last executing test programs: 1m8.721123891s ago: executing program 1 (id=405): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129422e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x20000000, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m8.620475306s ago: executing program 1 (id=406): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x1, 0x7}}}}}]}}]}}, 0x0) r1 = syz_clone(0x5080000, &(0x7f0000000040)="0bf89b579a486c0e35d9913670efc6df00a8732c", 0x14, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="a34016f777f40a56ba2268a5cfa1b5955771063228a9fc5bd54196bc1940c900d10d03c0558df6e1298e9f04c7b0a2744c5d3b43ccde912e295e8c60c4c2addbc663b839d673deedd80eb956e5154913164a056403ec73a9aae422d24ef868cc522b79763eb52ed77c38a55bd6d059ccb272c25f752ad1d9ddcac58ceee635a344e1d6d20135b576e9d910387b4affeae4047d63728e2fe8995baa0ae924bba94e5fabacbd0adff53841583b54e96e26aa") ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x1, 0x4002) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x172f, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xbb, 0x1, 0x3, 0x1, 0x2, 0x49, {0x9, 0x21, 0x9, 0xc2, 0x1, {0x22, 0x440}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x61, 0xa0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0xf9, 0xda}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xac, 0x17, 0x7, 0xff, 0x4a}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xd, 0x4, 0xde}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x180c}}, {0x37, &(0x7f0000000180)=@string={0x37, 0x3, "418ac8448584554e72e5b7fcc51f6b5e108ee8a670f3a02cb8cde340ccf2e2a498ca32536106be62881f79a0afa3325e62f270dbe2"}}, {0x55, &(0x7f00000001c0)=@string={0x55, 0x3, "e0197af6ab3aea03c2bf691c29c0d3b9f62c5f66f6aca52fc10f274e14bfe29ef226d2a898a20b834a0cf4d1e1722a412a18214d726780319a7915f1858e1fb795e0cf876c24d8ed18d9f4f2b14a202d069043"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}, {0x99, &(0x7f00000002c0)=@string={0x99, 0x3, "65457df3082cb00f0c0470ade4088bb2b36761549800d6dfb45021d4ef3e5cd4303cca3b7ebf0e91f74702b768bf5543f8ec7162b3e6665e214e7619a8a8b636daf64b84120e4fb37b2e1b7b326d2282edaf724ce34deadbcfbfb543a3222f2faf69e91e99d77d69266d9f5cea2d75bcb6f3219deca067954f2052fefa237d72de7ac3a796ce16c99b342c34264278a942a115eeef7adb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}, {0x39, &(0x7f0000000400)=@string={0x39, 0x3, "2dacfa2f0bd2d3bddd9fee4900320aef4ef481f4f20226569e3a038784145d0e327bec3b38de268f699d964336f8fcbfdb81494d18d90e"}}, {0xd5, &(0x7f0000000440)=@string={0xd5, 0x3, "ce9ba9c7f52c6f573365002b50e1a8705551607c4123958e16ce4b44573864360e709772a560baf5cf1c9c2c1c7ecad24b8a6b658d1c290bcf4219ab4505916cc297e4a03597a3e293e4af8b4f1167e48af34e4103c68c43f464139f824b03e4b74e32141770843041bbfc1c9ad9578874984cd283c2352697407029edf8a903c28177bc9f7b731f3594e2a87434325ab85d916f8c291529b2075cf344feb49bfd4cd0f5886e8310055c0a905bc56c874b5217f46a3b06ce05eefa8fc57ec619d0a0a96daacad59a5510305fb3b71643508344"}}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\t') 1m7.448569134s ago: executing program 1 (id=411): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x4, 0x20, 0x7, 0x63b6}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010025bd7100fcdbdf258900000008000300", @ANYRES32, @ANYBLOB="1c001d80010000800c0002008208000000000000f10500070059"], 0x38}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.110293125s ago: executing program 1 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f000001b040)=0x2080104) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) sendto$packet(r3, &(0x7f0000000140)="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", 0xff, 0x80, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 1m3.302087063s ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0xffffffff, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x2, 0xf}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlinkat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', &(0x7f00000021c0)=""/122, 0x7a) close(r0) 1m3.051816649s ago: executing program 1 (id=429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = getpid() tgkill(r3, r3, 0x26) r4 = syz_open_procfs(r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, 0x0, &(0x7f0000000280)=0xb0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r4, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x2, {0x9, 0x870, 0x870, 0x2d0}}) 47.865630745s ago: executing program 32 (id=429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = getpid() tgkill(r3, r3, 0x26) r4 = syz_open_procfs(r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, 0x0, &(0x7f0000000280)=0xb0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r4, &(0x7f00000003c0)='io.weight\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x2, {0x9, 0x870, 0x870, 0x2d0}}) 8.608692579s ago: executing program 4 (id=615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000c40)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 8.308737814s ago: executing program 0 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/160, 0xa0}, {0x0, 0xffffff5c}], 0x2) getsockopt(r1, 0x200000000114, 0x271c, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, &(0x7f0000000100)) socket$igmp(0x2, 0x3, 0x2) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x4400c090) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8.044731022s ago: executing program 0 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x4}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x802) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 7.163121531s ago: executing program 4 (id=620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0x1, 0x4000800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0, 0x30}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/173, 0xbb}], 0x5}, 0x2}], 0x2, 0x22, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x400, 0x0, r1, 0x9c9f, '\x00', 0x0, r1, 0x0, 0x0, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x40, 0x5, 0x1ff, {{0xb, 0x4, 0x0, 0x1a, 0x2c, 0x66, 0x0, 0x5c, 0x28e069606ba9c3b6, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xa7, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r1, 0x0, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x75, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r1, r1, r1, r1, r6, r1, r1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x2, 0x9, 0x6}, {0x2, 0x1, 0x2, 0x3}], 0x10, 0x3}, 0x94) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r2, @ANYRES64=r1]) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000c40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x200, r7, 0x4, 0x3, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0xf228}, {0x8, 0x15, 0x8650}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x55}, {0x8, 0x15, 0xb0}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6b0}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2}}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x20008054) syz_usb_connect(0x0, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) 7.015378712s ago: executing program 0 (id=621): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.952775271s ago: executing program 3 (id=622): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.097356079s ago: executing program 2 (id=627): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000440)={[{@index_on}], [{@smackfsdef={'smackfsdef', 0x3d, 'cpuacct.usage_percpu\x00'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuacct.usage_percpu\x00'}}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x14000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_none}, {@aname={'aname', 0x3d, 'wfdno'}}], [], 0x6b}}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000004c0)=""/83, 0x1c, 0x53, 0x0, 0xdd}, 0x28) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000080), 0x4001) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.059335987s ago: executing program 2 (id=629): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000080)={0x20, 0x10, 0x3, "517f80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x0, @void}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r7 = socket(0x18, 0x800, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e) sendfile(r7, r6, 0x0, 0x8) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000057c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r8, &(0x7f0000000380)={0x28, 0x0, r9, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) stat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r10, 0x0, 0x81a, 0x0, 0x476, 0x9}, 0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81000}}, 0x4, 0x41e9, 0xb642, 0x5, 0xa}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x0, 0x7, 0x8, r11}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r12, 0x1) 5.037629965s ago: executing program 5 (id=630): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20042, 0x1ca, 0x14}, 0x18) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x3, 0x6}, 0x10) 4.862109509s ago: executing program 5 (id=631): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c0) write$9p(r0, &(0x7f0000000080)="888a6fb86c140049b1915693df080b9a1e31f4835624d237137cdce50fe258ac67a73048cadda1d3d89dccd78fd6c2fc", 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.794132817s ago: executing program 5 (id=632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x7, 0x0, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x9, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x38, 0x0, &(0x7f0000000a40)) close_range(r0, 0xffffffffffffffff, 0x0) 4.07314503s ago: executing program 2 (id=633): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.986169144s ago: executing program 4 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x4, r3}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="8857c5fc68d9c508a3cc02", 0xb}, {&(0x7f00000006c0)="26860e5899c10267c34fb8ab7dc8e0cf238523ecbccf24c71e0048aea5055ecf6f51340836b1c003fd6af2561b97ddce67c36ed548551ea70308b9c61e3cd74f6e490d3486272b9d1d672f7a72f242d927bab2626997aa2e2e2a0985000000008f0d6a23708f81bf7495569b89c715aeb024dd3873e2092c8e1b6432182d9fb919bf8bbdd13f7ca8b83aefc18c7803e05ec7311f7f8cb0fba3e2563df0d7d2faffeb7db4a12d94545f41ab0feb4522ae28efbeddb4ab8c3ad753e11cc0814ffad94bd28184f5a60d69ad4a1fd29575fa7325101042573e26ef4df413db06ef08224173b0996dbe4904c165c9e10cf82f9e0cc62e4de424", 0xf7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="a4a67040682526806a", 0x9}, {&(0x7f0000000500)="d2352e7c519f3247e4b8d83f0886d17e0c3189e68d36e2f6149ce97ebe292f18e7420f087f92ebb705f3101b110be1492252c104ec246c8700e2a090c52312b07345ede4da8d8270f2c16e967b12a1f50493f664e936b4ca", 0x58}, {&(0x7f0000000400)="4c579856b612ced70e190be3e13ece09ef77d4b440c467e48cdf5afc8982f4", 0x1f}], 0x3, &(0x7f0000001540)=ANY=[], 0x310}}], 0x4, 0x24000051) select(0x40, &(0x7f0000000340)={0x8, 0x5, 0x401, 0x1000, 0x80000000, 0x6, 0x9, 0x8}, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) io_setup(0xff, &(0x7f0000000440)=0x0) io_submit(r6, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0x0, 0x7cb1358f, 0x0, 0x0, r5}]) 3.984298919s ago: executing program 5 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usbip_server_init(0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'bond_slave_1\x00', 0x9}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b20, &(0x7f0000000040)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006af000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003e6000/0x1000)=nil) 3.48211341s ago: executing program 0 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) mkdir(&(0x7f00000004c0)='./bus\x00', 0x21) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) acct(0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x50, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x10000000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[]) 3.481284378s ago: executing program 3 (id=637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) capget(0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000040)=0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) poll(0x0, 0x0, 0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.10413894s ago: executing program 3 (id=638): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a8000000000000000000004ae001b00", @ANYRES32=0x0, @ANYBLOB="06001d004e240000"], 0x2c}}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x176a0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x549c, &(0x7f00000004c0)={0x0, 0xdd98, 0x2, 0xfffffffe, 0xf0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r6, 0x5405, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x600, 0x0) 3.040834312s ago: executing program 2 (id=639): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0xffffff22) 3.007545238s ago: executing program 2 (id=640): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000004100)="eb2bc40db6f02c6cc66c8ec7b5f1207dd273796604aae779f8f445413b71d69e53dd96972dca1db04aeaa661ee323520a0bd382d937124b46751b1d7b6f9df13b91476e19ab6a404623698caaf50c153dfe049b98ccb14b244829ca81b57e6f12ed097fc8a65196ea690e7aff26a8ac1bce5456b9bf29f23e74337510e8ea2c55e95d7a829", 0x85}, {&(0x7f00000005c0)="41cd632cb19a65c0cb9921e8962ad8fab407a5ac5a410d734b26186464e5628f709af4bbed6c4aa16514b6000b1ebde5162b2a928e454c41a3f2d48cb76ee2b28f1123e7850be56fd4609682d21839092ab5976ae6a7f0c2b9ba53f7203bde53b51a", 0x62}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f00000041c0)="09596032d7348d44f2521982e7934e2471b6299c5aa0014145450c97ae3d44eb2ab99cd14e1fac03be08f42b39e79311426355e7c7c92fff262cb6b07c94bae6624f985be4bfb55956eff6121f897175a574db3e9c9ae514381c1895626cf92ca2c5fe4786481e1d86b39f63dc427fa7c9c59d4f5d08934f846a02b8326a6db01eda3eba0f73a19fe77dbed1d44fc6175461c3cc4f92dbb5ed2efdaf84a93ca937c1253b3d369c201e9a167de4314dea7561df4179b2699ee94d6d2d1204647cf459b1063e95aee1161d93125baa443d1169d37acf4a8746753104a5acfc80ced0bb8ba074c81f86d572dab425418e5f559707c9f88f2e0c6c645f5a33", 0xfd}, {&(0x7f0000002740)="de3a6fc6963b65f9561ed6b01d4e10c38e5f06d164bda84fba494fa64c7df501e7960c16d63ae0cae8601c2dcdc8aaf43dd28e9a852ef8390e66ec7725cc6924b56266dcc904247139076ed65fb578b20e4c5fb1ddcba3254f90d7e416e32450b0a2d3", 0x63}, {&(0x7f00000027c0)="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", 0xff}, {&(0x7f00000042c0)="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", 0x10af}, {&(0x7f0000003fc0)="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", 0x11f}], 0x9, 0x0, 0x0, 0x5}}, {{&(0x7f0000003a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003a80)="61cb9d1dec11593b87dc98bdcd3657a3f519532221af7e7ad5fca95ddeca209b4b0303b4735dbf09093184764a8e85ce9721eef0dbca46a55ee6b2b75892f2b646636eb89ed07813c268dcf92be1e0ecc2ca866e8c47d1af7ae338ecf23b1ef009a1846b77f0caf10367b4e4552d522e856b9b19ac42c4106306a7e98812e1ef8d41f1775d2bdae131e3e69c553d380cd542b14888734afca1346415ed8b83f4409ffe93119196e7142c29a831ea38092339e643fc2c5677eebe9324f85b843a109d9966523d49ecbab5cb0a31", 0xcd}, {&(0x7f0000003b80)="61c28d4a84a219681684117ccf03c4ba83ca8672fe8b792b06b98298a901cb966d7234c3ab4a24f021e352fd4ba6685c5be3c8e822172949e7e593f284bc5db0ed19cbffa42f083924c8dc2df11fecb36d31754c47e3cee0c97f28db24b6d96a5dc6ee060217b626ec9c41aefb3fcf21368696d4eb9c37d9ad364abdae53f628a7df23", 0x83}, {&(0x7f0000003f40)="80b65f035cd3e08c18df94ea3cfbd2eeb14a298482eacd8ef3aafa021b9b2f1b659b0d989349be8b13f995a120bf429ec588c43652c916e9164639b382be219ff65e92995d7d7dffc0374c89f3f51dfe483719fcc047730412c7d16bd1f09397bd7aaedd0fe570036888920c4e2cdfab88", 0x71}, {&(0x7f0000003c40)="107aef76717d5d4083544ad03f970914ad1bba8840d0b134e8310f069f6825eec55b755480342f05208707533adaf6b3870a2b443cc85d6924d11382cdb618da66d77af2f4c94e59255ef52a2274ce113d9246ccdd8551258e8a2bd03d18fde6284365f78f05a75d7bf4defb313abf", 0x6f}, {&(0x7f0000003cc0)="40e8265cd455c25556e4406d1277f6442045712a7e85040180aa205d13d3040e34c47fc373c83d594059ab83915106ac24ad67df2ea14f0f21d667bcc92f8aeec28bb1ac0c0154d0ebecc4bb36bfe196be2a5e57f189b254182fad568b07ca8254cfadcf27c5448f18bb73381696209afecdbb9003106f158395de116e26f09445ab7b84d1d3b173907cfa920acb50759399eb2058f345fd10e24e3d38d207cd4725ce15737694a575f94eba6c", 0xad}], 0x5, &(0x7f0000003e40)=ANY=[@ANYBLOB="2400000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x804}}], 0x2, 0x20004000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8081, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r3 = fsopen(&(0x7f00000003c0)='jffs2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, &(0x7f00000002c0), 0x0}, 0x38) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xf, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) close_range(r4, r5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000500)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) 2.96538936s ago: executing program 0 (id=641): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r7 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) 2.876502496s ago: executing program 4 (id=642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0) 2.774143154s ago: executing program 4 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x7e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000004e000100000000000000000000050000", @ANYRES32=0x0, @ANYBLOB="2c5436b774ce57c7f6d0ea2d7588a84c5d32a7f4c2ff4b94d9c3c303f6d7b29d9c12a077f87239551a92065063"], 0x24}], 0x1}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000380)={0x10000019}) getpid() r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0), &(0x7f0000000200)) r7 = socket(0x2a, 0x800000002, 0x9) ioctl$SIOCPNENABLEPIPE(r7, 0x5411, 0x1000000000000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 1.896729369s ago: executing program 5 (id=644): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 1.879108168s ago: executing program 3 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="a3", 0x1}], 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000040), 0x0, 0x300}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = memfd_create(&(0x7f0000000b80)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x01\x00C\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}\x94\xfd\x00T.