last executing test programs: 11.906075888s ago: executing program 3 (id=992): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601019e560000000000000000000505000100070000000900020073797a31000000001400078008000600ffffffff08001340000000020500050002000000050004000000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x4000820) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) r7 = io_uring_setup(0x6abc, &(0x7f0000000080)={0x0, 0x2001e37d, 0x100, 0x0, 0x126}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, 0x0, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 11.835989021s ago: executing program 1 (id=993): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002300)=""/4108, 0x100c) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x10}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$sequencer(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8103090908060000"], 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r8 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) pwritev2(r8, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004081a}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6e5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x840) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 11.673881962s ago: executing program 0 (id=994): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="840100001000010025bd7000fcdbdf257f00000100000000002a0e00000000000014142a0000000000000000004e2100004e2000010a00002087000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={r9, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) 11.033636151s ago: executing program 2 (id=996): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x3677, 0x9a6d, 0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffff8, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r2, @ANYBLOB="4c7b40509f934d671e6b7964942f7f8de08eb7d1224f4e6c1b9ed0178d852ccc2c3ead58bf0764b4850d6fb966b5334d1f3611dec35630ded7ba4fd1", @ANYRES16, @ANYRESOCT, @ANYRESOCT=r2], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(0xffffffffffffffff, 0x3, &(0x7f0000000200)={0x1, 0x0, 0x100000000000081, 0xcf}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x4040000) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x28, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 10.259601318s ago: executing program 1 (id=997): r0 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) r5 = socket(0x840000000002, 0x3, 0x100) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xfffe) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2000000}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e1d, @broadcast}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 9.547128867s ago: executing program 0 (id=998): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) syslog(0x3, 0x0, 0x0) unshare(0x28000600) r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 9.527769074s ago: executing program 3 (id=999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002300)=""/4108, 0x100c) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) write$sequencer(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8103090908060000"], 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r7 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) pwritev2(r7, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004081a}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6e5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x840) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 8.874651927s ago: executing program 4 (id=1000): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x43e71efe83316a33, 0x2, 0xfe, 0x1, 0xfd, 0x0, 0x200}, [@RTA_OIF={0x8}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044844}, 0x8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@filename='./file0\x00', r4, &(0x7f0000001500)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 8.450064358s ago: executing program 1 (id=1001): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r7, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.207431199s ago: executing program 3 (id=1002): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa10000000000000701000040feffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0xc000, 0x10, 0x3e}, 0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r9, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) recvmsg$kcm(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x29}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x3, 0x0, r5, 0x7fffffff800}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 7.185125768s ago: executing program 0 (id=1003): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) close(0x3) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, 0x0) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000040)={0x8, 0xe5de, 0x2, {0xd, @vbi={0x0, 0x4000003, 0x2, 0x37303250, [0x1, 0x4], [0x0, 0x2], 0x1}}}) 6.597694865s ago: executing program 4 (id=1004): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x11c}}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r6, 0x917, 0xfffffffc, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 6.301805169s ago: executing program 3 (id=1005): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, 0x0, 0x5, 0x2) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) removexattr(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r2, 0x2046}, {r6, 0xa8}], 0x3, 0x0, 0x0, 0x0) 5.301728133s ago: executing program 0 (id=1006): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x200, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x19}, &(0x7f0000000280)=""/215, 0xd7, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2}, 0x58) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r2 = gettid() r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x8000000000000001, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='iocharset', &(0x7f00000005c0)='io#harset', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r5) 5.271953944s ago: executing program 1 (id=1007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002300)=""/4108, 0x100c) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x10}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) write$sequencer(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8103090908060000"], 0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r8 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) pwritev2(r8, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004081a}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6e5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x840) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 5.10120637s ago: executing program 2 (id=1008): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/ip_tables_names\x00') socket$nl_route(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4a102, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4080) fsetxattr$security_capability(r4, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x4be76ba2}, {0x4, 0xfffffffd}]}, 0x14, 0x3) 4.716530266s ago: executing program 4 (id=1009): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="840100001000010025bd7000fcdbdf257f00000100000000002a0e00000000000014142a0000000000000000004e2100004e2000010a00002087000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000200)={r9, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) 3.498794422s ago: executing program 4 (id=1011): r0 = socket(0x22, 0x2, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="145f5cf9fcc90000468000030001050000000000"], 0x14}}, 0x4801) ioctl$PPPOEIOCDFWD(r0, 0x80044944, 0x1000000000000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xf) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES64], 0x18) r5 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x33565348, 0x34363248, [0x7fffffff, 0xfffd], [0xa, 0x3], 0x1}}) connect$inet6(r4, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r8, 0xda90) accept4(r8, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.497843021s ago: executing program 1 (id=1021): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r6, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.496966271s ago: executing program 3 (id=1022): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x1c, 0xd802, 0x5, 0xff, 0x4, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x30000, 0x1000, 0xc, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x1000, 0x3, 0x9, 0x8, 0xb, 0x9, 0xa, 0x5, 0x0, 0x3, 0xc4}, {0xd000, 0x98ddb7fb0f345f3, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0xb000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x2, 0x3, 0x3}, {0x2, 0x26000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x5, 0x5, 0x46, 0xe, 0x4b}, {0x1000, 0xd000, 0x0, 0x0, 0x6, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x21, 0x3}, {0x6000, 0xeeef0000, 0x8, 0x9d, 0xd, 0xfe, 0x0, 0xf, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0xd000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0x4000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x5]}) r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000120fcff0700040000000100000804004880100001800c0010800400088004002a800c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x3, 0x4, 0x6, 0xe, 0x3, 0x4b}]}) syz_usb_disconnect(r8) close_range(r1, 0xffffffffffffffff, 0x0) 2.229229703s ago: executing program 0 (id=1012): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x45, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b680)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x301, 0x3, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a3000"], 0x94}}, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) 2.228892736s ago: executing program 2 (id=1013): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000002300)=""/4108, 0x100c) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) write$sequencer(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8103090908060000"], 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r7 = open(0x0, 0x64842, 0x389b0d52417bb201) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) pwritev2(r7, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004081a}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6e5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x840) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 2.146017772s ago: executing program 4 (id=1014): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$media(&(0x7f00000000c0), 0x8103, 0x8400) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) fcntl$lock(r2, 0x26, &(0x7f0000000400)={0x1, 0x0, 0x9, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0a, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r3, 0x0, 0x20000023893) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08"], 0x122}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) 1.075913565s ago: executing program 2 (id=1015): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x833a1000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004a00030000000000000000000a"], 0xfdac}, 0x1, 0x0, 0x0, 0x80}, 0x24008880) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f00000003c0)={&(0x7f00000002c0)=""/230, 0xe6, 0x3, 0x7}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x3}, {0x20}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0x1, 0x5, 0xffffffff}]}) ptrace(0x4206, r0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x5, 0x0, [{0x83d, 0x0, 0xdc86}, {0x610, 0x0, 0xfffffffffffffffc}, {0x42d}, {0xaab, 0x0, 0x3}, {0x8a3, 0x0, 0x2}]}) waitid(0x0, r0, 0x0, 0x8000000a, 0x0) wait4(r0, 0x0, 0x2, 0x0) 602.898688ms ago: executing program 0 (id=1016): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x57, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xa}, 0x8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000063c0001802c000180140003000000000000000000000000000000000014000400ff0100ddffffffffffffff00000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 519.548942ms ago: executing program 4 (id=1017): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write(r2, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', 0x0, &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 375.530575ms ago: executing program 1 (id=1018): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r7, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.88595ms ago: executing program 3 (id=1019): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x200008d9}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d311482a00010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb8, &(0x7f000000cf3d)=""/184, 0x41100, 0x8, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x280, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 0s ago: executing program 2 (id=1020): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {0x0}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, r4, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x331002, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) keyctl$set_timeout(0xf, 0x0, 0x7) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.603602][ T5709] usb 1-1: Product: syz [ 309.617267][ T5709] usb 1-1: Manufacturer: syz [ 309.631902][ T5709] usb 1-1: SerialNumber: syz [ 309.649006][ T5709] usb 1-1: config 0 descriptor?? [ 309.665361][ T5709] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 309.674736][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 309.684890][ T5631] dvb-usb: error while querying for an remote control event. [ 309.703396][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 309.717602][ T5709] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 309.727405][ T5709] usb 1-1: media controller created [ 309.741496][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.789403][ T5709] DVB: Unable to find symbol mt352_attach() [ 309.839719][ T5709] DVB: Unable to find symbol nxt6000_attach() [ 309.856613][ T5709] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 309.900465][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 309.990184][ T5709] dvb-usb: schedule remote query interval to 1000 msecs. [ 310.018624][T11436] syzkaller0: entered promiscuous mode [ 310.027348][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 310.031694][T11436] syzkaller0: entered allmulticast mode [ 310.059745][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 310.071481][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 310.625755][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 310.638123][ T5683] dvb-usb: error while querying for an remote control event. [ 310.786743][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 310.792605][ T5709] dvb-usb: error while querying for an remote control event. [ 310.858771][ T5709] usb 3-1: USB disconnect, device number 32 [ 310.864808][ T807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 311.003617][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 311.105985][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 311.122243][ T5631] dvb-usb: error while querying for an remote control event. [ 311.246068][ T807] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 311.329592][T11483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.354407][T11483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.400306][T11483] syzkaller0: entered promiscuous mode [ 311.411278][ T807] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 311.432695][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.454998][ T807] usb 2-1: Product: syz [ 311.461892][ T807] usb 2-1: Manufacturer: syz [ 311.471370][ T807] usb 2-1: SerialNumber: syz [ 311.492322][ T807] usb 2-1: config 0 descriptor?? [ 311.506424][ T807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 311.518177][ T807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 311.529993][ T807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 311.546820][ T807] usb 2-1: media controller created [ 311.570383][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.644616][ T807] DVB: Unable to find symbol mt352_attach() [ 311.694128][ T807] DVB: Unable to find symbol nxt6000_attach() [ 