last executing test programs: 21m47.188159526s ago: executing program 32 (id=11): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0), 0x0, 0x407f0b00}]) dup3(r4, r2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r6, r6, 0x0, 0x2000fb) 21m46.926548611s ago: executing program 33 (id=13): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 21m34.87564165s ago: executing program 34 (id=25): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'bridge_slave_1\x00', &(0x7f0000000f40)=@ethtool_perm_addr={0x4b, 0x41}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) 18m41.790624535s ago: executing program 35 (id=196): recvmmsg(0xffffffffffffffff, &(0x7f0000005e80), 0x0, 0x2f340a788524184e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x490, &(0x7f00000000c0)={0x0, 0x3238, 0x1000, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729764ea1b, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) 17m50.750101545s ago: executing program 36 (id=239): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 14m19.491456689s ago: executing program 37 (id=529): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x10d443, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syZ 00000000000000004093\x00'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 14m15.467300149s ago: executing program 38 (id=536): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x426190cdb91ca185) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 14m14.084679945s ago: executing program 39 (id=538): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 10m55.366757508s ago: executing program 40 (id=754): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x5) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x40000000042201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmdt(0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="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", 0x22e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810013000805000817a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca496e8207377a0b02da9b6b5f9dbacf68e1ecd9b71d26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626dd33800b261e2f6292f759b1c6d900000000"], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) 10m34.672234484s ago: executing program 41 (id=794): openat$kvm(0xffffffffffffff9c, 0x0, 0x200200, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 10m28.794846102s ago: executing program 42 (id=806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x583, 0x0, 0x0, &(0x7f0000000000)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000100)=0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000140)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x2000000, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r6) 10m16.082910385s ago: executing program 43 (id=815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 9m23.839974383s ago: executing program 0 (id=884): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f1400128010000180080001006e617400040002800800034000000106140000001000010000000000000000000084000a53b31f7e556368fa5c3572e6e6ea1ce70340c5f73edb2c8bf2aa166d9a0c9ec90690852ba6b6631186f739075013251fd10270c202222555298e1ad4c371940d14df85"], 0xa0}}, 0x20050800) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x12b901, 0x74) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40081271, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x2, &(0x7f0000000500)=[{0x14, '\x00', @data=0x80000001, 0xb05}, {0x33, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x2, @svalue=0x3}, {0x1, @svalue=0x2}, {0x1, @uvalue=0x4}]}, 0x7}]}) r4 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) 9m23.271352594s ago: executing program 0 (id=886): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m22.329826894s ago: executing program 0 (id=889): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f00000063c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x110, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x20040000) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1}}], 0x1, 0x10) shutdown(r0, 0x1) 9m21.005310974s ago: executing program 0 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m20.240622858s ago: executing program 0 (id=896): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2, [], [0xffffff00, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'syzkaller1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x8, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0xa0}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x7edc, 0x8be, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) 9m19.4766908s ago: executing program 0 (id=899): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0xcd0, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_POLICE={0xc9c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x8, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x6b66, 0x5, 0x60, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x7, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x7, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf5, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x7, 0x8, 0x5, 0xc6b, 0x6, 0x4, 0x5, 0x3, 0x1, 0x8c15, 0x152a, 0x400, 0x3ff, 0xffff7fff, 0x4, 0x10001, 0x8, 0x1, 0x40800000, 0x4, 0xd129, 0x5ee, 0x1ff, 0x5, 0xffffff00, 0xffffffff, 0x7, 0x7fff, 0x400, 0x1, 0x9, 0x100, 0xff, 0x2, 0x80000000, 0x8, 0x2, 0x10000, 0xf6be, 0x5c0, 0x1ff, 0x8, 0xffffffff, 0x6, 0xdc, 0x8, 0x0, 0x7, 0x1, 0x400, 0x3, 0x6, 0x9, 0x8, 0x0, 0x6, 0x40000, 0x9, 0x8, 0x9, 0x6, 0x3, 0x7fffffff, 0x1, 0x9, 0x9, 0xffffffff, 0x10001, 0x30, 0x40, 0x0, 0x4, 0x1, 0x0, 0xf6d1, 0x6, 0x10001, 0x1, 0x400, 0x33a, 0xf70, 0x40, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, 0x24, 0x2, 0x9, 0x4, 0x1, 0x6, 0x4, 0x0, 0x10, 0x71a1, 0x7fff, 0x8, 0x6, 0xb0, 0x100, 0x101, 0x4, 0x3c, 0xc, 0xb35f, 0x2, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x9, 0x8, 0x1, 0x7, 0x5, 0x7, 0x56, 0x7f, 0x8, 0x36c, 0x0, 0xf9, 0x2, 0x4, 0xffff, 0x6, 0x4, 0xfffff000, 0x10001, 0x9, 0xa2, 0x80000000, 0x4, 0x1, 0xd0e, 0x9, 0x9, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2, 0x3, 0x3, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x5000000, 0x8, 0x7, 0x101, 0x9, 0x9, 0x0, 0x8, 0x9, 0xb, 0x0, 0xc5, 0x1, 0x8, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2, 0x2400, 0xc, 0x8, 0x4, 0x4, 0x200, 0x1, 0x4255, 0x10001, 0xfde, 0x4, 0x6, 0x4, 0x100000, 0x0, 0x2caf, 0x2, 0x3, 0x0, 0xc8c, 0x7b50, 0x9, 0x7ff, 0x3ff, 0xfffffffe, 0x7, 0x40, 0x4, 0xcb5, 0x2, 0x20000, 0x6, 0x7, 0x9d6, 0xa, 0x2, 0x76162fc3, 0x9, 0x1, 0x0, 0x0, 0x8, 0xea, 0x81, 0x4, 0x100000, 0x8, 0x0, 0x7fb, 0x0, 0x2, 0x1c, 0x400, 0xf, 0x6d5, 0xffffffff, 0x80, 0x7fffffff, 0x0, 0x9, 0x1000, 0x10000, 0x3, 0x0, 0x6, 0x7, 0x31954adf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0xe9, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x202, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x0, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0xa, 0x7, {0x5, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x40, 0x0, 0xb, 0x882e, 0x3, 0x3}, 0x0, 0x5204, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000340)={0x6}) fcntl$notify(r9, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 9m0.879571396s ago: executing program 44 (id=899): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$P9_RVERSION(r3, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0xcd0, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xca0, 0x2, [@TCA_BASIC_POLICE={0xc9c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x8, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x6b66, 0x5, 0x60, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x7, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x7, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf5, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0xa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0x7, 0x8, 0x5, 0xc6b, 0x6, 0x4, 0x5, 0x3, 0x1, 0x8c15, 0x152a, 0x400, 0x3ff, 0xffff7fff, 0x4, 0x10001, 0x8, 0x1, 0x40800000, 0x4, 0xd129, 0x5ee, 0x1ff, 0x5, 0xffffff00, 0xffffffff, 0x7, 0x7fff, 0x400, 0x1, 0x9, 0x100, 0xff, 0x2, 0x80000000, 0x8, 0x2, 0x10000, 0xf6be, 0x5c0, 0x1ff, 0x8, 0xffffffff, 0x6, 0xdc, 0x8, 0x0, 0x7, 0x1, 0x400, 0x3, 0x6, 0x9, 0x8, 0x0, 0x6, 0x40000, 0x9, 0x8, 0x9, 0x6, 0x3, 0x7fffffff, 0x1, 0x9, 0x9, 0xffffffff, 0x10001, 0x30, 0x40, 0x0, 0x4, 0x1, 0x0, 0xf6d1, 0x6, 0x10001, 0x1, 0x400, 0x33a, 0xf70, 0x40, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, 0x24, 0x2, 0x9, 0x4, 0x1, 0x6, 0x4, 0x0, 0x10, 0x71a1, 0x7fff, 0x8, 0x6, 0xb0, 0x100, 0x101, 0x4, 0x3c, 0xc, 0xb35f, 0x2, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x7, 0x7, 0x8, 0x1, 0x9, 0x8, 0x1, 0x7, 0x5, 0x7, 0x56, 0x7f, 0x8, 0x36c, 0x0, 0xf9, 0x2, 0x4, 0xffff, 0x6, 0x4, 0xfffff000, 0x10001, 0x9, 0xa2, 0x80000000, 0x4, 0x1, 0xd0e, 0x9, 0x9, 0x3, 0x0, 0x9, 0x3, 0x8, 0x2, 0x3, 0x3, 0xfff, 0x0, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x5000000, 0x8, 0x7, 0x101, 0x9, 0x9, 0x0, 0x8, 0x9, 0xb, 0x0, 0xc5, 0x1, 0x8, 0x9, 0x4, 0x5, 0x5, 0x3, 0x8, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x2, 0x2400, 0xc, 0x8, 0x4, 0x4, 0x200, 0x1, 0x4255, 0x10001, 0xfde, 0x4, 0x6, 0x4, 0x100000, 0x0, 0x2caf, 0x2, 0x3, 0x0, 0xc8c, 0x7b50, 0x9, 0x7ff, 0x3ff, 0xfffffffe, 0x7, 0x40, 0x4, 0xcb5, 0x2, 0x20000, 0x6, 0x7, 0x9d6, 0xa, 0x2, 0x76162fc3, 0x9, 0x1, 0x0, 0x0, 0x8, 0xea, 0x81, 0x4, 0x100000, 0x8, 0x0, 0x7fb, 0x0, 0x2, 0x1c, 0x400, 0xf, 0x6d5, 0xffffffff, 0x80, 0x7fffffff, 0x0, 0x9, 0x1000, 0x10000, 0x3, 0x0, 0x6, 0x7, 0x31954adf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x641, 0xffffffb0, 0x1, 0x2, 0x76, 0x0, 0x4, 0x3, 0x96cc, 0x101, 0x0, 0xffffffff, 0xfffff4b2, 0x6, 0x6, 0x4, 0x1, 0x4, 0x7, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x3, 0xc, 0x6, 0x9, 0x8, 0x9, 0x400, 0x6, 0xfb, 0xe, 0x7618, 0x58a0bb92, 0x1, 0x0, 0x1, 0x7, 0x8, 0xfff, 0xabc, 0x771, 0x8, 0xffff, 0x3, 0x7ff, 0x4673, 0x5, 0x7, 0xe9, 0x43a, 0x8001, 0x308, 0x3, 0x0, 0xffffffff, 0x4, 0xff, 0x100, 0x7fffffff, 0x354280aa, 0x7, 0xe82, 0x2, 0xbe75, 0x2, 0xbe14, 0x3, 0x52, 0x3ff, 0x5, 0x7, 0x1, 0x0, 0x3, 0x100, 0x5, 0xd, 0xfffff54d, 0x1, 0x0, 0x9, 0x1f, 0x9, 0x2000, 0x75, 0x8000, 0x80000001, 0x7, 0x2, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x2, 0x6, 0x3, 0x7ff, 0xffffffff, 0x1000, 0x80, 0x2, 0x4000, 0x9, 0x3, 0x800, 0x1, 0x8, 0x800, 0x3a, 0x1, 0xffff, 0x1, 0x4, 0xff000000, 0xffff, 0x2, 0x0, 0x8, 0xfffffffd, 0x8, 0x5, 0x0, 0x1, 0x59e, 0xf, 0x4, 0x80000000, 0x100, 0x202, 0x6, 0x4, 0x5, 0x3, 0xffffffff, 0xf, 0x20000, 0x2, 0x1, 0x7, 0x3, 0x4, 0x3642, 0xe, 0x40, 0xfffff001, 0x2400000, 0x5, 0x2, 0x7f, 0x3, 0x5, 0x0, 0x1, 0x9, 0x247, 0x8, 0x3, 0x2, 0xc1, 0x7fffffff, 0x9, 0x0, 0x401, 0xb, 0x9, 0x5, 0x0, 0xb342, 0x10000, 0x5, 0x3, 0x5, 0x5, 0x6f, 0xff, 0x4cf5, 0x7f, 0x100, 0xd76, 0xc, 0x2, 0x35, 0x7f, 0x200, 0xa2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x7, 0x4, 0x5, 0xfffffff1, 0xbc, 0x6, 0x7, 0x200, 0x1, 0x10000, 0x4, 0x9, 0x2, 0x1ff, 0x8, 0xceb9, 0x9, 0xa, 0x6, 0x9, 0x1, 0xfe4e, 0xb, 0x7, 0x400, 0x7, 0x10000, 0x1, 0x0, 0x7, 0x20, 0xf9, 0x2, 0x8, 0xe0000, 0x6, 0x10, 0x7fffffff, 0x4a, 0xffffff72, 0x9, 0x7fffffff, 0x7, 0x8fc, 0x7, 0x6, 0x7, 0xe, 0x9, 0xe, 0xb, 0x8, 0x1, 0x2, 0xe, 0xc2b8, 0x10000, 0x7, 0x2, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x3, 0xa, 0x7, {0x5, 0x0, 0x5, 0x3, 0x2, 0x7}, {0x40, 0x0, 0xb, 0x882e, 0x3, 0x3}, 0x0, 0x5204, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}]}}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r8, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000340)={0x6}) fcntl$notify(r9, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 8m59.303693867s ago: executing program 7 (id=930): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) 8m58.509899992s ago: executing program 7 (id=933): r0 = syz_open_dev$sg(0x0, 0x0, 0x103302) msgctl$IPC_RMID(0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs$namespace(r3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r7, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000540)={0x8, r8}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000580)={0x18, r7}) write$vga_arbiter(r1, &(0x7f0000000080), 0xf) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='o\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10021, 0x103, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000180)) 8m54.609750752s ago: executing program 7 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a3000000000080003400000001e0c0006"], 0x98}}, 0x0) 8m52.240902765s ago: executing program 7 (id=946): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x3, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0x0, 0x2d}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x972, 0x0, 0x0, 0x0, 0x0, '\x00', 0x20}) 8m51.439283516s ago: executing program 7 (id=949): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) 8m48.224615491s ago: executing program 7 (id=952): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x402001) r0 = openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x64}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) unshare(0x2c020400) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xf3f1, 0x10020802, 0x6, 0x5, 0xfffffffb, 0xfffffffb, 0x0, 0x0, 0x1, 0x10001}}, 0x50) ppoll(&(0x7f00000001c0)=[{r5, 0x2002}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) 8m32.410823644s ago: executing program 45 (id=952): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x402001) r0 = openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x64}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) unshare(0x2c020400) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xf3f1, 0x10020802, 0x6, 0x5, 0xfffffffb, 0xfffffffb, 0x0, 0x0, 0x1, 0x10001}}, 0x50) ppoll(&(0x7f00000001c0)=[{r5, 0x2002}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) 8m26.221810574s ago: executing program 8 (id=978): getrlimit(0x1d, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 8m23.750032687s ago: executing program 8 (id=981): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f1400128010000180080001006e617400040002800800034000000106140000001000010000000000000000000084000a53b31f7e556368fa5c3572e6e6ea1ce70340c5f73edb2c8bf2aa166d9a0c9ec90690852ba6b6631186f739075013251fd10270c202222555298e1ad4c371940d14df85056f83"], 0xa0}}, 0x20050800) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000808, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x12b901, 0x74) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40081271, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x2, &(0x7f0000000500)=[{0x14, '\x00', @data=0x80000001, 0xb05}, {0x33, '\x00', @st={0x4, [{0x3, @svalue=0x7}, {0x2, @svalue=0x3}, {0x1, @svalue=0x2}, {0x1, @uvalue=0x4}]}, 0x7}]}) r4 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) 8m22.964799673s ago: executing program 8 (id=983): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) unshare(0x2a020400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 8m20.396111063s ago: executing program 8 (id=984): pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socket$netlink(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB], 0x0) 8m17.957526137s ago: executing program 8 (id=989): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 8m15.763347927s ago: executing program 8 (id=995): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x402001) openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x64}}, 0x0) 7m58.378288441s ago: executing program 46 (id=995): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x402001) openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x64}}, 0x0) 6m13.77420317s ago: executing program 2 (id=1157): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24040098}, 0x4000) 6m12.707333985s ago: executing program 2 (id=1159): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000005340)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000005240)=[{{&(0x7f00000003c0)=@tipc=@name, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000003880)=""/148, 0x94}, {&(0x7f0000000500)=""/21, 0x15}], 0x7, &(0x7f0000003940)=""/58, 0x3a}, 0xd094}, {{&(0x7f0000003980)=@ieee802154, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a00)=""/46, 0x2e}, {&(0x7f0000003a40)=""/140, 0x8c}, {&(0x7f0000003b00)=""/59, 0x3b}], 0x3, &(0x7f0000003b80)=""/14, 0xe}}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000003bc0)=""/70, 0x46}, {&(0x7f0000003c40)=""/247, 0xf7}, {&(0x7f0000003d40)=""/4096, 0x1000}], 0x3, &(0x7f0000004d80)=""/147, 0x93}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000004e40)=""/197, 0xc5}, {&(0x7f0000004f40)=""/70, 0x46}, {&(0x7f0000004fc0)=""/122, 0x7a}, {&(0x7f0000005040)=""/50, 0x32}, {&(0x7f0000005080)=""/13, 0xd}, {&(0x7f00000050c0)=""/62, 0x3e}], 0x6, &(0x7f0000005180)=""/137, 0x89}, 0x7}], 0x4, 0x2123, &(0x7f0000005380)={r3, r4+10000000}) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) ioctl$KDDELIO(r5, 0x4b35, 0x100000000) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) keyctl$session_to_parent(0x12) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x6}, 0x8) r8 