m920x_read = error: -19 [ 820.833498][ T9] dvb-usb: error -19 while querying for an remote control event. [ 820.953767][ T24] viperboard 1-1:0.143: version 0.00 found at bus 001 address 125 [ 820.989137][ T5890] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 820.998300][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 821.017551][ T24] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 821.026476][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 821.079134][ T9] m920x_read = error: -19 [ 821.083562][ T9] dvb-usb: error -19 while querying for an remote control event. [ 821.113605][ T5890] usb 3-1: no configurations [ 821.123770][ T5890] usb 3-1: can't read configurations, error -22 [ 821.152660][ T974] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 821.169011][ T5890] usb usb3-port1: unable to enumerate USB device [ 821.188461][ T974] usb 4-1: config 0 has no interface number 0 [ 821.207776][ T974] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 821.290459][ T5890] m920x_read = error: -19 [ 821.306062][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 821.352041][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.380030][ T974] usb 4-1: config 0 descriptor?? [ 821.513221][ T974] viperboard 4-1:0.143: version 0.00 found at bus 004 address 017 [ 821.521295][ T5890] m920x_read = error: -19 [ 821.525664][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 821.637705][ T974] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 821.646964][ T974] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 821.702560][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.769083][ T974] m920x_read = error: -19 [ 821.774115][ T974] dvb-usb: error -19 while querying for an remote control event. [ 821.789286][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.803429][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.860172][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.949027][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 821.999394][ T974] m920x_read = error: -19 [ 822.018204][ T974] dvb-usb: error -19 while querying for an remote control event. [ 822.209077][ T974] m920x_read = error: -19 [ 822.238894][ T24] usb 4-1: USB disconnect, device number 17 [ 822.268608][ T974] dvb-usb: error -19 while querying for an remote control event. [ 822.348015][ T5895] usb 1-1: USB disconnect, device number 125 [ 822.449199][ T974] m920x_read = error: -19 [ 822.461926][ T974] dvb-usb: error -19 while querying for an remote control event. [ 822.648921][ T974] m920x_read = error: -19 [ 822.660007][ T974] dvb-usb: error -19 while querying for an remote control event. [ 822.832501][ T974] m920x_read = error: -19 [ 822.836912][ T974] dvb-usb: error -19 while querying for an remote control event. [ 822.893975][T12596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1786'. [ 823.049323][ T5890] m920x_read = error: -19 [ 823.057828][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 823.129084][T12600] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 823.151395][ T1080] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 823.319316][ T5890] m920x_read = error: -19 [ 823.327463][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 823.509172][ T5890] m920x_read = error: -19 [ 823.531946][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 823.720807][ T974] m920x_read = error: -19 [ 823.725236][ T974] dvb-usb: error -19 while querying for an remote control event. [ 823.949237][ T974] m920x_read = error: -19 [ 823.964750][ T974] dvb-usb: error -19 while querying for an remote control event. [ 824.149095][ T974] m920x_read = error: -19 [ 824.158071][ T974] dvb-usb: error -19 while querying for an remote control event. [ 824.380402][ T1162] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 824.489436][ T974] m920x_read = error: -19 [ 824.497279][ T974] dvb-usb: error -19 while querying for an remote control event. [ 824.548933][ T5890] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 824.739186][ T5892] m920x_read = error: -19 [ 824.744067][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 824.927177][ T5890] usb 4-1: config 0 has no interfaces? [ 825.068334][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 825.083265][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.096493][ T5892] m920x_read = error: -19 [ 825.108846][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 825.142971][ T5890] usb 4-1: Product: syz [ 825.147280][ T5890] usb 4-1: Manufacturer: syz [ 825.177912][ T5890] usb 4-1: SerialNumber: syz [ 825.202115][ T5890] usb 4-1: config 0 descriptor?? [ 825.322448][ T5890] m920x_read = error: -19 [ 825.326853][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 825.640058][ T5890] m920x_read = error: -19 [ 825.644416][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 825.664184][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 825.779700][ T5892] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 826.099950][ T5890] m920x_read = error: -19 [ 826.161742][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 826.188838][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 826.217573][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 