last executing test programs: 17.892661498s ago: executing program 3 (id=4114): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800835e00000000ffffff000800040000000000", @ANYRES32, @ANYBLOB="08001e0008000000"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000004c0)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000500)={0x0, r6}) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x2, 0x255, 0x0, r7}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2092e1, 0x400, 0x2002100, 0xf5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd0b, 0x400, 0xffffffff, 0x147, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x0, 0x1c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x100, 0x2, 0x235, 0x0, r7}}], 0x1, &(0x7f0000000ac0)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 15.253932713s ago: executing program 0 (id=4118): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r1, 0x0, 0x0, 0x2, 0x2000) msgsnd(r1, &(0x7f0000000140)={0x2}, 0x8, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x58, 0xe8, 0x1e, 0x10, 0x46d, 0x960, 0xc4e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xd, 0x80, 0x53, "", [{{0x9, 0x4, 0xab, 0xa, 0x0, 0x51, 0x4a, 0xd2, 0x8}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 14.53378195s ago: executing program 3 (id=4123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111}}, 0x20) r3 = landlock_create_ruleset(&(0x7f0000000540)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0xa) landlock_restrict_self(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000005c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000600)={0x1200, r4}, 0x0) landlock_restrict_self(r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_user\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) map_shadow_stack(&(0x7f0000489000/0x1000)=nil, 0x1000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r6, 0x80d}}, 0x48) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000004c0)={r7, 0xa, 0x9, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) 11.937227354s ago: executing program 0 (id=4127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000009c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x0, 0x63, 0x66, 0x3b00, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xff8d, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "d92f54eb8ad0d8b6b57f06"}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0xb, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0xff}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x3, 0x1, 0x1, 0x0, 0x3, 0x7b}, 0x2, {0x0, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}, 0x71) 11.695609097s ago: executing program 3 (id=4128): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800835e00000000ffffff000800040000000000", @ANYRES32, @ANYBLOB="08001e0008000000"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000004c0)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000500)={0x0, r6}) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x2, 0x255, 0x0, r7}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2092e1, 0x400, 0x2002100, 0xf5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd0b, 0x400, 0xffffffff, 0x147, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x0, 0x1c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x100, 0x2, 0x235, 0x0, r7}}], 0x1, &(0x7f0000000ac0)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 11.267286698s ago: executing program 4 (id=4129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e40), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001e80)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000001ec0)={0x84, @rand_addr=0x64010100, 0x4e24, 0x6, 'lblcr\x00', 0x4, 0x5, 0x166}, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000001f00), 0x7, 0x2) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001f40)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000001fc0)=0x0, &(0x7f0000002000)=0x0, &(0x7f0000002040)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000002080)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002100)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000002140)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000002180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000002200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x1e5, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8026, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0x240, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x301}}], 0x1, &(0x7f0000002480)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0xf, 0x0, 0x0, &(0x7f00000025c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001013010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d6574610000000014000280080001400000000108000240000000202c00018008000100636d700020000280080001400000000108000240000000000c0003800500010000000000300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001"], 0x154}}, 0x0) sendmsg$nl_generic(r12, &(0x7f0000001640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc653157942245f42}, 0xc, &(0x7f0000001600)={&(0x7f0000000440)={0x14, 0x29, 0x800, 0x70bd26, 0x25dfdbff, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 11.018619097s ago: executing program 0 (id=4130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, &(0x7f00000000c0)={0x9, 0x1, 0xa, 0x5, &(0x7f00000002c0)=[{}]}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045090}, 0x0) 9.587405075s ago: executing program 1 (id=4133): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000700)={0x2004}) unshare(0x400) pselect6(0x40, &(0x7f0000000040)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 9.356847677s ago: executing program 1 (id=4134): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f0000000080)={'vlan1\x00', @random="00009e0c1100"}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x0, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 9.160407609s ago: executing program 4 (id=4135): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000068affffffaf0000040000001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400ffffb702000008000000b703000002000000852000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0xffa, &(0x7f0000000e40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 9.122719469s ago: executing program 2 (id=4136): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x8}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045090}, 0x0) 8.96608189s ago: executing program 1 (id=4137): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, 0x0) socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000881) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) syz_open_dev$dri(&(0x7f00000003c0), 0xfffffffffffffffb, 0x2000) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc, "f1ff000b00020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000340)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x2, 'ovf\x00', 0x23, 0x40081, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) 8.96565651s ago: executing program 3 (id=4138): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.757480445s ago: executing program 4 (id=4139): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)='syzkaller\x00', 0x5, 0x72, &(0x7f0000000fc0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c, 0x0, 0x100000}, 0x94) 7.890379062s