311.705037][ T807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 311.718775][T11420] dvb-usb: bulk message failed: -22 (7/0) [ 311.738051][ T807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 311.765011][ T807] dvb-usb: schedule remote query interval to 1000 msecs. [ 311.777905][ T807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 311.794344][T11497] syzkaller0: entered promiscuous mode [ 311.805183][T11497] syzkaller0: entered allmulticast mode [ 311.814713][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 311.827306][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 311.835477][ T5631] dvb-usb: error while querying for an remote control event. [ 311.844740][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 312.136780][T11506] tipc: Enabling of bearer rejected, already enabled [ 312.146117][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 312.155070][ T5709] dvb-usb: error while querying for an remote control event. [ 312.241301][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.269294][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.295863][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.317824][ T5683] usb 1-1: USB disconnect, device number 15 [ 312.344227][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.369354][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 312.786208][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 312.797198][ T5709] dvb-usb: error while querying for an remote control event. [ 312.866245][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 312.879003][ T5709] dvb-usb: error while querying for an remote control event. [ 312.901420][T11537] syz.4.601 (11537): drop_caches: 2 [ 312.928568][T11537] syz.4.601 (11537): drop_caches: 2 [ 313.117159][ T5709] usb 2-1: USB disconnect, device number 32 [ 313.297635][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 313.347251][T11557] tipc: Enabling of bearer rejected, already enabled [ 313.554082][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.610382][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.723103][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.759159][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.989132][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 314.024872][ T5709] dvb-usb: error while querying for an remote control event. [ 314.265811][ T807] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 314.276632][ T5631] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 314.395910][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.450590][ T5631] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 314.451113][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.478185][ T807] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.494580][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.516349][ T5631] usb 5-1: Product: syz [ 314.527630][ T807] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.542550][ T5631] usb 5-1: Manufacturer: syz [ 314.574244][ T5631] usb 5-1: SerialNumber: syz [ 314.586308][ T807] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.613293][ T5631] usb 5-1: config 0 descriptor?? [ 314.621705][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.638232][ T5631] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 314.654901][T11573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.712081][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 314.730677][ T807] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.740674][ T5631] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 314.769165][ T5631] usb 5-1: media controller created [ 314.817974][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.836552][ T5683] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 314.916344][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.958630][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.998556][T11635] syzkaller0: entered promiscuous mode [ 315.010106][T11635] syzkaller0: entered allmulticast mode [ 315.024444][ T5683] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.052257][ T5631] DVB: Unable to find symbol mt352_attach() [ 315.070968][ T5683] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.111287][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 315.117636][ T5683] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.139328][ T807] dvb-usb: error while querying for an remote control event. [ 315.187362][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.210719][ T5631] DVB: Unable to find symbol nxt6000_attach() [ 315.221929][ T5631] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 315.271201][T11595] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 315.309174][ T5683] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.321330][ T5631] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 315.335891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 315.407007][ T5631] dvb-usb: schedule remote query interval to 1000 msecs. [ 315.414686][ T5631] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 315.430214][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 315.441154][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 315.539575][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.624591][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.225746][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 316.245213][ T5631] dvb-usb: error while querying for an remote control event. [ 316.469803][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 316.498769][ T5631] dvb-usb: error while querying for an remote control event. [ 317.050807][ T5631] usb 2-1: USB disconnect, device number 33 [ 317.111186][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117795][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.242928][ T5683] usb 5-1: USB disconnect, device number 25 [ 317.356058][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 317.374556][ T807] dvb-usb: error while querying for an remote control event. [ 317.403655][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.443191][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 317.499430][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.524753][T11705] syz.4.615 (11705): drop_caches: 2 [ 317.641526][T11705] syz.4.615 (11705): drop_caches: 2 [ 318.072095][ T5683] usb 3-1: USB disconnect, device number 33 [ 318.477001][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 318.507662][ T5631] dvb-usb: error while querying for an remote control event. [ 319.255989][ T5631] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 319.441806][ T5631] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 319.468921][ T5631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.485340][ T5631] usb 5-1: Product: syz [ 319.497527][ T5631] usb 5-1: Manufacturer: syz [ 319.505858][ T5631] usb 5-1: SerialNumber: syz [ 319.533326][ T5631] usb 5-1: config 0 descriptor?? [ 319.543837][ T5631] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 319.574624][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.586231][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 319.593691][ T807] dvb-usb: error while querying for an remote control event. [ 319.605063][ T5631] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 319.636217][ T5631] usb 5-1: media controller created [ 319.698139][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.765975][T11756] dvb-usb: bulk message failed: -22 (7/0) [ 319.840871][ T5631] DVB: Unable to find symbol mt352_attach() [ 319.910136][T11756] syzkaller0: entered promiscuous mode [ 319.937184][T11756] syzkaller0: entered allmulticast mode [ 319.975626][ T5631] DVB: Unable to find symbol nxt6000_attach() [ 319.990345][ T5631] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 320.046272][ T5631] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 320.089258][ T5631] dvb-usb: schedule remote query interval to 1000 msecs. [ 320.120829][ T5631] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 320.172799][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 320.184273][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 320.223398][ T5631] usb 5-1: USB disconnect, device number 26 [ 320.339773][ T5631] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 320.625869][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 320.646400][ T807] dvb-usb: error while querying for an remote control event. [ 320.828844][T11826] syz.1.627 (11826): drop_caches: 2 [ 320.856212][ T42] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 320.947522][T11826] syz.1.627 (11826): drop_caches: 2 [ 320.984066][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.034082][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.070223][ T42] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.105116][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.158512][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.181174][ T42] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.224278][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.253358][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.282990][T11808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 321.328945][ T42] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.361891][T11842] tipc: Enabling of bearer rejected, already enabled [ 321.527148][T11808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.591127][T11808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.675785][ T5683] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 321.745756][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 321.751555][ T807] dvb-usb: error while querying for an remote control event. [ 321.889956][ T5683] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 322.067443][ T5683] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 322.081579][ T5683] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.132169][ T5683] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.245554][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 322.338799][ T5683] usb 5-1: Product: syz [ 322.345803][ T5683] usb 5-1: Manufacturer: syz [ 322.350468][ T5683] usb 5-1: SerialNumber: syz [ 322.368024][ T5683] usb 5-1: config 0 descriptor?? [ 322.427227][ T5683] usb 5-1: selecting invalid altsetting 0 [ 322.766349][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.786063][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 322.794207][ T807] dvb-usb: error while querying for an remote control event. [ 322.803046][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.926665][ T5683] usb 5-1: USB disconnect, device number 27 [ 323.829575][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 323.865512][ T807] dvb-usb: error while querying for an remote control event. [ 323.908735][ T5683] usb 3-1: USB disconnect, device number 34 [ 324.439624][T11927] syz.0.635 (11927): drop_caches: 2 [ 324.495415][T11927] syz.0.635 (11927): drop_caches: 2 [ 324.695863][ T5683] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 324.882012][ T5683] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 324.899410][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.922937][ T5683] usb 3-1: Product: syz [ 324.932453][ T5683] usb 3-1: Manufacturer: syz [ 324.946445][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 324.953204][ T5683] usb 3-1: SerialNumber: syz [ 324.961579][ T807] dvb-usb: error while querying for an remote control event. [ 324.982621][ T5683] usb 3-1: config 0 descriptor?? [ 325.002633][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 325.044304][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 325.072233][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 325.112479][ T5683] usb 3-1: media controller created [ 325.187396][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.362188][T11965] syzkaller0: entered promiscuous mode [ 325.384207][ T5683] DVB: Unable to find symbol mt352_attach() [ 325.395379][T11965] syzkaller0: entered allmulticast mode [ 325.419900][ T5619] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 325.499719][T11973] binder: BINDER_SET_CONTEXT_MGR already set [ 325.519675][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 325.533223][T11973] binder: 11972:11973 ioctl 4018620d 200000004a80 returned -16 [ 325.548030][T11973] syz.0.641 (11973): drop_caches: 2 [ 325.558275][T11973] syz.0.641 (11973): drop_caches: 2 [ 325.563631][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 325.639555][ T5619] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 325.649325][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 325.662818][ T5619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.706137][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 325.714733][ T5619] usb 2-1: config 0 has no interface number 0 [ 325.734638][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 325.745420][ T5619] usb 2-1: config 0 interface 205 has no altsetting 0 [ 325.754181][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 325.761278][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 325.782208][ T5619] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 325.804822][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.833316][ T5619] usb 2-1: Product: syz [ 325.843220][ T5619] usb 2-1: Manufacturer: syz [ 325.849440][ T5619] usb 2-1: SerialNumber: syz [ 325.872911][ T5619] usb 2-1: config 0 descriptor?? [ 325.924964][ T5619] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 325.939257][ T5619] dvb-usb: bulk message failed: -22 (3/0) [ 325.981302][ T5619] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.000730][ T5619] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 326.017789][ T5619] usb 2-1: media controller created [ 326.042003][ T5619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.065860][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 326.082867][ T807] dvb-usb: error while querying for an remote control event. [ 326.124876][ T5619] dvb-usb: bulk message failed: -22 (6/0) [ 326.168454][ T5619] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 326.227809][ T5619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 326.263475][ T5619] dvb-usb: schedule remote query interval to 150 msecs. [ 326.283766][ T5619] dvb-usb: bulk message failed: -22 (3/0) [ 326.318100][ T5619] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 326.435889][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 326.459634][ T5619] dvb-usb: error while querying for an remote control event. [ 326.656063][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 326.685019][ T5619] dvb-usb: error while querying for an remote control event. [ 326.786258][ T5619] dvb-usb: bulk message failed: -22 (7/0) [ 326.804040][ T5619] dvb-usb: error while querying for an remote control event. [ 326.865927][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 326.877818][ T5619] dvb-usb: error while querying for an remote control event. [ 327.046086][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 327.066661][ T5619] dvb-usb: error while querying for an remote control event. [ 327.115904][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 327.139925][ T807] dvb-usb: error while querying for an remote control event. [ 327.256128][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 327.278311][ T5619] dvb-usb: error while querying for an remote control event. [ 327.467939][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 327.486265][ T807] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 327.509614][ T5619] dvb-usb: error while querying for an remote control event. [ 327.696221][ T5683] usb 3-1: USB disconnect, device number 35 [ 327.707489][ T807] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.707697][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 327.784443][ T807] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 327.826605][ T5619] dvb-usb: error while querying for an remote control event. [ 327.844232][ T807] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.889819][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.957517][T12010] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 