826.228118][ T5892] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 826.268992][ T5892] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 826.336719][ T5892] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 826.346084][ T5890] m920x_read = error: -19 [ 826.350505][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 826.386774][T12625] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 826.463508][ T5892] usb 1-1: config 8 has no interface number 0 [ 826.489147][ T5892] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 826.607371][ T5892] usb 1-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.620804][ T5890] m920x_read = error: -19 [ 826.678988][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 826.774047][ T5892] usb 1-1: config 8 interface 24 has no altsetting 0 [ 826.830828][ T5892] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 826.840287][ T5890] m920x_read = error: -19 [ 826.844636][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 826.933733][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.993848][ T5892] usb 1-1: Product: syz [ 827.016001][ T5892] usb 1-1: Manufacturer: syz [ 827.041193][ T5892] usb 1-1: SerialNumber: syz [ 827.165843][ T5890] m920x_read = error: -19 [ 827.186122][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 827.308121][ T1080] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 827.373635][ T5890] m920x_read = error: -19 [ 827.421988][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 827.441158][T12623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.451508][T12623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.626491][ T974] m920x_read = error: -19 [ 827.631104][ T974] dvb-usb: error -19 while querying for an remote control event. [ 827.691178][T12623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.728834][ T5890] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 827.775567][T12623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.952420][ T974] m920x_read = error: -19 [ 827.957824][ T974] dvb-usb: error -19 while querying for an remote control event. [ 827.971219][ T5890] usb 3-1: no configurations [ 827.995049][ T5890] usb 3-1: can't read configurations, error -22 [ 828.149680][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 828.168919][ T9] m920x_read = error: -19 [ 828.173570][ T9] dvb-usb: error -19 while querying for an remote control event. [ 828.356146][ T9] usb 4-1: USB disconnect, device number 18 [ 828.400351][ T974] m920x_read = error: -19 [ 828.404894][ T974] dvb-usb: error -19 while querying for an remote control event. [ 828.475411][ T5890] usb 3-1: no configurations [ 828.480591][ T5890] usb 3-1: can't read configurations, error -22 [ 828.487820][ T5890] usb usb3-port1: attempt power cycle [ 828.591597][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 828.619107][ T974] m920x_read = error: -19 [ 828.623663][ T974] dvb-usb: error -19 while querying for an remote control event. [ 828.789020][ T974] m920x_read = error: -19 [ 828.793534][ T974] dvb-usb: error -19 while querying for an remote control event. [ 828.839072][ T5890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 828.875344][ T5890] usb 3-1: no configurations [ 828.880420][ T5890] usb 3-1: can't read configurations, error -22 [ 829.048870][ T974] m920x_read = error: -19 [ 829.060058][ T974] dvb-usb: error -19 while querying for an remote control event. [ 829.118928][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 829.239147][ T9] m920x_read = error: -19 [ 829.243607][ T9] dvb-usb: error -19 while querying for an remote control event. [ 829.249057][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 829.291677][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 829.299956][ T5890] usb 3-1: no configurations [ 829.305879][ T5890] usb 3-1: can't read configurations, error -22 [ 829.321988][ T5892] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 829.339022][ T5890] usb usb3-port1: unable to enumerate USB device [ 829.384731][T12657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 829.408983][ T5892] usb 1-1: USB disconnect, device number 126 [ 829.477374][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 829.486647][ T5890] m920x_read = error: -19 [ 829.544152][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 829.565694][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 829.729083][ T5892] m920x_read = error: -19 [ 829.733616][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 829.878391][T12664] FAULT_INJECTION: forcing a failure. [ 829.878391][T12664] name failslab, interval 1, probability 0, space 0, times 0 [ 829.914357][T12664] CPU: 0 UID: 0 PID: 12664 Comm: syz.4.1803 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 829.914390][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 829.914405][T12664] Call Trace: [ 829.914414][T12664] [ 829.914424][T12664] dump_stack_lvl+0x241/0x360 [ 829.914464][T12664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.914496][T12664] ? __pfx__printk+0x10/0x10 [ 829.914530][T12664] ? __pfx___might_resched+0x10/0x10 [ 829.914561][T12664] should_fail_ex+0x424/0x570 [ 829.914591][T12664] should_failslab+0xac/0x100 [ 