\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfcC\x1ag\vP', 0x2) fchmod(r10, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b57a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdc01800000ca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220180c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) syz_open_dev$MSR(0x0, 0x0, 0x0) 1.799798984s ago: executing program 0 (id=646): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0xfffffffffffffffe) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.738663831s ago: executing program 5 (id=647): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 847.833338ms ago: executing program 4 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 96.037225ms ago: executing program 3 (id=649): r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') getpriority(0x7, 0x0) preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) 537.388µs ago: executing program 2 (id=650): pipe2(0x0, 0x84800) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7c73, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r4 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000, r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x9, 0x3, 0x6}}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x6, 0x1, 0x7, 0x20024, r8, 0x4, '\x00', r11, r7, 0x1, 0x2, 0x1}, 0x50) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r13, 0x11, 0x0, 0x0, @void, @value=r12}, 0x20) r14 = syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$cdc_ncm(r14, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, 0x0) kernel console output (not intermixed with test programs): (1/0) [ 530.580179][ T5833] dvb-usb: error while querying for an remote control event. [ 530.617794][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 530.626197][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 530.709652][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 530.715956][ T5977] dvb-usb: error while querying for an remote control event. [ 530.737760][ T5924] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 530.752765][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 530.758844][ T5833] dvb-usb: error while querying for an remote control event. [ 530.898060][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 530.904060][ T5872] dvb-usb: error while querying for an remote control event. [ 531.744223][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 531.750621][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 531.756809][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 531.763476][ T5944] dvb-usb: error while querying for an remote control event. [ 531.771333][ T7613] ceph: No mds server is up or the cluster is laggy [ 531.778793][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 532.096804][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 532.109234][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 532.117600][ T5944] dvb-usb: error while querying for an remote control event. [ 532.134175][ T5924] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 532.144006][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.201675][ T5924] usb 5-1: Product: syz [ 532.223981][ T5872] dvb-usb: error while querying for an remote control event. [ 532.243743][ T5924] usb 5-1: Manufacturer: syz [ 532.248571][ T5924] usb 5-1: SerialNumber: syz [ 532.272696][ T5924] usb 5-1: config 0 descriptor?? [ 532.278359][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.289583][ T5917] libceph: connect (1)[c::]:6789 error -101 [ 532.745197][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 532.751074][ T5872] dvb-usb: error while querying for an remote control event. [ 533.088284][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.089264][ T5917] libceph: mon0 (1)[c::]:6789 connect error [ 533.104479][ T5924] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 533.274230][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 533.277289][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 533.281547][ T5944] dvb-usb: error while querying for an remote control event. [ 533.432480][ T5872] dvb-usb: error while querying for an remote control event. [ 533.562130][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 533.568010][ T5833] dvb-usb: error while querying for an remote control event. [ 533.592920][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 533.598698][ T5872] dvb-usb: error while querying for an remote control event. [ 533.732167][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 533.738133][ T5833] dvb-usb: error while querying for an remote control event. [ 533.762613][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 533.768427][ T5872] dvb-usb: error while querying for an remote control event. [ 533.772137][ T5944] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 533.902143][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 533.908032][ T5833] dvb-usb: error while querying for an remote control event. [ 533.932083][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 533.932083][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 533.939942][ T5944] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 533.943001][ T5872] dvb-usb: error while querying for an remote control event. [ 533.958890][ T5944] usb 4-1: config 179 has no interface number 0 [ 533.966136][ T5944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 533.977540][ T5944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 533.989713][ T5944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 534.002159][ T5944] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 534.013952][ T5944] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 534.027503][ T5944] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 534.142157][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 534.142157][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 534.142187][ T5872] dvb-usb: error while querying for an remote control event. [ 534.148417][ T5833] dvb-usb: error while querying for an remote control event. [ 534.182105][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.199425][ T7634] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 534.332094][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 534.352123][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 534.357935][ T5944] dvb-usb: error while querying for an remote control event. [ 534.378063][ T5872] dvb-usb: error while querying for an remote control event. [ 534.555635][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 534.571189][ T5944] dvb-usb: error while querying for an remote control event. [ 534.581571][ T5833] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 534.592039][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 534.592065][ T5872] dvb-usb: error while querying for an remote control event. [ 534.757989][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 534.764115][ T5944] dvb-usb: error while querying for an remote control event. [ 534.799528][ T5872] usb 4-1: USB disconnect, device number 25 [ 534.799527][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 534.799653][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 534.922565][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 534.928597][ T24] dvb-usb: error while querying for an remote control event. [ 534.945593][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 534.951419][ T5833] dvb-usb: error while querying for an remote control event. [ 535.126101][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 535.132100][ T5833] dvb-usb: error while querying for an remote control event. [ 535.262078][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 535.267915][ T24] dvb-usb: error while querying for an remote control event. [ 535.292070][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 535.297929][ T5944] dvb-usb: error while querying for an remote control event. [ 535.482083][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 535.487847][ T5944] dvb-usb: error while querying for an remote control event. [ 535.522350][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 535.528119][ T24] dvb-usb: error while querying for an remote control event. [ 535.537666][ T5924] gspca_stk1135: reg_w 0x203 err -71 [ 535.545129][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 535.566228][ T5924] gspca_stk1135: Sensor write failed [ 535.571542][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 535.832255][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 535.848914][ T5944] dvb-usb: error while querying for an remote control event. [ 535.877966][ T5924] gspca_stk1135: Sensor write failed [ 536.101519][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 536.158663][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.168308][ T5944] dvb-usb: error while querying for an remote control event. [ 536.180954][ T5924] gspca_stk1135: Sensor read failed [ 536.187063][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.201297][ T5924] gspca_stk1135: Sensor read failed [ 536.213992][ T5924] gspca_stk1135: Detected sensor type unknown (0x0) [ 536.278614][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.312855][ T5924] gspca_stk1135: Sensor read failed [ 536.328866][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.338930][ T5924] gspca_stk1135: Sensor read failed [ 536.346076][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 536.352769][ T5977] dvb-usb: error while querying for an remote control event. [ 536.355557][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 536.365947][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.380220][ T5924] gspca_stk1135: Sensor write failed [ 536.425564][ T5944] dvb-usb: error while querying for an remote control event. [ 536.452368][ T5924] gspca_stk1135: serial bus timeout: status=0x00 [ 536.472062][ T5924] gspca_stk1135: Sensor write failed [ 536.477458][ T5924] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 536.505972][ T5924] usb 5-1: USB disconnect, device number 28 [ 536.512304][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 536.538336][ T5977] dvb-usb: error while querying for an remote control event. [ 536.613182][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 536.619470][ T5944] dvb-usb: error while querying for an remote control event. [ 536.964046][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 536.965889][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 536.969881][ T24] dvb-usb: error while querying for an remote control event. [ 537.026555][ T5944] dvb-usb: error while querying for an remote control event. [ 537.125290][ T5924] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 537.225921][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 537.244168][ T5944] dvb-usb: error while querying for an remote control event. [ 537.292521][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 537.298441][ T24] dvb-usb: error while querying for an remote control event. [ 537.300396][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 537.325846][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.325869][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.326272][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.346752][ T5924] usb 5-1: Product: syz [ 537.434034][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 537.452113][ T5924] usb 5-1: Manufacturer: syz [ 537.458205][ T5944] dvb-usb: error while querying for an remote control event. [ 537.498307][ T5924] usb 5-1: SerialNumber: syz [ 537.504012][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 537.504887][ T5924] usb 5-1: config 0 descriptor?? [ 537.514765][ T24] dvb-usb: error while querying for an remote control event. [ 537.672282][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 537.672727][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 537.693484][ T5944] dvb-usb: error while querying for an remote control event. [ 537.694126][ T5977] dvb-usb: error while querying for an remote control event. [ 537.833702][ T5924] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 537.853266][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 537.859059][ T5833] dvb-usb: error while querying for an remote control event. [ 538.002078][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 538.008021][ T5977] dvb-usb: error while querying for an remote control event. [ 538.043416][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 538.050873][ T5833] dvb-usb: error while querying for an remote control event. [ 538.172102][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 538.177871][ T5977] dvb-usb: error while querying for an remote control event. [ 538.223013][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 538.228799][ T5833] dvb-usb: error while querying for an remote control event. [ 538.342111][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 538.347877][ T5977] dvb-usb: error while querying for an remote control event. [ 538.402222][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 538.440383][ T5833] dvb-usb: error while querying for an remote control event. [ 538.512148][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 538.517955][ T5977] dvb-usb: error while querying for an remote control event. [ 538.557784][ T30] audit: type=1400 audit(1761716683.753:304): avc: denied { append } for pid=7732 comm="syz.3.468" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 538.559206][ T7733] FAULT_INJECTION: forcing a failure. [ 538.559206][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.580854][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.600823][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(full) [ 538.600846][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.600855][ T7733] Call Trace: [ 538.600861][ T7733] [ 538.600867][ T7733] dump_stack_lvl+0x16c/0x1f0 [ 538.600898][ T7733] should_fail_ex+0x512/0x640 [ 538.600921][ T7733] _copy_from_user+0x2e/0xd0 [ 538.600944][ T7733] core_sys_select+0x2c8/0xc20 [ 538.600965][ T7733] ? __pfx_core_sys_select+0x10/0x10 [ 538.601004][ T7733] ? set_user_sigmask+0x21b/0x2b0 [ 538.601023][ T7733] ? __pfx_set_user_sigmask+0x10/0x10 [ 538.601046][ T7733] do_pselect.constprop.0+0x19f/0x1e0 [ 538.601064][ T7733] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 538.601090][ T7733] __x64_sys_pselect6+0x182/0x240 [ 538.601107][ T7733] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 538.601130][ T7733] do_syscall_64+0xcd/0xfa0 [ 538.601157][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.601173][ T7733] RIP: 0033:0x7f4fe578efc9 [ 538.601188][ T7733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.601203][ T7733] RSP: 002b:00007f4fe66b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 538.601220][ T7733] RAX: ffffffffffffffda RBX: 00007f4fe59e5fa0 RCX: 00007f4fe578efc9 [ 538.601230][ T7733] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 538.601240][ T7733] RBP: 00007f4fe66b2090 R08: 0000000000000000 R09: 0000000000000000 [ 538.601250][ T7733] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 538.601260][ T7733] R13: 00007f4fe59e6038 R14: 00007f4fe59e5fa0 R15: 00007ffcbcdb4e18 [ 538.601284][ T7733] [ 538.769447][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 538.775324][ T5833] dvb-usb: error while querying for an remote control event. [ 538.786721][ T30] audit: type=1400 audit(1761716683.753:305): avc: denied { append } for pid=7732 comm="syz.3.468" name="media1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.833435][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 538.839230][ T5977] dvb-usb: error while querying for an remote control event. [ 538.942121][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 538.948039][ T5833] dvb-usb: error while querying for an remote control event. [ 539.003153][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.008922][ T24] dvb-usb: error while querying for an remote control event. [ 539.046277][ T976] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 539.112316][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.119183][ T5833] dvb-usb: error while querying for an remote control event. [ 539.172127][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.177883][ T24] dvb-usb: error while querying for an remote control event. [ 539.202156][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 539.210473][ T976] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 539.219637][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.227799][ T976] usb 4-1: Product: syz [ 539.232349][ T976] usb 4-1: Manufacturer: syz [ 539.237024][ T976] usb 4-1: SerialNumber: syz [ 539.245982][ T976] usb 4-1: config 0 descriptor?? [ 539.254407][ T976] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 539.282288][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.288115][ T5833] dvb-usb: error while querying for an remote control event. [ 539.342928][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.348915][ T24] dvb-usb: error while querying for an remote control event. [ 539.411383][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.420204][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.452897][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.458749][ T5833] dvb-usb: error while querying for an remote control event. [ 539.513148][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.518945][ T24] dvb-usb: error while querying for an remote control event. [ 539.622127][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.628154][ T5833] dvb-usb: error while querying for an remote control event. [ 539.682132][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.687953][ T24] dvb-usb: error while querying for an remote control event. [ 539.792232][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.798165][ T5833] dvb-usb: error while querying for an remote control event. [ 539.852130][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 539.857987][ T24] dvb-usb: error while querying for an remote control event. [ 539.962122][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 539.968004][ T5833] dvb-usb: error while querying for an remote control event. [ 540.022165][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 540.027990][ T24] dvb-usb: error while querying for an remote control event. [ 540.143181][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 540.157957][ T5944] dvb-usb: error while querying for an remote control event. [ 540.202117][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 540.212291][ T24] dvb-usb: error while querying for an remote control event. [ 540.342722][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 540.352119][ T5944] dvb-usb: error while querying for an remote control event. [ 540.392098][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 540.406867][ T24] dvb-usb: error while querying for an remote control event. [ 540.470244][ T24] usb 2-1: USB disconnect, device number 30 [ 540.676677][ T5924] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 540.693896][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 540.704362][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 540.726122][ T5977] dvb-usb: error while querying for an remote control event. [ 540.731555][ T5924] usb 5-1: USB disconnect, device number 29 [ 540.902509][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 540.908306][ T5872] dvb-usb: error while querying for an remote control event. [ 540.928073][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.941010][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.979204][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.987063][ T30] audit: type=1400 audit(1761716686.183:306): avc: denied { ioctl } for pid=7769 comm="syz-executor" path="socket:[18936]" dev="sockfs" ino=18936 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.988754][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.012314][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.033950][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.042547][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.050376][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.072605][ T30] audit: type=1400 audit(1761716686.263:307): avc: denied { mounton } for pid=7769 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 541.112054][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 541.117832][ T5872] dvb-usb: error while querying for an remote control event. [ 541.292068][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 541.297850][ T5872] dvb-usb: error while querying for an remote control event. [ 541.341624][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 541.421615][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.430044][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.437541][ T7769] bridge_slave_0: entered allmulticast mode [ 541.447070][ T7769] bridge_slave_0: entered promiscuous mode [ 541.458719][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.472121][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 541.477879][ T5872] dvb-usb: error while querying for an remote control event. [ 541.482961][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.492667][ T7769] bridge_slave_1: entered allmulticast mode [ 541.500285][ T7769] bridge_slave_1: entered promiscuous mode [ 541.513635][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.528705][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.564189][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.577983][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.620127][ T7769] team0: Port device team_slave_0 added [ 541.628469][ T7769] team0: Port device team_slave_1 added [ 541.662404][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 541.663133][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.668201][ T5872] dvb-usb: error while querying for an remote control event. [ 541.683238][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.709239][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.715998][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.729807][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.737116][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.763931][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.770792][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.815370][ T7769] hsr_slave_0: entered promiscuous mode [ 541.822230][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 541.822812][ T7769] hsr_slave_1: entered promiscuous mode [ 541.835416][ T5872] dvb-usb: error while querying for an remote control event. [ 541.836126][ T7769] debugfs: 'hsr0' already exists in 'hsr' [ 541.849052][ T7769] Cannot create hsr debugfs directory [ 542.002932][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.008871][ T24] dvb-usb: error while querying for an remote control event. [ 542.017198][ T7769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.028334][ T7769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.041070][ T7769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.059926][ T7769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.097680][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.104860][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.112849][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.119912][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.172103][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.178491][ T24] dvb-usb: error while querying for an remote control event. [ 542.256153][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.342119][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.362045][ T2936] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.370404][ T2936] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.390104][ T24] dvb-usb: error while querying for an remote control event. [ 542.396112][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.410436][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.417561][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.446627][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.453835][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.784999][ T976] gspca_stk1135: reg_w 0x353 err -71 [ 542.795431][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.811062][ T976] gspca_stk1135: Sensor write failed [ 542.823619][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 542.829465][ T5872] dvb-usb: error while querying for an remote control event. [ 542.856828][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.864149][ T976] gspca_stk1135: Sensor write failed [ 542.869643][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.876357][ T976] gspca_stk1135: Sensor read failed [ 542.882436][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.889653][ T976] gspca_stk1135: Sensor read failed [ 542.895685][ T976] gspca_stk1135: Detected sensor type unknown (0x0) [ 542.898662][ T7769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.913474][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.920005][ T976] gspca_stk1135: Sensor read failed [ 542.927123][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.934321][ T976] gspca_stk1135: Sensor read failed [ 542.942121][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.948721][ T976] gspca_stk1135: Sensor write failed [ 542.955342][ T976] gspca_stk1135: serial bus timeout: status=0x00 [ 542.964201][ T976] gspca_stk1135: Sensor write failed [ 542.972098][ T976] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 542.987997][ T976] usb 4-1: USB disconnect, device number 26 [ 543.014823][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 543.020669][ T5872] dvb-usb: error while querying for an remote control event. [ 543.121416][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.132290][ T51] Bluetooth: hci5: command tx timeout [ 543.182103][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 543.207064][ T5872] dvb-usb: error while querying for an remote control event. [ 543.372545][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 543.378372][ T5872] dvb-usb: error while querying for an remote control event. [ 543.592139][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 543.592882][ T7769] veth0_vlan: entered promiscuous mode [ 543.616523][ T5872] dvb-usb: error while querying for an remote control event. [ 543.644950][ T7769] veth1_vlan: entered promiscuous mode [ 543.709730][ T976] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 543.767685][ T30] audit: type=1400 audit(1761716688.943:308): avc: denied { create } for pid=7819 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 543.793585][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 543.936106][ T7769] veth0_macvtap: entered promiscuous mode [ 543.942079][ T5872] dvb-usb: error while querying for an remote control event. [ 543.964515][ T7769] veth1_macvtap: entered promiscuous mode [ 544.096807][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.103631][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.104123][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 544.114532][ T976] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 544.132357][ T976] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 544.134786][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.151805][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.159071][ T24] dvb-usb: error while querying for an remote control event. [ 544.203002][ T5982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.212332][ T5982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.221319][ T5982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.252948][ T976] usb 4-1: config 0 descriptor?? [ 544.291644][ T5982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.323052][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 544.332599][ T976] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 544.341712][ T24] dvb-usb: error while querying for an remote control event. [ 544.343105][ T976] dvb-usb: bulk message failed: -22 (3/0) [ 544.399731][ T976] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 544.424318][ T976] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 544.445432][ T976] usb 4-1: media controller created [ 544.452891][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.460709][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.475874][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.502120][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 544.530029][ T30] audit: type=1400 audit(1761716689.723:309): avc: denied { create } for pid=7827 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 544.605844][ T24] dvb-usb: error while querying for an remote control event. [ 544.832650][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 544.837867][ T976] dvb-usb: bulk message failed: -22 (6/0) [ 544.840355][ T24] dvb-usb: error while querying for an remote control event. [ 544.845746][ T30] audit: type=1400 audit(1761716689.963:310): avc: denied { mounton } for pid=7827 comm="syz.4.487" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 544.881073][ T7831] SQUASHFS error: Failed to read block 0x0: -5 [ 544.889578][ T7831] unable to read squashfs_super_block [ 544.926318][ T976] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 544.927326][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.958657][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.969385][ T976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 545.022478][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 545.029015][ T24] dvb-usb: error while querying for an remote control event. [ 545.030775][ T7831] tc_dump_action: action bad kind [ 545.131618][ T976] dvb-usb: schedule remote query interval to 150 msecs. [ 545.149863][ T976] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 545.199352][ T30] audit: type=1400 audit(1761716690.393:311): avc: denied { mount } for pid=7769 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 545.222098][ T51] Bluetooth: hci5: command tx timeout [ 545.265336][ T30] audit: type=1400 audit(1761716690.393:312): avc: denied { mounton } for pid=7769 comm="syz-executor" path="/root/syzkaller.Kn3tX9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 545.311573][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 545.319603][ T7828] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 545.327983][ T7828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.352489][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 545.357521][ T976] dvb-usb: error while querying for an remote control event. [ 545.372079][ T24] dvb-usb: error while querying for an remote control event. [ 545.399848][ T30] audit: type=1400 audit(1761716690.423:313): avc: denied { mount } for pid=7769 comm="syz-executor" name="/" dev="gadgetfs" ino=7759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 545.419399][ T24] usb 4-1: USB disconnect, device number 27 [ 545.426889][ T7837] trusted_key: syz.5.474 sent an empty control message without MSG_MORE. [ 545.458214][ T30] audit: type=1400 audit(1761716690.513:314): avc: denied { getopt } for pid=7827 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 545.464687][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 545.477436][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.534170][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 545.547036][ T5977] dvb-usb: error while querying for an remote control event. [ 545.773829][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 545.824878][ T5977] dvb-usb: error while querying for an remote control event. [ 545.838539][ T5872] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 545.991913][ T7845] genirq: Flags mismatch irq 7. 00200000 (pcl818) vs. 00200080 (ttyS3) [ 546.189633][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 546.197129][ T5977] dvb-usb: error while querying for an remote control event. [ 546.266708][ T5872] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 546.276447][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.292028][ T5872] usb 6-1: Product: syz [ 546.328660][ T5872] usb 6-1: Manufacturer: syz [ 546.342640][ T5872] usb 6-1: SerialNumber: syz [ 546.354772][ T5872] usb 6-1: config 0 descriptor?? [ 546.362097][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 546.367862][ T5977] dvb-usb: error while querying for an remote control event. [ 546.374517][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.492'. [ 546.433322][ T7856] FAULT_INJECTION: forcing a failure. [ 546.433322][ T7856] name failslab, interval 1, probability 0, space 0, times 0 [ 546.446223][ T7856] CPU: 1 UID: 0 PID: 7856 Comm: syz.2.494 Not tainted syzkaller #0 PREEMPT(full) [ 546.446246][ T7856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.446255][ T7856] Call Trace: [ 546.446260][ T7856] [ 546.446266][ T7856] dump_stack_lvl+0x16c/0x1f0 [ 546.446295][ T7856] should_fail_ex+0x512/0x640 [ 546.446317][ T7856] ? fs_reclaim_acquire+0xae/0x150 [ 546.446338][ T7856] should_failslab+0xc2/0x120 [ 546.446358][ T7856] __kmalloc_noprof+0xdd/0x880 [ 546.446382][ T7856] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.446406][ T7856] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.446425][ T7856] tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.446447][ T7856] ? tomoyo_profile+0x47/0x60 [ 546.446471][ T7856] tomoyo_path_number_perm+0x245/0x580 [ 546.446496][ T7856] ? tomoyo_path_number_perm+0x237/0x580 [ 546.446524][ T7856] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.446549][ T7856] ? find_held_lock+0x2b/0x80 [ 546.446588][ T7856] ? find_held_lock+0x2b/0x80 [ 546.446606][ T7856] ? hook_file_ioctl_common+0x145/0x410 [ 546.446635][ T7856] ? __fget_files+0x20e/0x3c0 [ 546.446656][ T7856] security_file_ioctl+0x9b/0x240 [ 546.446676][ T7856] __x64_sys_ioctl+0xb7/0x210 [ 546.446701][ T7856] do_syscall_64+0xcd/0xfa0 [ 546.446728][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.446745][ T7856] RIP: 0033:0x7f798298efc9 [ 546.446760][ T7856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.446775][ T7856] RSP: 002b:00007f79838dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.446790][ T7856] RAX: ffffffffffffffda RBX: 00007f7982be5fa0 RCX: 00007f798298efc9 [ 546.446800][ T7856] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 546.446809][ T7856] RBP: 00007f79838dd090 R08: 0000000000000000 R09: 0000000000000000 [ 546.446817][ T7856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.446827][ T7856] R13: 00007f7982be6038 R14: 00007f7982be5fa0 R15: 00007ffde182bf58 [ 546.446847][ T7856] [ 546.446874][ T7856] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.447620][ T30] audit: type=1400 audit(1761716691.643:315): avc: denied { create } for pid=7857 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 546.558547][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 546.578492][ T30] audit: type=1400 audit(1761716691.773:316): avc: denied { read write } for pid=7853 comm="syz.3.492" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 546.617634][ T24] dvb-usb: error while querying for an remote control event. [ 546.681122][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.712059][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.747740][ T30] audit: type=1400 audit(1761716691.773:317): avc: denied { open } for pid=7853 comm="syz.3.492" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 546.776197][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 546.776248][ T24] dvb-usb: error while querying for an remote control event. [ 546.877218][ T7873] FAULT_INJECTION: forcing a failure. [ 546.877218][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 546.914887][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.2.498 Not tainted syzkaller #0 PREEMPT(full) [ 546.914906][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.914912][ T7873] Call Trace: [ 546.914915][ T7873] [ 546.914920][ T7873] dump_stack_lvl+0x16c/0x1f0 [ 546.914939][ T7873] should_fail_ex+0x512/0x640 [ 546.914952][ T7873] ? fs_reclaim_acquire+0xae/0x150 [ 546.914966][ T7873] should_failslab+0xc2/0x120 [ 546.914979][ T7873] __kmalloc_noprof+0xdd/0x880 [ 546.914994][ T7873] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.915009][ T7873] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.915020][ T7873] tomoyo_realpath_from_path+0xc2/0x6e0 [ 546.915033][ T7873] ? tomoyo_profile+0x47/0x60 [ 546.915047][ T7873] tomoyo_path_number_perm+0x245/0x580 [ 546.915063][ T7873] ? tomoyo_path_number_perm+0x237/0x580 [ 546.915080][ T7873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.915097][ T7873] ? find_held_lock+0x2b/0x80 [ 546.915122][ T7873] ? find_held_lock+0x2b/0x80 [ 546.915134][ T7873] ? hook_file_ioctl_common+0x145/0x410 [ 546.915151][ T7873] ? __fget_files+0x20e/0x3c0 [ 546.915164][ T7873] security_file_ioctl+0x9b/0x240 [ 546.915176][ T7873] __x64_sys_ioctl+0xb7/0x210 [ 546.915192][ T7873] do_syscall_64+0xcd/0xfa0 [ 546.915208][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.915219][ T7873] RIP: 0033:0x7f798298efc9 [ 546.915229][ T7873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.915239][ T7873] RSP: 002b:00007f79838dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.915250][ T7873] RAX: ffffffffffffffda RBX: 00007f7982be5fa0 RCX: 00007f798298efc9 [ 546.915256][ T7873] RDX: 0000200000000100 RSI: 0000000040047451 RDI: 0000000000000003 [ 546.915263][ T7873] RBP: 00007f79838dd090 R08: 0000000000000000 R09: 0000000000000000 [ 546.915269][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.915275][ T7873] R13: 00007f7982be6038 R14: 00007f7982be5fa0 R15: 00007ffde182bf58 [ 546.915294][ T7873] [ 546.915341][ T7873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.128004][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 547.133830][ T24] dvb-usb: error while querying for an remote control event. [ 547.283948][ T51] Bluetooth: hci5: command tx timeout [ 547.302390][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 547.308232][ T5987] dvb-usb: error while querying for an remote control event. [ 547.482514][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 547.488337][ T5987] dvb-usb: error while querying for an remote control event. [ 547.953088][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 547.985051][ T24] dvb-usb: error while querying for an remote control event. [ 549.349208][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 549.359026][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 549.382055][ T24] dvb-usb: error while querying for an remote control event. [ 549.396005][ T5872] asix 6-1:0.0: probe with driver asix failed with error -71 [ 549.433888][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 549.433905][ T30] audit: type=1400 audit(1761716694.623:323): avc: denied { mount } for pid=7900 comm="syz.5.505" name="/" dev="autofs" ino=21153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 549.469189][ T30] audit: type=1400 audit(1761716694.663:324): avc: denied { unmount } for pid=7769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 549.538798][ T51] Bluetooth: hci5: command tx timeout [ 549.544738][ T5872] usb 6-1: USB