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc9, &(0x7f0000000280)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 6m5.637817216s ago: executing program 4 (id=1177): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2000000c}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 6m4.04366345s ago: executing program 4 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r7, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000200), &(0x7f0000000300)=0x4) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(0x0, r8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) 6m2.739462964s ago: executing program 2 (id=1186): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x40, 0x0, 0xfd, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 6m1.765385862s ago: executing program 2 (id=1189): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000240)={0x0, 0x6, 0x100c}) 6m0.686800145s ago: executing program 2 (id=1191): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 5m59.894692958s ago: executing program 2 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(0x0, 0xfffffffffffffffe, 0x4c4000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mlockall(0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 5m52.057674716s ago: executing program 4 (id=1201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 5m51.040237264s ago: executing program 4 (id=1203): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40}}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44600, 0x0) 5m50.045672715s ago: executing program 4 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5m48.704551323s ago: executing program 4 (id=1207): fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000005000001"], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000ad000000000000007a445d5a776a21310097e387430bc178750197812a600347c2272b66a5844e7e51a17257547281", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0xfca804a0, 0x8, 0x15, &(0x7f0000000380)="b800000500000000", &(0x7f0000000180)=""/21, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x55}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8}, 0x8) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x5e, 0xfffffffd, 0xffffffff, 0x40}, 0x6, 0x2ee3, &(0x7f00000004c0)={{0x7, 0x7, 0xd, 0xfffffffb}}, 0x8, 0x0, 0x2}}) 5m44.501925012s ago: executing program 47 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$usbmon(0x0, 0xfffffffffffffffe, 0x4c4000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mlockall(0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 5m33.338365088s ago: executing program 48 (id=1207): fsopen(&(0x7f0000000000)='9p\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000005000001"], 0x0, 0x1002, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000ad000000000000007a445d5a776a21310097e387430bc178750197812a600347c2272b66a5844e7e51a17257547281", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0xfca804a0, 0x8, 0x15, &(0x7f0000000380)="b800000500000000", &(0x7f0000000180)=""/21, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x55}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000200)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8}, 0x8) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000900)={0x7, @win={{0x5e, 0xfffffffd, 0xffffffff, 0x40}, 0x6, 0x2ee3, &(0x7f00000004c0)={{0x7, 0x7, 0xd, 0xfffffffb}}, 0x8, 0x0, 0x2}}) 27.687696975s ago: executing program 3 (id=1840): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@routing={0x2, 0x0, 0x0, 0x8}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30) 26.980503759s ago: executing program 3 (id=1843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 26.61933852s ago: executing program 1 (id=1845): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x8, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 25.558480518s ago: executing program 6 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x8, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f0000001140)) 23.629061109s ago: executing program 5 (id=1848): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) io_setup(0xe, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 22.172200478s ago: executing program 5 (id=1849): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000440)={0x5, "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"}) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$netlink(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 20.656163334s ago: executing program 5 (id=1850): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 19.818423424s ago: executing program 5 (id=1851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x101, @private1, 0x6}, 0x1c) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000040)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff87199bf0dde5, 0xdd1, 0x4005, 0xf, 0x800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=@known='user.incfs.size\x00') syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0xe418000000, 0x80000001, 0x0, 0x1, 0x9e9, 0xfffffffe, 0xb876, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x1, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r5, &(0x7f0000000340)=""/82, 0x52) renameat(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00') setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc"], 0x0, 0x0, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 16.790387553s ago: executing program 1 (id=1853): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 16.370571187s ago: executing program 3 (id=1854): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1) syz_clone(0x40020080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="315a41e1ad83b04d6bf02b631ac394efd17a045a629c931aec28773818d38a7540ce5858800000006c4b95232b130100000000000000b6e7f7c420b8fcf70000008000000000d72111a7b8756f") 15.430767565s ago: executing program 6 (id=1855): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x4a, 0x0}, 0x6}], 0x31680, 0x40000020, 0x0) 15.004548101s ago: executing program 1 (id=1856): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 13.885281315s ago: executing program 6 (id=1858): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400505"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) 13.857617263s ago: executing program 3 (id=1859): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xe, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, 0x0, 0x0) write(r3, &(0x7f0000000300), 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340), 0xd, 0x45833af92e4b38ff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 11.42587085s ago: executing program 1 (id=1862): socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 11.127883952s ago: executing program 5 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000500)=[{0x1, '\x00', @st={0x4, [{0x1, @svalue=0x2}, {0x1, @svalue=0x5}, {0x1, @uvalue=0x3}, {0x1, @uvalue=0x3}]}, 0x3}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x8, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 10.269345703s ago: executing program 6 (id=1864): capset(&(0x7f0000000540)={0x19980330}, &(0x7f0000000600)={0x0, 0x80000000, 0x7ff, 0x7, 0x0, 0x1}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x4000840) 9.617025209s ago: executing program 9 (id=1865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000001140)) 9.323827349s ago: executing program 6 (id=1866): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfffffffffffffff4, 0x101000) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/162) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 8.361242986s ago: executing program 9 (id=1867): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 6.69913685s ago: executing program 6 (id=1868): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5.201955467s ago: executing program 9 (id=1869): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_clone(0x40020080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="315a41e1ad83b04d6bf02b631ac394efd17a045a629c931aec28773818d38a7540ce5858800000006c4b95232b130100000000000000b6e7f7c420b8fcf70000008000000000d72111a7b8756f") 3.507496925s ago: executing program 3 (id=1870): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000340)={0x7c, 0x4, 0x120000}, 0x20) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000600)={{0x9, 0xffffff80}, 0x100, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) 2.519796435s ago: executing program 9 (id=1871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000001140)) 1.868741864s ago: executing program 3 (id=1872): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.518420423s ago: executing program 9 (id=1873): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r0, &(0x7f0000001300)=""/112, 0x70) 1.332378376s ago: executing program 1 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000000140002800500010006000000080002", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 796.586368ms ago: executing program 9 (id=1875): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 82.471521ms ago: executing program 1 (id=1876): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000240)={0x7a, {"00000000008fa10b2d00004000", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889a006000f0000000e1600"}, 0xc, 0x1}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x803, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 5 (id=1877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000001140)) kernel console output (not intermixed with test programs): criptor?? [ 1260.471387][ T7008] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1260.510178][ T7008] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1260.703578][ T7008] usb 4-1: USB disconnect, device number 16 [ 1261.008380][T13443] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1371'. [ 1261.069235][T13443] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1261.978536][T13454] fuse: Unknown parameter 'user00000000000000000000' [ 1262.132198][T13457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1373'. [ 1263.639209][ T7008] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1263.886042][ T7008] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1263.950785][ T7008] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1263.979501][T11970] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1264.012946][ T7008] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1264.079372][ T7008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.189639][T11970] usb 4-1: Using ep0 maxpacket: 32 [ 1264.195738][T13470] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1264.229315][T11970] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1264.301375][T11970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.316303][ T7008] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1264.387485][T11970] usb 4-1: config 0 descriptor?? [ 1264.690043][T11970] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1264.802365][T11970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1264.913301][T11970] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1264.976803][T11970] usb 4-1: media controller created [ 1265.009322][ T30] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1265.261056][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1265.294826][ T30] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1265.341595][ T7008] usb 10-1: USB disconnect, device number 29 [ 1265.359095][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.388891][T11970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1265.423363][ T30] usb 6-1: config 0 has no interface number 0 [ 1265.470705][ T30] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1265.528330][ T30] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.639405][ T30] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1265.699118][T13487] cifs: Unknown parameter 'fd' [ 1265.704178][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1265.810154][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.847872][ T30] usb 6-1: Product: syz [ 1265.906979][ T30] usb 6-1: Manufacturer: syz [ 1265.947685][ T30] usb 6-1: SerialNumber: syz [ 1266.003550][ T30] usb 6-1: config 0 descriptor?? [ 1266.070422][T13481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1266.183686][T11970] az6027: usb out operation failed. (-71) [ 1266.210497][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1266.243312][T11970] stb0899_attach: Driver disabled by Kconfig [ 1266.251552][T13491] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1384'. [ 1266.284523][T11970] az6027: no front-end attached [ 1266.284523][T11970] [ 1266.330859][ T30] ipheth 6-1:0.196: Unable to find endpoints [ 1266.339207][T13491] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1266.360748][T11970] az6027: usb out operation failed. (-71) [ 1266.382260][T11970] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1266.464964][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.494369][T11970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 1266.509006][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1266.574143][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1266.609478][ T30] usb 6-1: USB disconnect, device number 42 [ 1266.636933][T11970] dvb-usb: schedule remote query interval to 400 msecs. [ 1266.692624][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1266.714634][T11970] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1266.751666][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1266.794675][T11970] usb 4-1: USB disconnect, device number 17 [ 1266.901190][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1266.959055][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1266.967510][ T10] usb 2-1: Product: syz [ 1267.075873][ T10] usb 2-1: Manufacturer: syz [ 1267.111102][ T10] usb 2-1: SerialNumber: syz [ 1267.151111][ T10] usb 2-1: config 0 descriptor?? [ 1267.415637][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1267.448281][T11970] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1267.478051][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1267.607430][T13501] fuse: Unknown parameter 'user_i00000000000000000000' [ 1267.620534][ T10] usb 2-1: USB disconnect, device number 5 [ 1268.850072][T13518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1388'. [ 1271.556392][T13543] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1395'. [ 1271.616052][T13543] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1272.599155][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1272.872036][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1272.925120][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1272.975041][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.029836][T11970] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1273.110127][ T10] usb 7-1: config 0 descriptor?? [ 1273.213915][T11970] usb 4-1: Using ep0 maxpacket: 32 [ 1273.279839][T11970] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1273.324248][T11970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.351161][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1273.361111][T11970] usb 4-1: config 0 has no interface number 0 [ 1273.369420][T11970] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1273.499105][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1273.536205][T11970] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.581814][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1273.611422][ T10] usb 7-1: media controller created [ 1273.617243][T11970] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1273.675219][T11970] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1273.719073][T11970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.743418][T11970] usb 4-1: Product: syz [ 1273.750369][T11970] usb 4-1: Manufacturer: syz [ 1273.778874][T11970] usb 4-1: SerialNumber: syz [ 1273.836306][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.065861][T11970] usb 4-1: config 0 descriptor?? [ 1274.269829][T13551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1274.568899][ T30] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1274.607412][T11970] ipheth 4-1:0.196: Unable to find endpoints [ 1274.655122][T13560] cifs: Unknown parameter 'fd' [ 1274.737357][T11970] usb 4-1: USB disconnect, device number 18 [ 1274.870885][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1274.972252][ T10] az6027: usb out operation failed. (-71) [ 1274.978241][ T10] stb0899_attach: Driver disabled by Kconfig [ 1275.043113][ T10] az6027: no front-end attached [ 1275.043113][ T10] [ 1275.264162][ T10] az6027: usb out operation failed. (-71) [ 1275.270890][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1275.311612][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1275.312290][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1275.367072][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 1275.448878][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1275.520791][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1275.527948][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1275.554343][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.699093][ T10] usb 7-1: USB disconnect, device number 12 [ 1275.736700][ T30] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.147906][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.354755][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.512372][T11970] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1276.660385][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1276.774257][T11970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.861229][T11970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1276.982348][T11970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1277.085277][T11970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1277.160555][T11970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1277.337785][T11970] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1277.377617][ T30] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1277.381069][T11970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1277.502928][T11970] usb 4-1: Product: syz [ 1277.507221][T11970] usb 4-1: Manufacturer: syz [ 1277.579528][T11970] usb 4-1: SerialNumber: syz [ 1277.649918][T11970] usb 4-1: config 0 descriptor?? [ 1277.856653][T13574] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1401'. [ 1277.904461][T11970] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1277.940354][T11970] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1278.037691][T11970] usb 4-1: USB disconnect, device number 19 [ 1281.499566][T11970] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1281.500425][T13601] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1407'. [ 1281.621211][T13601] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1281.769757][T11970] usb 2-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1281.835768][T11970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1281.910790][T11970] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.962975][T11970] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1281.998834][T11970] usb 2-1: Product: syz [ 1282.018840][T11970] usb 2-1: Manufacturer: syz [ 1282.023638][T11970] usb 2-1: SerialNumber: syz [ 1282.085634][T11970] usb 2-1: config 0 descriptor?? [ 1282.946895][T11970] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1283.029102][ T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1283.149408][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1283.269154][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1283.312444][ T10] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1283.358928][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1283.382202][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.414807][ T30] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1283.434368][T11858] udevd[11858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.458431][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.483878][ T30] usb 7-1: config 0 has no interface number 0 [ 1283.521813][ T30] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1283.522229][ T10] usb 10-1: config 0 descriptor?? [ 1283.621510][ T30] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.691330][ T30] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1283.748303][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1283.785798][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.832706][ T30] usb 7-1: Product: syz [ 1283.863269][ T30] usb 7-1: Manufacturer: syz [ 1283.893138][ T30] usb 7-1: SerialNumber: syz [ 1283.919428][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1283.980463][ T30] usb 7-1: config 0 descriptor?? [ 1283.982831][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1284.020425][T13611] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1284.086994][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1284.137928][ T10] usb 10-1: media controller created [ 1284.389155][ T30] ipheth 7-1:0.196: Unable to find endpoints [ 1284.469340][ T30] usb 7-1: USB disconnect, device number 13 [ 1284.517695][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.936090][T13619] cifs: Unknown parameter 'fd' [ 1285.025666][ T10] az6027: usb out operation failed. (-71) [ 1285.072196][ T10] stb0899_attach: Driver disabled by Kconfig [ 1285.103175][ T10] az6027: no front-end attached [ 1285.103175][ T10] [ 1285.134855][ T10] az6027: usb out operation failed. (-71) [ 1285.180115][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1285.245755][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input26 [ 1285.351659][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1285.408447][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1285.428331][T11970] usb 6-1: USB disconnect, device number 43 [ 1285.511219][ T10] usb 10-1: USB disconnect, device number 30 [ 1286.248931][ T30] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1286.280106][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1286.489909][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1286.539581][ T30] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1286.603404][T13628] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1413'. [ 1286.625758][ T30] usb 6-1: config 0 has no interface number 0 [ 1286.659679][ T30] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1286.746774][ T30] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1286.881671][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1286.956741][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.023192][ T30] usb 6-1: Product: syz [ 1287.045971][ T30] usb 6-1: Manufacturer: syz [ 1287.100414][ T30] usb 6-1: SerialNumber: syz [ 1287.179875][ T30] usb 6-1: config 0 descriptor?? [ 1287.788066][ T30] appletouch 6-1:0.85: Geyser mode initialized. [ 1287.838410][ T30] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input27 [ 1288.023941][ T10] usb 6-1: USB disconnect, device number 44 [ 1288.278544][ T10] appletouch 6-1:0.85: input: appletouch disconnected [ 1288.769369][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1288.989241][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1289.019424][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1289.044657][ T30] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.118391][ T30] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1289.188987][ T30] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1289.258091][ T30] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1289.279159][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1289.349390][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1289.382312][ T10] usb 10-1: config 6 has an invalid interface number: 236 but max is 0 [ 1289.397381][ T10] usb 10-1: config 6 has no interface number 0 [ 1289.397622][ T30] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1289.408220][ T10] usb 10-1: config 6 interface 236 has no altsetting 0 [ 1289.470386][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.506011][ T30] usb 7-1: Product: syz [ 1289.514772][ T10] usb 10-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 1289.530631][ T30] usb 7-1: Manufacturer: syz [ 1289.546339][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.578999][ T30] usb 7-1: SerialNumber: syz [ 1289.597010][ T10] usb 10-1: Product: syz [ 1289.630702][ T10] usb 10-1: Manufacturer: syz [ 1289.635777][ T10] usb 10-1: SerialNumber: syz [ 1289.738936][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1289.797371][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input28 [ 1289.941030][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 1289.950951][ T30] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1290.016696][ T10] usb 10-1: USB disconnect, device number 31 [ 1290.022670][ T30] (id 0x00) [ 1290.363929][T13654] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1419'. [ 1290.465335][T13654] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1290.507248][ T30] rc_core: IR keymap rc-imon-pad not found [ 1290.537107][ T30] Registered IR keymap rc-empty [ 1290.565620][ T30] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1290.632025][ T30] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1290.701789][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1290.777312][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input29 [ 1290.856675][ T30] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:14> initialized [ 1290.915496][ T30] usb 7-1: USB disconnect, device number 14 [ 1291.586392][T11970] usb 2-1: USB disconnect, device number 6 [ 1291.639322][ T30] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1291.867070][ T10] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1291.875460][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1291.907501][ T30] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1291.951234][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.991227][ T30] usb 6-1: config 0 descriptor?? [ 1292.076207][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1292.141039][ T10] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 1292.201955][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1426'. [ 1292.241619][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.258878][ T7008] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1292.269198][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1292.276893][ T10] usb 10-1: config 0 has no interface number 0 [ 1292.325704][ T10] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1292.342530][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1292.386770][ T10] usb 10-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.391867][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1292.453258][ T10] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1292.455124][ T30] usb 6-1: media controller created [ 1292.484118][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1292.502949][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.566241][ T10] usb 10-1: Product: syz [ 1292.568493][ T7008] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.593129][ T10] usb 10-1: Manufacturer: syz [ 1292.658856][ T7008] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1292.670483][ T10] usb 10-1: SerialNumber: syz [ 1292.756551][ T7008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1292.766126][ T10] usb 10-1: config 0 descriptor?? [ 1292.821899][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1292.851258][T13666] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1292.858831][ T7008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1292.921744][ T7008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1293.139077][ T7008] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1293.145756][ T10] ipheth 10-1:0.196: Unable to find endpoints [ 1293.159565][ T7008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1293.159698][ T7008] usb 4-1: Product: syz [ 1293.159791][ T7008] usb 4-1: Manufacturer: syz [ 1293.159898][ T7008] usb 4-1: SerialNumber: syz [ 1293.190018][ T7008] usb 4-1: config 0 descriptor?? [ 1293.323214][T13684] cifs: Unknown parameter 'fd' [ 1293.531431][ T7008] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1293.546698][ T10] usb 10-1: USB disconnect, device number 32 [ 1293.600605][ T7008] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1293.619143][ T30] az6027: usb out operation failed. (-71) [ 1293.635561][ T30] stb0899_attach: Driver disabled by Kconfig [ 1293.771716][ T30] az6027: no front-end attached [ 1293.771716][ T30] [ 1293.792899][T13683] ip6gretap0: entered promiscuous mode [ 1293.813642][ T30] az6027: usb out operation failed. (-71) [ 1293.834525][ T7008] usb 4-1: USB disconnect, device number 20 [ 1293.841490][T13683] macvtap1: entered promiscuous mode [ 1293.851429][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1293.866846][T11902] udevd[11902]: setting mode of /dev/bus/usb/004/020 to 020664 failed: No such file or directory [ 1293.902879][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 1293.968221][T11902] udevd[11902]: setting owner of /dev/bus/usb/004/020 to uid=0, gid=0 failed: No such file or directory [ 1294.118260][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1294.164726][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1294.530264][ T30] usb 6-1: USB disconnect, device number 45 [ 1294.599491][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 1294.670028][T13683] ip6gretap0: left promiscuous mode [ 1295.084241][T13682] bridge_slave_1: left allmulticast mode [ 1295.292715][T13682] bridge_slave_1: left promiscuous mode [ 1295.339023][ T7008] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1295.384971][T13682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.451088][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1295.520151][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1295.555249][ T7008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.641723][ T7008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.717727][ T7008] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1295.753323][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1295.794948][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1295.796446][T13682] bridge_slave_0: left allmulticast mode [ 1295.829199][ T7008] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1295.840067][T13682] bridge_slave_0: left promiscuous mode [ 1295.863628][ T7008] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.899432][ T7008] usb 4-1: config 0 descriptor?? [ 1295.943767][ T10] usb 7-1: config 6 has an invalid interface number: 236 but max is 0 [ 1295.976137][T13682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.999283][ T10] usb 7-1: config 6 has no interface number 0 [ 1296.005684][ T10] usb 7-1: config 6 interface 236 has no altsetting 0 [ 1296.076783][ T10] usb 7-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9 [ 1296.178557][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.282892][ T10] usb 7-1: Product: syz [ 1296.336174][ T10] usb 7-1: Manufacturer: syz [ 1296.358911][ T10] usb 7-1: SerialNumber: syz [ 1296.597718][ T7008] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1296.922557][ T10] usb 7-1: USB disconnect, device number 15 [ 1297.002828][T13706] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1433'. [ 1297.028855][T13706] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1298.457134][ T10] usb 4-1: USB disconnect, device number 21 [ 1299.489532][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1299.701696][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1299.775784][ T10] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1299.847449][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.917706][ T10] usb 6-1: config 0 has no interface number 0 [ 1299.957536][ T10] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1299.999730][T11970] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1300.017171][ T10] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1300.031032][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1300.076567][ T10] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1300.133255][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1300.182966][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.211478][T11970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.232110][ T10] usb 6-1: Product: syz [ 1300.239152][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1300.256644][ T10] usb 6-1: Manufacturer: syz [ 1300.262868][T11970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1300.288421][ T10] usb 6-1: SerialNumber: syz [ 1300.294415][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1300.341414][ T10] usb 6-1: config 0 descriptor?? [ 1300.367196][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.379769][T11970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1300.401436][T13723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1300.451304][ T9] usb 7-1: config 0 descriptor?? [ 1300.475270][T11970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1300.569283][T11970] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1300.664458][T11970] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1300.699689][ T10] ipheth 6-1:0.196: Unable to find endpoints [ 1300.706327][T11970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1300.765429][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1300.789790][T11970] usb 4-1: Product: syz [ 1300.794483][ T10] usb 6-1: USB disconnect, device number 46 [ 1300.814217][T11970] usb 4-1: Manufacturer: syz [ 1300.820038][T11970] usb 4-1: SerialNumber: syz [ 1300.888031][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1300.903675][T11970] usb 4-1: config 0 descriptor?? [ 1301.002376][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1301.068228][ T9] usb 7-1: media controller created [ 1301.172113][T11970] radio-si470x 4-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 1301.381725][T11970] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1301.402704][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.432274][T11970] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1301.474224][T11970] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1301.649476][T11970] usb 