829.914623][T12664] __kmalloc_cache_noprof+0x73/0x370 [ 829.914652][T12664] ? alloc_netdev_mqs+0xc1a/0x1210 [ 829.914674][T12664] ? __xdp_rxq_info_reg+0x186/0x290 [ 829.914698][T12664] alloc_netdev_mqs+0xc1a/0x1210 [ 829.914752][T12664] rtnl_create_link+0x2f7/0xea0 [ 829.914795][T12664] rtnl_newlink_create+0x2f2/0xcb0 [ 829.914818][T12664] ? __mutex_lock+0x380/0x10c0 [ 829.914852][T12664] ? __pfx_aa_get_newest_label+0x10/0x10 [ 829.914888][T12664] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 829.914913][T12664] ? __pfx___mutex_lock+0x10/0x10 [ 829.914950][T12664] ? ns_capable+0x8a/0xf0 [ 829.914977][T12664] rtnl_newlink+0x18b0/0x1fe0 [ 829.915028][T12664] ? __pfx_rtnl_newlink+0x10/0x10 [ 829.915057][T12664] ? unwind_get_return_address+0x4d/0x90 [ 829.915086][T12664] ? arch_stack_walk+0xff/0x150 [ 829.915120][T12664] ? __lock_acquire+0xad5/0xd80 [ 829.915151][T12664] ? __lock_acquire+0xad5/0xd80 [ 829.915177][T12664] ? __lock_acquire+0xad5/0xd80 [ 829.915221][T12664] ? is_bpf_text_address+0x26/0x2a0 [ 829.915253][T12664] ? is_bpf_text_address+0x288/0x2a0 [ 829.915277][T12664] ? is_bpf_text_address+0x26/0x2a0 [ 829.915303][T12664] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 829.915337][T12664] ? kernel_text_address+0xa7/0xe0 [ 829.915358][T12664] ? __kernel_text_address+0xd/0x40 [ 829.915385][T12664] ? aa_get_newest_label+0x101/0x6f0 [ 829.915423][T12664] ? __lock_acquire+0xad5/0xd80 [ 829.915469][T12664] ? __pfx_rtnl_newlink+0x10/0x10 [ 829.915502][T12664] rtnetlink_rcv_msg+0x80f/0xd70 [ 829.915531][T12664] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 829.915567][T12664] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 829.915596][T12664] ? __lock_acquire+0xad5/0xd80 [ 829.915634][T12664] netlink_rcv_skb+0x208/0x480 [ 829.915661][T12664] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 829.915687][T12664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 829.915727][T12664] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.915753][T12664] ? netlink_deliver_tap+0x2e/0x1b0 [ 829.915787][T12664] netlink_unicast+0x7f8/0x9a0 [ 829.915817][T12664] ? __pfx_netlink_unicast+0x10/0x10 [ 829.915842][T12664] ? skb_put+0x114/0x1f0 [ 829.915863][T12664] netlink_sendmsg+0x8c3/0xcd0 [ 829.915899][T12664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.915929][T12664] ? aa_sock_msg_perm+0x91/0x160 [ 829.915957][T12664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.915981][T12664] __sock_sendmsg+0x221/0x270 [ 829.916007][T12664] ____sys_sendmsg+0x523/0x860 [ 829.916035][T12664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.916052][T12664] ? __fget_files+0x2a/0x420 [ 829.916071][T12664] ? __fget_files+0x2a/0x420 [ 829.916094][T12664] __sys_sendmsg+0x271/0x360 [ 829.916117][T12664] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.916181][T12664] ? do_syscall_64+0xb6/0x230 [ 829.916206][T12664] do_syscall_64+0xf3/0x230 [ 829.916228][T12664] ? clear_bhb_loop+0x45/0xa0 [ 829.916248][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.916265][T12664] RIP: 0033:0x7f5f21f8e169 [ 829.916280][T12664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.916295][T12664] RSP: 002b:00007f5f22ded038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.916314][T12664] RAX: ffffffffffffffda RBX: 00007f5f221b5fa0 RCX: 00007f5f21f8e169 [ 829.916328][T12664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 829.916338][T12664] RBP: 00007f5f22ded090 R08: 0000000000000000 R09: 0000000000000000 [ 829.916349][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.916359][T12664] R13: 0000000000000000 R14: 00007f5f221b5fa0 R15: 00007f5f222dfa28 [ 829.916385][T12664] [ 830.326147][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 830.387620][ T5892] m920x_read = error: -19 [ 830.392516][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 830.568909][ T5890] m920x_read = error: -19 [ 830.573294][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 830.739045][ T5892] m920x_read = error: -19 [ 830.743463][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 830.774601][ T5838] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 830.777599][ T5838] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 830.919201][ T5892] m920x_read = error: -19 [ 830.981488][ T5890] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 830.998785][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 831.179058][ T5892] m920x_read = error: -19 [ 831.183439][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 831.208811][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 831.220909][ T5890] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 831.238771][ T5890] usb 5-1: config 0 has no interface number 0 [ 831.244986][ T5890] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 831.298816][ T5890] usb 5-1: config 0 interface 85 has no altsetting 0 [ 831.332844][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 831.342110][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.351737][ T5837] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 831.364067][ T5890] usb 5-1: Product: syz [ 831.368299][ T5890] usb 5-1: Manufacturer: syz [ 831.373082][ T5892] m920x_read = error: -19 [ 831.377425][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 