ago: executing program 1 (id=4140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000980)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000009c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800, 0x3b}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x66, 0x2c00, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0xb, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0xff}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x3, 0x1, 0x1, 0x0, 0x3, 0x7b}, 0x2, {0x0, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}, 0x66) 7.121271526s ago: executing program 4 (id=4141): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x122) fcntl$notify(r2, 0x402, 0x8000003d) mknod(&(0x7f0000000500)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000540)='./file0\x00', 0x0, 0x4) r3 = open$dir(&(0x7f0000000580)='./file0\x00', 0x1, 0x27) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x20000000000006) r5 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r5, r6, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505330, &(0x7f00000001c0)={{0x18}, {0x18}, 0x0, 0x7}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.517982235s ago: executing program 2 (id=4142): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800835e00000000ffffff000800040000000000", @ANYRES32, @ANYBLOB="08001e0008000000"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00') ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)) r4 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000500)={0x0, r4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x2, 0x255, 0x0, r5}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2092e1, 0x400, 0x2002100, 0xf5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd0b, 0x400, 0xffffffff, 0x147, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x0, 0x1c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x100, 0x2, 0x235, 0x0, r5}}], 0x1, &(0x7f0000000ac0)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 5.300512933s ago: executing program 1 (id=4143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000001740)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0485510, &(0x7f00000000c0)={0x9, 0x1, 0xa, 0x5, &(0x7f00000002c0)=[{}]}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001880)='n', 0x1) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket(0x15, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000019c0)={0x0, 0x0, 0xfd8b, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x20001, 0x18b) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045090}, 0x0) 5.124728239s ago: executing program 4 (id=4144): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800835e00000000ffffff000800040000000000", @ANYRES32, @ANYBLOB="08001e0008000000"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00') ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000500)={0x0, r4}) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 5.036447441s ago: executing program 0 (id=4145): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0xffffffffffffffef, &(0x7f0000000600)=[{&(0x7f0000000640)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000680)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300280000000046000000000000", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.475081218s ago: executing program 0 (id=4146): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x1901) rt_sigprocmask(0x1, &(0x7f00000006c0)={[0x70, 0x77f6]}, &(0x7f0000000800), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010033789f28dbac2868591257d4b5a15c00000000000000000300000a2c0000001d0a010400000000000000000a0000090900010073797a3100000000090002"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) r5 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000340)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) (async) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000440)={0x1, 0x1, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000440)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000480)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x8, 0x8, "fff30010"}, 0x3, 0x2, {&(0x7f0000000500)}, 0x400000}) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000540)=0x2) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000580)=0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f0000000240)="5e608bfe79def5b0fcdda5df233cf29b120fae7adb023b6fba38a844b8fd3b903315898efcda2b47034179b8802d6de066a04291290df66b71b2995c233e786116f2e2343593b32aef751dcb241d659e12dddda0f6827d9dd83f930a53bb1ac90d5520a37998ad354c99dd6f40872e5c09dcfeb479b8f37f2e4881f1b188cadf3d7c14ae7a606a96203ce7204b9f08f7f46e2cd853ee3bb7384f46227e9e470000000000000000000000006eac3b35290399ce53edb5765857cc2fff4672ace9c5c31fb605224268a2f2d51b26e1c5d2d0", 0xd1}], 0x2) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)='A', 0x1}, {&(0x7f0000000240)="5e608bfe79def5b0fcdda5df233cf29b120fae7adb023b6fba38a844b8fd3b903315898efcda2b47034179b8802d6de066a04291290df66b71b2995c233e786116f2e2343593b32aef751dcb241d659e12dddda0f6827d9dd83f930a53bb1ac90d5520a37998ad354c99dd6f40872e5c09dcfeb479b8f37f2e4881f1b188cadf3d7c14ae7a606a96203ce7204b9f08f7f46e2cd853ee3bb7384f46227e9e470000000000000000000000006eac3b35290399ce53edb5765857cc2fff4672ace9c5c31fb605224268a2f2d51b26e1c5d2d0", 0xd1}], 0x2) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x440006}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x20000800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x440006}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x20000800) 2.516692235s ago: executing program 4 (id=4147): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./file0\x00') ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000004c0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000500)={0x0, r5}) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x2, 0x255, 0x0, r6}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2092e1, 0x400, 0x2002100, 0xf5, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd0b, 0x400, 0xffffffff, 0x147, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x0, 0x1c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x100, 0x2, 0x235, 0x0, r6}}], 0x1, &(0x7f0000000ac0)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 2.036815676s ago: executing program 3 (id=4148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c00000010003704000000800000000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e0000003800028014000600200100000000000000000000000000021400070020010000000000000000000000000002040012"], 0x6c}}, 0x0) 1.989447248s ago: executing program 2 (id=4149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000009500000500000a70000000060a0104000000001f0000000a00000144000480400001800b0001007461726765740000300002800800024000000002140003007339f2179455afb9fdd672ba010000000d000100434f4e4e4d41524b000000000900020073797a32000000000900010073797a31"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.434782826s ago: executing program 2 (id=4150): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) unshare(0x22020400) eventfd2(0x0, 0x801) fanotify_init(0x200, 0x0) pselect6(0x40, &(0x7f0000000400)={0x5, 0x7}, 0x0, &(0x7f0000000440)={0x1f, 0xffffffffffffffff, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000480), 