disconnect, device number 2 [ 549.752084][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 549.769987][ T5987] dvb-usb: error while querying for an remote control event. [ 549.972107][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 549.984788][ T5987] dvb-usb: error while querying for an remote control event. [ 550.009803][ T7911] fuse: Unknown parameter '0x0000000000000003' [ 550.052102][ T5872] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 550.172813][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 550.178963][ T5987] dvb-usb: error while querying for an remote control event. [ 550.269441][ T5872] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.317654][ T30] audit: type=1400 audit(1761716695.473:325): avc: denied { create } for pid=7908 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 550.337889][ T30] audit: type=1400 audit(1761716695.473:326): avc: denied { getopt } for pid=7908 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 550.342287][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.492205][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 550.567920][ T5987] dvb-usb: error while querying for an remote control event. [ 550.575423][ T30] audit: type=1400 audit(1761716695.513:327): avc: denied { create } for pid=7908 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 550.625173][ T5872] usb 6-1: Product: syz [ 550.629501][ T5872] usb 6-1: Manufacturer: syz [ 550.634324][ T5872] usb 6-1: SerialNumber: syz [ 550.650459][ T5872] usb 6-1: config 0 descriptor?? [ 550.769903][ T30] audit: type=1400 audit(1761716695.963:328): avc: denied { setopt } for pid=7916 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 550.838270][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 550.844848][ T5987] dvb-usb: error while querying for an remote control event. [ 550.930797][ T5872] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 551.025721][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.034505][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.317773][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 551.324603][ T5987] dvb-usb: error while querying for an remote control event. [ 551.775277][ T7929] lo: entered promiscuous mode [ 551.780386][ T7929] lo: entered allmulticast mode [ 551.818681][ T7929] tunl0: entered promiscuous mode [ 551.824027][ T7929] tunl0: entered allmulticast mode [ 551.840633][ T7929] gre0: entered promiscuous mode [ 551.845826][ T7929] gre0: entered allmulticast mode [ 551.862614][ T7929] gretap0: entered promiscuous mode [ 551.868076][ T7929] gretap0: entered allmulticast mode [ 551.881210][ T7929] erspan0: entered promiscuous mode [ 551.887098][ T7929] erspan0: entered allmulticast mode [ 551.898359][ T7929] ip_vti0: entered promiscuous mode [ 551.903767][ T7929] ip_vti0: entered allmulticast mode [ 551.918995][ T7929] ip6_vti0: entered promiscuous mode [ 551.924632][ T7929] ip6_vti0: entered allmulticast mode [ 551.938274][ T7929] sit0: entered promiscuous mode [ 551.943593][ T7929] sit0: entered allmulticast mode [ 551.958434][ T7929] ip6tnl0: entered promiscuous mode [ 551.963929][ T7929] ip6tnl0: entered allmulticast mode [ 552.028927][ T7929] ip6gre0: entered promiscuous mode [ 552.034347][ T7929] ip6gre0: entered allmulticast mode [ 552.040552][ T7929] syz_tun: entered promiscuous mode [ 552.045827][ T7929] syz_tun: entered allmulticast mode [ 552.051913][ T7929] ip6gretap0: entered promiscuous mode [ 552.057436][ T7929] ip6gretap0: entered allmulticast mode [ 552.063894][ T7929] bridge0: entered promiscuous mode [ 552.069165][ T7929] bridge0: entered allmulticast mode [ 552.075157][ T7929] vcan0: entered promiscuous mode [ 552.080239][ T7929] vcan0: entered allmulticast mode [ 552.086201][ T7929] bond0: entered promiscuous mode [ 552.091407][ T7929] bond_slave_0: entered promiscuous mode [ 552.097483][ T7929] bond_slave_1: entered promiscuous mode [ 552.103484][ T7929] bond0: entered allmulticast mode [ 552.108690][ T7929] bond_slave_0: entered allmulticast mode [ 552.114654][ T7929] bond_slave_1: entered allmulticast mode [ 552.121047][ T7929] team0: entered promiscuous mode [ 552.126124][ T7929] team_slave_0: entered promiscuous mode [ 552.131834][ T7929] team_slave_1: entered promiscuous mode [ 552.137583][ T7929] team0: entered allmulticast mode [ 552.142728][ T7929] team_slave_0: entered allmulticast mode [ 552.148516][ T7929] team_slave_1: entered allmulticast mode [ 552.154979][ T7929] dummy0: entered promiscuous mode [ 552.160124][ T7929] dummy0: entered allmulticast mode [ 552.165823][ T7929] nlmon0: entered promiscuous mode [ 552.170943][ T7929] nlmon0: entered allmulticast mode [ 552.180765][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 552.186892][ T5977] dvb-usb: error while querying for an remote control event. [ 552.204560][ T7929] caif0: entered promiscuous mode [ 552.209619][ T7929] caif0: entered allmulticast mode [ 552.214781][ T7929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.287644][ T7930] QAT: failed to copy from user cfg_data. [ 552.482899][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 552.649398][ T5977] dvb-usb: error while querying for an remote control event. [ 552.691606][ T5872] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 552.718129][ T5872] usb 6-1: USB disconnect, device number 3 [ 552.852077][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 552.858610][ T5987] dvb-usb: error while querying for an remote control event. [ 552.992078][ T5977] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 553.022077][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 553.027867][ T5987] dvb-usb: error while querying for an remote control event. [ 553.142409][ T5872] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 553.163793][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 553.172457][ T5977] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 553.181965][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.190470][ T5977] usb 4-1: Product: syz [ 553.194775][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 553.200494][ T5987] dvb-usb: error while querying for an remote control event. [ 553.208193][ T5977] usb 4-1: Manufacturer: syz [ 553.213346][ T5977] usb 4-1: SerialNumber: syz [ 553.219584][ T5977] usb 4-1: config 0 descriptor?? [ 553.226758][ T5977] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 553.294852][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.305123][ T5872] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 553.314304][ T5872] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 553.323751][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.334019][ T5872] usb 6-1: config 0 descriptor?? [ 553.342529][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 553.349197][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 553.357751][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 553.367428][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 553.374559][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 553.380317][ T5948] dvb-usb: error while querying for an remote control event. [ 553.387785][ T5872] usb 6-1: media controller created [ 553.393945][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.402077][ T5833] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 553.407857][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 553.419924][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 553.430234][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 553.445329][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 553.453103][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 553.562337][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 553.565842][ T5833] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 553.577696][ T5872] dvb-usb: error while querying for an remote control event. [ 553.577838][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.597297][ T5833] usb 5-1: Product: syz [ 553.601750][ T5833] usb 5-1: Manufacturer: syz [ 553.622357][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 553.622478][ T5833] usb 5-1: SerialNumber: syz [ 553.638898][ T5872] dvb-usb: error while querying for an remote control event. [ 553.651804][ T5833] usb 5-1: config 0 descriptor?? [ 553.834096][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 553.895358][ T5872] dvb-usb: error while querying for an remote control event. [ 553.909579][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 553.911826][ T5833] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.922019][ T5948] dvb-usb: error while querying for an remote control event. [ 554.038766][ T5948] usb 6-1: USB disconnect, device number 4 [ 554.094076][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 554.099869][ T5872] dvb-usb: error while querying for an remote control event. [ 554.121814][ T5948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 554.150349][ T30] audit: type=1400 audit(1761716699.343:329): avc: denied { bind } for pid=7949 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 554.169790][ T30] audit: type=1400 audit(1761716699.343:330): avc: denied { node_bind } for pid=7949 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 554.433708][ T7952] pim6reg: entered allmulticast mode [ 554.455319][ T7952] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 554.489383][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 554.496363][ T5865] Bluetooth: hci5: command 0x0405 tx timeout [ 554.502106][ T30] audit: type=1326 audit(1761716699.593:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798298efc9 code=0x7ffc0000 [ 554.503321][ T5948] dvb-usb: error while querying for an remote control event. [ 554.558883][ T30] audit: type=1326 audit(1761716699.593:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798298efc9 code=0x7ffc0000 [ 554.582142][ C0] vkms_vblank_simulate: vblank timer overrun [ 554.603862][ T30] audit: type=1326 audit(1761716699.593:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f798298efc9 code=0x7ffc0000 [ 554.633626][ T30] audit: type=1326 audit(1761716699.593:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798298efc9 code=0x7ffc0000 [ 554.677978][ T30] audit: type=1326 audit(1761716699.593:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7982990ee7 code=0x7ffc0000 [ 554.701457][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 554.708982][ T5948] dvb-usb: error while querying for an remote control event. [ 554.718373][ T30] audit: type=1326 audit(1761716699.603:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7982990e5c code=0x7ffc0000 [ 554.743506][ T30] audit: type=1326 audit(1761716699.603:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7982990d94 code=0x7ffc0000 [ 554.888287][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 554.894620][ T5948] dvb-usb: error while querying for an remote control event. [ 554.902678][ T30] audit: type=1326 audit(1761716699.603:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7982990d94 code=0x7ffc0000 [ 554.934561][ T30] audit: type=1326 audit(1761716699.603:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f798298dc2a code=0x7ffc0000 [ 555.062140][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 555.446277][ T5987] dvb-usb: error while querying for an remote control event. [ 555.454371][ T30] audit: type=1326 audit(1761716699.603:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798298efc9 code=0x7ffc0000 [ 555.544785][ T7949] pim6reg: left allmulticast mode [ 555.622449][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 555.628442][ T5948] dvb-usb: error while querying for an remote control event. [ 555.889003][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 555.896668][ T5948] dvb-usb: error while querying for an remote control event. [ 555.920718][ T7967] fuse: Bad value for 'fd' [ 555.952104][ T5987] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 556.126473][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 556.132848][ T5948] dvb-usb: error while querying for an remote control event. [ 556.297766][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 556.398363][ T5987] usb 6-1: Using ep0 maxpacket: 32 [ 556.403653][ T5948] dvb-usb: error while querying for an remote control event. [ 556.415014][ T5987] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.423150][ T5987] usb 6-1: config 0 has no interface number 0 [ 556.429278][ T5987] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 556.440212][ T5987] usb 6-1: config 0 interface 1 has no altsetting 0 [ 556.448841][ T5987] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 556.458138][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.466239][ T5987] usb 6-1: Product: syz [ 556.470439][ T5987] usb 6-1: Manufacturer: syz [ 556.475106][ T5987] usb 6-1: SerialNumber: syz [ 556.486460][ T5987] usb 6-1: config 0 descriptor?? [ 556.562092][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 556.567951][ T5948] dvb-usb: error while querying for an remote control event. [ 556.730364][ T5987] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 556.739692][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 556.746570][ T5948] dvb-usb: error while querying for an remote control event. [ 556.806961][ T5987] cx231xx 6-1:0.1: Failed to read PCB config [ 556.823003][ T5987] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 556.837955][ T5987] usb 6-1: USB disconnect, device number 5 [ 556.974092][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 556.979919][ T5948] dvb-usb: error while querying for an remote control event. [ 557.494545][ T5977] gspca_stk1135: reg_w 0x353 err -110 [ 557.505000][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.512892][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 557.515893][ T5833] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 557.518952][ T5977] gspca_stk1135: Sensor write failed [ 557.535063][ T5948] dvb-usb: error while querying for an remote control event. [ 557.538258][ T5833] usb 5-1: USB disconnect, device number 30 [ 557.554587][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.561090][ T5977] gspca_stk1135: Sensor write failed [ 557.566783][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.573764][ T5977] gspca_stk1135: Sensor read failed [ 557.578993][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.585725][ T5977] gspca_stk1135: Sensor read failed [ 557.590957][ T5977] gspca_stk1135: Detected sensor type unknown (0x0) [ 557.597654][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.604368][ T5977] gspca_stk1135: Sensor read failed [ 557.609647][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.617653][ T5977] gspca_stk1135: Sensor read failed [ 557.623180][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.629643][ T5977] gspca_stk1135: Sensor write failed [ 557.637217][ T5977] gspca_stk1135: serial bus timeout: status=0x00 [ 557.643833][ T5977] gspca_stk1135: Sensor write failed [ 557.649362][ T5977] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 557.660173][ T5977] usb 4-1: USB disconnect, device number 28 [ 557.756092][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 557.770235][ T5948] dvb-usb: error while querying for an remote control event. [ 557.787414][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.791243][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 557.796471][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.822117][ T5987] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 557.840614][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 557.849929][ T7985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.529'. [ 557.866727][ T7985] macvlan0: entered promiscuous mode [ 557.873838][ T7985] batadv0: entered promiscuous mode [ 557.879769][ T7985] hsr1: entered allmulticast mode [ 557.884912][ T7985] macvlan0: entered allmulticast mode [ 557.890275][ T7985] veth1_vlan: entered allmulticast mode [ 557.895943][ T7985] batadv0: entered allmulticast mode [ 557.916619][ T7985] FAULT_INJECTION: forcing a failure. [ 557.916619][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 557.929487][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.3.529 Not tainted syzkaller #0 PREEMPT(full) [ 557.929511][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.929521][ T7985] Call Trace: [ 557.929527][ T7985] [ 557.929534][ T7985] dump_stack_lvl+0x16c/0x1f0 [ 557.929563][ T7985] should_fail_ex+0x512/0x640 [ 557.929582][ T7985] ? fs_reclaim_acquire+0xae/0x150 [ 557.929603][ T7985] should_failslab+0xc2/0x120 [ 557.929621][ T7985] __kmalloc_noprof+0xdd/0x880 [ 557.929638][ T7985] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 557.929654][ T7985] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 557.929665][ T7985] tomoyo_realpath_from_path+0xc2/0x6e0 [ 557.929678][ T7985] ? tomoyo_profile+0x47/0x60 [ 557.929692][ T7985] tomoyo_path_number_perm+0x245/0x580 [ 557.929708][ T7985] ? tomoyo_path_number_perm+0x237/0x580 [ 557.929724][ T7985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 557.929741][ T7985] ? find_held_lock+0x2b/0x80 [ 557.929766][ T7985] ? find_held_lock+0x2b/0x80 [ 557.929778][ T7985] ? hook_file_ioctl_common+0x145/0x410 [ 557.929794][ T7985] ? __fget_files+0x20e/0x3c0 [ 557.929807][ T7985] security_file_ioctl+0x9b/0x240 [ 557.929819][ T7985] __x64_sys_ioctl+0xb7/0x210 [ 557.929834][ T7985] do_syscall_64+0xcd/0xfa0 [ 557.929850][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.929861][ T7985] RIP: 0033:0x7f4fe578efc9 [ 557.929870][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.929881][ T7985] RSP: 002b:00007f4fe66b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.929895][ T7985] RAX: ffffffffffffffda RBX: 00007f4fe59e5fa0 RCX: 00007f4fe578efc9 [ 557.929901][ T7985] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 557.929907][ T7985] RBP: 00007f4fe66b2090 R08: 0000000000000000 R09: 0000000000000000 [ 557.929913][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.929919][ T7985] R13: 00007f4fe59e6038 R14: 00007f4fe59e5fa0 R15: 00007ffcbcdb4e18 [ 557.929933][ T7985] [ 557.929937][ T7985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.141345][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 558.147268][ T5977] dvb-usb: error while querying for an remote control event. [ 558.172156][ T5987] usb 6-1: Using ep0 maxpacket: 32 [ 558.178580][ T5987] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.186865][ T5987] usb 6-1: config 0 has no interface number 0 [ 558.193322][ T5987] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 558.204052][ T5987] usb 6-1: config 0 interface 1 has no altsetting 0 [ 558.216409][ T5987] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 558.225686][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.233754][ T5987] usb 6-1: Product: syz [ 558.238235][ T5987] usb 6-1: Manufacturer: syz [ 558.243067][ T5987] usb 6-1: SerialNumber: syz [ 558.249801][ T5987] usb 6-1: config 0 descriptor?? [ 558.312099][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 558.317942][ T5948] dvb-usb: error while querying for an remote control event. [ 558.332205][ T5833] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 558.492095][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 558.501078][ T5948] dvb-usb: error while querying for an remote control event. [ 558.512718][ T5987] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 558.522608][ T5987] cx231xx 6-1:0.1: Failed to read PCB config [ 558.529056][ T5987] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -32 [ 558.541878][ T5987] usb 6-1: USB disconnect, device number 6 [ 558.574153][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.587827][ T5833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 558.597031][ T5833] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 558.606769][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.620505][ T5833] usb 5-1: config 0 descriptor?? [ 558.654051][ T5833] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 558.660944][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 558.672086][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 558.678056][ T5948] dvb-usb: error while querying for an remote control event. [ 558.698621][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 558.737857][ T5833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 558.750737][ T5833] usb 5-1: media controller created [ 558.790915][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.817901][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 558.824827][ T5833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 558.835458][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 558.852231][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 558.858742][ T5987] dvb-usb: error while querying for an remote control event. [ 559.179682][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 559.182351][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 559.196031][ T5987] dvb-usb: error while querying for an remote control event. [ 559.224949][ T5833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 559.258674][ T5833] usb 5-1: USB disconnect, device number 31 [ 559.372326][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 559.398096][ T5987] dvb-usb: error while querying for an remote control event. [ 559.505958][ T8001] FAULT_INJECTION: forcing a failure. [ 559.505958][ T8001] name failslab, interval 1, probability 0, space 0, times 0 [ 559.600720][ T5833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 559.603331][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 559.603346][ T30] audit: type=1400 audit(1761716704.733:370): avc: denied { map } for pid=7998 comm="syz.2.533" path="socket:[21473]" dev="sockfs" ino=21473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.610571][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.5.534 Not tainted syzkaller #0 PREEMPT(full) [ 559.610592][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 559.610601][ T8001] Call Trace: [ 559.610607][ T8001] [ 559.610612][ T8001] dump_stack_lvl+0x16c/0x1f0 [ 559.610639][ T8001] should_fail_ex+0x512/0x640 [ 559.610657][ T8001] ? fs_reclaim_acquire+0xae/0x150 [ 559.610676][ T8001] should_failslab+0xc2/0x120 [ 559.610694][ T8001] __kmalloc_noprof+0xdd/0x880 [ 559.610715][ T8001] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 559.610736][ T8001] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 559.610753][ T8001] tomoyo_realpath_from_path+0xc2/0x6e0 [ 559.610772][ T8001] ? tomoyo_profile+0x47/0x60 [ 559.610793][ T8001] tomoyo_path_number_perm+0x245/0x580 [ 559.610815][ T8001] ? tomoyo_path_number_perm+0x237/0x580 [ 559.610839][ T8001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 559.610863][ T8001] ? lockdep_hardirqs_on+0x7c/0x110 [ 559.610905][ T8001] ? find_held_lock+0x2b/0x80 [ 559.610923][ T8001] ? hook_file_ioctl_common+0x145/0x410 [ 559.610947][ T8001] ? __fget_files+0x20e/0x3c0 [ 559.610965][ T8001] security_file_ioctl+0x9b/0x240 [ 559.610984][ T8001] __x64_sys_ioctl+0xb7/0x210 [ 559.611006][ T8001] do_syscall_64+0xcd/0xfa0 [ 559.611030][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.611044][ T8001] RIP: 0033:0x7fac40b8efc9 [ 559.611057][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.611070][ T8001] RSP: 002b:00007fac41a93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.611085][ T8001] RAX: ffffffffffffffda RBX: 00007fac40de5fa0 RCX: 00007fac40b8efc9 [ 559.611095][ T8001] RDX: 0000200000000380 RSI: 00000000c02064a5 RDI: 0000000000000003 [ 559.611104][ T8001] RBP: 00007fac41a93090 R08: 0000000000000000 R09: 0000000000000000 [ 559.611113][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.611121][ T8001] R13: 00007fac40de6038 R14: 00007fac40de5fa0 R15: 00007ffe24aa7698 [ 559.611143][ T8001] [ 559.611149][ T8001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.615418][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 559.857773][ T30] audit: type=1400 audit(1761716704.733:371): avc: denied { accept } for pid=7998 comm="syz.2.533" path="socket:[21473]" dev="sockfs" ino=21473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.901923][ T5987] dvb-usb: error while querying for an remote control event. [ 560.025432][ T8007] syzkaller1: entered promiscuous mode [ 560.031016][ T8007] syzkaller1: entered allmulticast mode [ 560.075007][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 560.081241][ T5948] dvb-usb: error while querying for an remote control event. [ 560.242410][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 560.248209][ T5987] dvb-usb: error while querying for an remote control event. [ 560.264848][ T8021] fuse: Unknown parameter 'fd0x0000000000000004' [ 560.299327][ T30] audit: type=1800 audit(1761716705.493:372): pid=8021 uid=255 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.540" name="file1" dev="tmpfs" ino=541 res=0 errno=0 [ 560.443927][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 560.450140][ T5948] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 560.464947][ T5987] dvb-usb: error while querying for an remote control event. [ 560.652277][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 560.668218][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 560.690647][ T5987] dvb-usb: error while querying for an remote control event. [ 560.834746][ T5948] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 561.002321][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.195832][ T5948] usb 4-1: Product: syz [ 561.200402][ T5948] usb 4-1: Manufacturer: syz [ 561.205795][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 561.240548][ T5987] dvb-usb: error while querying for an remote control event. [ 561.272087][ T5948] usb 4-1: SerialNumber: syz [ 561.315671][ T5948] usb 4-1: config 0 descriptor?? [ 561.333477][ T5948] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 561.462840][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 561.468655][ T5987] dvb-usb: error while querying for an remote control event. [ 561.621719][ T8036] FAULT_INJECTION: forcing a failure. [ 561.621719][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 561.641456][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.5.544 Not tainted syzkaller #0 PREEMPT(full) [ 561.641481][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.641491][ T8036] Call Trace: [ 561.641497][ T8036] [ 561.641504][ T8036] dump_stack_lvl+0x16c/0x1f0 [ 561.641535][ T8036] should_fail_ex+0x512/0x640 [ 561.641556][ T8036] ? fs_reclaim_acquire+0xae/0x150 [ 561.641578][ T8036] should_failslab+0xc2/0x120 [ 561.641599][ T8036] __kmalloc_noprof+0xdd/0x880 [ 561.641624][ T8036] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 561.641648][ T8036] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 561.641667][ T8036] tomoyo_realpath_from_path+0xc2/0x6e0 [ 561.641689][ T8036] ? tomoyo_profile+0x47/0x60 [ 561.641715][ T8036] tomoyo_path_number_perm+0x245/0x580 [ 561.641738][ T8036] ? tomoyo_path_number_perm+0x237/0x580 [ 561.641763][ T8036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.641789][ T8036] ? find_held_lock+0x2b/0x80 [ 561.641833][ T8036] ? find_held_lock+0x2b/0x80 [ 561.641852][ T8036] ? hook_file_ioctl_common+0x145/0x410 [ 561.641880][ T8036] ? __fget_files+0x20e/0x3c0 [ 561.641908][ T8036] security_file_ioctl+0x9b/0x240 [ 561.641930][ T8036] __x64_sys_ioctl+0xb7/0x210 [ 561.641956][ T8036] do_syscall_64+0xcd/0xfa0 [ 561.641985][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.642001][ T8036] RIP: 0033:0x7fac40b8efc9 [ 561.642015][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.642029][ T8036] RSP: 002b:00007fac41a72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.642046][ T8036] RAX: ffffffffffffffda RBX: 00007fac40de6090 RCX: 00007fac40b8efc9 [ 561.642056][ T8036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 561.642064][ T8036] RBP: 00007fac41a72090 R08: 0000000000000000 R09: 0000000000000000 [ 561.642074][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.642082][ T8036] R13: 00007fac40de6128 R14: 00007fac40de6090 R15: 00007ffe24aa7698 [ 561.642104][ T8036] [ 561.652086][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 561.662336][ T30] audit: type=1400 audit(1761716706.843:373): avc: denied { write } for pid=8039 comm="syz.2.546" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 561.677060][ T5977] dvb-usb: error while querying for an remote control event. [ 561.677670][ T8036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.893390][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 561.901073][ T5977] dvb-usb: error while querying for an remote control event. [ 562.085883][ T24] libceph: connect (1)[c::]:6789 error -101 [ 562.093407][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 562.099550][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 562.106850][ T5987] dvb-usb: error while querying for an remote control event. [ 562.175868][ T8046] ceph: No mds server is up or the cluster is laggy [ 562.255230][ T24] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 562.282615][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 562.303937][ T5987] dvb-usb: error while querying for an remote control event. [ 562.474218][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.484837][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 562.493840][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 562.503081][ T5987] dvb-usb: error while querying for an remote control event. [ 562.540355][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 562.550421][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.628589][ T24] usb 5-1: config 0 descriptor?? [ 562.649191][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.655932][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.679130][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 562.691112][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 562.708680][ T5987] dvb-usb: error while querying for an remote control event. [ 562.733635][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 562.767068][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 562.799446][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 562.817263][ T30] audit: type=1400 audit(1761716708.013:374): avc: denied { create } for pid=8054 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 562.830058][ T24] usb 5-1: media controller created [ 562.958746][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 562.967602][ T5987] dvb-usb: error while querying for an remote control event. [ 562.979809][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.094116][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 563.129261][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 563.254861][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 563.360537][ T5987] dvb-usb: error while querying for an remote control event. [ 563.522835][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 563.529055][ T5987] dvb-usb: error while querying for an remote control event. [ 563.531927][ T8064] netlink: 5 bytes leftover after parsing attributes in process `syz.0.551'. [ 563.537052][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 563.545581][ T30] audit: type=1400 audit(1761716708.723:375): avc: denied { listen } for pid=8054 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 563.577290][ T8064] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 563.761415][ T8064] 0ªX¹¦D: entered allmulticast mode [ 563.767366][ T8064] veth0_macvtap: entered allmulticast mode [ 563.780800][ T8064] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 563.834706][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 563.906794][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 563.932170][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 563.938031][ T5987] dvb-usb: error while querying for an remote control event. [ 563.997868][ T24] usb 5-1: USB disconnect, device number 32 [ 564.032578][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 564.112039][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 564.129651][ T5987] dvb-usb: error while querying for an remote control event. [ 564.307699][ T30] audit: type=1326 audit(1761716709.473:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.331852][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 564.338108][ T5987] dvb-usb: error while querying for an remote control event. [ 564.345898][ T30] audit: type=1326 audit(1761716709.473:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.380180][ T30] audit: type=1326 audit(1761716709.473:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.726040][ T8080] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 564.737178][ T8080] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 564.750835][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 564.771254][ T8080] ======================================================= [ 564.771254][ T8080] WARNING: The mand mount option has been deprecated and [ 564.771254][ T8080] and is ignored by this kernel. Remove the mand [ 564.771254][ T8080] option from the mount to silence this warning. [ 564.771254][ T8080] ======================================================= [ 564.806843][ T5987] dvb-usb: error while querying for an remote control event. [ 564.893650][ T30] audit: type=1326 audit(1761716709.473:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.922099][ T30] audit: type=1326 audit(1761716709.473:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.922564][ T8080] tmpfs: Bad value for 'mpol' [ 564.956976][ T30] audit: type=1326 audit(1761716709.473:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 564.958540][ T5948] gspca_stk1135: reg_w 0x353 err -71 [ 564.982428][ T30] audit: type=1326 audit(1761716709.473:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.009083][ T30] audit: type=1326 audit(1761716709.473:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.011956][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 565.039501][ T8084] binder: BC_ATTEMPT_ACQUIRE not supported [ 565.095260][ T8084] binder: 8079:8084 ioctl c0306201 200000000540 returned -22 [ 565.109018][ T5987] dvb-usb: error while querying for an remote control event. [ 565.119859][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.403298][ T30] audit: type=1326 audit(1761716709.483:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.428267][ T5948] gspca_stk1135: Sensor write failed [ 565.428299][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.428321][ T5948] gspca_stk1135: Sensor write failed [ 565.428343][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.428352][ T5948] gspca_stk1135: Sensor read failed [ 565.428375][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.428383][ T5948] gspca_stk1135: Sensor read failed [ 565.428389][ T5948] gspca_stk1135: Detected sensor type unknown (0x0) [ 565.428418][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.428426][ T5948] gspca_stk1135: Sensor read failed [ 565.428451][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.517228][ T5948] gspca_stk1135: Sensor read failed [ 565.522535][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.528912][ T5948] gspca_stk1135: Sensor write failed [ 565.534365][ T5948] gspca_stk1135: serial bus timeout: status=0x00 [ 565.541149][ T5948] gspca_stk1135: Sensor write failed [ 565.548951][ T5948] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 565.548966][ T30] audit: type=1326 audit(1761716709.483:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.564819][ T5948] usb 4-1: USB disconnect, device number 29 [ 565.586299][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 565.596856][ T5987] dvb-usb: error while querying for an remote control event. [ 565.792278][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 565.795441][ T30] audit: type=1326 audit(1761716709.493:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.821178][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.951345][ T30] audit: type=1326 audit(1761716709.493:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 565.977707][ T5987] dvb-usb: error while querying for an remote control event. [ 565.994565][ T30] audit: type=1326 audit(1761716709.493:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.5.