831.426376][ T5890] usb 5-1: SerialNumber: syz [ 831.470313][ T5890] usb 5-1: config 0 descriptor?? [ 831.488902][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 831.920568][ T5892] m920x_read = error: -19 [ 831.937757][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 832.129747][ T5892] m920x_read = error: -19 [ 832.135409][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 832.167128][ T5837] usb 4-1: config 0 has no interfaces? [ 832.178101][ T5837] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d8.3b [ 832.369034][ T5892] m920x_read = error: -19 [ 832.373423][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 832.381556][ T5890] appletouch 5-1:0.85: Geyser mode initialized. [ 832.391802][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.401471][ T5890] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input33 [ 832.446653][ T5837] usb 4-1: Product: syz [ 832.471455][ T5837] usb 4-1: Manufacturer: syz [ 832.528827][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 832.543881][ T5837] usb 4-1: SerialNumber: syz [ 832.589423][ T5890] m920x_read = error: -19 [ 832.593789][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 832.627288][ T5837] usb 4-1: config 0 descriptor?? [ 832.638854][ T5895] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 832.869232][T12674] netlink: 'syz.3.1808': attribute type 21 has an invalid length. [ 833.201053][T12674] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 833.214561][ T5837] usb 5-1: USB disconnect, device number 17 [ 833.248374][T12674] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1808'. [ 833.258597][ T5890] m920x_read = error: -19 [ 833.295897][ T5895] usb 3-1: config 0 has no interfaces? [ 833.306588][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 833.308561][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 833.486224][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.499017][ T974] m920x_read = error: -19 [ 833.503407][ T974] dvb-usb: error -19 while querying for an remote control event. [ 833.595883][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 833.607046][ T5895] usb 3-1: Product: syz [ 833.611397][ T5895] usb 3-1: Manufacturer: syz [ 833.616030][ T5895] usb 3-1: SerialNumber: syz [ 833.621680][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 833.634631][ T5895] usb 3-1: config 0 descriptor?? [ 833.644750][ T5837] appletouch 5-1:0.85: input: appletouch disconnected [ 833.658121][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 833.671439][ T974] m920x_read = error: -19 [ 833.675809][ T974] dvb-usb: error -19 while querying for an remote control event. [ 833.686234][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.703471][ T8886] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 833.750320][T12678] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 833.761867][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.890047][T12683] FAULT_INJECTION: forcing a failure. [ 833.890047][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.903631][ T974] m920x_read = error: -19 [ 833.908072][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.2.1809 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 833.908100][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 833.908114][T12683] Call Trace: [ 833.908124][T12683] [ 833.908133][T12683] dump_stack_lvl+0x241/0x360 [ 833.908173][T12683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.908205][T12683] ? __pfx__printk+0x10/0x10 [ 833.908250][T12683] should_fail_ex+0x424/0x570 [ 833.908278][T12683] _copy_from_iter+0x211/0x1c70 [ 833.908313][T12683] ? __build_skb_around+0x247/0x3d0 [ 833.908340][T12683] ? __alloc_skb+0x298/0x480 [ 833.908359][T12683] ? __pfx__copy_from_iter+0x10/0x10 [ 833.908402][T12683] ? __pfx___alloc_skb+0x10/0x10 [ 833.908424][T12683] ? skb_put+0x114/0x1f0 [ 833.908449][T12683] netlink_sendmsg+0x73c/0xcd0 [ 833.908496][T12683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.908525][T12683] ? __pfx_aa_file_perm+0x10/0x10 [ 833.908550][T12683] ? aa_sock_msg_perm+0x91/0x160 [ 833.908579][T12683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.908603][T12683] __sock_sendmsg+0x221/0x270 [ 833.908630][T12683] sock_write_iter+0x2d9/0x3f0 [ 833.908656][T12683] ? __pfx_sock_write_iter+0x10/0x10 [ 833.908687][T12683] ? bpf_lsm_file_permission+0x9/0x10 [ 833.908717][T12683] vfs_write+0x70f/0xd10 [ 833.908747][T12683] ? __pfx_sock_write_iter+0x10/0x10 [ 833.908775][T12683] ? __pfx_vfs_write+0x10/0x10 [ 833.908799][T12683] ? __fget_files+0x2a/0x420 [ 833.908818][T12683] ? __fget_files+0x2a/0x420 [ 833.908841][T12683] ksys_write+0x19d/0x2d0 [ 833.908863][T12683] ? __pfx_ksys_write+0x10/0x10 [ 833.908887][T12683] ? do_syscall_64+0xb6/0x230 [ 833.908913][T12683] do_syscall_64+0xf3/0x230 [ 833.908935][T12683] ? clear_bhb_loop+0x45/0xa0 [ 833.908955][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.908972][T12683] RIP: 0033:0x7fc3ce38e169 [ 833.908988][T12683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.909003][T12683] RSP: 002b:00007fc3cf242038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.909022][T12683] RAX: ffffffffffffffda RBX: 00007fc3ce5b6160 RCX: 00007fc3ce38e169 [ 833.909035][T12683] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 833.909046][T12683] RBP: 00007fc3cf242090 R08: 0000000000000000 R09: 0000000000000000 [ 833.909057][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.909067][T12683] R13: 0000000000000000 R14: 00007fc3ce5b6160 R15: 00007fc3ce6dfa28 [ 833.909093][T12683] [ 834.174002][ T974] dvb-usb: error -19 while querying for an remote control event. [ 834.348978][ T974] m920x_read = error: -19 [ 834.353464][ T974] dvb-usb: error -19 while querying for an remote control event. [ 834.369334][T12678] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1807'. [ 834.409159][ T5837] usb 2-1: USB disconnect, device number 22 [ 834.437961][T12678] delete_channel: no stack [ 834.569227][ T5890] m920x_read = error: -19 [ 834.573734][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 834.689886][ T974] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 834.738972][ T5890] m920x_read = error: -19 [ 834.744829][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 834.878894][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 834.896393][ T974] usb 5-1: unable to get BOS descriptor or descriptor too short [ 834.904336][ T5892] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 834.942023][ T5890] m920x_read = error: -19 [ 834.951367][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 834.972863][ T974] usb 5-1: config 8 has an invalid interface number: 24 but max is 1 [ 834.998190][ T974] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 835.023937][ T974] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 835.044325][ T974] usb 5-1: config 8 has no interface number 0 [ 835.060128][ T974] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 835.070409][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 835.079630][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 835.089596][ T5892] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 835.098266][ T5892] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 835.127864][ T5892] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 835.138161][ T974] usb 5-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.151574][ T5890] m920x_read = error: -19 [ 835.155915][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 835.167523][ T5892] usb 1-1: config 8 has no interface number 0 [ 835.174895][ T974] usb 5-1: config 8 interface 24 has no altsetting 0 [ 835.185123][ T5892] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 835.196177][ T5892] usb 1-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.215453][ T5892] usb 1-1: config 8 interface 24 has no altsetting 0 [ 835.222498][ T974] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 835.234684][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.253071][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.269393][ T974] usb 5-1: Product: syz [ 835.279849][ T974] usb 5-1: Manufacturer: syz [ 835.284677][ T974] usb 5-1: SerialNumber: syz [ 835.299150][ T5892] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 835.316303][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.324635][ T5890] m920x_read = error: -19 [ 835.329100][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 835.363856][ T5892] usb 1-1: Product: syz [ 835.374721][ T5892] usb 1-1: Manufacturer: syz [ 835.386547][ T5892] usb 1-1: SerialNumber: syz [ 835.524314][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.534841][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.568412][T12694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.579002][T12694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.588868][ T5890] m920x_read = error: -19 [ 835.597019][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 835.623736][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.634286][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.682719][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.694083][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.752660][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 835.752702][ T30] audit: type=1326 audit(1744838143.700:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.781726][ T5890] m920x_read = error: -19 [ 835.786352][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 835.801360][ T30] audit: type=1326 audit(1744838143.710:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.845890][ T30] audit: type=1326 audit(1744838143.710:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.874247][ T30] audit: type=1326 audit(1744838143.710:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.910728][ T30] audit: type=1326 audit(1744838143.710:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.949430][ T30] audit: type=1326 audit(1744838143.710:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 835.972371][ T5890] m920x_read = error: -19 [ 835.976742][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 835.999845][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 836.042321][ T30] audit: type=1326 audit(1744838143.710:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 836.159043][ T5890] m920x_read = error: -19 [ 836.163560][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 