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006c00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&\x00l\t'], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000080)="15e0185428227964d1") r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010020, 0x0, 0x9}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x14, 0x10}, 0x20) 1.216361927s ago: executing program 1 (id=4151): syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaab9aabb86dd6000004600393afffe8000000000000000000000000000bbff0200000000000000000000000000018800907805000000fe80000000000018000000000000002a296b2beda7add700385601f8910201fef4b66989e61900"/111], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0xa4342, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0xfffffd86) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800835e00000000ffffff000800040000000000", @ANYRES32, @ANYBLOB="08001e0008000000"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1ffffd, 0xfffffe0000000001, 0x10fa11, 0xffe}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000004c0)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000500)={0x0, r6}) close(0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f00000007c0)={0x0, 0x1, 0x0, 0x2, 0x255, 0x0, r7}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2092e1, 0x400, 0x2002100, 0xf5, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd0b, 0x400, 0xffffffff, 0x147, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x0, 0x1c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x100, 0x2, 0x235, 0x0, r7}}], 0x1, &(0x7f0000000ac0)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 1.215921458s ago: executing program 3 (id=4152): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r5}}, 0x18) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7c", 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x0, 0x3c, 0x60, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0x3, 0x7}, @lsrr={0x83, 0x17, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4000000, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 1.053806208s ago: executing program 0 (id=4153): r0 = syz_open_dev$audion(0x0, 0x4539, 0x1c3601) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000001840), 0x2000, 0x0) sigaltstack(0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001880), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000018c0)={0x38, 0x5, 0x8, 0x3, 0x0, 0xc, 0x1, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0x225681, 0x0) sched_setattr(0x0, &(0x7f0000001900)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000bfd000/0x400000)=nil, r3, 0x4, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000001940)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000001980)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$cec(&(0x7f00000019c0), 0x0, 0x652c82) socket(0x5, 0x1, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001a00), 0x2002, 0x0) close(r7) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000001a40)={0xf1}) setsockopt(r5, 0x0, 0x482, &(0x7f0000001a80)="110000007f0000014e200000000000006d6800000000000000000200000000001000"/44, 0x2c) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 545.348202ms ago: executing program 2 (id=4154): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@updpolicy={0x138, 0x19, 0x1, 0x70bd28, 0x10, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @in=@local, 0x4e21, 0x0, 0xffff, 0x800, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x1, 0x80ffffffffffffff, 0x80}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4d3, 0x2b}, 0xa, @in=@private=0xa010102, 0x103502, 0x2, 0x0, 0xfb, 0xd, 0x7, 0xed7}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x8, 0x5, 0x10000, 0x48a81209}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004884}, 0x80) 0s ago: executing program 2 (id=4155): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x12, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000012000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) kernel console output (not intermixed with test programs): media entity 'dvb-demux' registered. [ 1074.753680][T12132] usb 5-1: Using ep0 maxpacket: 16 [ 1074.755519][T12132] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1074.758613][T12132] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1074.758647][T12132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1074.782182][T12132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.782266][T12132] usb 5-1: Product: syz [ 1074.782315][T12132] usb 5-1: Manufacturer: syz [ 1074.782365][T12132] usb 5-1: SerialNumber: syz [ 1074.807797][T12132] usb 5-1: config 0 descriptor?? [ 1074.842661][T12132] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1074.842730][T12132] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1075.115395][T16283] az6027: usb out operation failed. (-71) [ 1075.116958][T16283] az6027: usb out operation failed. (-71) [ 1075.116975][T16283] stb0899_attach: Driver disabled by Kconfig [ 1075.116986][T16283] az6027: no front-end attached [ 1075.116986][T16283] [ 1075.117406][T16283] az6027: usb out operation failed. (-71) [ 1075.117437][T16283] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1075.163566][T16283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input151 [ 1075.184237][T16283] dvb-usb: schedule remote query interval to 400 msecs. [ 1075.184269][T16283] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1075.197043][T16283] usb 4-1: USB disconnect, device number 31 [ 1075.236643][T12149] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1075.344873][T16283] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1075.427212][T12149] usb 1-1: Using ep0 maxpacket: 32 [ 1075.435073][T12149] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1075.447468][T12149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.454582][T12149] usb 1-1: config 0 descriptor?? [ 1075.679201][T12132] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1075.691975][T12132] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1075.698709][T12149] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1075.734752][T12149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1075.738941][T12149] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1075.738989][T12149] usb 1-1: media controller created [ 1075.798005][T12149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.112619][T12149] az6027: usb out operation failed. (-71) [ 1076.112954][T12149] az6027: usb out operation failed. (-71) [ 1076.112963][T12149] stb0899_attach: Driver disabled by Kconfig [ 1076.112971][T12149] az6027: no front-end attached [ 1076.112971][T12149] [ 1076.113269][T12149] az6027: usb out operation failed. (-71) [ 1076.113278][T12149] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1076.176558][T12149] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input152 [ 1076.214903][T12149] dvb-usb: schedule remote query interval to 400 msecs. [ 1076.214953][T12149] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1076.263400][T12149] usb 1-1: USB disconnect, device number 123 [ 1076.558119][T12149] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1076.742080][T12132] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1076.742106][T12132] em28xx 5-1:0.0: No AC97 audio processor [ 1076.960146][T12114] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1077.094157][ T31] bond1 (unregistering): Released all slaves [ 1077.120737][T12114] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 1077.122636][T12114] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1077.122668][T12114] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1077.126671][T12114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.126700][T12114] usb 4-1: Product: syz [ 1077.126716][T12114] usb 4-1: Manufacturer: syz [ 1077.126733][T12114] usb 4-1: SerialNumber: syz [ 1077.214747][T12114] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 1077.235601][T12114] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input153 [ 1077.235666][T12114] input input153: usb_submit_urb failed [ 1077.303033][T12114] input: failed to attach handler kbd to device input153, error: -5 [ 1077.307520][ T4988] input input153: usb_submit_urb failed [ 1077.327156][ T4988] input input153: usb_submit_urb failed [ 1077.348955][T12114] scsi host1: usb-storage 4-1:1.0 [ 1077.455740][T16493] usb 4-1: USB disconnect, device number 32 [ 1077.628171][ T31] tipc: Left network mode [ 1077.678096][ T31] IPVS: stopping backup sync thread 7518 ... [ 1077.900273][T16493] usb 5-1: USB disconnect, device number 55 [ 1077.901508][T16493] em28xx 5-1:0.0: Disconnecting em28xx [ 1078.011277][T18116] TC_ACT_REPEAT abuse ? [ 1078.031600][T16493] em28xx: Freeing device [ 1078.568202][T18129] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1078.619221][T18129] bond0: (slave lo): Enslaving as an active interface with an up link [ 1078.653875][T18129] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1079.300014][T12114] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1079.310008][T13407] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1079.329898][T12132] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1079.456511][ T31] veth1_macvtap: left promiscuous mode [ 1079.456546][ T31] veth0_macvtap: left promiscuous mode [ 1079.456628][ T31] veth1_vlan: left promiscuous mode [ 1079.456679][ T31] veth0_vlan: left promiscuous mode [ 1079.460122][T12114] usb 3-1: Using ep0 maxpacket: 32 [ 1079.464682][T13407] usb 4-1: New USB device found: idVendor=0af0, idProduct=6711, bcdDevice=0.00 [ 1079.471728][T12114] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1079.505499][T12132] usb 1-1: not running at top speed; connect to a high speed hub [ 1079.505587][T12132] usb 1-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 1079.508496][T12114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.539563][T12114] usb 3-1: config 0 descriptor?? [ 1079.542969][T12132] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.543311][T12132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.580454][T13407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 55, changing to 9 [ 1079.580489][T13407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 1079.584310][T13407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1079.584329][T13407] usb 4-1: Product: syz [ 1079.584340][T13407] usb 4-1: Manufacturer: syz [ 1079.666947][T12132] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 1079.667241][T12132] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 1079.782672][T12114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1079.798803][T12114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1079.814210][T12114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1079.814248][T12114] usb 3-1: media controller created [ 1079.862844][T12114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1080.488569][T12114] az6027: usb out operation failed. (-71) [ 1080.489721][T12114] az6027: usb out operation failed. (-71) [ 1080.505717][T12114] stb0899_attach: Driver disabled by Kconfig [ 1080.505749][T12114] az6027: no front-end attached [ 1080.505749][T12114] [ 1080.506449][T12114] az6027: usb out operation failed. (-71) [ 1080.506466][T12114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1080.548000][T12114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input154 [ 1080.581723][T12114] dvb-usb: schedule remote query interval to 400 msecs. [ 1080.581750][T12114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1080.585847][T12114] usb 3-1: USB disconnect, device number 59 [ 1080.691286][T12114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1081.280284][T12114] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1081.430832][T12114] usb 2-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1081.437057][T12114] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1081.437090][T12114] usb 2-1: config 5 has no interface number 0 [ 1081.437140][T12114] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1081.437175][T12114] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1081.437216][T12114] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1081.513965][T12114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.513987][T12114] usb 2-1: Product: syz [ 1081.513999][T12114] usb 2-1: Manufacturer: syz [ 1081.514010][T12114] usb 2-1: SerialNumber: syz [ 1081.823036][T18159] loop4: detected capacity change from 0 to 7 [ 1081.909717][T18159] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1081.918706][T18159] loop4: partition table partially beyond EOD, truncated [ 1081.919134][T18159] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1082.301146][T12132] usb 1-1: USB disconnect, device number 124 [ 1082.364532][T13407] usb 4-1: USB disconnect, device number 33 [ 1082.380770][T12123] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1082.554389][T12123] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1082.586456][T12123] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.586486][T12123] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1082.586509][T12123] usb 3-1: config 1 has no interface number 0 [ 1082.587070][T12123] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1082.587102][T12123] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1082.587128][T12123] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1082.587183][T12123] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1082.602942][T12123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.603054][T12123] usb 3-1: Product: syz [ 1082.603114][T12123] usb 3-1: Manufacturer: syz [ 1082.603230][T12123] usb 3-1: SerialNumber: syz [ 1082.707661][T18163] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1082.945875][T18168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1083.093971][ T31] IPVS: stop unused estimator thread 0... [ 1083.362430][T12123] cdc_ncm 3-1:1.1: bind() failure [ 1084.350276][T16493] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1084.500127][T16493] usb 1-1: Using ep0 maxpacket: 32 [ 1084.503020][T16493] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1084.531874][T16493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.550611][T16493] usb 1-1: config 0 descriptor?? [ 1084.836379][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1084.866175][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1084.890125][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1084.890166][T16493] usb 1-1: media controller created [ 1084.991497][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1085.085823][T12123] usb 3-1: USB disconnect, device number 60 [ 1085.336714][T16493] az6027: usb out operation failed. (-71) [ 1085.342553][T16493] az6027: usb out operation failed. (-71) [ 1085.342605][T16493] stb0899_attach: Driver disabled by Kconfig [ 1085.342639][T16493] az6027: no front-end attached [ 1085.342639][T16493] [ 1085.361789][T16493] az6027: usb out operation failed. (-71) [ 1085.361903][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1085.410486][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input155 [ 1085.432782][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1085.432805][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1085.458095][T16493] usb 1-1: USB disconnect, device number 125 [ 1085.675993][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1085.802751][T12114] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1085.857763][T12114] usb 2-1: USB disconnect, device number 53 [ 1086.607193][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1086.638075][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1086.939004][T18210] syz_tun: entered promiscuous mode [ 1086.939593][T18210] vlan2: entered promiscuous mode [ 1086.996516][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3850'. [ 1088.023596][T12114] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1088.171493][T12114] usb 3-1: Using ep0 maxpacket: 32 [ 1088.174894][T12114] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1088.175936][T12114] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1088.175953][T12114] usb 3-1: config 0 has no interface number 0 [ 1088.175988][T12114] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1088.176007][T12114] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1088.233589][T12114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.233619][T12114] usb 3-1: Product: syz [ 1088.233636][T12114] usb 3-1: Manufacturer: syz [ 1088.233665][T12114] usb 3-1: SerialNumber: syz [ 1088.268561][T12114] usb 3-1: config 0 descriptor?? [ 1088.343982][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.344478][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.575540][T12132] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1088.740762][T12132] usb 2-1: Using ep0 maxpacket: 8 [ 1088.741578][T12132] usb 2-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1088.746236][T12132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.746265][T12132] usb 2-1: Product: syz [ 1088.746280][T12132] usb 2-1: Manufacturer: syz [ 1088.746295][T12132] usb 2-1: SerialNumber: syz [ 1088.803104][T12132] usb 2-1: config 0 descriptor?? [ 1089.031836][T12132] usb read operation failed. (-71) [ 1089.033506][T12132] usb write operation failed. (-71) [ 1089.034199][T12132] usb write operation failed. (-71) [ 1089.037331][T12132] usb write operation failed. (-71) [ 1089.037351][T12132] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1089.038871][T12132] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1089.038895][T12132] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1089.092365][T12114] appletouch 3-1:0.85: Geyser mode initialized. [ 1089.113237][T12114] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input156 [ 1089.119571][ C0] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1089.159112][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1089.159130][T18238] openvswitch: netlink: Flow actions attr not present in new flow. [ 1089.350050][T12114] usb 3-1: USB disconnect, device number 61 [ 1089.373574][T12114] appletouch 3-1:0.85: input: appletouch disconnected [ 1089.416889][T18241] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 1089.428489][T18241] syzkaller0: entered promiscuous mode [ 1089.428514][T18241] syzkaller0: entered allmulticast mode [ 1089.450153][T18241] tipc: Enabled bearer , priority 0 [ 1089.454310][T18240] tipc: Resetting bearer [ 1089.504068][T12149] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1089.505666][T18240] tipc: Disabling bearer [ 1089.607512][T18243] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 1089.652180][T12149] usb 5-1: Using ep0 maxpacket: 32 [ 1089.654950][T12149] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1089.657947][T12149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.682651][T12149] usb 5-1: config 0 descriptor?? [ 1089.907964][T12149] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1089.925791][T12149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.931823][T12149] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1089.931988][T12149] usb 5-1: media controller created [ 1089.995586][T12149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.049876][T13407] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1090.201387][T13407] usb 4-1: Using ep0 maxpacket: 32 [ 1090.202809][T13407] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1090.204195][T13407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.237616][T13407] usb 4-1: config 0 descriptor?? [ 1090.285415][T12149] az6027: usb out operation failed. (-71) [ 1090.285915][T12149] az6027: usb out operation failed. (-71) [ 1090.285926][T12149] stb0899_attach: Driver disabled by Kconfig [ 1090.285933][T12149] az6027: no front-end attached [ 1090.285933][T12149] [ 1090.286230][T12149] az6027: usb out operation failed. (-71) [ 1090.286239][T12149] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1090.325163][T12149] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input157 [ 1090.351809][T12149] dvb-usb: schedule remote query interval to 400 msecs. [ 1090.351828][T12149] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1090.382367][T12149] usb 5-1: USB disconnect, device number 56 [ 1090.390637][ T6158] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1090.459085][T13407] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1090.485507][T13407] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1090.487979][T13407] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1090.488053][T13407] usb 4-1: media controller created [ 1090.603393][T13407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.721719][T12149] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1091.312004][T13407] az6027: usb out operation failed. (-71) [ 1091.314781][T13407] az6027: usb out operation failed. (-71) [ 1091.314811][T13407] stb0899_attach: Driver disabled by Kconfig [ 1091.314823][T13407] az6027: no front-end attached [ 1091.314823][T13407] [ 1091.316334][T13407] az6027: usb out operation failed. (-71) [ 1091.316351][T13407] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1091.365796][T13407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input158 [ 1091.378757][T13407] dvb-usb: schedule remote query interval to 400 msecs. [ 1091.378889][T13407] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1091.414053][T13407] usb 4-1: USB disconnect, device number 34 [ 1091.525806][T13407] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1092.359934][T12112] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1092.520666][T12112] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1092.547848][T12112] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1092.547920][T12112] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1092.547951][T12112] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.594636][T12112] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1092.594691][T12112] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1092.594711][T12112] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.621679][T12112] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1092.621734][T12112] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1092.621764][T12112] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.677874][T12112] usb 