4-1: USB disconnect, device number 22 [ 1301.729598][T11271] Bluetooth: hci2: command 0x0406 tx timeout [ 1301.819923][T13736] cifs: Unknown parameter 'fd' [ 1301.985481][ T9] az6027: usb out operation failed. (-71) [ 1302.048918][ T9] stb0899_attach: Driver disabled by Kconfig [ 1302.084745][T13739] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1441'. [ 1302.105885][ T9] az6027: no front-end attached [ 1302.105885][ T9] [ 1302.149329][ T9] az6027: usb out operation failed. (-71) [ 1302.188457][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1302.284421][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 1302.422137][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1302.463046][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1302.612563][ T9] usb 7-1: USB disconnect, device number 16 [ 1303.423042][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1303.847218][T13747] batadv0: entered promiscuous mode [ 1303.869204][T13747] vlan2: entered promiscuous mode [ 1304.278005][T13752] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1445'. [ 1304.295512][T13752] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1305.609507][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1305.862869][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.910944][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.940790][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1306.002832][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1306.031581][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.060124][ T5834] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1306.078443][ T9] usb 7-1: config 0 descriptor?? [ 1306.178953][ T7008] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1306.233242][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1306.285028][ T5834] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1306.309164][ T30] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1306.329832][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.380870][ T5834] usb 2-1: config 0 has no interface number 0 [ 1306.387516][ T5834] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1306.410761][ T7008] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.422578][ T5834] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1306.442931][ T7008] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1306.489071][ T5834] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1306.507494][ T7008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1306.539019][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1306.558135][ T5834] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1306.584823][ T7008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1306.596129][ T30] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1306.619107][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.639446][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.659805][ T7008] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1306.681840][ T5834] usb 2-1: Product: syz [ 1306.686216][ T5834] usb 2-1: Manufacturer: syz [ 1306.688400][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1306.712733][ T30] usb 4-1: config 0 descriptor?? [ 1306.718390][ T5834] usb 2-1: SerialNumber: syz [ 1306.790394][ T7008] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1306.814192][ T5834] usb 2-1: config 0 descriptor?? [ 1306.845424][ T7008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1306.888386][T13767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1306.907318][ T7008] usb 6-1: Product: syz [ 1306.937461][ T7008] usb 6-1: Manufacturer: syz [ 1306.959182][ T7008] usb 6-1: SerialNumber: syz [ 1307.040010][T13780] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1455'. [ 1307.040307][ T7008] usb 6-1: config 0 descriptor?? [ 1307.066406][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1307.151934][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1307.227737][ T5834] ipheth 2-1:0.196: Unable to find endpoints [ 1307.269548][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1307.277250][ T30] usb 4-1: media controller created [ 1307.351568][ T7008] radio-si470x 6-1:0.0: DeviceID=0x0f32 ChipID=0x0015 [ 1307.391241][ T5834] usb 2-1: USB disconnect, device number 7 [ 1307.577441][ T7008] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1307.620990][ T7008] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1307.671198][ T7008] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1307.726616][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1307.863254][ T7008] usb 6-1: USB disconnect, device number 47 [ 1308.146735][T13784] cifs: Unknown parameter 'fd' [ 1308.364639][ T30] az6027: usb out operation failed. (-71) [ 1308.394331][ T30] stb0899_attach: Driver disabled by Kconfig [ 1308.443261][ T30] az6027: no front-end attached [ 1308.443261][ T30] [ 1308.456760][T13787] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1456'. [ 1308.493178][ T30] az6027: usb out operation failed. (-71) [ 1308.499942][T13787] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1308.501906][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1308.593943][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 1308.634894][ T9] usb 7-1: USB disconnect, device number 17 [ 1308.672115][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1308.749107][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1308.813421][ T30] usb 4-1: USB disconnect, device number 23 [ 1309.227082][T13794] tipc: Started in network mode [ 1309.457028][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1309.467815][T13794] tipc: Node identity 3ac64c15d735, cluster identity 4711 [ 1309.547270][T13794] tipc: Enabled bearer , priority 0 [ 1309.619000][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1309.652105][T13798] syzkaller0: entered promiscuous mode [ 1309.703096][T13798] syzkaller0: entered allmulticast mode [ 1309.829568][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1309.911362][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.918122][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.950246][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1309.953097][T13802] tipc: Resetting bearer [ 1309.980650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.012305][ T9] usb 2-1: Product: syz [ 1310.016696][ T9] usb 2-1: Manufacturer: syz [ 1310.039157][ T9] usb 2-1: SerialNumber: syz [ 1310.146730][T13792] tipc: Resetting bearer [ 1310.212951][T13792] tipc: Disabling bearer [ 1310.377380][ T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1310.388136][T13806] warning: `syz.3.1461' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1310.445514][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1310.564524][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1310.609138][ T9] usb 2-1: media controller created [ 1310.824434][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.050066][T13817] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1464'. [ 1311.143652][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1311.641179][ T9] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1311.723819][ T9] usb 2-1: USB disconnect, device number 8 [ 1311.969227][T11271] Bluetooth: hci4: command 0x0406 tx timeout [ 1311.969468][ T30] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1312.050449][T13830] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1469'. [ 1312.060244][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1312.095247][ T5834] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1312.230984][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.271610][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1312.283980][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1312.341263][ T30] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1312.371132][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.378157][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1312.407973][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.439760][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.469893][ T30] usb 6-1: config 0 has no interface number 0 [ 1312.491472][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1312.513801][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1312.528486][ T30] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1312.540501][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1312.562321][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1312.583644][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1312.588399][ T30] usb 6-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.592150][ T9] usb 2-1: Product: syz [ 1312.592257][ T9] usb 2-1: Manufacturer: syz [ 1312.592348][ T9] usb 2-1: SerialNumber: syz [ 1312.629635][ T5834] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.666942][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.694398][ T30] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1312.719379][ T9] usb 2-1: config 0 descriptor?? [ 1312.773260][ T5834] usb 7-1: config 0 descriptor?? [ 1312.803620][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1312.885140][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.947847][ T30] usb 6-1: Product: syz [ 1313.004933][ T30] usb 6-1: Manufacturer: syz [ 1313.015079][ T30] usb 6-1: SerialNumber: syz [ 1313.063463][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1313.081005][ T30] usb 6-1: config 0 descriptor?? [ 1313.106047][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1313.159986][T13824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1313.276379][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1313.313119][ T9] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1313.375199][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1313.492342][ T30] ipheth 6-1:0.196: Unable to find endpoints [ 1313.506081][ T5834] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1313.618901][ T30] usb 6-1: USB disconnect, device number 48 [ 1313.688987][ T9] usb 2-1: USB disconnect, device number 9 [ 1314.149691][T13839] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1470'. [ 1314.203391][T13839] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1315.078961][ T30] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1315.309221][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1315.349246][ T30] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1315.417795][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.532976][ T30] usb 6-1: config 0 descriptor?? [ 1315.658200][ T9] usb 7-1: USB disconnect, device number 18 [ 1315.902169][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1315.982863][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1316.065848][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1316.148915][ T30] usb 6-1: media controller created [ 1316.389403][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1316.537149][T13855] tipc: Enabled bearer , priority 0 [ 1316.585601][T13855] syzkaller0: entered promiscuous mode [ 1316.649811][T13855] syzkaller0: entered allmulticast mode [ 1316.839514][ T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1316.855896][T13855] tipc: Resetting bearer [ 1316.924962][T13864] cifs: Unknown parameter 'fd' [ 1316.962503][T13854] tipc: Resetting bearer [ 1316.997093][T13854] tipc: Disabling bearer [ 1317.069003][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1317.096436][ T30] az6027: usb out operation failed. (-71) [ 1317.103865][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1317.146264][ T30] stb0899_attach: Driver disabled by Kconfig [ 1317.192104][ T30] az6027: no front-end attached [ 1317.192104][ T30] [ 1317.202639][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1317.249516][ T30] az6027: usb out operation failed. (-71) [ 1317.287279][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1317.309480][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.361362][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 1317.379643][ T9] usb 10-1: Product: syz [ 1317.384106][ T9] usb 10-1: Manufacturer: syz [ 1317.418818][ T9] usb 10-1: SerialNumber: syz [ 1317.463402][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1317.537997][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1317.590372][ T9] snd-ua101 10-1:1.1: invalid format type [ 1317.641474][ T30] usb 6-1: USB disconnect, device number 49 [ 1317.650982][ T9] snd-ua101 10-1:1.0: invalid num_altsetting [ 1317.654137][T13869] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1478'. [ 1317.997705][ T9] usb 10-1: USB disconnect, device number 33 [ 1318.465536][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1318.779969][T13879] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1480'. [ 1318.839317][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1319.020156][T13883] netlink: 136 bytes leftover after parsing attributes in process `syz.9.1483'. [ 1319.047915][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1319.100090][T13883] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1319.110235][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1319.198107][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.252888][ T9] usb 2-1: config 0 has no interface number 0 [ 1319.290086][ T9] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1319.318866][ T9] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.363542][T11970] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1319.397241][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1319.424440][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1319.435076][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.447622][ T9] usb 2-1: Product: syz [ 1319.453120][ T9] usb 2-1: Manufacturer: syz [ 1319.458411][ T9] usb 2-1: SerialNumber: syz [ 1319.545570][ T9] usb 2-1: config 0 descriptor?? [ 1319.567016][T11970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.619811][T13874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1319.665159][T11970] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1319.739110][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1319.820557][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1319.849098][T11970] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1319.895723][ T9] ipheth 2-1:0.196: Unable to find endpoints [ 1319.942851][T11970] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1319.998535][T13888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1320.020259][T11970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1320.041223][ T9] usb 2-1: USB disconnect, device number 10 [ 1320.101474][T11970] usb 7-1: Product: syz [ 1320.112959][T11970] usb 7-1: Manufacturer: syz [ 1320.142593][T11970] usb 7-1: SerialNumber: syz [ 1320.173823][T11970] usb 7-1: config 0 descriptor?? [ 1320.464360][T11970] radio-si470x 7-1:0.0: DeviceID=0x7275 ChipID=0x6e2f [ 1320.648957][T11970] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1320.701375][T11970] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1320.701739][ T30] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1320.734354][T11970] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1320.894303][T11970] usb 7-1: USB disconnect, device number 19 [ 1320.955711][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.009568][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.039093][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1321.073547][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1321.137523][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.190730][ T30] usb 4-1: config 0 descriptor?? [ 1321.292053][ T5834] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1321.319098][T13900] tipc: Started in network mode [ 1321.324390][T13900] tipc: Node identity 66dae9d62744, cluster identity 4711 [ 1321.355015][T13900] tipc: Enabled bearer , priority 0 [ 1321.396793][T13902] syzkaller0: entered promiscuous mode [ 1321.425323][T13902] syzkaller0: entered allmulticast mode [ 1321.509051][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 1321.530474][T13900] tipc: Resetting bearer [ 1321.553536][T13899] tipc: Resetting bearer [ 1321.574482][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1321.641667][ T5834] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1321.659587][T13899] tipc: Disabling bearer [ 1321.683144][ T5834] usb 2-1: can't read configurations, error -71 [ 1321.739318][ T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1322.135128][ T30] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1322.220328][T13909] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1491'. [ 1322.328888][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1322.367372][ T30] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1322.411091][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.551393][ T30] usb 7-1: config 0 descriptor?? [ 