836.177335][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 836.458910][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 836.496427][ T30] audit: type=1326 audit(1744838143.710:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 836.538736][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.569161][ T5889] m920x_read = error: -19 [ 836.573735][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 836.597305][ T30] audit: type=1326 audit(1744838143.710:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 836.726736][ T30] audit: type=1326 audit(1744838143.710:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f911ff8e169 code=0x7ffc0000 [ 836.751554][ T5889] m920x_read = error: -19 [ 836.758550][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 836.783075][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 836.802257][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 836.811835][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.842831][ T9] usb 2-1: Product: syz [ 836.869953][ T9] usb 2-1: Manufacturer: syz [ 836.885155][ T9] usb 2-1: SerialNumber: syz [ 836.980317][ T5889] m920x_read = error: -19 [ 836.985633][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 837.150018][ T5889] m920x_read = error: -19 [ 837.160230][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 837.326569][ T5889] usb 3-1: USB disconnect, device number 23 [ 837.459041][ T5890] m920x_read = error: -19 [ 837.463476][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 837.491002][T12705] [ 837.493387][T12705] ====================================================== [ 837.500442][T12705] WARNING: possible circular locking dependency detected [ 837.507460][T12705] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 837.514572][T12705] ------------------------------------------------------ [ 837.521596][T12705] syz.2.1814/12705 is trying to acquire lock: [ 837.527678][T12705] ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 837.536866][T12705] [ 837.536866][T12705] but task is already holding lock: [ 837.544256][T12705] ffff888029cb38a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 837.554448][T12705] [ 837.554448][T12705] which lock already depends on the new lock. [ 837.554448][T12705] [ 837.564864][T12705] [ 837.564864][T12705] the existing dependency chain (in reverse order) is: [ 837.573985][T12705] [ 837.573985][T12705] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 837.582607][T12705] lock_acquire+0x116/0x2f0 [ 837.587654][T12705] __mutex_lock+0x1a5/0x10c0 [ 837.592790][T12705] smc_switch_to_fallback+0x35/0xda0 [ 837.598608][T12705] smc_sendmsg+0x11f/0x530 [ 837.603576][T12705] __sock_sendmsg+0x221/0x270 [ 837.608824][T12705] __sys_sendto+0x365/0x4c0 [ 837.613853][T12705] __x64_sys_sendto+0xde/0x100 [ 837.619150][T12705] do_syscall_64+0xf3/0x230 [ 837.624199][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.630617][T12705] [ 837.630617][T12705] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 837.638277][T12705] lock_acquire+0x116/0x2f0 [ 837.643305][T12705] lock_sock_nested+0x48/0x100 [ 837.648602][T12705] do_ip_setsockopt+0x17e9/0x39c0 [ 837.654164][T12705] ip_setsockopt+0x63/0x100 [ 837.659203][T12705] do_sock_setsockopt+0x3b1/0x710 [ 837.664772][T12705] __x64_sys_setsockopt+0x1ee/0x280 [ 837.670499][T12705] do_syscall_64+0xf3/0x230 [ 837.675532][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.681949][T12705] [ 837.681949][T12705] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 837.689207][T12705] validate_chain+0xa69/0x24e0 [ 837.694535][T12705] __lock_acquire+0xad5/0xd80 [ 837.699757][T12705] lock_acquire+0x116/0x2f0 [ 837.704830][T12705] __mutex_lock+0x1a5/0x10c0 [ 837.709953][T12705] do_ip_getsockopt+0x11ae/0x2ba0 [ 837.715510][T12705] ip_getsockopt+0xef/0x2e0 [ 837.720540][T12705] tcp_getsockopt+0x16f/0x1d0 [ 837.725748][T12705] smc_getsockopt+0x1c6/0x400 [ 837.730966][T12705] do_sock_getsockopt+0x391/0x740 [ 837.736524][T12705] __x64_sys_getsockopt+0x2a3/0x370 [ 837.742253][T12705] do_syscall_64+0xf3/0x230 [ 837.747306][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.753722][T12705] [ 837.753722][T12705] other info that might help us debug this: [ 837.753722][T12705] [ 837.764051][T12705] Chain exists of: [ 837.764051][T12705] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 837.764051][T12705] [ 837.769624][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 837.777610][T12705] Possible unsafe locking scenario: [ 837.777610][T12705] [ 837.777622][T12705] CPU0 CPU1 [ 837.798144][T12705] ---- ---- [ 837.803511][T12705] lock(&smc->clcsock_release_lock); [ 837.808905][T12705] lock(sk_lock-AF_INET); [ 837.815870][T12705] lock(&smc->clcsock_release_lock); [ 837.823800][T12705] lock(rtnl_mutex); [ 837.827803][T12705] [ 837.827803][T12705] *** DEADLOCK *** [ 837.827803][T12705] [ 837.835951][T12705] 1 lock held by syz.2.1814/12705: [ 837.841074][T12705] #0: ffff888029cb38a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 837.851647][T12705] [ 837.851647][T12705] stack backtrace: [ 837.857552][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.2.1814 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 837.857573][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 