328.009672][ T807] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.087011][ T5619] dvb-usb: bulk message failed: -22 (1/0) [ 328.099238][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 328.135258][ T5619] dvb-usb: error while querying for an remote control event. [ 328.226368][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 328.274356][ T5631] dvb-usb: error while querying for an remote control event. [ 328.339536][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 328.378111][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.388769][ T42] dvb-usb: error while querying for an remote control event. [ 328.450776][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.520885][ T807] usb 2-1: USB disconnect, device number 34 [ 328.630297][ T807] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 329.008149][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.057719][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.098198][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.128425][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.355998][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 329.364762][ T5631] dvb-usb: error while querying for an remote control event. [ 330.385899][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 330.391864][ T5631] dvb-usb: error while querying for an remote control event. [ 330.701682][T12100] tipc: Enabling of bearer rejected, already enabled [ 331.125417][T12102] syz.0.653 (12102): drop_caches: 2 [ 331.175827][ T5683] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 331.303683][T12102] syz.0.653 (12102): drop_caches: 2 [ 331.416556][ T5683] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 331.437336][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 331.444301][ T5631] dvb-usb: error while querying for an remote control event. [ 331.535776][ T5683] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 331.547173][ T5683] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.697645][ T5683] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.706815][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.750362][ T5683] usb 2-1: Product: syz [ 331.754650][ T5683] usb 2-1: Manufacturer: syz [ 331.759352][ T5683] usb 2-1: SerialNumber: syz [ 331.767813][ T5683] usb 2-1: config 0 descriptor?? [ 331.896688][ T5683] usb 2-1: selecting invalid altsetting 0 [ 332.048550][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.153450][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.406141][ T5683] usb 2-1: USB disconnect, device number 35 [ 332.523443][ T5631] usb 5-1: USB disconnect, device number 28 [ 332.569628][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 332.614699][ T807] dvb-usb: error while querying for an remote control event. [ 332.648707][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 332.977241][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.005386][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.745742][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 333.751626][ T5631] dvb-usb: error while querying for an remote control event. [ 334.785887][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 334.806828][ T807] dvb-usb: error while querying for an remote control event. [ 334.896038][ T5631] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 334.916802][T12187] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 334.916802][T12187] program syz.4.660 not setting count and/or reply_len properly [ 334.971961][T12196] team0: left allmulticast mode [ 335.059860][ T5631] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 335.069886][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.097866][ T5631] usb 1-1: Product: syz [ 335.124563][ T5631] usb 1-1: Manufacturer: syz [ 335.136239][ T5631] usb 1-1: SerialNumber: syz [ 335.184071][ T5631] usb 1-1: config 0 descriptor?? [ 335.197955][ T5631] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 335.247378][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.274378][ T5631] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 335.300582][ T5631] usb 1-1: media controller created [ 335.331248][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.375865][ T807] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 335.398250][T12191] dvb-usb: bulk message failed: -22 (7/0) [ 335.449195][ T5631] DVB: Unable to find symbol mt352_attach() [ 335.488893][T12217] syzkaller0: entered promiscuous mode [ 335.505463][T12217] syzkaller0: entered allmulticast mode [ 335.530117][ T5631] DVB: Unable to find symbol nxt6000_attach() [ 335.538528][ T5631] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 335.578307][ T5631] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 335.597505][ T807] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.629520][ T807] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.640642][ T5631] dvb-usb: schedule remote query interval to 1000 msecs. [ 335.658608][ T5631] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 335.672466][ T807] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.689735][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 335.696124][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.709286][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 335.742586][T12202] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 335.806932][ T807] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.906067][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 335.922009][ T5631] dvb-usb: error while querying for an remote control event. [ 336.033833][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.142481][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.705897][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 336.714239][ T807] dvb-usb: error while querying for an remote control event. [ 337.026204][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 337.038883][ T807] dvb-usb: error while querying for an remote control event. [ 337.343491][T12212] netlink: 76 bytes leftover after parsing attributes in process `syz.1.664'. [ 337.746133][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 337.752281][ T807] dvb-usb: error while querying for an remote control event. [ 337.792528][ T5631] usb 1-1: USB disconnect, device number 16 [ 337.948736][ T5631] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 338.035149][T12279] fuse: Bad value for 'fd' [ 338.145778][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 338.175833][ T807] dvb-usb: error while querying for an remote control event. [ 338.346151][ T807] usb 3-1: USB disconnect, device number 36 [ 338.846010][ T5631] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 339.138895][ T5631] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 339.155524][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.180861][ T5631] usb 1-1: Product: syz [ 339.191313][ T5631] usb 1-1: Manufacturer: syz [ 339.220112][ T5631] usb 1-1: SerialNumber: syz [ 339.244107][ T5631] usb 1-1: config 0 descriptor?? [ 339.266474][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 339.281943][ T807] dvb-usb: error while querying for an remote control event. [ 339.294072][ T5631] hub 1-1:0.0: bad descriptor, ignoring hub [ 339.322422][ T5631] hub 1-1:0.0: probe with driver hub failed with error -5 [ 339.556593][ T5631] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 339.578100][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.634398][ T5631] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 339.687820][ T5631] usb 1-1: media controller created [ 339.728778][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.882782][ T5631] DVB: Unable to find symbol dib7000p_attach() [ 339.892533][ T5631] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 340.047252][ T5631] rc_core: IR keymap rc-dib0700-rc5 not found [ 340.074070][ T5631] Registered IR keymap rc-empty [ 340.090098][ T5631] dvb-usb: could not initialize remote control. [ 340.118793][ T5631] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 340.385814][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 340.407508][ T5631] dvb-usb: error while querying for an remote control event. [ 340.860437][T12344] syzkaller0: left promiscuous mode [ 341.506565][ T5631] dvb-usb: bulk message failed: -22 (7/0) [ 341.519287][ T5631] dvb-usb: error while querying for an remote control event. [ 341.635563][T12356] syzkaller0: entered promiscuous mode [ 341.645749][T12356] syzkaller0: entered allmulticast mode [ 341.725997][ T42] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 341.893480][ T42] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 341.903358][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.920585][ T42] usb 5-1: Product: syz [ 341.956785][ T42] usb 5-1: Manufacturer: syz [ 341.969987][ T42] usb 5-1: SerialNumber: syz [ 341.992900][ T42] usb 5-1: config 0 descriptor?? [ 342.013992][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 342.049568][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.077663][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 342.099642][ T42] usb 5-1: media controller created [ 342.174203][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.366158][T12391] syzkaller0: entered promiscuous mode [ 342.393651][T12391] syzkaller0: entered allmulticast mode [ 342.407348][ T42] DVB: Unable to find symbol mt352_attach() [ 342.458663][ T5683] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 342.530375][ T42] DVB: Unable to find symbol nxt6000_attach() [ 342.548154][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 342.597503][ T5631] usb 1-1: USB disconnect, device number 17 [ 342.613136][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 342.679056][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 342.690847][ T5683] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 342.696327][ T807] dvb-usb: error while querying for an remote control event. [ 342.702309][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 342.767389][ T5683] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.785465][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 342.804932][ T5683] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.825607][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 342.865854][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.874904][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 342.958272][T12381] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 342.980193][ T5683] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 343.347798][T12374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.422489][T12374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.596488][ T807] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 343.788870][ T807] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.825857][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 343.826155][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 343.831637][ T5683] dvb-usb: error while querying for an remote control event. [ 343.849076][ T807] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.885956][ T807] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.895468][ T5709] dvb-usb: error while querying for an remote control event. [ 343.917093][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.971219][T12415] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 344.013032][ T807] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.234048][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.261606][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.404585][T12462] tipc: Enabling of bearer rejected, already enabled [ 344.885728][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 344.945979][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 344.976282][ T807] dvb-usb: error while querying for an remote control event. [ 345.053123][ T5709] usb 5-1: USB disconnect, device number 29 [ 345.129090][ T5683] dvb-usb: error while querying for an remote control event. [ 345.773888][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 346.065865][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 346.096874][ T807] dvb-usb: error while querying for an remote control event. [ 347.105795][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 347.198213][ T5709] dvb-usb: error while querying for an remote control event. [ 347.846905][ T5683] usb 2-1: USB disconnect, device number 36 [ 348.224452][ T5709] usb 3-1: USB disconnect, device number 37 [ 348.267028][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 348.273447][ T5711] dvb-usb: error while querying for an remote control event. [ 348.731134][T12562] kAFS: unable to lookup cell 'џ' [ 348.741303][T12547] syzkaller0: entered promiscuous mode [ 348.756302][T12547] syzkaller0: entered allmulticast mode [ 348.929493][T12567] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 348.946446][T12567] PKCS7: Only support pkcs7_signedData type [ 349.346032][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 349.351956][ T5709] dvb-usb: error while querying for an remote control event. [ 349.897160][T12582] team0: entered allmulticast mode [ 350.005783][ T5683] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 350.181977][ T5683] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 350.202086][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.225309][ T5683] usb 2-1: Product: syz [ 350.236140][ T5683] usb 2-1: Manufacturer: syz [ 350.251436][ T5683] usb 2-1: SerialNumber: syz [ 350.289660][ T5683] usb 2-1: config 0 descriptor?? [ 350.320101][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 350.372326][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.385801][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 350.402368][ T5709] dvb-usb: error while querying for an remote control event. [ 350.419213][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 350.452266][ T5683] usb 2-1: media controller created [ 350.552211][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.643945][T12604] syzkaller0: entered promiscuous mode [ 350.663261][T12604] syzkaller0: entered allmulticast mode [ 350.763886][ T5683] DVB: Unable to find symbol mt352_attach() [ 350.887211][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 350.911320][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 350.939817][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 350.960723][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 350.973614][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 350.989988][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 351.008175][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 351.155803][ T42] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 351.325803][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 351.341479][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.364044][ T42] usb 3-1: config 7 has an invalid interface number: 57 but max is 0 [ 351.384122][ T42] usb 3-1: config 7 has no interface number 0 [ 351.399560][ T42] usb 3-1: config 7 interface 57 has no altsetting 0 [ 351.418214][ T42] usb 3-1: New USB device found, idVendor=10b8, idProduct=1ebe, bcdDevice=e5.1e [ 351.438312][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.455739][ T42] usb 3-1: Product: syz [ 351.463677][ T42] usb 3-1: Manufacturer: syz [ 351.474036][ T42] usb 3-1: SerialNumber: syz [ 351.506303][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 351.514908][ T5709] dvb-usb: error while querying for an remote control event. [ 351.717295][ T42] dvb-usb: found a 'DiBcom STK7070PD reference design' in cold state, will try to load a firmware [ 351.806611][ T42] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 351.822899][ T42] dib0700: firmware download failed at 7 with -22 [ 351.852511][ T42] usb 3-1: USB disconnect, device number 38 [ 351.985724][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 351.996647][ T5683] dvb-usb: error while querying for an remote control event. [ 