1322.879614][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1323.016541][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1323.114448][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1323.169702][ T30] usb 7-1: media controller created [ 1323.484490][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.697570][T13927] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1495'. [ 1323.790128][T13927] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1323.929707][T13931] cifs: Unknown parameter 'fd' [ 1324.197325][ T30] az6027: usb out operation failed. (-71) [ 1324.216206][ T30] stb0899_attach: Driver disabled by Kconfig [ 1324.248948][ T30] az6027: no front-end attached [ 1324.248948][ T30] [ 1324.312916][ T30] az6027: usb out operation failed. (-71) [ 1324.339639][T11970] usb 4-1: USB disconnect, device number 24 [ 1324.344107][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1324.479774][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input34 [ 1324.600629][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1496'. [ 1324.643721][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1324.680116][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1324.753296][ T30] usb 7-1: USB disconnect, device number 20 [ 1325.209986][ T5834] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1325.419436][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 1325.473343][ T5834] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1325.517994][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.567540][ T5834] usb 4-1: config 0 has no interface number 0 [ 1325.628169][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1325.647804][ T5834] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1325.705337][ T5834] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.863588][ T5834] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1325.912301][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1325.971714][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.998808][ T5834] usb 4-1: Product: syz [ 1326.009628][ T5834] usb 4-1: Manufacturer: syz [ 1326.014553][ T5834] usb 4-1: SerialNumber: syz [ 1326.081050][ T30] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1326.116208][ T5834] usb 4-1: config 0 descriptor?? [ 1326.159862][T13942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1326.264189][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 1326.320189][ T30] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1326.353895][ T30] usb 7-1: config 0 has no interface number 0 [ 1326.418928][ T30] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1326.477328][ T5834] ipheth 4-1:0.196: Unable to find endpoints [ 1326.489172][ T30] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1326.527619][ T30] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1326.579793][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.614453][ T5834] usb 4-1: USB disconnect, device number 25 [ 1326.624616][ T30] usb 7-1: Product: syz [ 1326.652976][ T30] usb 7-1: Manufacturer: syz [ 1326.691708][ T30] usb 7-1: SerialNumber: syz [ 1326.698955][T11970] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1326.813306][ T30] usb 7-1: config 0 descriptor?? [ 1326.937344][T11970] usb 6-1: Using ep0 maxpacket: 8 [ 1327.015252][T11970] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1327.099438][T11970] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1327.188481][T11970] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1327.257727][T11970] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.305595][T11970] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1327.382874][T11970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.386659][ T30] appletouch 7-1:0.85: Geyser mode initialized. [ 1327.462934][ T30] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input35 [ 1327.794580][T11970] usb 6-1: usb_control_msg returned -32 [ 1327.864564][T11970] usbtmc 6-1:16.0: can't read capabilities [ 1327.882102][ T30] usb 7-1: USB disconnect, device number 21 [ 1328.211775][ T30] appletouch 7-1:0.85: input: appletouch disconnected [ 1328.362398][T13971] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1504'. [ 1328.420208][ T5834] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1328.660128][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 1328.722273][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1328.756005][ T5834] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1328.777138][ T5834] usb 4-1: can't read configurations, error -71 [ 1329.535593][ T30] usb 6-1: USB disconnect, device number 50 [ 1330.139090][T11970] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1330.259125][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1330.377067][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.469146][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.499918][T11970] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.534430][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.582933][T11970] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.600426][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.648975][T11970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.670263][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.724007][T11970] usb 7-1: config 0 descriptor?? [ 1330.742427][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.800798][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.832130][ T30] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1330.858289][ T10] usb 4-1: config 0 descriptor?? [ 1331.084016][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1331.146174][ T30] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1331.193121][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.266616][ T30] usb 6-1: config 0 descriptor?? [ 1331.532205][T11970] usbhid 7-1:0.0: can't add hid device: -71 [ 1331.568269][T11970] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1331.584268][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1331.658971][ T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1331.671125][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1331.717524][T11970] usb 7-1: USB disconnect, device number 22 [ 1331.772449][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1331.885536][ T30] usb 6-1: media controller created [ 1332.011126][T13998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1512'. [ 1332.430299][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1332.640841][T14002] cifs: Unknown parameter 'fd' [ 1333.130631][ T30] az6027: usb out operation failed. (-71) [ 1333.137161][ T30] stb0899_attach: Driver disabled by Kconfig [ 1333.188815][ T30] az6027: no front-end attached [ 1333.188815][ T30] [ 1333.244341][ T30] az6027: usb out operation failed. (-71) [ 1333.278864][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1333.329939][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1333.330453][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 1333.454885][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1333.518811][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1333.599139][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1333.644043][ T30] usb 6-1: USB disconnect, device number 51 [ 1333.722408][ T10] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1333.781428][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.859074][ T10] usb 7-1: config 0 has no interface number 0 [ 1333.865572][ T10] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1333.884092][ T10] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.951459][ T10] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1334.040886][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1334.107727][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.134837][ T10] usb 7-1: Product: syz [ 1334.261082][ T10] usb 7-1: Manufacturer: syz [ 1334.265940][ T10] usb 7-1: SerialNumber: syz [ 1334.361392][ T10] usb 7-1: config 0 descriptor?? [ 1334.438390][T14004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1334.690100][T14029] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1516'. [ 1334.866220][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1334.876454][ T10] ipheth 7-1:0.196: Unable to find endpoints [ 1335.103356][ T10] usb 7-1: USB disconnect, device number 23 [ 1335.779644][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1335.995964][ T30] usb 4-1: USB disconnect, device number 28 [ 1336.050276][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1336.492110][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1336.533475][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1336.557248][ T10] usb 2-1: can't read configurations, error -71 [ 1336.622007][ T30] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1336.819536][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 1336.858993][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1336.926194][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1337.016460][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1337.090980][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.171655][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.223919][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.551504][ T30] usb 7-1: usb_control_msg returned -32 [ 1337.557385][ T30] usbtmc 7-1:16.0: can't read capabilities [ 1337.729933][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1524'. [ 1338.042019][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1338.337313][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.406338][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.509744][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.582135][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.625186][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.673526][ T10] usb 2-1: config 0 descriptor?? [ 1338.731914][ T30] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1338.939226][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 1338.956303][ T30] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1339.005356][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.072312][ T30] usb 6-1: config 0 descriptor?? [ 1339.344555][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1339.376934][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1339.396699][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1339.470838][ T7008] usb 7-1: USB disconnect, device number 24 [ 1339.482484][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1339.519620][ T10] usb 2-1: USB disconnect, device number 15 [ 1339.587985][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1339.674611][ T30] usb 6-1: media controller created [ 1339.962276][T14071] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1527'. [ 1339.982592][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1340.347017][T14076] cifs: Unknown parameter 'fd' [ 1340.659391][ T30] az6027: usb out operation failed. (-71) [ 1340.748906][ T30] stb0899_attach: Driver disabled by Kconfig [ 1340.788552][ T30] az6027: no front-end attached [ 1340.788552][ T30] [ 1340.861359][ T30] az6027: usb out operation failed. (-71) [ 1340.902086][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1340.984820][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 1341.116739][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1341.199793][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1341.287948][ T30] usb 6-1: USB disconnect, device number 52 [ 1341.501628][ T7008] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1341.748883][ T7008] usb 7-1: Using ep0 maxpacket: 32 [ 1341.790274][ T7008] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1341.883731][ T7008] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.000691][ T7008] usb 7-1: config 0 has no interface number 0 [ 1342.058421][ T7008] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 1342.120980][ T7008] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1342.163099][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1342.217173][ T7008] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1342.370671][ T7008] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1342.393515][ T7008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.403156][ T7008] usb 7-1: Product: syz [ 1342.440908][ T7008] usb 7-1: Manufacturer: syz [ 1342.477550][ T7008] usb 7-1: SerialNumber: syz [ 1342.527085][ T7008] usb 7-1: config 0 descriptor?? [ 1342.556729][T14085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1342.857437][ T7008] ipheth 7-1:0.196: Unable to find endpoints [ 1342.988212][ T7008] usb 7-1: USB disconnect, device number 25 [ 1344.087254][T14106] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.1533'. [ 1345.914376][T14116] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1536'. [ 1346.499160][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1346.733298][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1346.813861][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1346.869128][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1346.969014][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1347.011950][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.078090][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1347.215023][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.288956][T11970] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1347.559808][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.599335][ T10] usb 2-1: usb_control_msg returned -32 [ 1347.605370][ T10] usbtmc 2-1:16.0: can't read capabilities [ 1347.639780][T11970] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.712028][T11970] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1347.803696][T11970] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1347.879863][T11970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.931569][T14127] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1539'. [ 1347.949410][T11970] usb 7-1: config 0 descriptor?? [ 1348.725980][T11970] usbhid 7-1:0.0: can't add hid device: -71 [ 1348.763621][T11970] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1348.841791][T11970] usb 7-1: USB disconnect, device number 26 [ 1349.059306][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1349.319090][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1349.348047][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1349.399044][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.430377][T11970] usb 2-1: USB disconnect, device number 16 [ 1349.483911][ T10] usb 4-1: config 0 descriptor?? [ 1349.825061][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1349.922157][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1350.001257][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1350.080957][ T10] usb 4-1: media controller created [ 1350.492626][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1350.836992][T14156] cifs: Unknown parameter 'fd' [ 1350.923203][T14158] Cannot find add_set index 0 as target [ 1351.042063][ T10] az6027: usb out operation failed. (-71) [ 1351.075988][ T10] stb0899_attach: Driver disabled by Kconfig [ 1351.139956][ T10] az6027: no front-end attached [ 1351.139956][ T10] [ 1351.210775][ T10] az6027: usb out operation failed. (-71) [ 1351.675309][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1351.750431][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 1351.903668][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1351.990735][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1352.164428][ T10] usb 4-1: USB disconnect, device number 29 [ 1352.736778][T14168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 1352.885043][T14174] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1551'. [ 1353.321251][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1353.999083][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1354.068913][T11970] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1354.268927][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1354.309052][T11970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.343606][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1354.391396][T11970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.419834][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1354.450419][T11970] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1354.475260][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1354.527653][T11970] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1354.549353][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.569082][T11970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.601449][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1354.614483][T11970] usb 10-1: config 0 descriptor?? [ 1354.651991][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.090697][ T10] usb 4-1: usb_control_msg returned -32 [ 1355.096624][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1355.361737][T11970] usbhid 10-1:0.0: can't add hid device: -71 [ 1355.475165][T11970] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1355.540409][T11970] usb 