4-1: string descriptor 0 read error: -22 [ 1092.678034][T12112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.723510][T12112] adutux 4-1:168.0: interrupt endpoints not found [ 1092.943063][T12114] usb 4-1: USB disconnect, device number 35 [ 1092.960267][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1092.964558][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1093.159054][T18279] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 1093.169554][T12112] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1093.180640][T18279] syzkaller0: entered promiscuous mode [ 1093.180663][T18279] syzkaller0: entered allmulticast mode [ 1093.209611][T18279] tipc: Started in network mode [ 1093.209633][T18279] tipc: Node identity 768ecf76e14f, cluster identity 4711 [ 1093.212179][T18279] tipc: Enabled bearer , priority 0 [ 1093.241371][T18278] tipc: Resetting bearer [ 1093.316781][T18278] tipc: Disabling bearer [ 1093.325672][T12112] usb 5-1: Using ep0 maxpacket: 32 [ 1093.332105][T12112] usb 5-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1093.334248][T12112] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.334273][T12112] usb 5-1: config 0 has no interfaces? [ 1093.334304][T12112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.337848][T12112] usb 5-1: config 0 descriptor?? [ 1093.595689][T18275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.596002][T18275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.718613][T12148] usb 5-1: USB disconnect, device number 57 [ 1094.049980][T16493] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1094.220988][T16493] usb 4-1: Using ep0 maxpacket: 32 [ 1094.221902][T16493] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1094.223832][T16493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.257508][T16493] usb 4-1: config 0 descriptor?? [ 1094.490640][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1094.498689][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1094.520942][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1094.521001][T16493] usb 4-1: media controller created [ 1094.594658][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.694642][T16493] az6027: usb out operation failed. (-71) [ 1095.695068][T16493] az6027: usb out operation failed. (-71) [ 1095.695086][T16493] stb0899_attach: Driver disabled by Kconfig [ 1095.695099][T16493] az6027: no front-end attached [ 1095.695099][T16493] [ 1095.695478][T16493] az6027: usb out operation failed. (-71) [ 1095.695508][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1095.697914][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input159 [ 1095.761673][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1095.761690][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1095.767729][T16493] usb 4-1: USB disconnect, device number 36 [ 1095.866785][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1096.880192][T16493] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1097.043458][T16493] usb 3-1: Using ep0 maxpacket: 32 [ 1097.057751][T16493] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1097.073003][T16493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.088516][T16493] usb 3-1: config 0 descriptor?? [ 1097.254177][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1097.313221][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1097.318773][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1097.339312][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1097.339390][T16493] usb 3-1: media controller created [ 1097.380619][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1097.478858][T18329] netlink: 'syz.0.3885': attribute type 3 has an invalid length. [ 1097.704774][T16493] az6027: usb out operation failed. (-71) [ 1097.705145][T16493] az6027: usb out operation failed. (-71) [ 1097.705155][T16493] stb0899_attach: Driver disabled by Kconfig [ 1097.705162][T16493] az6027: no front-end attached [ 1097.705162][T16493] [ 1097.705504][T16493] az6027: usb out operation failed. (-71) [ 1097.705536][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1097.754347][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input160 [ 1097.777994][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1097.778010][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1097.819292][T16493] usb 3-1: USB disconnect, device number 63 [ 1097.952245][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1098.010976][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 1098.072949][T18349] TC_ACT_REPEAT abuse ? [ 1098.115267][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1098.115293][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1099.081621][T16493] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1099.230221][T16493] usb 3-1: Using ep0 maxpacket: 32 [ 1099.231112][T16493] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1099.232356][T16493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.240562][T16493] usb 3-1: config 0 descriptor?? [ 1099.490281][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1099.525891][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.543786][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1099.543844][T16493] usb 3-1: media controller created [ 1099.592031][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.858600][T16493] az6027: usb out operation failed. (-71) [ 1099.859140][T16493] az6027: usb out operation failed. (-71) [ 1099.859153][T16493] stb0899_attach: Driver disabled by Kconfig [ 1099.859160][T16493] az6027: no front-end attached [ 1099.859160][T16493] [ 1099.887447][T16493] az6027: usb out operation failed. (-71) [ 1099.887462][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1099.905029][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input161 [ 1099.929696][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1099.929715][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1099.948059][T16493] usb 3-1: USB disconnect, device number 64 [ 1100.188010][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1101.049879][T12148] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1101.185503][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 1101.230567][T12148] usb 4-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 1101.258281][T12148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.258334][T12148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.258363][T12148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.258386][T12148] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.258431][T12148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.537655][T18389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.556266][T18389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.621980][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622017][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622045][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622077][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622104][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622130][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622156][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622182][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622208][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.622234][T12148] lg-g15 