837.857584][T12705] Call Trace: [ 837.857592][T12705] [ 837.857601][T12705] dump_stack_lvl+0x241/0x360 [ 837.857627][T12705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.857648][T12705] ? __pfx__printk+0x10/0x10 [ 837.857669][T12705] ? print_lock+0x171/0x1a0 [ 837.857689][T12705] print_circular_bug+0x2e1/0x300 [ 837.857721][T12705] check_noncircular+0x142/0x160 [ 837.857754][T12705] validate_chain+0xa69/0x24e0 [ 837.857791][T12705] __lock_acquire+0xad5/0xd80 [ 837.857809][T12705] lock_acquire+0x116/0x2f0 [ 837.857824][T12705] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 837.857848][T12705] __mutex_lock+0x1a5/0x10c0 [ 837.857867][T12705] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 837.857887][T12705] ? __lock_acquire+0xad5/0xd80 [ 837.857905][T12705] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 837.857924][T12705] ? __pfx___mutex_lock+0x10/0x10 [ 837.857950][T12705] do_ip_getsockopt+0x11ae/0x2ba0 [ 837.857972][T12705] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 837.858009][T12705] ? schedule+0x163/0x360 [ 837.858025][T12705] ? look_up_lock_class+0x7b/0x170 [ 837.858045][T12705] ? register_lock_class+0x54/0x330 [ 837.858062][T12705] ? __lock_acquire+0xad5/0xd80 [ 837.858078][T12705] ? __mutex_trylock_common+0x184/0x2e0 [ 837.858100][T12705] ? __pfx___mutex_trylock_common+0x10/0x10 [ 837.858123][T12705] ip_getsockopt+0xef/0x2e0 [ 837.858144][T12705] ? __pfx_ip_getsockopt+0x10/0x10 [ 837.858165][T12705] ? smc_getsockopt+0x131/0x400 [ 837.858184][T12705] tcp_getsockopt+0x16f/0x1d0 [ 837.858210][T12705] ? __pfx_tcp_getsockopt+0x10/0x10 [ 837.858235][T12705] ? sock_common_getsockopt+0x2e/0xb0 [ 837.858259][T12705] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 837.858281][T12705] smc_getsockopt+0x1c6/0x400 [ 837.858299][T12705] ? __pfx_smc_getsockopt+0x10/0x10 [ 837.858319][T12705] ? __pfx_smc_getsockopt+0x10/0x10 [ 837.858337][T12705] do_sock_getsockopt+0x391/0x740 [ 837.858355][T12705] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 837.858370][T12705] ? __fget_files+0x2a/0x420 [ 837.858384][T12705] ? __fget_files+0x39d/0x420 [ 837.858396][T12705] ? __fget_files+0x2a/0x420 [ 837.858411][T12705] __x64_sys_getsockopt+0x2a3/0x370 [ 837.858429][T12705] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 837.858447][T12705] ? do_syscall_64+0xb6/0x230 [ 837.858467][T12705] do_syscall_64+0xf3/0x230 [ 837.858486][T12705] ? clear_bhb_loop+0x45/0xa0 [ 837.858503][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.858519][T12705] RIP: 0033:0x7fc3ce38e169 [ 837.858532][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.858546][T12705] RSP: 002b:00007fc3cf284038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 837.858562][T12705] RAX: ffffffffffffffda RBX: 00007fc3ce5b5fa0 RCX: 00007fc3ce38e169 [ 837.858574][T12705] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 837.858583][T12705] RBP: 00007fc3ce410a68 R08: 0000200000000140 R09: 0000000000000000 [ 837.858593][T12705] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 837.858603][T12705] R13: 0000000000000000 R14: 00007fc3ce5b5fa0 R15: 00007fc3ce6dfa28 [ 837.858619][T12705] [ 838.186042][ T5890] m920x_read = error: -19 [ 838.191612][ T5890] dvb-usb: error -19 while querying for an remote control event. [ 838.192482][ T5837] usb 4-1: USB disconnect, device number 19 [ 838.412257][T11937] m920x_read = error: -19 [ 838.416685][T11937] dvb-usb: error -19 while querying for an remote control event. [ 838.433460][ T974] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 838.490723][ T974] usb 5-1: USB disconnect, device number 18 [ 838.579094][ T5889] m920x_read = error: -19 [ 838.584662][ T5889] dvb-usb: error -19 while querying for an remote control event. [ 838.759554][ T974] m920x_read = error: -19 [ 838.765172][ T974] dvb-usb: error -19 while querying for an remote control event. [ 838.813242][ T5892] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 838.845093][ T5892] usb 1-1: USB disconnect, device number 127 [ 838.968834][ T974] m920x_read = error: -19 [ 838.973249][ T974] dvb-usb: error -19 while querying for an remote control event. [ 839.138905][ T5892] m920x_read = error: -19 [ 839.143899][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 839.311146][ T5892] m920x_read = error: -19 [ 839.315777][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 839.479024][ T5892] m920x_read = error: -19 [ 839.483573][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 839.529370][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.639004][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 839.648973][ T5892] m920x_read = error: -19 [ 839.653432][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 839.818955][ T5892] m920x_read = error: -19 [ 839.823551][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 840.000357][ T5892] m920x_read = error: -19 [ 840.005760][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 840.100009][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 840.106634][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 840.119102][ T9] usb 2-1: USB disconnect, device number 23 [ 840.171513][ T5892] m920x_read = error: -19 [ 840.175989][ T5892] dvb-usb: error -19 while querying for an remote control event. [ 840.339089][ T9] m920x_read = error: -19 [ 840.343573][ T9] dvb-usb: error -19 while querying for an remote control event. [ 840.508864][ T9] m920x_read = error: -19 [ 840.513264][ T9] dvb-usb: error -19 while querying for an remote control event. [ 840.640347][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 840.679908][ T9] m920x_read = error: -19 [ 840.684641][ T9] dvb-usb: error -19 while querying for an remote control event. [ 840.849151][ T9] m920x_read = error: -19 [ 840.853583][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.018905][ T9] m920x_read = error: -19 [ 841.023311][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.189135][ T9] m920x_read = error: -19 [ 841.193526][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.358916][ T9] m920x_read = error: -19 [ 841.363339][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.528900][ T9] m920x_read = error: -19 [ 841.533281][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.699142][ T9] m920x_read = error: -19 [ 841.703648][ T9] dvb-usb: error -19 while querying for an remote control event. [ 841.758968][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 841.868928][ T9] m920x_read = error: -19 [ 841.873338][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.038875][ T9] m920x_read = error: -19 [ 842.043310][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.219350][ T9] m920x_read = error: -19 [ 842.223775][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.389421][ T9] m920x_read = error: -19 [ 842.393895][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.559213][ T9] m920x_read = error: -19 [ 842.563622][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.728924][ T9] m920x_read = error: -19 [ 842.733316][ T9] dvb-usb: error -19 while querying for an remote control event. [ 842.879752][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 842.898854][ T9] m920x_read = error: -19 [ 842.903239][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.069621][ T9] m920x_read = error: -19 [ 843.074050][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.238928][ T9] m920x_read = error: -19 [ 843.243450][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.419447][ T9] m920x_read = error: -19 [ 843.423969][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.599096][ T9] m920x_read = error: -19 [ 843.603520][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.769858][ T9] m920x_read = error: -19 [ 843.774270][ T9] dvb-usb: error -19 while querying for an remote control event. [ 843.938862][ T9] m920x_read = error: -19 [ 843.943261][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.008879][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 844.108853][ T9] m920x_read = error: -19 [ 844.113620][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.278870][ T9] m920x_read = error: -19 [ 844.283297][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.448854][ T9] m920x_read = error: -19 [ 844.453261][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.619681][ T9] m920x_read = error: -19 [ 844.624456][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.799017][ T9] m920x_read = error: -19 [ 844.803412][ T9] dvb-usb: error -19 while querying for an remote control event. [ 844.969654][ T9] m920x_read = error: -19 [ 844.974041][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.139324][ T1145] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 845.147231][ T9] m920x_read = error: -19 [ 845.151723][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.318906][ T9] m920x_read = error: -19 [ 845.323303][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.488981][ T9] m920x_read = error: -19 [ 845.493373][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.659590][ T9] m920x_read = error: -19 [ 845.664040][ T9] dvb-usb: error -19 while querying for an remote control event. [ 845.829310][ T9] m920x_read = error: -19 [ 845.833744][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.000043][ T9] m920x_read = error: -19 [ 846.004435][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.180347][ T9] m920x_read = error: -19 [ 846.184747][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.249611][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 846.348889][ T9] m920x_read = error: -19 [ 846.353318][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.519270][ T9] m920x_read = error: -19 [ 846.523688][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.691897][ T9] m920x_read = error: -19 [ 846.696304][ T9] dvb-usb: error -19 while querying for an remote control event. [ 846.858887][ T9] m920x_read = error: -19 [ 846.863300][ T9] dvb-usb: error -19 while querying for an remote control event. [ 847.030873][ T9] m920x_read = error: -19 [ 847.035255][ T9] dvb-usb: error -19 while querying for an remote control event. [ 847.198832][ T9] m920x_read = error: -19 [ 847.203232][ T9] dvb-usb: error -19 while querying for an remote control event. [ 847.348915][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 847.368910][ T9] m920x_read = error: -19 [ 847.373293][ T9] dvb-usb: error -19 while querying for an remote control event.