10-1: USB disconnect, device number 34 [ 1357.000134][ T7008] usb 4-1: USB disconnect, device number 30 [ 1358.969091][T11970] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1359.105725][ T7008] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1359.148528][T11970] usb 4-1: Using ep0 maxpacket: 32 [ 1359.232505][T11970] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1359.254977][T11970] usb 4-1: config 0 has no interface number 0 [ 1359.283600][T11970] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1359.326719][ T7008] usb 10-1: Using ep0 maxpacket: 32 [ 1359.368510][ T7008] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1359.378287][ T7008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.459360][T11970] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1359.521504][T11970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.527803][ T7008] usb 10-1: config 0 descriptor?? [ 1359.578953][T11970] usb 4-1: Product: syz [ 1359.583506][T11970] usb 4-1: Manufacturer: syz [ 1359.676978][T11970] usb 4-1: SerialNumber: syz [ 1359.770433][T11970] usb 4-1: config 0 descriptor?? [ 1359.875441][ T7008] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1359.989806][ T7008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1360.068054][ T7008] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1360.139194][ T7008] usb 10-1: media controller created [ 1360.383997][T11970] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1360.458158][T11970] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1360.511531][T11970] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1360.566219][ T7008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1360.594820][T11970] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1360.863882][T14222] cifs: Unknown parameter 'fd' [ 1361.226253][ T7008] az6027: usb out operation failed. (-71) [ 1361.288838][ T7008] stb0899_attach: Driver disabled by Kconfig [ 1361.322263][ T7008] az6027: no front-end attached [ 1361.322263][ T7008] [ 1361.370684][ T7008] az6027: usb out operation failed. (-71) [ 1361.402513][ T7008] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1361.509398][ T7008] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39 [ 1361.540499][T14225] tipc: Started in network mode [ 1361.545637][T14225] tipc: Node identity a6965844a0ac, cluster identity 4711 [ 1361.639552][ T30] usb 4-1: USB disconnect, device number 31 [ 1361.668301][ T7008] dvb-usb: schedule remote query interval to 400 msecs. [ 1361.730686][ T7008] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1361.740656][T14225] tipc: Enabled bearer , priority 0 [ 1361.828316][T14226] syzkaller0: entered promiscuous mode [ 1361.839193][ T7008] usb 10-1: USB disconnect, device number 35 [ 1361.914316][T14226] syzkaller0: entered allmulticast mode [ 1362.242011][T14224] tipc: Resetting bearer [ 1362.405961][T14224] tipc: Disabling bearer [ 1362.442076][ T7008] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1363.120759][T14240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1562'. [ 1363.569449][T14243] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1563'. [ 1364.248847][ T7008] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1364.298938][T11970] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1364.452834][ T7008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.490522][ T7008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.505042][T11970] usb 7-1: Using ep0 maxpacket: 8 [ 1364.559779][ T7008] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1364.582729][T11970] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1364.623313][T11970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1364.631660][ T7008] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1364.692411][ T7008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.712420][T11970] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1364.735715][ T7008] usb 6-1: config 0 descriptor?? [ 1364.775811][T11970] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.860264][T11970] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1364.899695][T11970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.061142][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1365.166333][T11970] usb 7-1: usb_control_msg returned -32 [ 1365.193938][T11970] usbtmc 7-1:16.0: can't read capabilities [ 1365.289218][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1365.309662][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1365.318504][ T10] usb 2-1: config 0 has no interface number 0 [ 1365.368574][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1365.379288][ T30] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1365.427073][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1365.463007][ T7008] usbhid 6-1:0.0: can't add hid device: -71 [ 1365.472103][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.495691][ T10] usb 2-1: Product: syz [ 1365.499339][ T7008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1365.502184][ T10] usb 2-1: Manufacturer: syz [ 1365.543703][ T7008] usb 6-1: USB disconnect, device number 53 [ 1365.562355][ T10] usb 2-1: SerialNumber: syz [ 1365.570632][ T30] usb 10-1: Using ep0 maxpacket: 32 [ 1365.593101][ T30] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1365.624631][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.659469][ T10] usb 2-1: config 0 descriptor?? [ 1365.731714][ T30] usb 10-1: config 0 descriptor?? [ 1366.024319][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1366.051292][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1366.096658][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1366.144830][ T30] usb 10-1: media controller created [ 1366.161452][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1366.193811][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1366.238819][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1366.303628][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1366.309757][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1366.868585][T14263] cifs: Unknown parameter 'fd' [ 1366.904610][ T30] az6027: usb out operation failed. (-71) [ 1366.944820][ T30] stb0899_attach: Driver disabled by Kconfig [ 1366.962225][ T30] az6027: no front-end attached [ 1366.962225][ T30] [ 1367.047104][ T30] az6027: usb out operation failed. (-71) [ 1367.078399][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1367.111300][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 1367.139339][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 1367.147564][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1367.228420][ T30] usb 10-1: USB disconnect, device number 36 [ 1367.287888][ T10] usb 7-1: USB disconnect, device number 27 [ 1367.751344][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1367.828303][T14280] gretap0: entered promiscuous mode [ 1367.879278][T14280] vlan2: entered promiscuous mode [ 1367.938090][T14285] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1576'. [ 1368.104495][ T10] usb 2-1: USB disconnect, device number 17 [ 1368.239353][T14289] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1578'. [ 1369.158879][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1369.407226][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.477904][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.536843][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1369.602662][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1369.640957][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.721746][ T10] usb 2-1: config 0 descriptor?? [ 1369.919404][T11970] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1370.130760][T11970] usb 10-1: Using ep0 maxpacket: 8 [ 1370.176793][T11970] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1370.250722][T11970] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1370.296196][ T10] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1370.309675][T11970] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1370.344475][T11970] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.402441][T11970] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1370.429371][ T10] usb 2-1: USB disconnect, device number 18 [ 1370.497060][T11970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.770064][T11970] usb 10-1: usb_control_msg returned -32 [ 1370.789209][T11970] usbtmc 10-1:16.0: can't read capabilities [ 1371.073744][T14315] fido_id[14315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1371.269293][T11970] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1371.357683][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.366991][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.469478][T11970] usb 7-1: Using ep0 maxpacket: 32 [ 1371.549042][T11970] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1371.601917][T11970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.679437][T11970] usb 7-1: config 0 descriptor?? [ 1371.936633][ T5834] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1372.018728][T11970] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1372.040470][T11970] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1372.054075][T11970] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1372.139147][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 1372.175882][ T5834] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1372.194465][ T5834] usb 2-1: config 0 has no interface number 0 [ 1372.215712][ T5834] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1372.249787][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1372.285650][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.320577][ T5834] usb 2-1: Product: syz [ 1372.332663][ T5834] usb 2-1: Manufacturer: syz [ 1372.349811][ T5834] usb 2-1: SerialNumber: syz [ 1372.415781][T14329] cifs: Unknown parameter 'fd' [ 1372.426431][ T5834] usb 2-1: config 0 descriptor?? [ 1372.708148][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1590'. [ 1372.831212][ T9] usb 10-1: USB disconnect, device number 37 [ 1372.878840][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1372.943133][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1373.018975][ T5834] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1373.076397][ T5834] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1374.315322][T14352] gretap0: entered promiscuous mode [ 1374.359752][T14352] vlan2: entered promiscuous mode [ 1375.046173][ T5834] usb 2-1: USB disconnect, device number 19 [ 1375.427896][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1597'. [ 1376.149432][T14374] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.1601'. [ 1377.220075][T14380] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1603'. [ 1378.749137][ T5832] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1378.950167][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1378.986824][ T5832] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1379.059379][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.257049][ T5832] usb 6-1: config 0 descriptor?? [ 1379.864424][ T5832] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1379.976458][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1380.179121][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1380.251490][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1380.280384][T14410] cifs: Unknown parameter 'fd' [ 1380.298450][ T10] usb 2-1: config 0 has no interface number 0 [ 1380.357978][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1380.443124][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1380.528336][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.587542][ T10] usb 2-1: Product: syz [ 1380.644639][ T10] usb 2-1: Manufacturer: syz [ 1380.682629][ T10] usb 2-1: SerialNumber: syz [ 1380.726586][ T10] usb 2-1: config 0 descriptor?? [ 1381.292034][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1381.344788][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1381.374375][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1381.445658][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1382.169540][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'. [ 1383.605533][T11898] usb 2-1: USB disconnect, device number 20 [ 1384.237678][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1614'. [ 1386.329372][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1386.549524][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1386.606807][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1386.662260][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.699250][ T10] usb 2-1: config 0 has no interface number 0 [ 1386.731314][ T10] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1386.782125][ T10] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1386.817994][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1386.911778][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1386.976657][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.019027][ T10] usb 2-1: Product: syz [ 1387.044362][ T10] usb 2-1: Manufacturer: syz [ 1387.084064][ T10] usb 2-1: SerialNumber: syz [ 1387.129818][ T10] usb 2-1: config 0 descriptor?? [ 1387.204193][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1387.250761][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1387.429561][T11898] usb 2-1: USB disconnect, device number 21 [ 1388.996296][T11898] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1389.328998][T11898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.399243][T11898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.499565][T11898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.599288][T11898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.659531][T11898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.728068][T11898] usb 2-1: config 0 descriptor?? [ 1390.348086][T11898] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1390.538909][T11898] usb 2-1: USB disconnect, device number 22 [ 1390.958865][ T30] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1391.179103][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1391.227428][T14474] syzkaller1: entered promiscuous mode [ 1391.242315][ T30] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1391.330317][T14474] syzkaller1: entered allmulticast mode [ 1391.365507][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.411342][ T30] usb 4-1: config 0 descriptor?? [ 1391.617076][T14471] fido_id[14471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1391.901479][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1392.257187][T14484] cifs: Unknown parameter 'fd' [ 1392.371779][T14405] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1392.629281][T14405] usb 2-1: Using ep0 maxpacket: 32 [ 1392.664294][T14405] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1392.718063][T14405] usb 2-1: config 0 has no interface number 0 [ 1392.746414][T14405] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.807005][T14405] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1392.855131][T14405] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1392.875699][T14405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.945628][T14405] usb 2-1: Product: syz [ 1392.959255][T14405] usb 2-1: Manufacturer: syz [ 1392.967176][T14405] usb 2-1: SerialNumber: syz [ 1392.997947][T14405] usb 2-1: config 0 descriptor?? [ 1393.512635][T14494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1627'. [ 1393.592181][T14405] appletouch 2-1:0.85: Geyser mode initialized. [ 1393.640850][T14405] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input41 [ 1393.874289][T14405] usb 2-1: USB disconnect, device number 23 [ 1394.032194][T14405] appletouch 2-1:0.85: input: appletouch disconnected [ 1394.548079][T11898] hid_parser_main: 337 callbacks suppressed [ 1394.548181][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.595178][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.614734][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.647391][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.678029][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.710532][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.739814][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.773409][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.822092][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.875554][T11898] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 1394.984202][T11898] hid-generic 0000:0000:0004.000B: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1396.133361][T14516] fido_id[14516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1397.240144][T14405] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1397.433944][T14405] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1397.471536][T14405] usb 2-1: config 0 has no interface number 0 [ 1397.496430][T14405] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1397.529343][T14405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.537601][T14405] usb 2-1: Product: syz [ 1397.570273][T14405] usb 2-1: Manufacturer: syz [ 1397.575137][T14405] usb 2-1: SerialNumber: syz [ 1397.650052][T14405] usb 2-1: config 0 descriptor?? [ 1398.150447][T14405] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 1398.185228][T14405] usb 2-1: Firmware version (0.0) predates our first public release. [ 1398.211306][T14405] usb 2-1: Please update to version 0.2 or newer [ 1399.689987][T14572] cifs: Unknown parameter 'fd' [ 1400.094150][T11898] usb 2-1: USB disconnect, device number 24 [ 1402.840029][T14610] syzkaller1: entered promiscuous mode [ 1402.859199][T14610] syzkaller1: entered allmulticast mode [ 1404.762690][T14629] bond1 (unregistering): Released all slaves [ 1405.031177][T14636] cifs: Unknown parameter 'fd' [ 1405.296376][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 1407.954723][T14667] syzkaller1: entered promiscuous mode [ 1407.987792][T14667] syzkaller1: entered allmulticast mode [ 1409.920933][T14690] cifs: Unknown parameter 'fd' [ 1414.634177][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1681'. [ 1415.306730][T14743] cifs: Unknown parameter 'fd' [ 1415.545940][T14745] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1684'. [ 1415.613657][T14745] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1416.495117][ T29] audit: type=1326 audit(1773329944.101:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14752 comm="syz.6.1686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe00bd9c799 code=0x0 [ 1416.937924][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1686'. [ 1418.222413][T14772] syzkaller1: entered promiscuous mode [ 1418.294531][T14772] syzkaller1: entered allmulticast mode [ 1420.244654][T14790] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1694'. [ 1422.952023][T14800] cifs: Unknown parameter 'fd' [ 1425.990645][T14838] syzkaller1: entered promiscuous mode [ 1425.996400][T14838] syzkaller1: entered allmulticast mode [ 1427.381949][T14852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1707'. [ 1428.970603][T14867] cifs: Unknown parameter 'fd' [ 1430.417362][T14884] syzkaller1: entered promiscuous mode [ 1430.433090][T14884] syzkaller1: entered allmulticast mode [ 1431.314094][ T29] audit: type=1400 audit(1773329958.921:7): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14888 comm="syz.3.1719" [ 1431.882265][T14899] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1721'. [ 1432.777413][T11970] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1432.793868][ T5832] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1432.794162][ T30] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1432.861790][ T30] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1432.874653][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.900674][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.916775][ T30] usb 4-1: USB disconnect, device number 32 [ 1432.962379][ T5832] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1433.221379][T11970] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1433.259876][ T5832] usb 6-1: USB disconnect, device number 54 [ 1433.279771][T11970] usb 7-1: USB disconnect, device number 28 [ 1434.398911][ T5832] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1434.739010][ T5832] usb 4-1: device descriptor read/64, error -71 [ 1434.979513][ T5832] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1435.157961][ T5832] usb 4-1: device descriptor read/64, error -71 [ 1435.309972][ T5832] usb usb4-port1: attempt power cycle [ 1435.341422][T14935] syzkaller1: entered promiscuous mode [ 1435.347109][T14935] syzkaller1: entered allmulticast mode [ 1435.687179][ T5832] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1435.753758][ T5832] usb 4-1: device descriptor read/8, error -71 [ 1436.049404][ T5832] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1436.120385][ T5832] usb 4-1: device descriptor read/8, error -71 [ 1436.239902][ T5832] usb usb4-port1: unable to enumerate USB device [ 1436.391936][ T7565] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1436.589701][ T7565] usb 2-1: Using ep0 maxpacket: 32 [ 1436.632132][ T7565] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.639673][T14947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1735'. [ 1436.671083][ T7565] usb 2-1: config 0 has no interfaces? [ 1436.710123][ T7565] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1436.750845][ T7565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.771898][ T7565] usb 2-1: Product: syz [ 1436.776315][ T7565] usb 2-1: Manufacturer: syz [ 1436.806581][ T7565] usb 2-1: SerialNumber: syz [ 1436.854717][ T7565] usb 2-1: config 0 descriptor?? [ 1437.582689][ T7565] usb 2-1: USB disconnect, device number 25 [ 1439.992935][T14978] syzkaller1: entered promiscuous mode [ 1440.025591][T14978] syzkaller1: entered allmulticast mode [ 1441.649515][ T7565] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1442.068991][ T7565] usb 7-1: device descriptor read/64, error -71 [ 1442.349872][ T7565] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1442.509173][ T7565] usb 7-1: device descriptor read/64, error -71 [ 1442.512754][T11970] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1442.620906][ T7565] usb usb7-port1: attempt power cycle [ 1442.740885][T11970] usb 4-1: Using ep0 maxpacket: 32 [ 1442.771347][T11970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.834345][T11970] usb 4-1: config 0 has no interfaces? [ 1443.083390][T11970] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1443.099083][T11970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.108957][ T7565] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1443.166721][T11970] usb 4-1: Product: syz [ 1443.190608][T11970] usb 4-1: Manufacturer: syz [ 1443.195574][T11970] usb 4-1: SerialNumber: syz [ 1443.243943][T11970] usb 4-1: config 0 descriptor?? [ 1443.270822][ T7565] usb 7-1: device descriptor read/8, error -71 [ 1443.499787][T11970] usb 4-1: USB disconnect, device number 37 [ 1443.644144][ T7565] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1443.705973][ T7565] usb 7-1: device descriptor read/8, error -71 [ 1443.899430][ T7565] usb usb7-port1: unable to enumerate USB device [ 1447.321281][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.330505][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.516213][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1448.846242][T15037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.324268][T15052] netlink: 'syz.1.1763': attribute type 3 has an invalid length. [ 1450.898996][ T5832] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1451.079142][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 1451.145595][ T5832] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1451.198189][ T5832] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1451.335357][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.365985][ T5832] usb 2-1: Product: syz [ 1451.379134][ T5832] usb 2-1: Manufacturer: syz [ 1451.384060][ T5832] usb 2-1: SerialNumber: syz [ 1451.457433][ T5832] snd-ua101 2-1:1.1: sample format descriptor not found [ 1451.520715][ T5832] snd-ua101 2-1:1.0: invalid num_altsetting [ 1451.704425][ T1145] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.858576][ T1145] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.937051][ T5832] usb 2-1: USB disconnect, device number 26 [ 1451.981407][T10339] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.086023][T10339] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.259038][T14819] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1452.477413][T14819] usb 4-1: Using ep0 maxpacket: 32 [ 1452.509064][T14819] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1452.566721][T14819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.639492][T15071] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1769'. [ 1452.661661][T14819] usb 4-1: config 0 has no interface number 0 [ 1452.668081][T14819] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1452.734610][T14819] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1452.791603][T14819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.859062][T14819] usb 4-1: Product: syz [ 1452.863478][T14819] usb 4-1: Manufacturer: syz [ 1452.899757][T14819] usb 4-1: SerialNumber: syz [ 1452.940555][T14819] usb 4-1: config 0 descriptor?? [ 1453.215490][ T5832] usb 4-1: USB disconnect, device number 38 [ 1454.821321][T15092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1456.843212][T15104] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1777'. [ 1456.926622][T15104] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1458.218016][T11865] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1458.401711][T15117] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1781'. [ 1458.457142][T11865] usb 2-1: Using ep0 maxpacket: 32 [ 1458.475283][T11865] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1458.533699][T11865] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1458.575697][T11865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.617155][T11865] usb 2-1: Product: syz [ 1458.689517][T11865] usb 2-1: Manufacturer: syz [ 1458.736557][T11865] usb 2-1: SerialNumber: syz [ 1458.963409][T11865] snd-ua101 2-1:1.1: sample format descriptor not found [ 1459.009796][T11865] snd-ua101 2-1:1.0: invalid num_altsetting [ 1459.230384][T11865] usb 2-1: USB disconnect, device number 27 [ 1459.494506][T15126] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1460.479034][T11865] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1460.689289][T11865] usb 7-1: Using ep0 maxpacket: 32 [ 1460.719450][T11865] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1460.759438][T11865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.839836][T11865] usb 7-1: config 0 has no interface number 0 [ 1460.867952][T11865] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1460.954305][T11865] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1461.005601][T11865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.099430][T11865] usb 7-1: Product: syz [ 1461.124877][T11865] usb 7-1: Manufacturer: syz [ 1461.148844][T11865] usb 7-1: SerialNumber: syz [ 1461.200194][T11865] usb 7-1: config 0 descriptor?? [ 1461.495655][T11865] usb 7-1: USB disconnect, device number 33 [ 1464.308246][T15155] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1790'. [ 1464.369355][T15155] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1465.178944][T11865] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1465.359037][T14819] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1465.399574][T11865] usb 2-1: Using ep0 maxpacket: 32 [ 1465.454218][T11865] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1465.509203][T11865] usb 2-1: config 0 has no interface number 0 [ 1465.547554][T11865] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1465.558446][T14819] usb 7-1: device descriptor read/64, error -71 [ 1465.595711][T11865] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1465.652224][T11865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.672046][T11865] usb 2-1: Product: syz [ 1465.699991][T11865] usb 2-1: Manufacturer: syz [ 1465.723964][T11865] usb 2-1: SerialNumber: syz [ 1465.766082][T11865] usb 2-1: config 0 descriptor?? [ 1465.839495][T14819] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1466.039807][T14819] usb 7-1: device descriptor read/64, error -71 [ 1466.150420][T14819] usb usb7-port1: attempt power cycle [ 1466.251922][T11865] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1466.286416][T11865] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1466.332970][T11865] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1466.384317][T11865] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1466.543522][T14819] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1466.569416][T14799] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1466.620787][T14819] usb 7-1: device descriptor read/8, error -71 [ 1466.809088][T14799] usb 10-1: Using ep0 maxpacket: 32 [ 1466.843334][T14799] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1466.895191][T14799] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1466.905913][T14819] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1466.939428][T14799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.956057][T14819] usb 7-1: device descriptor read/8, error -71 [ 1466.988928][T14799] usb 10-1: Product: syz [ 1466.993419][T14799] usb 10-1: Manufacturer: syz [ 1467.019157][T14799] usb 10-1: SerialNumber: syz [ 1467.092861][T14819] usb usb7-port1: unable to enumerate USB device [ 1467.111137][T14799] snd-ua101 10-1:1.1: invalid format type [ 1467.138952][T14799] snd-ua101 10-1:1.0: invalid num_altsetting [ 1467.343521][T14799] usb 10-1: USB disconnect, device number 38 [ 1467.771541][T15178] x_tables: duplicate underflow at hook 3 [ 1468.184021][T14799] usb 2-1: USB disconnect, device number 28 [ 1471.697609][T14799] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1471.929465][T14799] usb 2-1: Using ep0 maxpacket: 32 [ 1472.028046][T14799] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1472.090999][T14799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.228911][T14799] usb 2-1: config 0 has no interface number 0 [ 1472.235404][T14799] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1472.334992][T14799] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1472.393012][T14799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.449401][T14799] usb 2-1: Product: syz [ 1472.453890][T14799] usb 2-1: Manufacturer: syz [ 1472.508861][T14799] usb 2-1: SerialNumber: syz [ 1472.575360][T14799] usb 2-1: config 0 descriptor?? [ 1472.778594][T15220] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1803'. [ 1472.809648][T15220] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1472.850885][T14799] usb 2-1: USB disconnect, device number 29 [ 1473.116330][ T29] audit: type=1326 audit(1773330000.721:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.203709][ T29] audit: type=1326 audit(1773330000.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.325382][ T29] audit: type=1326 audit(1773330000.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.458293][ T29] audit: type=1326 audit(1773330000.751:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.621190][ T29] audit: type=1326 audit(1773330000.751:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f4b75cfce code=0x7ffc0000 [ 1473.659119][ T10] usb 10-1: new low-speed USB device number 39 using dummy_hcd [ 1473.752995][ T29] audit: type=1326 audit(1773330000.751:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.885811][ T29] audit: type=1326 audit(1773330000.751:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1473.934293][ T10] usb 10-1: config 0 has an invalid interface number: 244 but max is 0 [ 1473.987913][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.038015][ T29] audit: type=1326 audit(1773330000.751:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1474.039033][ T10] usb 10-1: config 0 has no interface number 0 [ 1474.192996][ T29] audit: type=1326 audit(1773330000.751:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1474.275034][ T10] usb 10-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1474.279170][ T29] audit: type=1326 audit(1773330000.771:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.9.