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac40b8efc9 code=0x7ffc0000 [ 566.017666][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.057707][ T8094] FAULT_INJECTION: forcing a failure. [ 566.057707][ T8094] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 566.071368][ T8092] FAULT_INJECTION: forcing a failure. [ 566.071368][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.086721][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT(full) [ 566.086747][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.086757][ T8094] Call Trace: [ 566.086763][ T8094] [ 566.086770][ T8094] dump_stack_lvl+0x16c/0x1f0 [ 566.086820][ T8094] should_fail_ex+0x512/0x640 [ 566.086843][ T8094] should_fail_alloc_page+0xe7/0x130 [ 566.086862][ T8094] prepare_alloc_pages+0x3c2/0x610 [ 566.086883][ T8094] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 566.086914][ T8094] ? find_held_lock+0x2b/0x80 [ 566.086934][ T8094] ? is_bpf_text_address+0x8a/0x1a0 [ 566.086954][ T8094] ? bpf_ksym_find+0x127/0x1c0 [ 566.086977][ T8094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 566.087000][ T8094] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.087024][ T8094] ? kernel_text_address+0x8d/0x100 [ 566.087043][ T8094] ? __kernel_text_address+0xd/0x40 [ 566.087070][ T8094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.087094][ T8094] ? policy_nodemask+0xea/0x4e0 [ 566.087116][ T8094] alloc_pages_mpol+0x1fb/0x550 [ 566.087137][ T8094] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 566.087163][ T8094] folio_alloc_mpol_noprof+0x36/0x2f0 [ 566.087187][ T8094] vma_alloc_folio_noprof+0xed/0x1e0 [ 566.087210][ T8094] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 566.087240][ T8094] do_pte_missing+0x2202/0x3ba0 [ 566.087262][ T8094] ? find_held_lock+0x2b/0x80 [ 566.087288][ T8094] __handle_mm_fault+0x1556/0x2aa0 [ 566.087317][ T8094] ? __pfx___handle_mm_fault+0x10/0x10 [ 566.087342][ T8094] ? lock_vma_under_rcu+0x176/0x530 [ 566.087372][ T8094] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 566.087398][ T8094] handle_mm_fault+0x589/0xd10 [ 566.087421][ T8094] ? __pkru_allows_pkey+0x11/0xb0 [ 566.087440][ T8094] do_user_addr_fault+0x60c/0x1370 [ 566.087461][ T8094] ? rcu_is_watching+0x12/0xc0 [ 566.087485][ T8094] exc_page_fault+0x64/0xc0 [ 566.087511][ T8094] asm_exc_page_fault+0x26/0x30 [ 566.087527][ T8094] RIP: 0033:0x7f13a765a87b [ 566.087541][ T8094] Code: 00 00 00 48 8d 3d bd 38 19 00 48 89 c1 31 c0 e8 db 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 38 19 00 48 89 34 24 48 8b 14 24 48 8b [ 566.087557][ T8094] RSP: 002b:00007f13a8561fb0 EFLAGS: 00010202 [ 566.087570][ T8094] RAX: 0000000000000000 RBX: 00007f13a79e5fa0 RCX: 0000000000000000 [ 566.087580][ T8094] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000080 [ 566.087589][ T8094] RBP: 00007f13a8563090 R08: 0000000000000000 R09: 0000000000000000 [ 566.087598][ T8094] R10: 0000200000000080 R11: 0000000000000000 R12: 0000000000000001 [ 566.087607][ T8094] R13: 00007f13a79e6038 R14: 00007f13a79e5fa0 R15: 00007ffe00a13b88 [ 566.087631][ T8094] [ 566.091732][ T8094] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 566.122040][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 566.364130][ T8092] CPU: 1 UID: 0 PID: 8092 Comm: syz.0.560 Not tainted syzkaller #0 PREEMPT(full) [ 566.364150][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.364158][ T8092] Call Trace: [ 566.364164][ T8092] [ 566.364169][ T8092] dump_stack_lvl+0x16c/0x1f0 [ 566.364196][ T8092] should_fail_ex+0x512/0x640 [ 566.364218][ T8092] copy_fpstate_to_sigframe+0x854/0xaf0 [ 566.364245][ T8092] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 566.364266][ T8092] ? posixtimer_deliver_signal+0x105/0x6b0 [ 566.364288][ T8092] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 566.364302][ T8092] ? x86_task_fpu+0x5f/0x90 [ 566.364322][ T8092] get_sigframe+0x4a8/0x9c0 [ 566.364345][ T8092] ? __pfx_get_sigframe+0x10/0x10 [ 566.364366][ T8092] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.364388][ T8092] ? siginfo_layout+0x177/0x290 [ 566.364412][ T8092] x64_setup_rt_frame+0x12e/0xcf0 [ 566.364438][ T8092] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 566.364465][ T8092] arch_do_signal_or_restart+0x5e4/0x7c0 [ 566.364487][ T8092] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.364511][ T8092] ? ksys_write+0x1ac/0x250 [ 566.364528][ T8092] ? __pfx_ksys_write+0x10/0x10 [ 566.364547][ T8092] exit_to_user_mode_loop+0x85/0x130 [ 566.364565][ T8092] do_syscall_64+0x426/0xfa0 [ 566.364589][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.364605][ T8092] RIP: 0033:0x7f0655b8efc7 [ 566.364618][ T8092] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 566.364633][ T8092] RSP: 002b:00007f06569d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 566.364649][ T8092] RAX: 0000000000000147 RBX: 00007f0655de5fa0 RCX: 00007f0655b8efc9 [ 566.364658][ T8092] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 566.364668][ T8092] RBP: 00007f06569d8090 R08: 0000000000000004 R09: 0000000000000001 [ 566.364677][ T8092] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 566.364687][ T8092] R13: 00007f0655de6038 R14: 00007f0655de5fa0 R15: 00007fffe5be51b8 [ 566.364711][ T8092] [ 566.648380][ T24] dvb-usb: error while querying for an remote control event. [ 566.752149][ T5948] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 566.812055][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 566.817836][ T24] dvb-usb: error while querying for an remote control event. [ 566.916323][ T5948] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 566.924635][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.945613][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.970677][ T5948] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.982052][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 566.989998][ T24] dvb-usb: error while querying for an remote control event. [ 567.026425][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.051910][ T5948] usb 4-1: config 0 descriptor?? [ 567.062064][ T5944] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 567.072081][ T5833] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 567.096309][ T5948] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 567.152454][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 567.158357][ T5948] dvb-usb: error while querying for an remote control event. [ 567.212181][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 567.220083][ T5944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 567.230335][ T5944] usb 5-1: can't read configurations, error -22 [ 567.242606][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.254884][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.289535][ T5833] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 567.329334][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 567.339390][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.353625][ T5833] usb 6-1: config 0 descriptor?? [ 567.359016][ T5948] dvb-usb: error while querying for an remote control event. [ 567.382097][ T5944] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 567.552072][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 567.552093][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 567.558171][ T5948] dvb-usb: error while querying for an remote control event. [ 567.565686][ T5944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 567.581611][ T5944] usb 5-1: can't read configurations, error -22 [ 567.590603][ T5944] usb usb5-port1: attempt power cycle [ 567.732066][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 567.738006][ T5948] dvb-usb: error while querying for an remote control event. [ 567.783199][ T5833] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 567.792967][ T5833] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 567.807630][ T5833] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 567.822826][ T5833] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 567.836902][ T5833] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 567.851578][ T5833] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 567.869140][ T5833] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 567.903394][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 567.915299][ T5948] dvb-usb: error while querying for an remote control event. [ 567.942066][ T5944] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 567.962835][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 567.971587][ T5944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 567.980979][ T8101] FAULT_INJECTION: forcing a failure. [ 567.980979][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 567.992011][ T5944] usb 5-1: can't read configurations, error -22 [ 568.000659][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.5.562 Not tainted syzkaller #0 PREEMPT(full) [ 568.000682][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.000692][ T8101] Call Trace: [ 568.000698][ T8101] [ 568.000704][ T8101] dump_stack_lvl+0x16c/0x1f0 [ 568.000735][ T8101] should_fail_ex+0x512/0x640 [ 568.000756][ T8101] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 568.000784][ T8101] should_failslab+0xc2/0x120 [ 568.000804][ T8101] kmem_cache_alloc_noprof+0x75/0x6e0 [ 568.000829][ T8101] ? getname_flags.part.0+0x4c/0x550 [ 568.000857][ T8101] ? getname_flags.part.0+0x4c/0x550 [ 568.000877][ T8101] getname_flags.part.0+0x4c/0x550 [ 568.000903][ T8101] getname_flags+0x93/0xf0 [ 568.000918][ T8101] do_sys_openat2+0xb8/0x1d0 [ 568.000940][ T8101] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.000964][ T8101] ? __fget_files+0x20e/0x3c0 [ 568.000985][ T8101] __x64_sys_openat+0x174/0x210 [ 568.001007][ T8101] ? __pfx___x64_sys_openat+0x10/0x10 [ 568.001031][ T8101] ? ksys_write+0x1ac/0x250 [ 568.001056][ T8101] do_syscall_64+0xcd/0xfa0 [ 568.001084][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.001100][ T8101] RIP: 0033:0x7fac40b8d810 [ 568.001120][ T8101] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 568.001136][ T8101] RSP: 002b:00007fac41a92b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.001152][ T8101] RAX: ffffffffffffffda RBX: 0000000000000400 RCX: 00007fac40b8d810 [ 568.001163][ T8101] RDX: 0000000000000400 RSI: 00007fac41a92c10 RDI: 00000000ffffff9c [ 568.001173][ T8101] RBP: 00007fac41a92c10 R08: 0000000000000000 R09: 0023776172646968 [ 568.001184][ T8101] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 568.001194][ T8101] R13: 00007fac40de6038 R14: 00007fac40de5fa0 R15: 00007ffe24aa7698 [ 568.001218][ T8101] [ 568.199469][ T5944] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 568.199709][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 568.212895][ T5872] dvb-usb: error while querying for an remote control event. [ 568.244101][ T5948] usb 6-1: USB disconnect, device number 7 [ 568.263130][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 568.271275][ T5944] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 568.286183][ T5944] usb 5-1: can't read configurations, error -22 [ 568.295296][ T5944] usb usb5-port1: unable to enumerate USB device [ 568.372058][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 568.377828][ T24] dvb-usb: error while querying for an remote control event. [ 568.525595][ T8117] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 568.529081][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.543567][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.552078][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 568.558060][ T5948] dvb-usb: error while querying for an remote control event. [ 568.722078][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 568.727822][ T5948] dvb-usb: error while querying for an remote control event. [ 568.832066][ T5944] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 568.892189][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 568.897993][ T5948] dvb-usb: error while querying for an remote control event. [ 568.982972][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 568.992066][ T5944] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 569.001156][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.009217][ T5944] usb 6-1: Product: syz [ 569.013413][ T5944] usb 6-1: Manufacturer: syz [ 569.017999][ T5944] usb 6-1: SerialNumber: syz [ 569.025132][ T5944] usb 6-1: config 0 descriptor?? [ 569.031825][ T5944] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 569.062080][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 569.067942][ T5948] dvb-usb: error while querying for an remote control event. [ 569.233213][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 569.239010][ T5948] dvb-usb: error while querying for an remote control event. [ 569.242465][ T5924] usb 4-1: USB disconnect, device number 30 [ 569.275985][ T6789] IPVS: stopping backup sync thread 8117 ... [ 569.412077][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 569.417893][ T24] dvb-usb: error while querying for an remote control event. [ 569.583527][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 569.589465][ T24] dvb-usb: error while querying for an remote control event. [ 569.754021][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 569.759835][ T24] dvb-usb: error while querying for an remote control event. [ 570.009643][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 570.015854][ T24] dvb-usb: error while querying for an remote control event. [ 570.186976][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 570.192947][ T24] dvb-usb: error while querying for an remote control event. [ 570.352086][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 570.384013][ T24] dvb-usb: error while querying for an remote control event. [ 570.603403][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 570.609367][ T24] dvb-usb: error while querying for an remote control event. [ 570.854056][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 570.873197][ T24] dvb-usb: error while querying for an remote control event. [ 571.410262][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.420559][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.482065][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 571.487971][ T24] dvb-usb: error while querying for an remote control event. [ 571.652702][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 571.658474][ T5948] dvb-usb: error while querying for an remote control event. [ 571.853082][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 571.866507][ T5948] dvb-usb: error while querying for an remote control event. [ 572.032065][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 572.037849][ T5948] dvb-usb: error while querying for an remote control event. [ 572.200115][ T8169] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 572.209608][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 572.217060][ T5948] dvb-usb: error while querying for an remote control event. [ 572.246643][ T8169] bond1: entered promiscuous mode [ 572.251829][ T8169] bond1: entered allmulticast mode [ 572.265833][ T8169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.326828][ T8169] bridge1: entered promiscuous mode [ 572.334506][ T8169] bridge1: entered allmulticast mode [ 572.354488][ T5982] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 572.373888][ T8169] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 572.392102][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 572.397996][ T24] dvb-usb: error while querying for an remote control event. [ 572.562721][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 572.568495][ T24] dvb-usb: error while querying for an remote control event. [ 572.576596][ T6789] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 572.593154][ T5944] gspca_stk1135: reg_w 0x353 err -71 [ 572.602542][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 572.609069][ T5944] gspca_stk1135: Sensor write failed [ 573.101267][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 573.105044][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.126804][ T5944] gspca_stk1135: Sensor write failed [ 573.130849][ T24] dvb-usb: error while querying for an remote control event. [ 573.132205][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.132217][ T5944] gspca_stk1135: Sensor read failed [ 573.132246][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.132255][ T5944] gspca_stk1135: Sensor read failed [ 573.132262][ T5944] gspca_stk1135: Detected sensor type unknown (0x0) [ 573.132296][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.132305][ T5944] gspca_stk1135: Sensor read failed [ 573.132330][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.195095][ T5944] gspca_stk1135: Sensor read failed [ 573.200816][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.208138][ T5944] gspca_stk1135: Sensor write failed [ 573.215184][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 573.221554][ T5944] gspca_stk1135: Sensor write failed [ 573.244792][ T5944] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 573.332121][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 573.332227][ T5944] usb 6-1: USB disconnect, device number 8 [ 573.337895][ T24] dvb-usb: error while querying for an remote control event. [ 573.450738][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.488145][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.492560][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 573.506758][ T5872] dvb-usb: error while querying for an remote control event. [ 573.531105][ T8181] nbd: must specify at least one socket [ 573.662681][ T8185] capability: warning: `syz.3.588' uses 32-bit capabilities (legacy support in use) [ 573.672359][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 573.678527][ T5872] dvb-usb: error while querying for an remote control event. [ 573.722543][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.589'. [ 573.852072][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 573.857919][ T5872] dvb-usb: error while querying for an remote control event. [ 574.052676][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 574.058424][ T5872] dvb-usb: error while querying for an remote control event. [ 574.222221][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 574.231529][ T5872] dvb-usb: error while querying for an remote control event. [ 574.412178][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 574.421418][ T5872] dvb-usb: error while querying for an remote control event. [ 574.594536][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 574.602650][ T5872] dvb-usb: error while querying for an remote control event. [ 574.622696][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 574.622711][ T30] audit: type=1400 audit(1761716719.823:409): avc: denied { read write } for pid=8202 comm="syz.5.592" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 574.660979][ T30] audit: type=1400 audit(1761716719.823:410): avc: denied { open } for pid=8202 comm="syz.5.592" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 574.760697][ T30] audit: type=1400 audit(1761716719.953:411): avc: denied { ioctl } for pid=8202 comm="syz.5.592" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 574.787318][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 574.814823][ T5948] dvb-usb: error while querying for an remote control event. [ 574.843033][ T8206] syzkaller0: entered promiscuous mode [ 574.848920][ T8206] syzkaller0: entered allmulticast mode [ 575.082053][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 575.087820][ T5948] dvb-usb: error while querying for an remote control event. [ 575.105283][ T30] audit: type=1400 audit(1761716720.293:412): avc: denied { create } for pid=8211 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.127073][ T30] audit: type=1400 audit(1761716720.293:413): avc: denied { connect } for pid=8211 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.469145][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 575.481146][ T5948] dvb-usb: error while querying for an remote control event. [ 575.512866][ T30] audit: type=1400 audit(1761716720.293:414): avc: denied { write } for pid=8211 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.681772][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 575.701610][ T5948] dvb-usb: error while querying for an remote control event. [ 576.002072][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 576.007841][ T5948] dvb-usb: error while querying for an remote control event. [ 576.174580][ T8235] process 'syz.3.599' launched './file0' with NULL argv: empty string added [ 576.423076][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 576.428854][ T5948] dvb-usb: error while querying for an remote control event. [ 576.622060][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 