352.414493][T12641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.430286][T12641] netlink: 'syz.2.703': attribute type 62 has an invalid length. [ 352.546704][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 352.567935][ T5709] dvb-usb: error while querying for an remote control event. [ 352.908800][ T5709] usb 2-1: USB disconnect, device number 37 [ 353.047539][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 353.123702][T12679] syzkaller0: entered promiscuous mode [ 353.142567][T12679] syzkaller0: entered allmulticast mode [ 353.666425][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 353.688094][ T5709] dvb-usb: error while querying for an remote control event. [ 353.855012][T12697] syzkaller0: entered promiscuous mode [ 353.872020][T12697] syzkaller0: entered allmulticast mode [ 354.276018][ T5683] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 354.460199][ T5683] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.502306][ T5683] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.586479][ T5683] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.626562][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.669781][T12708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.716698][ T5683] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.785750][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 354.797191][ T5709] dvb-usb: error while querying for an remote control event. [ 355.121431][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.152934][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.906033][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 355.922906][ T5709] dvb-usb: error while querying for an remote control event. [ 356.306134][ T5683] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 356.499025][ T5683] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 356.549630][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.593729][ T5683] usb 3-1: Product: syz [ 356.604757][ T5683] usb 3-1: Manufacturer: syz [ 356.621236][ T5683] usb 3-1: SerialNumber: syz [ 356.663245][ T5683] usb 3-1: config 0 descriptor?? [ 356.696639][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 356.729061][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.768303][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 356.805175][ T5683] usb 3-1: media controller created [ 356.857863][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.006496][T12777] syzkaller0: entered promiscuous mode [ 357.012816][T12777] syzkaller0: entered allmulticast mode [ 357.034779][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 357.048542][ T5711] dvb-usb: error while querying for an remote control event. [ 357.120640][ T5683] DVB: Unable to find symbol mt352_attach() [ 357.245743][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 357.252819][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 357.274241][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 357.305883][ T42] usb 5-1: USB disconnect, device number 30 [ 357.317261][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 357.354568][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 357.369034][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 357.394458][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 357.403500][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 357.553776][T12813] tipc: Enabling of bearer rejected, already enabled [ 357.661198][T12809] syzkaller0: entered promiscuous mode [ 357.916314][ T5711] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 358.076229][ T5711] usb 5-1: device descriptor read/64, error -71 [ 358.145850][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 358.166102][ T5709] dvb-usb: error while querying for an remote control event. [ 358.315968][ T5711] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 358.387186][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 358.393963][ T42] dvb-usb: error while querying for an remote control event. [ 358.445779][ T5711] usb 5-1: device descriptor read/64, error -71 [ 358.468322][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.498277][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.567446][ T5711] usb usb5-port1: attempt power cycle [ 358.925767][ T5711] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 358.956425][ T5711] usb 5-1: device descriptor read/8, error -71 [ 359.152713][ T5709] usb 3-1: USB disconnect, device number 39 [ 359.194466][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 359.214756][ T5711] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 359.231708][ T807] dvb-usb: error while querying for an remote control event. [ 359.268398][ T5711] usb 5-1: device descriptor read/8, error -71 [ 359.323261][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 359.386497][ T5711] usb usb5-port1: unable to enumerate USB device [ 360.306303][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 360.313761][ T5709] dvb-usb: error while querying for an remote control event. [ 360.675804][ T42] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 360.847595][ T42] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.876272][ T42] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.887345][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.916176][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.965589][T12864] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 360.995119][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.182790][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.212625][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.348060][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 361.354121][T12907] tipc: Enabling of bearer rejected, already enabled [ 361.362263][ T5709] dvb-usb: error while querying for an remote control event. [ 361.836075][ T5709] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 362.026559][ T5709] usb 3-1: device descriptor read/64, error -71 [ 362.296373][T12928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.305578][T12928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.329359][ T5709] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 362.386216][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 362.398215][ T5711] dvb-usb: error while querying for an remote control event. [ 362.458748][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.478843][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.576072][ T5709] usb 3-1: device descriptor read/64, error -71 [ 362.686341][ T5709] usb usb3-port1: attempt power cycle [ 363.045747][ T5709] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 363.095501][ T5709] usb 3-1: device descriptor read/8, error -71 [ 363.395880][ T5709] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 363.534476][ T5709] usb 3-1: device descriptor read/8, error -71 [ 363.622730][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 363.654510][ T5711] dvb-usb: error while querying for an remote control event. [ 363.687106][ T42] usb 2-1: USB disconnect, device number 38 [ 363.728178][ T5709] usb usb3-port1: unable to enumerate USB device [ 364.215780][ T42] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 364.389680][ T42] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 364.408034][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.428414][ T42] usb 2-1: Product: syz [ 364.434165][ T42] usb 2-1: Manufacturer: syz [ 364.442678][ T42] usb 2-1: SerialNumber: syz [ 364.455616][ T42] usb 2-1: config 0 descriptor?? [ 364.473782][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 364.499480][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.525885][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 364.556132][ T42] usb 2-1: media controller created [ 364.610975][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 364.708993][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 364.717020][ T5709] dvb-usb: error while querying for an remote control event. [ 364.758341][ T42] DVB: Unable to find symbol mt352_attach() [ 364.826094][ T42] DVB: Unable to find symbol nxt6000_attach() [ 364.835927][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 364.861764][T12988] syzkaller0: entered promiscuous mode [ 364.877801][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input33 [ 364.895843][T12988] syzkaller0: entered allmulticast mode [ 364.934137][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 364.945326][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 364.970136][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 364.979238][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 365.719920][T13012] tipc: Enabling of bearer rejected, already enabled [ 365.826259][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 365.847023][ T5711] dvb-usb: error while querying for an remote control event. [ 365.905453][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.920149][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.937948][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.981176][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.989526][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 365.998290][ T42] dvb-usb: error while querying for an remote control event. [ 366.066131][ T5709] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 366.239442][ T5709] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 366.254176][ T5709] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 366.267338][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.294206][ T5709] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.315888][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.330479][ T5709] usb 5-1: Product: syz [ 366.335093][ T5709] usb 5-1: Manufacturer: syz [ 366.340475][ T5709] usb 5-1: SerialNumber: syz [ 366.388085][ T5709] usb 5-1: config 0 descriptor?? [ 366.412860][ T5709] usb 5-1: selecting invalid altsetting 0 [ 366.668776][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.682203][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.736573][ T5709] usb 5-1: USB disconnect, device number 35 [ 366.870224][ T42] usb 2-1: USB disconnect, device number 39 [ 366.946472][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 366.957727][ T5711] dvb-usb: error while querying for an remote control event. [ 366.991069][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 367.415774][ T42] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 367.580299][ T42] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 367.592319][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.600880][ T42] usb 2-1: Product: syz [ 367.607887][ T42] usb 2-1: Manufacturer: syz [ 367.613818][ T42] usb 2-1: SerialNumber: syz [ 367.630359][ T42] usb 2-1: config 0 descriptor?? [ 367.641049][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 367.658064][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.669694][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 367.679678][ T42] usb 2-1: media controller created [ 367.700107][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.737817][ T42] DVB: Unable to find symbol mt352_attach() [ 367.763190][ T42] DVB: Unable to find symbol nxt6000_attach() [ 367.774290][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 367.785970][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 367.799588][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 367.807174][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 367.817420][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 367.823255][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 367.939730][T13092] syzkaller0: entered promiscuous mode [ 367.945258][T13092] syzkaller0: entered allmulticast mode [ 367.986067][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 367.992052][ T5711] dvb-usb: error while querying for an remote control event. [ 368.865902][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 368.871690][ T42] dvb-usb: error while querying for an remote control event. [ 369.026244][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 369.032002][ T5709] dvb-usb: error while querying for an remote control event. [ 369.905807][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 369.911667][ T42] dvb-usb: error while querying for an remote control event. [ 370.066166][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 370.083688][ T5709] dvb-usb: error while querying for an remote control event. [ 370.187324][ T5711] usb 2-1: USB disconnect, device number 40 [ 370.307331][ T5711] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 370.397392][T13125] netlink: 184 bytes leftover after parsing attributes in process `syz.3.745'. [ 370.433287][T13127] kAFS: unable to lookup cell 'џ' [ 370.441296][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 370.512658][T13127] kAFS: unable to lookup cell '(,cОЬ' [ 371.106072][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 371.111911][ T5711] dvb-usb: error while querying for an remote control event. [ 372.235997][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 372.244753][ T5711] dvb-usb: error while querying for an remote control event. [ 372.513141][T13159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.595930][ T42] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 372.760068][ T42] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 372.783805][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.809482][ T42] usb 3-1: Product: syz [ 372.824652][ T42] usb 3-1: Manufacturer: syz [ 372.845507][ T42] usb 3-1: SerialNumber: syz [ 372.882921][ T42] usb 3-1: config 0 descriptor?? [ 372.904315][ T42] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 372.932301][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.969388][ T42] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 372.999629][ T42] usb 3-1: media controller created [ 373.028149][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.085758][ T5683] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 373.215286][T13182] syzkaller0: entered promiscuous mode [ 373.304796][T13182] syzkaller0: entered allmulticast mode [ 373.318274][ T42] DVB: Unable to find symbol mt352_attach() [ 373.328849][ T5683] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.347180][ T5683] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.361680][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 373.369902][ T5711] dvb-usb: error while querying for an remote control event. [ 373.394914][ T5683] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.437652][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.491715][T13169] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 373.518874][ T42] DVB: Unable to find symbol nxt6000_attach() [ 373.530632][ T42] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 373.564823][ T5683] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.587228][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 373.641290][ T42] dvb-usb: schedule remote query interval to 1000 msecs. [ 373.675073][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 373.720653][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 373.766354][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 373.869550][T13168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.951090][T13168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.966512][T13210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.021023][T13210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.329236][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 374.466400][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 374.473074][ T5711] dvb-usb: error while querying for an remote control event. [ 374.705748][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 374.713943][ T42] dvb-usb: error while querying for an remote control event. [ 374.734274][T13227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.081132][T13234] tipc: Can't bind to reserved service type 0 [ 375.509647][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 375.526089][ T5711] dvb-usb: error while querying for an remote control