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f4b79c799 code=0x7ffc0000 [ 1474.391012][ T10] usb 10-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1474.409076][T11970] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1474.467774][ T10] usb 10-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 1474.509146][ T10] usb 10-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 1474.553961][ T10] usb 10-1: config 0 interface 244 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 1474.589298][T11970] usb 2-1: device descriptor read/64, error -71 [ 1474.612588][ T10] usb 10-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1474.676936][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.752167][ T10] usb 10-1: config 0 descriptor?? [ 1474.796704][T15219] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1474.848984][T11970] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1475.034197][T11970] usb 2-1: device descriptor read/64, error -71 [ 1475.122501][ T10] usb 10-1: string descriptor 0 read error: -71 [ 1475.153977][ T10] cypress_m8 10-1:0.244: DeLorme Earthmate USB converter detected [ 1475.181764][T11970] usb usb2-port1: attempt power cycle [ 1475.286160][ T10] earthmate ttyUSB0: required endpoint is missing [ 1475.378820][ T10] usb 10-1: USB disconnect, device number 39 [ 1475.411013][ T10] cypress_m8 10-1:0.244: device disconnected [ 1475.612277][T11970] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1475.666286][T11970] usb 2-1: device descriptor read/8, error -71 [ 1476.251002][T11970] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1477.260533][T11970] usb 2-1: device descriptor read/8, error -71 [ 1477.729857][T11970] usb usb2-port1: unable to enumerate USB device [ 1478.403546][T15262] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1482.068916][T11970] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1482.289104][T11970] usb 6-1: Using ep0 maxpacket: 16 [ 1482.419903][T11970] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1482.468911][T11970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.508841][T11970] usb 6-1: Product: syz [ 1482.513390][T11970] usb 6-1: Manufacturer: syz [ 1482.555627][T14799] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1482.589295][T11970] usb 6-1: SerialNumber: syz [ 1482.719072][T14799] usb 7-1: device descriptor read/64, error -71 [ 1482.846873][T11970] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1482.937158][T11970] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1482.968983][T14799] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1483.009737][T11970] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1483.049335][T11970] usb 6-1: media controller created [ 1483.162331][T14799] usb 7-1: device descriptor read/64, error -71 [ 1483.317547][T11970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1483.349860][T14799] usb usb7-port1: attempt power cycle [ 1483.575541][T11970] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1483.739086][T14799] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1483.816233][T14799] usb 7-1: device descriptor read/8, error -71 [ 1484.119023][T14799] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1484.270584][T14799] usb 7-1: device descriptor read/8, error -71 [ 1484.345402][T11970] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1484.390380][T14799] usb usb7-port1: unable to enumerate USB device [ 1484.437305][T11970] usb 6-1: USB disconnect, device number 55 [ 1486.840104][T15328] 8021q: VLANs not supported on caif0 [ 1488.849107][T14799] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1489.039367][T14819] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1489.048097][T14799] usb 6-1: Using ep0 maxpacket: 16 [ 1489.103392][T14799] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1489.125870][T14799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.144379][T14799] usb 6-1: Product: syz [ 1489.153125][T14799] usb 6-1: Manufacturer: syz [ 1489.163345][T14799] usb 6-1: SerialNumber: syz [ 1489.209236][T14819] usb 7-1: device descriptor read/64, error -71 [ 1489.415403][T14799] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1489.460193][T14819] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1489.484311][T14799] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1489.535184][T14799] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1489.567055][T14799] usb 6-1: media controller created [ 1489.641589][T14819] usb 7-1: device descriptor read/64, error -71 [ 1489.770727][T14819] usb usb7-port1: attempt power cycle [ 1489.894180][T14799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1490.067390][T14799] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1490.198929][T14819] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1490.261412][T14819] usb 7-1: device descriptor read/8, error -71 [ 1490.509048][T14819] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1490.557951][T14819] usb 7-1: device descriptor read/8, error -71 [ 1490.706556][T14799] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1490.750259][T14819] usb usb7-port1: unable to enumerate USB device [ 1490.800120][T14799] usb 6-1: USB disconnect, device number 56 [ 1492.839169][T15391] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1493.674798][ C0] hrtimer: interrupt took 402511 ns [ 1494.256343][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.265352][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1501.379014][ T7565] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1501.597965][ T7565] usb 10-1: Using ep0 maxpacket: 16 [ 1501.704646][ T7565] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1501.777290][ T7565] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.845854][ T7565] usb 10-1: Product: syz [ 1501.858172][ T7565] usb 10-1: Manufacturer: syz [ 1501.886371][ T7565] usb 10-1: SerialNumber: syz [ 1502.207133][ T7565] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1502.311099][ T7565] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1502.369554][ T7565] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1502.427939][ T7565] usb 10-1: media controller created [ 1502.754586][ T7565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1503.077428][ T7565] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1503.423532][T11970] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1503.477570][ T7565] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1503.523155][ T7565] usb 10-1: USB disconnect, device number 40 [ 1503.669198][T11970] usb 2-1: device descriptor read/64, error -71 [ 1503.909104][T11970] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1504.108055][T11970] usb 2-1: device descriptor read/64, error -71 [ 1504.285910][T11970] usb usb2-port1: attempt power cycle [ 1504.669136][ T30] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1504.709454][T11970] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1504.779776][T14405] IPVS: starting estimator thread 0... [ 1504.790445][T11970] usb 2-1: device descriptor read/8, error -71 [ 1504.856252][ T30] usb 7-1: device descriptor read/64, error -71 [ 1504.889468][T15463] IPVS: using max 336 ests per chain, 16800 per kthread [ 1505.121215][T11970] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1505.190066][T11970] usb 2-1: device descriptor read/8, error -71 [ 1505.309149][ T30] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1505.332928][T11970] usb usb2-port1: unable to enumerate USB device [ 1505.489237][ T30] usb 7-1: device descriptor read/64, error -71 [ 1505.489457][ T9] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1505.623766][ T30] usb usb7-port1: attempt power cycle [ 1505.659867][ T9] usb 10-1: device descriptor read/64, error -71 [ 1505.944791][ T9] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1506.001170][ T30] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1506.040486][ T30] usb 7-1: device descriptor read/8, error -71 [ 1506.130585][ T9] usb 10-1: device descriptor read/64, error -71 [ 1506.240719][ T9] usb usb10-port1: attempt power cycle [ 1506.305490][ T30] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1506.371450][ T30] usb 7-1: device descriptor read/8, error -71 [ 1506.519976][ T30] usb usb7-port1: unable to enumerate USB device [ 1506.629360][ T9] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1506.715759][ T9] usb 10-1: device descriptor read/8, error -71 [ 1506.989343][ T9] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1507.114678][ T9] usb 10-1: device descriptor read/8, error -71 [ 1507.260355][ T9] usb usb10-port1: unable to enumerate USB device [ 1507.292917][T15480] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1507.759409][T15480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1507.936714][T15486] capability: warning: `syz.6.1864' uses 32-bit capabilities (legacy support in use) [ 1509.099078][ T30] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1509.269118][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 1509.303949][ T30] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1509.358865][ T30] usb 7-1: config 179 has no interface number 0 [ 1509.388848][ T30] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1509.489596][ T30] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1509.561460][ T30] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1509.597749][ T30] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1509.640046][ T30] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1509.709412][ T30] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1509.771828][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.873491][T15492] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1510.273351][ T5835] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1510.352209][ T9] usb 7-1: USB disconnect, device number 50 [ 1510.352364][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1510.367104][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1510.489757][ T5835] usb 10-1: Using ep0 maxpacket: 16 [ 1510.578896][ T5835] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1510.612839][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.638822][ T5835] usb 10-1: Product: syz [ 1510.647616][ T5835] usb 10-1: Manufacturer: syz [ 1510.700176][ T5835] usb 10-1: SerialNumber: syz [ 1511.006252][ T5835] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1511.149681][ T5835] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1511.237041][ T5835] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1511.329829][ T5835] usb 10-1: media controller created [ 1511.654407][ T5835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1511.980390][ T5835] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1513.099929][ T5835] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1513.207310][ T5835] usb 10-1: USB disconnect, device number 45 [ 1516.784864][ T7565] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1516.964809][ T7565] usb 4-1: device descriptor read/64, error -71 [ 1517.258980][ T7565] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1517.429032][ T7565] usb 4-1: device descriptor read/64, error -71 [ 1517.451465][T15535] bond1: entered promiscuous mode [ 1517.590756][ T7565] usb usb4-port1: attempt power cycle [ 1517.756937][ T5835] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1517.929192][ T5835] usb 10-1: device descriptor read/64, error -71 [ 1517.981816][ T7565] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1518.054584][ T7565] usb 4-1: device descriptor read/8, error -71 [ 1518.194104][T15544] ===================================================== [ 1518.202043][T15544] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 1518.209518][T15544] dvb_demux_read+0x580/0xa40 [ 1518.214325][T15544] loop_rw_iter+0x626/0xbe0 [ 1518.219210][T15544] __io_read+0x102e/0x2540 [ 1518.223727][T15544] io_read+0x6b/0x3c0 [ 1518.227899][T15544] __io_issue_sqe+0x2ba/0x790 [ 1518.232840][T15544] io_issue_sqe+0x5ad/0x24e0 [ 1518.237669][T15544] io_submit_sqes+0x162a/0x3590 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1518.242832][T15544] __se_sys_io_uring_enter+0x3c9/0x2b70 [ 1518.248580][T15544] __x64_sys_io_uring_enter+0x114/0x1a0 [ 1518.254463][T15544] x64_sys_call+0x2417/0x3ea0 [ 1518.259662][T15544] do_syscall_64+0x134/0xf80 [ 1518.264634][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.274969][T15544] [ 1518.277402][T15544] Uninit was created at: [ 1518.282542][T15544] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1518.288856][T15544] alloc_pages_mpol+0x328/0x860 [ 1518.294076][T15544] alloc_pages_noprof+0x101/0x280 [ 1518.299362][T15544] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1518.305582][T15544] __vmalloc_noprof+0x128/0x1f0 [ 1518.310927][T15544] vmalloc_array_noprof+0x48/0x80 [ 1518.316340][T15544] dvb_dmxdev_init+0xd8/0x680 [ 1518.321314][T15544] vidtv_bridge_probe+0x1bfd/0x2690 [ 1518.326818][T15544] platform_probe+0x213/0x370 [ 1518.331854][T15544] really_probe+0x4d5/0xe40 [ 1518.336592][T15544] __driver_probe_device+0x25e/0x370 [ 1518.342121][T15544] driver_probe_device+0x70/0x8f0 [ 1518.347441][T15544] __driver_attach+0x53e/0xaa0 [ 1518.352438][T15544] bus_for_each_dev+0x33b/0x580 [ 1518.357515][T15544] driver_attach+0x51/0x70 [ 1518.362200][T15544] bus_add_driver+0x54f/0xdb0 [ 1518.367186][T15544] driver_register+0x42e/0x6a0 [ 1518.372268][T15544] __platform_driver_register+0x65/0x80 [ 1518.377949][T15544] vidtv_bridge_init+0x73/0x100 [ 1518.383394][T15544] do_one_initcall+0x237/0xbb0 [ 1518.388343][T15544] do_initcall_level+0x157/0x350 [ 1518.393649][T15544] do_initcalls+0x176/0x310 [ 1518.398306][T15544] do_basic_setup+0x1d/0x30 [ 1518.403009][T15544] kernel_init_freeable+0x213/0x460 [ 1518.408432][T15544] kernel_init+0x2f/0x5e0 [ 1518.413149][T15544] ret_from_fork+0x20f/0x910 [ 1518.418126][T15544] ret_from_fork_asm+0x1a/0x30 [ 1518.423189][T15544] [ 1518.425622][T15544] CPU: 1 UID: 0 PID: 15544 Comm: syz.1.1876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.436952][T15544] Tainted: [L]=SOFTLOCKUP [ 1518.441419][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1518.451724][T15544] ===================================================== [ 1518.458885][T15544] Disabling lock debugging due to kernel taint [ 1518.465772][ T5835] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1518.539048][ T7565] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1518.594028][ T7565] usb 4-1: device descriptor read/8, error -71 [ 1518.609439][T15544] Kernel panic - not syncing: kmsan.panic set ... [ 1518.616034][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.1.1876 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1518.627175][T15544] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1518.632866][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1518.643068][T15544] Call Trace: [ 1518.646442][T15544] [ 1518.649636][T15544] __dump_stack+0x26/0x30 [ 1518.654149][T15544] dump_stack_lvl+0x50/0x1c0 [ 1518.658943][T15544] ? dump_stack+0x12/0x25 [ 1518.663626][T15544] dump_stack+0x1e/0x25 [ 1518.667894][T15544] vpanic+0x7b4/0x1430 [ 1518.672091][T15544] panic+0x15d/0x160 [ 1518.676144][T15544] kmsan_report+0x31a/0x320 [ 1518.680824][T15544] ? __msan_warning+0x1b/0x30 [ 1518.685785][T15544] ? dvb_demux_read+0x580/0xa40 [ 1518.690776][T15544] ? loop_rw_iter+0x626/0xbe0 [ 1518.695724][T15544] ? __io_read+0x102e/0x2540 [ 1518.700476][T15544] ? io_read+0x6b/0x3c0 [ 1518.704783][T15544] ? __io_issue_sqe+0x2ba/0x790 [ 1518.709749][T15544] ? io_issue_sqe+0x5ad/0x24e0 [ 1518.714629][T15544] ? io_submit_sqes+0x162a/0x3590 [ 1518.719855][T15544] ? __se_sys_io_uring_enter+0x3c9/0x2b70 [ 1518.725753][T15544] ? __x64_sys_io_uring_enter+0x114/0x1a0 [ 1518.731606][T15544] ? x64_sys_call+0x2417/0x3ea0 [ 1518.736632][T15544] ? do_syscall_64+0x134/0xf80 [ 1518.741494][T15544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.747732][T15544] ? is_module_text_address+0x1f4/0x240 [ 1518.753566][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.758890][T15544] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1518.765011][T15544] ? __rcu_read_unlock+0x6c/0xd0 [ 1518.770180][T15544] ? aa_file_perm+0x4b9/0x2870 [ 1518.775124][T15544] ? kmsan_get_metadata+0x146/0x160 [ 1518.780461][T15544] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1518.786938][T15544] ? kmsan_get_metadata+0x146/0x160 [ 1518.792307][T15544] __msan_warning+0x1b/0x30 [ 1518.796948][T15544] dvb_demux_read+0x580/0xa40 [ 1518.801783][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.807055][T15544] ? __pfx_dvb_demux_read+0x10/0x10 [ 1518.812384][T15544] loop_rw_iter+0x626/0xbe0 [ 1518.817032][T15544] ? __pfx_dvb_demux_read+0x10/0x10 [ 1518.822371][T15544] __io_read+0x102e/0x2540 [ 1518.826984][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.832237][T15544] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1518.838726][T15544] io_read+0x6b/0x3c0 [ 1518.842832][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.848074][T15544] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1518.854005][T15544] ? __pfx_io_read+0x10/0x10 [ 1518.858840][T15544] ? __pfx_io_read+0x10/0x10 [ 1518.863640][T15544] __io_issue_sqe+0x2ba/0x790 [ 1518.868643][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.873964][T15544] io_issue_sqe+0x5ad/0x24e0 [ 1518.878670][T15544] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1518.884856][T15544] ? io_prep_rwv+0x231/0x5a0 [ 1518.889611][T15544] ? kmsan_report+0x300/0x320 [ 1518.894483][T15544] io_submit_sqes+0x162a/0x3590 [ 1518.899487][T15544] __se_sys_io_uring_enter+0x3c9/0x2b70 [ 1518.905268][T15544] ? kmsan_get_metadata+0xf1/0x160 [ 1518.910520][T15544] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1518.917011][T15544] __x64_sys_io_uring_enter+0x114/0x1a0 [ 1518.922716][T15544] x64_sys_call+0x2417/0x3ea0 [ 1518.927521][T15544] do_syscall_64+0x134/0xf80 [ 1518.932206][T15544] ? clear_bhb_loop+0x50/0xa0 [ 1518.937003][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.943008][T15544] RIP: 0033:0x7f280b19c799 [ 1518.947509][T15544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.967428][T15544] RSP: 002b:00007f280c000028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.975942][T15544] RAX: ffffffffffffffda RBX: 00007f280b415fa0 RCX: 00007f280b19c799 [ 1518.984173][T15544] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 1518.992227][T15544] RBP: 00007f280b232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1519.000283][T15544] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1519.008337][T15544] R13: 00007f280b416038 R14: 00007f280b415fa0 R15: 00007ffcc129cbb8 [ 1519.016523][T15544] [ 1519.019936][T15544] Kernel Offset: disabled [ 1519.024401][T15544] Rebooting in 86400 seconds..