576.627829][ T5948] dvb-usb: error while querying for an remote control event. [ 576.792057][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 576.798095][ T5948] dvb-usb: error while querying for an remote control event. [ 576.807740][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.823673][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.962259][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 576.970365][ T5872] dvb-usb: error while querying for an remote control event. [ 577.460899][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 577.466767][ T5948] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 577.474302][ T5872] dvb-usb: error while querying for an remote control event. [ 577.489239][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.498106][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.622092][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 577.632118][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 577.637902][ T5872] dvb-usb: error while querying for an remote control event. [ 577.647156][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.657390][ T5948] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 577.666322][ T5948] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 577.675636][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.685271][ T5948] usb 6-1: config 0 descriptor?? [ 577.693883][ T5948] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 577.700959][ T5948] dvb-usb: bulk message failed: -22 (3/0) [ 577.709174][ T5948] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 577.718239][ T5948] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 577.725442][ T5948] usb 6-1: media controller created [ 577.731940][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.747272][ T5948] dvb-usb: bulk message failed: -22 (6/0) [ 577.754856][ T5948] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 577.769561][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 577.790181][ T5948] dvb-usb: schedule remote query interval to 150 msecs. [ 577.798984][ T5948] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 577.807032][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 577.817706][ T5872] dvb-usb: error while querying for an remote control event. [ 577.839783][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.855871][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 577.870274][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 577.882762][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.918346][ T24] usb 4-1: config 0 descriptor?? [ 577.952154][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 578.001025][ T5872] dvb-usb: error while querying for an remote control event. [ 578.247504][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 578.277987][ T5948] dvb-usb: error while querying for an remote control event. [ 578.278083][ T8251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.322294][ T8251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.472365][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 578.479675][ T5987] dvb-usb: error while querying for an remote control event. [ 578.487149][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 578.493006][ T5948] dvb-usb: error while querying for an remote control event. [ 578.540504][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 578.546935][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 578.652701][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 578.658633][ T5987] dvb-usb: error while querying for an remote control event. [ 578.666547][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 578.672659][ T5872] dvb-usb: error while querying for an remote control event. [ 578.689212][ T5944] usb 6-1: USB disconnect, device number 9 [ 578.707537][ T8269] ceph: No mds server is up or the cluster is laggy [ 578.738944][ T5944] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 578.832107][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 578.838292][ T5872] dvb-usb: error while querying for an remote control event. [ 579.002096][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 579.008079][ T5872] dvb-usb: error while querying for an remote control event. [ 579.172106][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 579.180901][ T5872] dvb-usb: error while querying for an remote control event. [ 579.289157][ T8278] FAULT_INJECTION: forcing a failure. [ 579.289157][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.322348][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.4.611 Not tainted syzkaller #0 PREEMPT(full) [ 579.322373][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.322383][ T8278] Call Trace: [ 579.322389][ T8278] [ 579.322396][ T8278] dump_stack_lvl+0x16c/0x1f0 [ 579.322426][ T8278] should_fail_ex+0x512/0x640 [ 579.322449][ T8278] _copy_from_user+0x2e/0xd0 [ 579.322471][ T8278] input_event_from_user+0x133/0x3b0 [ 579.322497][ T8278] ? __pfx_input_event_from_user+0x10/0x10 [ 579.322530][ T8278] evdev_write+0x37b/0x750 [ 579.322556][ T8278] ? __pfx_evdev_write+0x10/0x10 [ 579.322579][ T8278] ? bpf_lsm_file_permission+0x9/0x10 [ 579.322595][ T8278] ? security_file_permission+0x71/0x210 [ 579.322614][ T8278] ? rw_verify_area+0xcf/0x6c0 [ 579.322638][ T8278] ? __pfx_evdev_write+0x10/0x10 [ 579.322665][ T8278] vfs_write+0x2a0/0x11d0 [ 579.322685][ T8278] ? __pfx_vfs_write+0x10/0x10 [ 579.322698][ T8278] ? find_held_lock+0x2b/0x80 [ 579.322717][ T8278] ? __fget_files+0x204/0x3c0 [ 579.322741][ T8278] ? __fget_files+0x20e/0x3c0 [ 579.322764][ T8278] ksys_write+0x1f8/0x250 [ 579.322778][ T8278] ? __pfx_ksys_write+0x10/0x10 [ 579.322800][ T8278] do_syscall_64+0xcd/0xfa0 [ 579.322825][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.322841][ T8278] RIP: 0033:0x7f13a778efc9 [ 579.322855][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.322869][ T8278] RSP: 002b:00007f13a8563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.322884][ T8278] RAX: ffffffffffffffda RBX: 00007f13a79e5fa0 RCX: 00007f13a778efc9 [ 579.322893][ T8278] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000003 [ 579.322902][ T8278] RBP: 00007f13a8563090 R08: 0000000000000000 R09: 0000000000000000 [ 579.322911][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.322920][ T8278] R13: 00007f13a79e6038 R14: 00007f13a79e5fa0 R15: 00007ffe00a13b88 [ 579.322945][ T8278] [ 579.530839][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 579.537053][ T5872] dvb-usb: error while querying for an remote control event. [ 579.702061][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 579.708143][ T5872] dvb-usb: error while querying for an remote control event. [ 579.768468][ T8288] FAULT_INJECTION: forcing a failure. [ 579.768468][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.781660][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.5.613 Not tainted syzkaller #0 PREEMPT(full) [ 579.781689][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.781698][ T8288] Call Trace: [ 579.781713][ T8288] [ 579.781720][ T8288] dump_stack_lvl+0x16c/0x1f0 [ 579.781751][ T8288] should_fail_ex+0x512/0x640 [ 579.781775][ T8288] _copy_from_user+0x2e/0xd0 [ 579.781799][ T8288] copy_msghdr_from_user+0x98/0x160 [ 579.781822][ T8288] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 579.781856][ T8288] ___sys_sendmsg+0xfe/0x1d0 [ 579.781879][ T8288] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.781899][ T8288] ? __lock_acquire+0x622/0x1c90 [ 579.781955][ T8288] __sys_sendmsg+0x16d/0x220 [ 579.781979][ T8288] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.782014][ T8288] do_syscall_64+0xcd/0xfa0 [ 579.782041][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.782058][ T8288] RIP: 0033:0x7fac40b8efc9 [ 579.782072][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.782088][ T8288] RSP: 002b:00007fac41a51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.782104][ T8288] RAX: ffffffffffffffda RBX: 00007fac40de6180 RCX: 00007fac40b8efc9 [ 579.782115][ T8288] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 579.782125][ T8288] RBP: 00007fac41a51090 R08: 0000000000000000 R09: 0000000000000000 [ 579.782134][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.782143][ T8288] R13: 00007fac40de6218 R14: 00007fac40de6180 R15: 00007ffe24aa7698 [ 579.782166][ T8288] [ 579.989566][ T30] audit: type=1400 audit(1761716725.183:415): avc: denied { create } for pid=8290 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 580.010857][ T30] audit: type=1400 audit(1761716725.203:416): avc: denied { append } for pid=8290 comm="syz.0.616" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 580.112104][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 580.118046][ T30] audit: type=1400 audit(1761716725.303:417): avc: denied { getopt } for pid=8290 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 580.137832][ T5872] dvb-usb: error while querying for an remote control event. [ 580.138526][ T30] audit: type=1400 audit(1761716725.303:418): avc: denied { setopt } for pid=8290 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 580.665199][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 580.737086][ T5872] dvb-usb: error while querying for an remote control event. [ 580.829758][ T8297] QAT: failed to copy from user cfg_data. [ 580.912302][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 581.088741][ T5948] dvb-usb: error while querying for an remote control event. [ 581.132236][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.237303][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.267318][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 581.273652][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 581.280291][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 581.290767][ T5948] dvb-usb: error while querying for an remote control event. [ 581.299581][ T30] audit: type=1400 audit(1761716726.493:419): avc: denied { read } for pid=8302 comm="syz.4.620" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 581.332263][ T24] usb 4-1: USB disconnect, device number 31 [ 581.502251][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 581.712718][ T30] audit: type=1400 audit(1761716726.493:420): avc: denied { open } for pid=8302 comm="syz.4.620" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 581.727017][ T5872] dvb-usb: error while querying for an remote control event. [ 581.842189][ T5924] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 581.902087][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 581.907931][ T5948] dvb-usb: error while querying for an remote control event. [ 581.992084][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 582.001328][ T5872] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 582.013066][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.032546][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.062231][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.072079][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 582.080515][ T5948] dvb-usb: error while querying for an remote control event. [ 582.091512][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.112067][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.130755][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 582.141307][ T5924] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 582.150040][ T5924] usb 5-1: Manufacturer: syz [ 582.275193][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 582.281116][ T5948] dvb-usb: error while querying for an remote control event. [ 582.300122][ T5872] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 582.309771][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.317978][ T5872] usb 4-1: Product: syz [ 582.322735][ T5872] usb 4-1: Manufacturer: syz [ 582.342846][ T5924] usb 5-1: config 0 descriptor?? [ 582.578115][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 582.620638][ T5872] usb 4-1: SerialNumber: syz [ 582.634210][ T5948] dvb-usb: error while querying for an remote control event. [ 582.659528][ T5872] usb 4-1: config 0 descriptor?? [ 582.832133][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 582.838056][ T5948] dvb-usb: error while querying for an remote control event. [ 582.862532][ T5924] rc_core: IR keymap rc-hauppauge not found [ 582.870495][ T5924] Registered IR keymap rc-empty [ 582.875837][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 582.902118][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 582.909369][ T5872] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 582.924288][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 582.937844][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 582.952847][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.002168][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 583.008019][ T5948] dvb-usb: error while querying for an remote control event. [ 583.020865][ T30] audit: type=1400 audit(1761716728.213:421): avc: denied { ioctl } for pid=8302 comm="syz.4.620" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 583.032568][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.172155][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.175591][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 583.190170][ T5948] dvb-usb: error while querying for an remote control event. [ 583.202597][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.209027][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.221164][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.232401][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.252342][ T30] audit: type=1400 audit(1761716728.443:422): avc: denied { connect } for pid=8332 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.261195][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.293131][ T30] audit: type=1400 audit(1761716728.443:423): avc: denied { write } for pid=8332 comm="syz.2.629" path="socket:[20333]" dev="sockfs" ino=20333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.294666][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.327067][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.336115][ T8335] veth0: entered promiscuous mode [ 583.339836][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.341282][ T30] audit: type=1400 audit(1761716728.473:424): avc: denied { shutdown } for pid=8332 comm="syz.2.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 583.349149][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 583.375758][ T5948] dvb-usb: error while querying for an remote control event. [ 583.375948][ T8334] veth0: left promiscuous mode [ 583.388560][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.412201][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.432110][ T5924] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.453779][ T5924] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 583.463451][ T5924] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 583.484352][ T5924] usb 5-1: USB disconnect, device number 37 [ 583.633682][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 583.640047][ T5872] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 583.655843][ T5948] dvb-usb: error while querying for an remote control event. [ 583.822524][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 584.118638][ T5948] dvb-usb: error while querying for an remote control event. [ 584.216718][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.227795][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.308841][ T8347] overlayfs: failed to resolve './file0': -2 [ 584.458194][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 584.464747][ T5872] dvb-usb: error while querying for an remote control event. [ 584.726575][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 584.732460][ T8353] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 584.739244][ T8353] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 584.747339][ T8353] vhci_hcd vhci_hcd.0: Device attached [ 584.754785][ T5872] dvb-usb: error while querying for an remote control event. [ 584.777164][ T5944] usb 4-1: USB disconnect, device number 32 [ 584.932296][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 584.952158][ T5872] dvb-usb: error while querying for an remote control event. [ 585.150487][ T8355] vhci_hcd: connection closed [ 585.171491][ T1023] vhci_hcd: stop threads [ 585.202350][ T1023] vhci_hcd: release socket [ 585.213528][ T5948] usb 44-1: SetAddress Request (2) to port 0 [ 585.223945][ T1023] vhci_hcd: disconnect device [ 585.241032][ T5948] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 585.241414][ T8364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 585.265252][ T5948] usb 44-1: enqueue for inactive port 0 [ 585.321686][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 585.328273][ T5872] dvb-usb: error while querying for an remote control event. [ 585.513273][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 586.328566][ T30] audit: type=1400 audit(1761716731.343:425): avc: denied { setopt } for pid=8372 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 586.331021][ T5948] usb usb44-port1: attempt power cycle [ 586.382024][ T5872] dvb-usb: error while querying for an remote control event. [ 586.401051][ T8372] delete_channel: no stack [ 586.488128][ T30] audit: type=1400 audit(1761716731.673:426): avc: denied { ioctl } for pid=8380 comm="syz.5.644" path="socket:[22536]" dev="sockfs" ino=22536 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 586.660129][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 586.671230][ T5987] dvb-usb: error while querying for an remote control event. [ 586.771267][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 587.176507][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 587.194381][ T5872] dvb-usb: error while querying for an remote control event. [ 587.414878][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 587.494621][ T5987] dvb-usb: error while querying for an remote control event. [ 587.502301][ T5948] usb usb44-port1: unable to enumerate USB device [ 588.097683][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 588.103506][ T5948] dvb-usb: error while querying for an remote control event. [ 588.232424][ T5948] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 588.252790][ T31] INFO: task kworker/0:8:6003 blocked for more than 143 seconds. [ 588.275774][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 588.287404][ T31] Not tainted syzkaller #0 [ 588.294506][ T5987] dvb-usb: error while querying for an remote control event. [ 588.296959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.314156][ T31] task:kworker/0:8 state:D stack:24536 pid:6003 tgid:6003 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 588.330580][ T31] Workqueue: usb_hub_wq hub_event [ 588.341645][ T31] Call Trace: [ 588.455321][ T31] [ 588.458611][ T31] __schedule+0x1190/0x5de0 [ 588.466035][ T31] ? __lock_acquire+0xae1/0x1c90 [ 588.472169][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 588.478406][ T5987] dvb-usb: error while querying for an remote control event. [ 588.521767][ T5948] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 588.533367][ T31] ? __pfx___schedule+0x10/0x10 [ 588.538393][ T31] ? find_held_lock+0x2b/0x80 [ 588.556308][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.580639][ T31] ? schedule+0x2d7/0x3a0 [ 588.597013][ T31] schedule+0xe7/0x3a0 [ 588.601191][ T31] schedule_timeout+0x257/0x290 [ 588.612143][ T5948] usb 6-1: Product: syz [ 588.616455][ T5948] usb 6-1: Manufacturer: syz [ 588.621370][ T5948] usb 6-1: SerialNumber: syz [ 588.622552][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 588.634165][ T31] ? mark_held_locks+0x49/0x80 [ 588.635460][ T5948] usb 6-1: config 0 descriptor?? [ 588.639251][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.652300][ T31] __wait_for_common+0x2fc/0x4e0 [ 588.657578][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 588.663311][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 588.668885][ T31] ? __pfx_device_del+0x10/0x10 [ 588.680294][ T31] ? kobject_put+0xab/0x5a0 [ 588.692376][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 588.692626][ T31] i2c_del_adapter+0x546/0x6f0 [ 588.707705][ T5872] dvb-usb: error while querying for an remote control event. [ 588.733376][ T31] ? kasan_quarantine_put+0x10a/0x240 [ 588.738834][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 588.744640][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 588.750179][ T31] ? kfree+0x2b8/0x6d0 [ 588.754880][ T31] ? dvb_usb_device_exit+0x2c1/0x580 [ 588.760513][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 588.765900][ T31] dvb_usb_device_exit+0x334/0x580 [ 588.771142][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 588.777939][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 588.784476][ T31] ? usb_disable_interface+0x7f/0x4c0 [ 588.790601][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 588.796909][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 588.805598][ T31] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 588.811663][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 588.817938][ T31] device_remove+0x125/0x170 [ 588.825656][ T31] device_release_driver_internal+0x44b/0x620 [ 588.832636][ T31] bus_remove_device+0x22f/0x420 [ 588.837766][ T31] device_del+0x396/0x9f0 [ 588.843631][ T31] ? __pfx_device_del+0x10/0x10 [ 588.848628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 588.892913][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 588.899552][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 588.899831][ T5987] dvb-usb: error while querying for an remote control event. [ 588.905405][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 588.905433][ T31] usb_disable_device+0x355/0x7d0 [ 588.905464][ T31] usb_disconnect+0x2e1/0x9c0 [ 588.913792][ T5948] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 588.917994][ T31] hub_event+0x1c81/0x4fe0 [ 588.941774][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 588.948046][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 588.948522][ T31] ? __pfx_hub_event+0x10/0x10 [ 588.963911][ T31] ? assoc_array_insert+0x530/0x3970 [ 588.969371][ T31] ? rcu_is_watching+0x12/0xc0 [ 588.974889][ T31] process_one_work+0x9cf/0x1b70 [ 588.980194][ T31] ? __pfx_process_one_work+0x10/0x10 [ 588.986734][ T31] ? assign_work+0x1a0/0x250 [ 588.991545][ T31] worker_thread+0x6c8/0xf10 [ 588.997144][ T31] ? __kthread_parkme+0x19e/0x250 [ 589.002681][ T31] ? __pfx_worker_thread+0x10/0x10 [ 589.019322][ T31] kthread+0x3c5/0x780 [ 589.023549][ T31] ? __pfx_kthread+0x10/0x10 [ 589.028952][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.034256][ T31] ? __pfx_kthread+0x10/0x10 [ 589.038849][ T31] ret_from_fork+0x675/0x7d0 [ 589.043620][ T31] ? __pfx_kthread+0x10/0x10 [ 589.048226][ T31] ret_from_fork_asm+0x1a/0x30 [ 589.054617][ T31] [ 589.057911][ T31] [ 589.057911][ T31] Showing all locks held in the system: [ 589.065808][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 589.071090][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 589.081100][ T31] 1 lock held by khungtaskd/31: [ 589.086005][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 589.092071][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 589.096079][ T976] usb 4-1: device descriptor read/64, error -71 [ 589.108078][ T31] 5 locks held by kworker/0:2/976: [ 589.108108][ T5987] dvb-usb: error while querying for an remote control event. [ 589.113279][ T31] 2 locks held by kworker/u8:9/3029: [ 589.126341][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 589.136943][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 589.145786][ T31] 2 locks held by getty/5576: [ 589.150508][ T31] #0: ffff8880363ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 589.160610][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 589.170852][ T31] 4 locks held by udevd/5873: [ 589.175589][ T31] #0: ffff88802823f540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 589.184528][ T31] #1: ffff88802a1b3088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 589.193961][ T31] #2: ffff8880469210f8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 589.203639][ T31] #3: ffff888028484198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 589.213000][ T31] 6 locks held by kworker/1:4/5948: [ 589.218186][ T31] #0: ffff888143ae5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.228995][ T31] #1: ffffc9000472fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.240284][ T31] #2: ffff88814475d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 589.249266][ T31] #3: ffff888028484198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 589.258575][ T31] #4: ffff888055796160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 589.268090][ T31] #5: ffff8880569c80d0 (&d->usb_mutex){+.+.}-{4:4}, at: rtl28xxu_ctrl_msg+0x5d/0x780 [ 589.277735][ T31] 2 locks held by kworker/u8:4/5981: [ 589.283789][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 589.283963][ T31] #0: [ 589.289523][ T5987] dvb-usb: error while querying for an remote control event. [ 589.299731][ T31] ffff888021382948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.310181][ T31] #1: ffffc9000481fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.322072][ T31] 5 locks held by kworker/0:8/6003: [ 589.327299][ T31] #0: ffff888143ae5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 589.338191][ T31] #1: ffffc900048ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 589.349504][ T31] #2: ffff88814430d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 589.358444][ T31] #3: ffff888032adf198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 589.367926][ T31] #4: ffff888032ad9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 589.378613][ T31] 1 lock held by syz.1.429/7543: [ 589.384547][ T976] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 589.392270][ T31] #0: ffff88814430d198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 589.401306][ T31] [ 589.404657][ T31] ============================================= [ 589.404657][ T31] [ 589.414448][ T31] NMI backtrace for cpu 1 [ 589.414463][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 589.414482][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.414492][ T31] Call Trace: [ 589.414497][ T31] [ 589.414504][ T31] dump_stack_lvl+0x116/0x1f0 [ 589.414533][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 589.414556][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 589.414580][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 589.414606][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 589.414628][ T31] watchdog+0xf3f/0x1170 [ 589.414654][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.414676][ T31] ? __pfx_watchdog+0x10/0x10 [ 589.414695][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.414721][ T31] ? __kthread_parkme+0x19e/0x250 [ 589.414746][ T31] ? __pfx_watchdog+0x10/0x10 [ 589.414765][ T31] kthread+0x3c5/0x780 [ 589.414782][ T31] ? __pfx_kthread+0x10/0x10 [ 589.414800][ T31] ? rcu_is_watching+0x12/0xc0 [ 589.414827][ T31] ? __pfx_kthread+0x10/0x10 [ 589.414844][ T31] ret_from_fork+0x675/0x7d0 [ 589.414858][ T31] ? __pfx_kthread+0x10/0x10 [ 589.414875][ T31] ret_from_fork_asm+0x1a/0x30 [ 589.414910][ T31] [ 589.414932][ T31] Sending NMI from CPU 1 to CPUs 0: [ 589.541573][ C0] NMI backtrace for cpu 0 [ 589.541585][ C0] CPU: 0 UID: 0 PID: 3029 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 589.541603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.541612][ C0] Workqueue: events_unbound toggle_allocation_gate [ 589.541631][ C0] RIP: 0010:load_new_mm_cr3.constprop.0+0x21/0x80 [ 589.541653][ C0] Code: 90 90 90 90 90 90 90 90 90 55 48 89 fd 53 0f b7 de 84 d2 74 1b 89 df e8 2d ff ff ff 89 de 48 89 ef e8 23 fe ff ff 0f 22 d8 5b <5d> e9 99 40 f5 09 48 c7 c0 80 e0 81 90 48 ba 00 00 00 00 00 fc ff [ 589.541670][ C0] RSP: 0018:ffffc9000cec78a0 EFLAGS: 00000046 [ 589.541680][ C0] RAX: 000000013ff0f000 RBX: ffff88813ff18000 RCX: ffffffff816df4fe [ 589.541691][ C0] RDX: ffff888030cfa480 RSI: ffffffff816df508 RDI: 0000000000000007 [ 589.541700][ C0] RBP: ffff88813ff0f000 R08: 0000000000000007 R09: 0000000000000000 [ 589.541708][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8e56bdc0 [ 589.541716][ C0] R13: 0000000000029b27 R14: 0000000000000000 R15: 0000000000010000 [ 589.541724][ C0] FS: 0000000000000000(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 589.541739][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.541747][ C0] CR2: 0000001b32223ffc CR3: 000000013ff0f000 CR4: 00000000003526f0 [ 589.541757][ C0] Call Trace: [ 589.541762][ C0] [ 589.541768][ C0] switch_mm_irqs_off+0x288/0x800 [ 589.541789][ C0] use_temporary_mm+0x8c/0x150 [ 589.541807][ C0] ? kmem_cache_alloc_node_noprof+0x8d/0x770 [ 589.541827][ C0] __text_poke+0x3ac/0xb70 [ 589.541841][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 589.541857][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 589.541870][ C0] ? __pfx___text_poke+0x10/0x10 [ 589.541884][ C0] ? kmem_cache_alloc_node_noprof+0x8d/0x770 [ 589.541905][ C0] smp_text_poke_batch_finish+0x652/0xdb0 [ 589.541923][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 589.541941][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 589.541966][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 589.541984][ C0] jump_label_update+0x376/0x550 [ 589.542003][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 589.542019][ C0] static_key_disable+0x1a/0x20 [ 589.542034][ C0] toggle_allocation_gate+0x145/0x280 [ 589.542048][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 589.542063][ C0] ? rcu_is_watching+0x12/0xc0 [ 589.542082][ C0] process_one_work+0x9cf/0x1b70 [ 589.542101][ C0] ? __pfx_process_one_work+0x10/0x10 [ 589.542118][ C0] ? assign_work+0x1a0/0x250 [ 589.542133][ C0] worker_thread+0x6c8/0xf10 [ 589.542152][ C0] ? __pfx_worker_thread+0x10/0x10 [ 589.542165][ C0] kthread+0x3c5/0x780 [ 589.542178][ C0] ? __pfx_kthread+0x10/0x10 [ 589.542190][ C0] ? rcu_is_watching+0x12/0xc0 [ 589.542206][ C0] ? __pfx_kthread+0x10/0x10 [ 589.542218][ C0] ret_from_fork+0x675/0x7d0 [ 589.542229][ C0] ? __pfx_kthread+0x10/0x10 [ 589.542242][ C0] ret_from_fork_asm+0x1a/0x30 [ 589.542266][ C0] [ 589.543138][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 589.546756][ T976] usb 4-1: device descriptor read/64, error -71 [ 589.556188][ T5987] dvb-usb: error while querying for an remote control event. [ 589.686952][ T976] usb usb4-port1: attempt power cycle [ 589.722748][ T5948] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 589.868152][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 589.873973][ T5987] dvb-usb: error while querying for an remote control event. [ 590.042101][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 590.047892][ T5948] dvb-usb: error while querying for an remote control event. [ 590.082189][ T976] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 590.103778][ T976] usb 4-1: device descriptor read/8, error -71 [ 590.213110][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 590.218896][ T5948] dvb-usb: error while querying for an remote control event. [ 590.342085][ T976] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 590.362486][ T976] usb 4-1: device descriptor read/8, error -71 [ 590.392075][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 590.397860][ T5948] dvb-usb: error while querying for an remote control event. [ 590.473020][ T976] usb usb4-port1: unable to enumerate USB device [ 590.562105][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 590.568022][ T5948] dvb-usb: error while querying for an remote control event. [ 590.732715][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 590.738495][ T5987] dvb-usb: error while querying for an remote control event. [ 590.781253][ T5948] usb 6-1: USB disconnect, device number 10 [ 590.912592][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 590.918344][ T5987] dvb-usb: error while querying for an remote control event. [ 591.082448][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.088208][ T5948] dvb-usb: error while querying for an remote control event. [ 591.264098][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.270329][ T5948] dvb-usb: error while querying for an remote control event. [ 591.432084][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.437927][ T5948] dvb-usb: error while querying for an remote control event. [ 591.603595][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.609390][ T5948] dvb-usb: error while querying for an remote control event. [ 591.772641][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.778399][ T5948] dvb-usb: error while querying for an remote control event. [ 591.952421][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 591.958177][ T5948] dvb-usb: error while querying for an remote control event. [ 592.122780][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 592.128958][ T5948] dvb-usb: error while querying for an remote control event. [ 592.292646][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 592.298399][ T5948] dvb-usb: error while querying for an remote control event. [ 592.472476][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 592.478278][ T5948] dvb-usb: error while querying for an remote control event. [ 592.647689][ T5948] dvb-usb: bulk message failed: -22 (1/0) [ 592.653962][ T5948] dvb-usb: error while querying for an remote control event. [ 592.812967][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 592.818751][ T5977] dvb-usb: error while querying for an remote control event. [ 592.982474][ T5977] dvb-usb: bulk message failed: -22 (1/0) [ 592.988218][ T5977] dvb-usb: error while querying for an remote control event. [ 593.152405][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 593.158467][ T976] dvb-usb: error while querying for an remote control event. [ 593.322764][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 593.328548][ T976] dvb-usb: error while querying for an remote control event. [ 593.492681][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 593.498418][ T976] dvb-usb: error while querying for an remote control event. [ 593.662804][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 593.668779][ T976] dvb-usb: error while querying for an remote control event. [ 593.832410][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 593.838153][ T976] dvb-usb: error while querying for an remote control event. [ 594.003576][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.009334][ T976] dvb-usb: error while querying for an remote control event. [ 594.172090][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.178017][ T976] dvb-usb: error while querying for an remote control event. [ 594.345772][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.356018][ T976] dvb-usb: error while querying for an remote control event. [ 594.522402][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.528152][ T976] dvb-usb: error while querying for an remote control event. [ 594.692519][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.698639][ T976] dvb-usb: error while querying for an remote control event. [ 594.863390][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 594.869135][ T976] dvb-usb: error while querying for an remote control event. [ 595.033011][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.038749][ T976] dvb-usb: error while querying for an remote control event. [ 595.203510][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.209255][ T976] dvb-usb: error while querying for an remote control event. [ 595.372426][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.378182][ T976] dvb-usb: error while querying for an remote control event. [ 595.542590][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.548432][ T976] dvb-usb: error while querying for an remote control event. [ 595.713688][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.719441][ T976] dvb-usb: error while querying for an remote control event. [ 595.882541][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 595.888350][ T976] dvb-usb: error while querying for an remote control event. [ 596.053747][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.059495][ T976] dvb-usb: error while querying for an remote control event. [ 596.223203][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.229218][ T976] dvb-usb: error while querying for an remote control event. [ 596.393082][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.398907][ T976] dvb-usb: error while querying for an remote control event. [ 596.563305][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.569050][ T976] dvb-usb: error while querying for an remote control event. [ 596.732496][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.738451][ T976] dvb-usb: error while querying for an remote control event. [ 596.902469][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 596.908282][ T976] dvb-usb: error while querying for an remote control event. [ 597.073007][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.078759][ T976] dvb-usb: error while querying for an remote control event. [ 597.242057][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.247813][ T976] dvb-usb: error while querying for an remote control event. [ 597.412890][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.418643][ T976] dvb-usb: error while querying for an remote control event. [ 597.582559][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.588302][ T976] dvb-usb: error while querying for an remote control event. [ 597.752576][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.758437][ T976] dvb-usb: error while querying for an remote control event. [ 597.922905][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 597.928675][ T976] dvb-usb: error while querying for an remote control event. [ 598.092690][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 598.098457][ T976] dvb-usb: error while querying for an remote control event.