event. [ 375.591414][ T5711] usb 3-1: USB disconnect, device number 44 [ 375.764322][ T5711] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 375.913320][ T5709] usb 2-1: USB disconnect, device number 41 [ 375.973374][T13250] syz.2.758 (13250): drop_caches: 2 [ 376.085275][T13250] syz.2.758 (13250): drop_caches: 2 [ 376.575726][ T42] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 376.626458][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 376.641467][ T5709] dvb-usb: error while querying for an remote control event. [ 376.739181][ T42] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.893208][ T42] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.910318][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.921556][T13295] tipc: Enabling of bearer rejected, already enabled [ 376.976545][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.999889][T13280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.093009][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.226183][ T5709] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 377.289515][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.431063][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.504825][ T5709] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 377.532387][ T5709] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 377.544572][ T5709] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.620700][T13319] tipc: Enabling of bearer rejected, already enabled [ 377.666115][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 377.694292][ T5711] dvb-usb: error while querying for an remote control event. [ 377.775155][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.807291][ T5709] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.829011][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.844025][ T5709] usb 5-1: Product: syz [ 377.944062][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.266277][ T5709] usb 5-1: Manufacturer: syz [ 378.270981][ T5709] usb 5-1: SerialNumber: syz [ 378.346090][ T5709] usb 5-1: config 0 descriptor?? [ 378.407138][T13319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.492978][T13319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.547838][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.554254][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.601749][ T5709] usb 5-1: selecting invalid altsetting 0 [ 378.838361][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.870527][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 378.885242][ T5711] dvb-usb: error while querying for an remote control event. [ 378.936343][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.004227][ T42] usb 5-1: USB disconnect, device number 36 [ 379.190760][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 379.508650][ T42] usb 2-1: USB disconnect, device number 42 [ 379.986042][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 380.012631][ T5709] dvb-usb: error while querying for an remote control event. [ 380.037138][ T5683] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 380.114304][T13403] syz.2.771 (13403): drop_caches: 2 [ 380.159094][T13403] syz.2.771 (13403): drop_caches: 2 [ 380.240437][ T5683] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 380.264505][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.291709][ T5683] usb 2-1: Product: syz [ 380.305471][ T5683] usb 2-1: Manufacturer: syz [ 380.320039][ T5683] usb 2-1: SerialNumber: syz [ 380.361173][ T5683] usb 2-1: config 0 descriptor?? [ 380.366271][ T42] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 380.422530][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 380.453939][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.473579][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 380.494174][ T5683] usb 2-1: media controller created [ 380.543424][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.576323][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.647857][ T42] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 380.724189][T13414] syzkaller0: entered promiscuous mode [ 380.739536][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.759836][T13414] syzkaller0: entered allmulticast mode [ 380.836821][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.909044][T13395] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 380.956820][ T5683] DVB: Unable to find symbol mt352_attach() [ 380.981886][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.080172][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 381.107156][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 381.130247][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 381.162874][ T5711] dvb-usb: error while querying for an remote control event. [ 381.200912][T13395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.218714][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 381.241064][T13395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.279868][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 381.289461][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 381.321202][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 381.331651][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 381.415798][ T5709] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 381.579887][ T5709] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 381.590336][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.607128][ T5709] usb 3-1: Product: syz [ 381.614085][ T5709] usb 3-1: Manufacturer: syz [ 381.620614][ T5709] usb 3-1: SerialNumber: syz [ 381.639004][ T5709] usb 3-1: config 0 descriptor?? [ 381.674291][ T5709] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 381.727044][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.764141][ T5709] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 381.795132][ T5709] usb 3-1: media controller created [ 381.848436][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.039490][T13460] syzkaller0: entered promiscuous mode [ 382.061504][T13460] syzkaller0: entered allmulticast mode [ 382.075204][ T5709] DVB: Unable to find symbol mt352_attach() [ 382.189490][ T5709] DVB: Unable to find symbol nxt6000_attach() [ 382.209989][ T5709] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 382.251169][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 382.285927][ T5709] dvb-usb: schedule remote query interval to 1000 msecs. [ 382.305719][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 382.315880][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 382.322467][ T5711] dvb-usb: error while querying for an remote control event. [ 382.332113][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 382.352241][ T5683] dvb-usb: error while querying for an remote control event. [ 382.374076][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 382.399739][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 383.004610][T13480] tipc: Enabling of bearer rejected, already enabled [ 383.013800][ T5709] usb 2-1: USB disconnect, device number 43 [ 383.147230][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 383.345873][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 383.366957][ T5711] dvb-usb: error while querying for an remote control event. [ 383.438520][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 383.449714][ T5711] usb 5-1: USB disconnect, device number 37 [ 383.500830][ T5709] dvb-usb: error while querying for an remote control event. [ 384.465783][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 384.484375][ T5711] dvb-usb: error while querying for an remote control event. [ 384.557260][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 384.575334][ T5711] dvb-usb: error while querying for an remote control event. [ 384.662436][ T5683] usb 3-1: USB disconnect, device number 45 [ 384.813911][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 385.096853][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.139098][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.188470][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.217786][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.666889][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 385.673782][ T5711] dvb-usb: error while querying for an remote control event. [ 386.515759][ T5683] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 386.684627][ T5683] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 386.706245][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 386.719890][ T5709] dvb-usb: error while querying for an remote control event. [ 386.742813][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.768957][ T5683] usb 5-1: Product: syz [ 386.785194][ T5683] usb 5-1: Manufacturer: syz [ 386.804415][ T5683] usb 5-1: SerialNumber: syz [ 386.827348][ T5683] usb 5-1: config 0 descriptor?? [ 386.863451][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 386.906560][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.938361][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 386.960620][ T5683] usb 5-1: media controller created [ 387.006386][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.112936][ T5709] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 387.184062][ T5683] DVB: Unable to find symbol mt352_attach() [ 387.223944][T13613] syzkaller0: entered promiscuous mode [ 387.256186][T13613] syzkaller0: entered allmulticast mode [ 387.318701][ T5709] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.336626][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 387.358660][ T5709] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.369916][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 387.396916][ T5709] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.422877][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 387.449099][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.479353][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 387.483071][T13593] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 387.495749][ T42] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 387.525967][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 387.548584][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 387.561803][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 387.593153][ T5709] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.685574][ T42] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.746466][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 387.753431][ T42] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.790037][ T5711] dvb-usb: error while querying for an remote control event. [ 387.820421][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.821574][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.868081][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.958349][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.034139][T13606] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 388.053707][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 388.088450][ T42] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.300792][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.340115][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.520088][T13669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.555851][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 388.568441][ T42] dvb-usb: error while querying for an remote control event. [ 388.866101][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 388.874261][ T5709] dvb-usb: error while querying for an remote control event. [ 389.438385][ T42] usb 5-1: USB disconnect, device number 38 [ 389.546990][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 389.905747][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 389.929779][ T5709] dvb-usb: error while querying for an remote control event. [ 390.085127][ T42] usb 2-1: USB disconnect, device number 44 [ 390.287613][T13716] tipc: Enabling of bearer rejected, already enabled [ 390.344382][ T5683] usb 3-1: USB disconnect, device number 46 [ 390.725853][ T42] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 390.825720][ T5683] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 390.900243][ T42] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 390.935736][ T42] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 390.986345][ T42] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.005792][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 391.025401][ T5683] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 391.034925][ T42] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.035738][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 391.054100][ T5683] usb 3-1: config 0 has no interface number 0 [ 391.083671][ T5709] dvb-usb: error while querying for an remote control event. [ 391.172121][ T42] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 391.211768][ T5683] usb 3-1: config 0 interface 67 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 391.232873][ T42] usb 2-1: Product: syz [ 391.237522][ T42] usb 2-1: Manufacturer: syz [ 391.242361][ T42] usb 2-1: SerialNumber: syz [ 391.249149][ T5683] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.261602][ T42] usb 2-1: config 0 descriptor?? [ 391.266745][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.333480][ T5683] usb 3-1: Product: syz [ 391.341057][ T42] usb 2-1: selecting invalid altsetting 0 [ 391.356702][ T5683] usb 3-1: Manufacturer: syz [ 391.379093][ T5683] usb 3-1: SerialNumber: syz [ 391.480826][ T5683] usb 3-1: config 0 descriptor?? [ 391.563794][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.612719][ T5683] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 391.633973][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.697670][ T5683] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 391.779428][ T42] usb 2-1: USB disconnect, device number 45 [ 391.892342][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.133103][T13795] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 392.148686][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 392.158296][ T5709] dvb-usb: error while querying for an remote control event. [ 392.403726][T13795] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 392.423419][T13795] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 392.689483][T13810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.186301][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 393.193352][ T5709] dvb-usb: error while querying for an remote control event. [ 393.668757][ T42] usb 3-1: USB disconnect, device number 47 [ 394.225768][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 394.235594][ T5709] dvb-usb: error while querying for an remote control event. [ 394.461179][T13846] hub 9-0:1.0: USB hub found [ 394.481789][T13846] hub 9-0:1.0: 1 port detected [ 395.265813][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 395.273502][ T5709] dvb-usb: error while querying for an remote control event. [ 395.652536][T13860] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 395.697361][T13870] syz.0.809 (13870): drop_caches: 2 [ 395.724393][T13871] syz.3.808 (13871): drop_caches: 2 [ 395.753247][T13871] syz.3.808 (13871): drop_caches: 2 [ 395.774915][T13874] usb usb2: Process 13874 (syz.2.807) called USBDEVFS_RESETEP for active endpoint 0x81 [ 395.820691][T13870] syz.0.809 (13870): drop_caches: 2 [ 396.055741][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 396.231884][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.274378][ T42] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 396.317108][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 396.330158][ T5709] dvb-usb: error while querying for an remote control event. [ 396.341112][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.457614][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.535377][T13858] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 