0003:046D:C222.001A: unknown main item tag 0x0 [ 1101.652367][T12148] lg-g15 0003:046D:C222.001A: unbalanced collection at end of report description [ 1101.734541][T12148] lg-g15 0003:046D:C222.001A: probe with driver lg-g15 failed with error -22 [ 1101.782552][T12112] usb 4-1: USB disconnect, device number 37 [ 1102.255666][T18420] geneve2: entered promiscuous mode [ 1102.367239][T18422] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3910'. [ 1102.680158][T12148] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1102.743767][T18429] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 1102.851736][T12148] usb 5-1: Using ep0 maxpacket: 32 [ 1102.863207][T12148] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1102.884056][T12148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.905434][T12148] usb 5-1: config 0 descriptor?? [ 1103.115890][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1103.131295][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1103.134206][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1103.134244][T12148] usb 5-1: media controller created [ 1103.232306][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.632908][T12148] az6027: usb out operation failed. (-71) [ 1103.649300][T12148] az6027: usb out operation failed. (-71) [ 1103.649320][T12148] stb0899_attach: Driver disabled by Kconfig [ 1103.649332][T12148] az6027: no front-end attached [ 1103.649332][T12148] [ 1103.664562][T12148] az6027: usb out operation failed. (-71) [ 1103.664618][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1103.705455][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input162 [ 1103.726663][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1103.726682][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1103.751862][T12148] usb 5-1: USB disconnect, device number 58 [ 1103.942155][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1105.613806][T18474] tipc: Enabling of bearer rejected, failed to enable media [ 1105.702584][T18478] Invalid argument reading file caps for ./file0 [ 1106.155269][T18485] geneve2: entered promiscuous mode [ 1106.214824][T18488] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1106.420130][T16493] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1106.584185][T16493] usb 3-1: Using ep0 maxpacket: 32 [ 1106.602295][T16493] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 1106.606763][T16493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.606796][T16493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.606838][T16493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.659271][T16493] usb 3-1: config 0 descriptor?? [ 1107.314563][T16493] hid_parser_main: 18 callbacks suppressed [ 1107.314584][T16493] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 1107.314608][T16493] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 1107.518763][T18490] netlink: 2428 bytes leftover after parsing attributes in process `syz.2.3930'. [ 1107.518784][T18490] openvswitch: netlink: Flow key attr not present in new flow. [ 1107.582532][T16493] ft260 0003:0403:6030.001B: failed to retrieve chip version [ 1107.582819][T16493] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -71 [ 1107.622502][T16493] usb 3-1: USB disconnect, device number 65 [ 1108.889888][T16493] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1108.970019][T12112] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1109.061496][T16493] usb 4-1: Using ep0 maxpacket: 32 [ 1109.062243][T16493] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1109.063571][T16493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.065702][T16493] usb 4-1: config 0 descriptor?? [ 1109.129983][T12112] usb 3-1: Using ep0 maxpacket: 32 [ 1109.131759][T12112] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1109.132851][T12112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.135272][T12112] usb 3-1: config 0 descriptor?? [ 1109.279353][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1109.309398][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1109.322107][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1109.322167][T16493] usb 4-1: media controller created [ 1109.343109][T12112] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1109.364343][T12112] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1109.368139][T12112] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1109.368178][T12112] usb 3-1: media controller created [ 1109.447376][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1109.613748][T12112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.525152][T16493] az6027: usb out operation failed. (-71) [ 1110.529297][T16493] az6027: usb out operation failed. (-71) [ 1110.529320][T16493] stb0899_attach: Driver disabled by Kconfig [ 1110.529330][T16493] az6027: no front-end attached [ 1110.529330][T16493] [ 1110.549648][T16493] az6027: usb out operation failed. (-71) [ 1110.549699][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1110.582813][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input163 [ 1110.608457][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1110.608492][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1110.642406][T16493] usb 4-1: USB disconnect, device number 38 [ 1110.914217][T12112] az6027: usb out operation failed. (-71) [ 1110.927979][T12112] az6027: usb out operation failed. (-71) [ 1110.927998][T12112] stb0899_attach: Driver disabled by Kconfig [ 1110.928011][T12112] az6027: no front-end attached [ 1110.928011][T12112] [ 1110.928413][T12112] az6027: usb out operation failed. (-71) [ 1110.928429][T12112] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1110.978906][T12112] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input164 [ 1111.006806][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1111.008338][T12112] dvb-usb: schedule remote query interval to 400 msecs. [ 1111.008361][T12112] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1111.055553][T12112] usb 3-1: USB disconnect, device number 66 [ 1111.265359][T18517] syzkaller0: entered promiscuous mode [ 1111.265378][T18517] syzkaller0: entered allmulticast mode [ 1111.328377][T18517] tipc: Enabled bearer , priority 0 [ 1111.348609][T12112] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1111.361935][T18516] tipc: Resetting bearer [ 1111.519260][T18516] tipc: Disabling bearer [ 1112.350574][T16493] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1112.505866][T16493] usb 5-1: New USB device found: idVendor=0079, idProduct=c909, bcdDevice=eb.cf [ 1112.536247][T16493] usb 5-1: config 253 has an invalid interface number: 198 but max is 0 [ 1112.536269][T16493] usb 5-1: config 253 has no interface number 0 [ 1112.536298][T16493] usb 5-1: config 253 interface 198 altsetting 5 endpoint 0x2 has invalid maxpacket 479, setting to 64 [ 1112.536319][T16493] usb 5-1: config 253 interface 198 altsetting 5 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1112.536368][T16493] usb 5-1: config 253 interface 198 altsetting 5 endpoint 0xE has invalid wMaxPacketSize 0 [ 1112.536406][T16493] usb 5-1: config 253 interface 198 has no altsetting 0 [ 1112.618580][T16493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.618613][T16493] usb 5-1: Product: syz [ 1112.618624][T16493] usb 5-1: Manufacturer: syz [ 1112.618634][T16493] usb 5-1: SerialNumber: syz [ 1112.763381][T18541] FAULT_INJECTION: forcing a failure. [ 1112.763381][T18541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.763433][T18541] CPU: 0 UID: 0 PID: 18541 Comm: syz.1.