396.590310][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.807890][T13858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.831818][T13858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.426227][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 397.432158][ T5709] dvb-usb: error while querying for an remote control event. [ 398.465874][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 398.479186][ T5709] dvb-usb: error while querying for an remote control event. [ 398.868460][ T5709] usb 5-1: USB disconnect, device number 39 [ 399.588749][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 399.596787][ T5709] dvb-usb: error while querying for an remote control event. [ 400.096904][T13962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.140096][T13962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.194232][T13962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.243487][T13962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.626314][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 400.633004][ T5709] dvb-usb: error while querying for an remote control event. [ 400.668040][T13979] syz.2.822 (13979): drop_caches: 2 [ 400.712879][T13979] syz.2.822 (13979): drop_caches: 2 [ 401.666585][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 401.687899][ T5709] dvb-usb: error while querying for an remote control event. [ 402.786167][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 402.809989][ T5709] dvb-usb: error while querying for an remote control event. [ 403.088882][T14020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.916051][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 403.923844][ T5709] dvb-usb: error while querying for an remote control event. [ 404.826699][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 405.025975][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 405.038901][ T5709] dvb-usb: error while querying for an remote control event. [ 405.886069][ T42] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 406.075837][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 406.128821][ T42] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 406.146046][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 406.171312][ T5709] dvb-usb: error while querying for an remote control event. [ 406.172878][ T42] usb 3-1: config 0 has no interface number 0 [ 406.237411][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 406.259510][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.290563][ T42] usb 3-1: Product: syz [ 406.333114][ T42] usb 3-1: Manufacturer: syz [ 406.356424][ T42] usb 3-1: SerialNumber: syz [ 406.393912][ T42] usb 3-1: config 0 descriptor?? [ 407.265717][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 407.290464][ T5709] dvb-usb: error while querying for an remote control event. [ 408.353338][ T5683] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 408.386318][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 408.400812][ T5709] dvb-usb: error while querying for an remote control event. [ 408.598016][ T5683] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 408.675900][ T5683] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.744508][ T5683] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.806109][ T42] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 408.820763][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.853073][ T42] usb 3-1: USB disconnect, device number 48 [ 408.870197][T14100] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 408.935474][ T5683] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.251306][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.347824][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.505860][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 409.515147][ T5709] dvb-usb: error while querying for an remote control event. [ 410.036602][T14139] tipc: Enabling of bearer rejected, already enabled [ 410.227491][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.270366][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.517375][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.604648][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.628547][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 410.645325][ T5709] dvb-usb: error while querying for an remote control event. [ 411.567490][ T5683] usb 5-1: USB disconnect, device number 40 [ 411.666271][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 411.672190][ T5709] dvb-usb: error while querying for an remote control event. [ 412.786144][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 412.792147][ T5709] dvb-usb: error while querying for an remote control event. [ 413.116248][ T5709] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 413.309256][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 413.373129][ T5709] usb 3-1: config 0 has no interfaces? [ 413.389382][ T5709] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 413.407879][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.445822][ T5709] usb 3-1: Product: syz [ 413.475006][ T5709] usb 3-1: Manufacturer: syz [ 413.494655][ T5709] usb 3-1: SerialNumber: syz [ 413.514982][ T5709] usb 3-1: config 0 descriptor?? [ 413.835984][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 413.851126][ T5709] dvb-usb: error while querying for an remote control event. [ 414.195539][T14210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.946906][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 414.958001][ T5709] dvb-usb: error while querying for an remote control event. [ 416.066020][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 416.072288][ T5709] dvb-usb: error while querying for an remote control event. [ 416.330012][ T5711] usb 3-1: USB disconnect, device number 49 [ 416.415975][ T5709] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 416.595051][ T5709] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 416.622838][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.656145][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 416.694205][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.744805][ T5709] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 416.778651][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 416.814695][ T5709] usb 5-1: Product: syz [ 416.829473][ T5709] usb 5-1: Manufacturer: syz [ 416.885348][ T5709] cdc_wdm 5-1:1.0: skipping garbage [ 416.912383][ T5709] cdc_wdm 5-1:1.0: skipping garbage [ 416.939624][ T5709] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 416.962837][T14251] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.035217][T14251] batadv1: entered allmulticast mode [ 417.054331][T14251] team0: Port device batadv1 added [ 417.139216][T14258] hub 9-0:1.0: USB hub found [ 417.153237][T14258] hub 9-0:1.0: 1 port detected [ 417.173681][T14227] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 417.192983][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 417.211920][ T5711] dvb-usb: error while querying for an remote control event. [ 417.254986][ T5709] usb 5-1: USB disconnect, device number 41 [ 417.397079][ T29] audit: type=1800 audit(1777481547.271:210): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.853" name="bus" dev="ramfs" ino=23655 res=0 errno=0 [ 417.802989][T14234] netlink: 76 bytes leftover after parsing attributes in process `syz.0.854'. [ 418.306148][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 418.312050][ T5711] dvb-usb: error while querying for an remote control event. [ 418.404508][T14283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.450322][T14284] Cannot find set identified by id 0 to match [ 418.668523][T14290] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 419.346513][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 419.545858][ T5683] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 419.597656][ T5711] dvb-usb: error while querying for an remote control event. [ 419.717085][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 419.744316][ T5683] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 419.760954][ T5683] usb 5-1: config 0 has no interface number 0 [ 419.782151][ T5683] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 419.820721][ T5683] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 419.833884][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.853256][ T5683] usb 5-1: Product: syz [ 419.868572][ T5683] usb 5-1: Manufacturer: syz [ 419.878214][T14299] syz.0.860 (14299): drop_caches: 2 [ 419.887136][ T5683] usb 5-1: SerialNumber: syz [ 419.909786][ T5683] usb 5-1: config 0 descriptor?? [ 419.919013][T14299] syz.0.860 (14299): drop_caches: 2 [ 419.930956][T14294] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 420.148280][T14294] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 420.574067][ T5683] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 420.604107][ T5683] asix 5-1:0.188: probe with driver asix failed with error -32 [ 420.715980][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 420.731035][ T5711] dvb-usb: error while querying for an remote control event. [ 421.831681][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 421.863866][ T5711] dvb-usb: error while querying for an remote control event. [ 422.312590][ T5683] usb 5-1: USB disconnect, device number 42 [ 422.876335][ T5683] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 422.946082][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 422.963367][ T5711] dvb-usb: error while querying for an remote control event. [ 423.045733][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 423.110149][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.154983][ T5683] usb 5-1: config 0 has no interfaces? [ 423.179154][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.207575][ T5683] usb 5-1: config 0 has no interfaces? [ 423.244890][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.277315][ T5683] usb 5-1: config 0 has no interfaces? [ 423.312198][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.337065][ T5683] usb 5-1: config 0 has no interfaces? [ 423.356417][ T5683] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 423.377778][T14367] netlink: 'syz.2.867': attribute type 13 has an invalid length. [ 423.387677][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.445034][ T5683] usb 5-1: config 0 descriptor?? [ 423.738777][T14381] kernel read not supported for file / œ7ГЯќУЂW)ыs“ЇЧ!QіьЅfsѕl{T‡rв)rЇжOš˜ѕ2:"єРT+ЭŸv|еВDvcŽ“иж Х6вxуc: (pid: 14381 comm: syz.3.868) [ 423.799667][ T29] audit: type=1800 audit(1777481553.671:211): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.868" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=11934 res=0 errno=0 [ 423.853217][T14382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.990693][T14386] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 424.065788][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 424.079056][ T5711] dvb-usb: error while querying for an remote control event. [ 425.000283][T14417] binder: 14411:14417 ioctl 4018620d 0 returned -22 [ 425.197661][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 425.218905][ T5711] dvb-usb: error while querying for an remote control event. [ 425.281777][T14417] syz.1.870 (14417): drop_caches: 2 [ 425.812488][ T5683] usb 5-1: USB disconnect, device number 43 [ 426.305752][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 426.311617][ T5709] dvb-usb: error while querying for an remote control event. [ 426.485732][ T5711] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 426.666106][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 426.712578][ T5711] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 426.765800][ T5711] usb 5-1: config 0 has no interface number 0 [ 426.806567][ T5711] usb 5-1: config 0 interface 184 has no altsetting 0 [ 426.884926][ T5711] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 426.973414][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.998608][ T5711] usb 5-1: Product: syz [ 427.051888][ T5711] usb 5-1: Manufacturer: syz [ 427.073958][ T5711] usb 5-1: SerialNumber: syz [ 427.097891][ T5711] usb 5-1: config 0 descriptor?? [ 427.345790][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 427.359873][ T5709] dvb-usb: error while querying for an remote control event. [ 427.365196][T14471] kernel read not supported for file / œ7ГЯќУЂW)ыs“ЇЧ!QіьЅfsѕl{T‡rв)rЇжOš˜ѕ2:"єРT+ЭŸv|еВDvcŽ“иж Х6вxуc: (pid: 14471 comm: syz.2.876) [ 427.413248][ T29] audit: type=1800 audit(1777481557.291:212): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.876" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8051 res=0 errno=0 [ 427.607075][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 427.637368][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 427.678868][ T5711] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 427.721333][ T5711] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 428.174864][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.240259][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.328528][T14489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.428293][T14489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.465996][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 428.478411][ T5711] dvb-usb: error while querying for an remote control event. [ 429.505815][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 429.511821][ T5711] dvb-usb: error while querying for an remote control event. [ 429.814848][ T5711] usb 5-1: USB disconnect, device number 44 [ 429.879685][ T29] audit: type=1326 audit(1777481559.761:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14529 comm="syz.0.882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3233f9cdd9 code=0x0 [ 430.064938][T14545] netlink: 184 bytes leftover after parsing attributes in process `syz.4.883'. [ 430.096469][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 430.545814][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 430.556816][ T5711] dvb-usb: error while querying for an remote control event. [ 430.713653][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 431.585912][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 431.617268][ T5711] dvb-usb: error while querying for an remote control event. [ 432.491978][T14615] tipc: Enabling of bearer rejected, already enabled [ 432.706041][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 432.711954][ T807] dvb-usb: error while querying for an remote control event. [ 432.895961][ T5711] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 433.072565][ T5711] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 433.118774][ T5711] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 433.131542][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.152792][ T5711] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 433.162456][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 433.175422][ T5711] usb 3-1: Product: syz [ 433.181648][ T5711] usb 3-1: Manufacturer: syz [ 433.187047][ T5711] usb 3-1: SerialNumber: syz [ 433.229258][ T5711] usb 3-1: config 0 descriptor?? [ 433.279076][ T5711] usb 3-1: selecting invalid altsetting 0 [ 433.479835][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.495935][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.628748][ T42] usb 3-1: USB disconnect, device number 50 [ 433.736079][ T5683] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 433.826137][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 433.832619][ T5711] dvb-usb: error while querying for an remote control event. [ 433.926154][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 433.964827][ T5683] usb 5-1: config 117 has too many interfaces: 110, using maximum allowed: 32 [ 434.004412][ T5683] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 434.041427][ T5683] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 110 [ 434.097076][ T5683] usb 5-1: config 117 has too many interfaces: 110, using maximum allowed: 32 [ 434.121028][ T5683] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 434.148197][ T5683] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 110 [ 434.197134][ T5683] usb 5-1: config 117 has too many interfaces: 110, using maximum allowed: 32 [ 434.221521][ T5683] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 434.254038][ T5683] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 110 [ 434.307756][ T5683] usb 5-1: config 117 has too many interfaces: 110, using maximum allowed: 32 [ 434.335884][ T5683] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config [ 434.378290][ T5683] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 110 [ 434.422811][ T5683] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 434.465196][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.866112][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 434.874929][ T5711] dvb-usb: error while querying for an remote control event. [ 435.986014][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 435.993065][ T5711] dvb-usb: error while querying for an remote control event. [ 436.623451][ T5683] usb 5-1: string descriptor 0 read error: -71 [ 436.646498][ T5683] usb 5-1: USB disconnect, device number 45 [ 437.026305][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 437.039965][ T5711] dvb-usb: error while querying for an remote control event. [ 437.049802][ T5683] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 437.209501][ T5683] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 437.223319][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.243168][ T5683] usb 5-1: Product: syz [ 437.252278][ T5683] usb 5-1: Manufacturer: syz [ 437.260903][ T5683] usb 5-1: SerialNumber: syz [ 437.277820][ T5683] usb 5-1: config 0 descriptor?? [ 437.294651][ T5683] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 437.319679][ T5683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.344684][ T5683] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 437.369579][ T5683] usb 5-1: media controller created [ 437.393191][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.462368][ T5683] DVB: Unable to find symbol mt352_attach() [ 437.563806][ T5683] DVB: Unable to find symbol nxt6000_attach() [ 437.571652][ T5683] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 437.593979][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 437.629403][ T5683] dvb-usb: schedule remote query interval to 1000 msecs. [ 437.643114][T14725] syzkaller0: entered promiscuous mode [ 437.649035][ T5683] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 437.659706][T14725] syzkaller0: entered allmulticast mode [ 437.666240][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 437.675849][ T5683] dvb-usb: bulk message failed: -22 (7/0) [ 438.067005][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 438.081091][ T5711] dvb-usb: error while querying for an remote control event. [ 438.705792][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 438.717861][ T42] dvb-usb: error while querying for an remote control event. [ 439.079569][T14761] tipc: Enabling of bearer rejected, already enabled [ 439.106061][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 439.118283][ T5711] dvb-usb: error while querying for an remote control event. [ 439.179949][T14762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.205406][T14762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.232242][T14762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.307898][T14762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.745747][ T42] dvb-usb: bulk message failed: -22 (7/0) [ 439.757211][ T42] dvb-usb: error while querying for an remote control event. [ 439.933988][ T42] usb 5-1: USB disconnect, device number 46 [ 439.988005][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.998133][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.075415][ T42] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 440.147517][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 440.167890][ T5711] dvb-usb: error while querying for an remote control event. [ 440.310420][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.357903][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.410612][T14791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.441094][T14791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.040629][T14810] tipc: Enabling of bearer rejected, already enabled [ 441.266831][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 441.285442][ T5711] dvb-usb: error while querying for an remote control event. [ 442.476042][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 442.501217][ T5711] dvb-usb: error while querying for an remote control event. [ 442.658831][T14824] ipip0: entered allmulticast mode [ 443.005719][ T42] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 443.185760][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 443.215400][ T42] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 443.248067][ T42] usb 5-1: config 0 has no interface number 0 [ 443.280463][ T42] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 443.289164][T14840] netlink: 'syz.2.913': attribute type 10 has an invalid length. [ 443.299549][T14840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.913'. [ 443.337683][ T42] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 443.371336][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.425313][ T42] usb 5-1: Product: syz [ 443.446042][ T42] usb 5-1: Manufacturer: syz [ 443.467178][ T42] usb 5-1: SerialNumber: syz [ 443.502711][ T42] usb 5-1: config 0 descriptor?? [ 443.517006][T14826] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 443.595717][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 443.601543][ T5711] dvb-usb: error while querying for an remote control event. [ 443.689017][T14836] vivid-000: disconnect [ 443.738613][T14826] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 443.955043][T14847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.173164][ T42] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 444.204668][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'. [ 444.221820][ T42] asix 5-1:0.188: probe with driver asix failed with error -61 [ 444.626107][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 444.635004][ T5711] dvb-usb: error while querying for an remote control event. [ 445.745808][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 445.766522][ T5711] dvb-usb: error while querying for an remote control event. [ 445.814126][ T5711] usb 5-1: USB disconnect, device number 47 [ 446.728327][T14939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.919'. [ 446.753271][ T29] audit: type=1326 audit(1777481576.591:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 446.821546][ T29] audit: type=1326 audit(1777481576.621:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 446.869077][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 446.883422][ T29] audit: type=1326 audit(1777481576.631:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 446.885923][ T5711] dvb-usb: error while querying for an remote control event. [ 446.952525][ T29] audit: type=1326 audit(1777481576.631:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.067285][ T29] audit: type=1326 audit(1777481576.631:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.199977][ T29] audit: type=1326 audit(1777481576.631:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.286849][ T29] audit: type=1326 audit(1777481576.651:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.363564][ T29] audit: type=1326 audit(1777481576.651:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.455854][ T29] audit: type=1326 audit(1777481576.651:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 447.614641][ T29] audit: type=1326 audit(1777481576.651:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f938a19cdd9 code=0x7ffc0000 [ 448.066171][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 448.080292][ T5711] dvb-usb: error while querying for an remote control event. [ 448.516824][T14997] syztnl0: entered allmulticast mode [ 448.878832][T15011] tipc: Enabling of bearer rejected, already enabled [ 448.979447][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.056667][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.185990][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 449.192072][ T807] dvb-usb: error while querying for an remote control event. [ 449.213704][ T42] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 449.242143][T15001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.361724][T15001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.415443][ T42] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 449.471767][ T42] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 449.484500][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 449.590881][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.642339][ T42] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.650768][ T42] usb 3-1: Product: syz [ 449.662386][ T42] usb 3-1: Manufacturer: syz [ 449.677796][ T42] usb 3-1: SerialNumber: syz [ 449.707822][ T42] usb 3-1: config 0 descriptor?? [ 449.737761][ T42] usb 3-1: selecting invalid altsetting 0 [ 449.925837][T15025] x_tables: duplicate underflow at hook 4 [ 449.997033][T15016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.086548][T15016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.162065][ T807] usb 3-1: USB disconnect, device number 51 [ 450.335280][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 450.358256][ T5711] dvb-usb: error while querying for an remote control event. [ 451.425834][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 451.446150][ T807] dvb-usb: error while querying for an remote control event. [ 451.460188][ T42] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 451.674150][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.701462][T15094] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.930'. [ 451.711856][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.711920][ T42] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 451.711943][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.757595][ T42] usb 3-1: config 0 descriptor?? [ 451.917648][T15100] syzkaller1: entered promiscuous mode [ 451.930127][T15100] syzkaller1: entered allmulticast mode [ 451.978079][T15094] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 452.547654][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 452.554079][ T807] dvb-usb: error while querying for an remote control event. [ 452.848056][ T42] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 452.987785][ T42] hid-led 0003:27B8:01ED.0001: ThingM blink(1) v1 initialized [ 453.383788][T15133] netlink: 14 bytes leftover after parsing attributes in process `syz.4.935'. [ 453.587270][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 453.626817][ T807] dvb-usb: error while querying for an remote control event. [ 453.712546][T15133] bond0 (unregistering): Released all slaves [ 454.373753][ T42] usb 3-1: USB disconnect, device number 52 [ 454.467014][T15182] syzkaller0: left promiscuous mode [ 454.707931][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 454.753955][ T807] dvb-usb: error while querying for an remote control event. [ 455.121838][T15213] syzkaller0: entered promiscuous mode [ 455.175921][ T42] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 455.376406][ T42] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.405080][ T42] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 455.448553][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.489380][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.542409][T15201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.589060][ T42] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 455.805365][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.831341][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 455.862227][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.875954][ T807] dvb-usb: error while querying for an remote control event. [ 456.945797][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 456.952714][ T807] dvb-usb: error while querying for an remote control event. [ 456.993323][T15246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.053515][T15246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.419421][T15255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.431434][T15255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.600554][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 457.988026][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 457.996280][ T807] dvb-usb: error while querying for an remote control event. [ 458.044335][ T807] usb 3-1: USB disconnect, device number 53 [ 458.146449][T15272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.472390][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 458.504063][T15290] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 459.106452][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 459.117643][ T5711] dvb-usb: error while querying for an remote control event. [ 460.146241][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 460.167218][ T5711] dvb-usb: error while querying for an remote control event. [ 460.584766][T15328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.266139][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 461.272018][ T5711] dvb-usb: error while querying for an remote control event. [ 461.645721][ T5711] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 461.836533][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 461.863078][ T5711] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.893477][ T5711] usb 5-1: config 0 has no interface number 0 [ 461.914242][ T5711] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.945800][ T5711] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.982738][ T5711] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 462.033735][ T5711] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 462.081106][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.118286][ T5711] usb 5-1: config 0 descriptor?? [ 462.158181][ T5711] ldusb 5-1:0.55: Interrupt in endpoint not found [ 462.315999][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 462.325780][ T5711] dvb-usb: error while querying for an remote control event. [ 463.345686][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 463.431687][ T5711] dvb-usb: error while querying for an remote control event. [ 464.475752][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 464.510599][ T5711] dvb-usb: error while querying for an remote control event. [ 464.700896][ T42] usb 5-1: USB disconnect, device number 48 [ 465.224533][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 465.224553][ T29] audit: type=1326 audit(1777481595.101:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.2.958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f938a19cdd9 code=0x0 [ 465.549663][T15392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 465.580451][T15392] batadv1: entered allmulticast mode [ 465.595825][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 465.610624][ T5711] dvb-usb: error while querying for an remote control event. [ 465.620282][T15392] team0: Port device batadv1 added [ 465.712785][T15392] hub 9-0:1.0: USB hub found [ 465.724652][T15392] hub 9-0:1.0: 1 port detected [ 466.197290][T15407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.705942][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 466.711804][ T5711] dvb-usb: error while querying for an remote control event. [ 466.865811][ T5683] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 467.142947][ T5683] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 467.175502][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.193366][ T5683] usb 5-1: Product: syz [ 467.203287][ T5683] usb 5-1: Manufacturer: syz [ 467.208468][ T5683] usb 5-1: SerialNumber: syz [ 467.232492][ T5683] usb 5-1: config 0 descriptor?? [ 467.405261][ T29] audit: type=1326 audit(1777481597.281:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.516533][ T5683] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 049 [ 467.578779][ T29] audit: type=1326 audit(1777481597.281:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.607161][ T29] audit: type=1326 audit(1777481597.311:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.651765][ T29] audit: type=1326 audit(1777481597.311:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.684912][ T29] audit: type=1326 audit(1777481597.321:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.745886][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 467.762512][ T5711] dvb-usb: error while querying for an remote control event. [ 467.836277][ T29] audit: type=1326 audit(1777481597.321:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 467.939982][ T29] audit: type=1326 audit(1777481597.321:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 468.033929][ T29] audit: type=1326 audit(1777481597.321:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 468.135727][ T29] audit: type=1326 audit(1777481597.321:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.0.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3233f9cdd9 code=0x7ffc0000 [ 468.289546][T15437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.357357][T15437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.446887][T15442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.471272][T15442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.587646][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 468.867131][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 468.884264][ T5711] dvb-usb: error while querying for an remote control event. [ 469.985746][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 469.991568][ T5711] dvb-usb: error while querying for an remote control event. [ 469.991645][ T5683] i2c i2c-3: failure reading functionality [ 470.071397][ T5683] i2c i2c-3: connected i2c-tiny-usb device [ 470.264055][ T5683] usb 5-1: USB disconnect, device number 49 [ 470.369137][T15458] vivid-004: disconnect [ 470.440815][T15466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.495104][T15503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.496056][T15458] vivid-004: reconnect [ 470.572993][T15507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.033915][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 471.047254][ T5711] dvb-usb: error while querying for an remote control event. [ 471.653407][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 471.653425][ T29] audit: type=1326 audit(1777481601.531:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.3.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a4e99cdd9 code=0x0 [ 472.145881][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 472.164894][ T5711] dvb-usb: error while querying for an remote control event. [ 472.877280][ T29] audit: type=1326 audit(1777481602.761:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.3.984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a4e99cdd9 code=0x0 [ 472.981736][T15549] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 473.012163][T15549] team0: Port device veth0_to_hsr added [ 473.266030][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 473.275221][ T5711] dvb-usb: error while querying for an remote control event. [ 474.310166][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 474.320353][ T5711] dvb-usb: error while querying for an remote control event. [ 475.248231][T15584] trusted_key: encrypted_key: insufficient parameters specified [ 475.259001][T15590] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 475.306085][T15594] tipc: Enabling of bearer rejected, already enabled [ 475.429222][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 475.466005][ T5711] dvb-usb: error while querying for an remote control event. [ 476.329041][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 476.546414][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 476.653648][ T5711] dvb-usb: error while querying for an remote control event. [ 477.746287][ T5711] dvb-usb: bulk message failed: -22 (7/0) [ 477.763881][ T5711] dvb-usb: error while querying for an remote control event. [ 478.548295][ T29] audit: type=1326 audit(1777481608.421:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.3.990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a4e99cdd9 code=0x0 [ 478.795854][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 478.805471][ T807] dvb-usb: error while querying for an remote control event. [ 479.657899][T15658] netlink: 148 bytes leftover after parsing attributes in process `syz.0.994'. [ 479.859469][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 479.868199][ T807] dvb-usb: error while querying for an remote control event. [ 480.956174][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 480.961964][ T807] dvb-usb: error while querying for an remote control event. [ 481.577046][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 481.627082][T15680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.986049][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 481.996188][ T807] dvb-usb: error while querying for an remote control event. [ 483.027949][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 483.041159][ T807] dvb-usb: error while querying for an remote control event. [ 483.056158][ T5683] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 483.232269][ T5683] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 483.256242][ T5683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.275055][ T5683] usb 3-1: config 0 has no interfaces? [ 483.285844][ T5683] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 483.295844][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.306471][ T5683] usb 3-1: config 0 descriptor?? [ 484.148190][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 484.190565][ T807] dvb-usb: error while querying for an remote control event. [ 484.250474][T15741] kAFS: unable to lookup cell 'џ' [ 485.265781][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 485.271763][ T807] dvb-usb: error while querying for an remote control event. [ 486.045520][ T807] usb 3-1: USB disconnect, device number 54 [ 486.305797][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 486.328157][ T807] dvb-usb: error while querying for an remote control event. [ 486.721779][T15783] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1009'. [ 487.425706][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 487.434878][ T807] dvb-usb: error while querying for an remote control event. [ 487.742425][T15790] tipc: Enabling of bearer rejected, already enabled [ 487.884132][T15800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.952371][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.997134][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.065504][T15799] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 488.546442][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 488.553589][ T807] dvb-usb: error while querying for an remote control event. [ 489.078597][T15818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 489.346969][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 489.585781][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 489.591662][ T807] dvb-usb: error while querying for an remote control event. [ 490.347041][ T29] audit: type=1326 audit(1777481620.231:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.2.1015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f938a19cdd9 code=0x0 [ 490.635968][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 490.641766][ T807] dvb-usb: error while querying for an remote control event. [ 491.665894][ T807] dvb-usb: bulk message failed: -22 (7/0) [ 491.783972][ T807] dvb-usb: error while querying for an remote control event. [ 492.465839][ T30] INFO: task kworker/0:3:5631 blocked for more than 143 seconds. [ 492.473734][ T30] Tainted: G L syzkaller #0 [ 492.482159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.491631][ T30] task:kworker/0:3 state:D stack:17728 pid:5631 tgid:5631 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 492.504165][ T30] Workqueue: usb_hub_wq hub_event [ 492.509922][ T30] Call Trace: [ 492.513384][ T30] [ 492.517624][ T30] __schedule+0x17b4/0x5680 [ 492.522468][ T30] ? __pfx___schedule+0x10/0x10 [ 492.581160][ T30] ? schedule+0x90/0x360 [ 492.607625][ T30] schedule+0x164/0x360 [ 492.639817][ T30] schedule_timeout+0xc3/0x2c0 [ 492.661282][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 492.682317][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 492.712157][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.740261][ T30] ? wait_for_completion+0x274/0x5e0 [ 492.767479][ T30] wait_for_completion+0x2cc/0x5e0 [ 492.767541][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 492.767562][ T30] i2c_del_adapter+0x5c0/0x790 [ 492.767580][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 492.767594][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 492.767608][ T30] ? kfree+0x1c5/0x640 [ 492.767626][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 492.767639][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 492.767652][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 492.767670][ T30] ? usb_disable_interface+0x31d/0x350 [ 492.767684][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 492.767698][ T30] usb_unbind_interface+0x26e/0x910 [ 492.767715][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 492.767731][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 492.767743][ T30] device_release_driver_internal+0x4d9/0x870 [ 492.767761][ T30] bus_remove_device+0x455/0x570 [ 492.767780][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 492.767797][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 492.767814][ T30] device_del+0x527/0x8f0 [ 492.767837][ T30] ? __pfx_device_del+0x10/0x10 [ 492.767848][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 492.767865][ T30] usb_disable_device+0x3d4/0x8d0 [ 492.767881][ T30] usb_disconnect+0x32f/0x990 [ 492.767902][ T30] hub_event+0x1cc9/0x4f30 [ 492.767937][ T30] ? __pfx_hub_event+0x10/0x10 [ 492.767949][ T30] ? process_scheduled_works+0xa70/0x1860 [ 492.767964][ T30] ? process_scheduled_works+0xa70/0x1860 [ 492.767975][ T30] ? process_scheduled_works+0xa70/0x1860 [ 492.767986][ T30] process_scheduled_works+0xb5d/0x1860 [ 492.768011][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.768025][ T30] ? assign_work+0x3d5/0x5e0 [ 492.768220][ T30] worker_thread+0xa53/0xfc0 [ 492.768298][ T30] kthread+0x388/0x470 [ 492.768316][ T30] ? __pfx_worker_thread+0x10/0x10 [ 492.768327][ T30] ? __pfx_kthread+0x10/0x10 [ 492.768340][ T30] ret_from_fork+0x514/0xb70 [ 492.768355][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 492.768365][ T30] ? __switch_to+0xc79/0x1410 [ 492.768382][ T30] ? __pfx_kthread+0x10/0x10 [ 492.768396][ T30] ret_from_fork_asm+0x1a/0x30 [ 492.768427][ T30] [ 492.769374][ T30] [ 492.769374][ T30] Showing all locks held in the system: [ 492.769387][ T30] 1 lock held by khungtaskd/30: [ 492.769396][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.769470][ T30] 2 locks held by getty/5376: [ 492.769478][ T30] #0: ffff88803276a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.769510][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 492.769541][ T30] 5 locks held by kworker/0:3/5631: [ 492.769548][ T30] #0: ffff8880216fd540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 492.769575][ T30] #1: ffffc90004e87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 492.769603][ T30] #2: ffff88802a8751d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 492.769630][ T30] #3: ffff888029f331d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 492.769660][ T30] #4: ffff888029f321a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 492.769717][ T30] 4 locks held by syz.4.1017/15843: [ 492.769724][ T30] 1 lock held by syz.4.1017/15847: [ 492.769730][ T30] 2 locks held by syz.1.1018/15852: [ 492.769737][ T30] 1 lock held by syz.2.1020/15870: [ 492.769743][ T30] 2 locks held by syz.3.1019/15868: [ 492.769749][ T30] 2 locks held by syz.3.1019/15871: [ 492.769756][ T30] [ 492.769760][ T30] ============================================= [ 492.769760][ T30] [ 492.769770][ T30] NMI backtrace for cpu 1 [ 492.769786][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 492.769799][ T30] Tainted: [L]=SOFTLOCKUP [ 492.769803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.769809][ T30] Call Trace: [ 492.769814][ T30] [ 492.769818][ T30] dump_stack_lvl+0xe8/0x150 [ 492.769838][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 492.769853][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.769864][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.769879][ T30] sys_info+0x135/0x170 [ 492.769892][ T30] watchdog+0xfd3/0x1030 [ 492.769909][ T30] ? watchdog+0x1c9/0x1030 [ 492.769925][ T30] kthread+0x388/0x470 [ 492.769937][ T30] ? __pfx_watchdog+0x10/0x10 [ 492.769949][ T30] ? __pfx_kthread+0x10/0x10 [ 492.769961][ T30] ret_from_fork+0x514/0xb70 [ 492.769973][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 492.769983][ T30] ? __switch_to+0xc79/0x1410 [ 492.770001][ T30] ? __pfx_kthread+0x10/0x10 [ 492.770022][ T30] ret_from_fork_asm+0x1a/0x30 [ 492.770048][ T30] [ 492.770062][ T30] Sending NMI from CPU 1 to CPUs 0: [ 492.770090][ C0] NMI backtrace for cpu 0 [ 492.770103][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.770123][ C0] Tainted: [L]=SOFTLOCKUP [ 492.770128][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.770137][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 492.770156][ C0] Code: 5b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 91 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 492.770170][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 492.770183][ C0] RAX: 0000000000a7e3b5 RBX: ffffffff819a815a RCX: 0000000080000001 [ 492.770193][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa3dec RDI: ffffffff8c28abe0 [ 492.770203][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 492.770214][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 492.770225][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 492.770236][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 492.770249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.770260][ C0] CR2: 0000200000115000 CR3: 000000004b1c2000 CR4: 00000000003526f0 [ 492.770274][ C0] Call Trace: [ 492.770279][ C0] [ 492.770285][ C0] default_idle+0x9/0x20 [ 492.770303][ C0] default_idle_call+0x72/0xb0 [ 492.770322][ C0] do_idle+0x36a/0x5f0 [ 492.770341][ C0] ? __pfx_do_idle+0x10/0x10 [ 492.770361][ C0] cpu_startup_entry+0x43/0x60 [ 492.770378][ C0] rest_init+0x2de/0x300 [ 492.770399][ C0] start_kernel+0x38a/0x3e0 [ 492.770417][ C0] x86_64_start_reservations+0x24/0x30 [ 492.770439][ C0] x86_64_start_kernel+0x143/0x1c0 [ 492.770459][ C0] common_startup_64+0x13e/0x147 [ 492.770486][ C0] [ 492.773681][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 492.773699][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 492.773714][ T30] Tainted: [L]=SOFTLOCKUP [ 492.773718][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.773725][ T30] Call Trace: [ 492.773730][ T30] [ 492.773735][ T30] vpanic+0x56c/0xa60 [ 492.773750][ T30] ? __pfx___schedule+0x10/0x10 [ 492.773762][ T30] ? __pfx_vpanic+0x10/0x10 [ 492.773776][ T30] panic+0xc5/0xd0 [ 492.773787][ T30] ? __pfx_panic+0x10/0x10 [ 492.773799][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 492.773815][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 492.773837][ T30] watchdog+0x102c/0x1030 [ 492.773855][ T30] ? watchdog+0x1c9/0x1030 [ 492.773871][ T30] kthread+0x388/0x470 [ 492.773884][ T30] ? __pfx_watchdog+0x10/0x10 [ 492.773897][ T30] ? __pfx_kthread+0x10/0x10 [ 492.773910][ T30] ret_from_fork+0x514/0xb70 [ 492.773922][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 492.773932][ T30] ? __switch_to+0xc79/0x1410 [ 492.773948][ T30] ? __pfx_kthread+0x10/0x10 [ 492.773966][ T30] ret_from_fork_asm+0x1a/0x30 [ 492.773984][ T30] [ 492.774539][ T30] Kernel Offset: disabled