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.763462][T18541] Tainted: [L]=SOFTLOCKUP [ 1112.763470][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1112.763484][T18541] Call Trace: [ 1112.763493][T18541] [ 1112.763506][T18541] dump_stack_lvl+0xe8/0x150 [ 1112.763539][T18541] should_fail_ex+0x3eb/0x540 [ 1112.763588][T18541] _copy_to_user+0x31/0xb0 [ 1112.763621][T18541] simple_read_from_buffer+0xe1/0x170 [ 1112.763654][T18541] proc_fail_nth_read+0x1bb/0x230 [ 1112.763689][T18541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1112.763733][T18541] ? rw_verify_area+0x24a/0x4c0 [ 1112.763765][T18541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1112.763798][T18541] vfs_read+0x213/0xa80 [ 1112.763835][T18541] ? __pfx_vfs_read+0x10/0x10 [ 1112.763862][T18541] ? mctp_setsockopt+0x12b/0x220 [ 1112.764008][T18541] ? fdget+0x16b/0x250 [ 1112.764048][T18541] ksys_read+0x150/0x270 [ 1112.764076][T18541] ? do_sock_setsockopt+0x185/0x1b0 [ 1112.764103][T18541] ? __pfx_ksys_read+0x10/0x10 [ 1112.764135][T18541] ? asm_int80_emulation+0x1a/0x20 [ 1112.764161][T18541] do_int80_emulation+0x198/0x500 [ 1112.764181][T18541] ? trace_irq_disable+0x3b/0x140 [ 1112.764227][T18541] ? asm_int80_emulation+0x1a/0x20 [ 1112.764251][T18541] ? clear_bhb_loop+0x70/0xc0 [ 1112.764272][T18541] ? clear_bhb_loop+0x70/0xc0 [ 1112.764298][T18541] asm_int80_emulation+0x1a/0x20 [ 1112.764319][T18541] RIP: 0023:0xf71677ab [ 1112.764333][T18541] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1112.764347][T18541] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1112.764387][T18541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 1112.764404][T18541] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1112.764416][T18541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.764429][T18541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1112.764443][T18541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.764475][T18541] [ 1113.060565][T16493] usb 5-1: USB disconnect, device number 59 [ 1113.522443][T12149] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1113.683530][T12149] usb 1-1: Using ep0 maxpacket: 32 [ 1113.684319][T12149] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1113.685805][T12149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.722542][T12149] usb 1-1: config 0 descriptor?? [ 1113.973004][T12149] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1113.991880][T12149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1113.992656][T12149] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1113.992693][T12149] usb 1-1: media controller created [ 1114.091850][T12149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.336862][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3950'. [ 1114.416447][T12149] az6027: usb out operation failed. (-71) [ 1114.418035][T12149] az6027: usb out operation failed. (-71) [ 1114.418048][T12149] stb0899_attach: Driver disabled by Kconfig [ 1114.418055][T12149] az6027: no front-end attached [ 1114.418055][T12149] [ 1114.418424][T12149] az6027: usb out operation failed. (-71) [ 1114.418435][T12149] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1114.464506][T12149] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input165 [ 1114.487019][T12149] dvb-usb: schedule remote query interval to 400 msecs. [ 1114.487036][T12149] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1114.514173][T12149] usb 1-1: USB disconnect, device number 126 [ 1114.933616][T12149] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1115.791105][T12149] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1115.941246][T12149] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1115.959429][T12149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.959454][T12149] usb 5-1: Product: syz [ 1115.959468][T12149] usb 5-1: Manufacturer: syz [ 1115.959483][T12149] usb 5-1: SerialNumber: syz [ 1116.085247][T12149] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.181778][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.181866][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.275582][T16493] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1116.443996][T16493] usb 3-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 1116.445268][T16493] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1116.445302][T16493] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1116.509699][T16493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.509826][T16493] usb 3-1: Product: syz [ 1116.509843][T16493] usb 3-1: Manufacturer: syz [ 1116.509859][T16493] usb 3-1: SerialNumber: syz [ 1116.857348][T16493] kaweth 3-1:1.0: Firmware present in device. [ 1117.016578][T16493] kaweth 3-1:1.0: Statistics collection: 0 [ 1117.016604][T16493] kaweth 3-1:1.0: Multicast filter limit: 0 [ 1117.016621][T16493] kaweth 3-1:1.0: MTU: 0 [ 1117.016635][T16493] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1117.140445][T12149] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1117.140740][T12149] ath9k_htc: Failed to initialize the device [ 1117.197462][T12149] usb 5-1: ath9k_htc: USB layer deinitialized [ 1117.435307][T12123] usb 5-1: USB disconnect, device number 60 [ 1117.803644][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1117.831145][T12112] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1117.894588][T18593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.906936][T18593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.981288][T12112] usb 4-1: Using ep0 maxpacket: 32 [ 1117.982136][T12112] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1117.984853][T12112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.016183][T12112] usb 4-1: config 0 descriptor?? [ 1118.070059][T12123] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1118.221547][T12123] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1118.233907][T12123] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1118.233946][T12123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.254487][T12123] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1118.254642][T12123] usb 1-1: Manufacturer: syz [ 1118.285748][T12123] usb 1-1: config 0 descriptor?? [ 1118.296460][T12112] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1118.308848][T12112] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1118.320445][T12112] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1118.320490][T12112] usb 4-1: media controller created [ 1118.406977][T12112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.500019][T12123] rc_core: IR keymap rc-hauppauge not found [ 1118.500034][T12123] Registered IR keymap rc-empty [ 1118.501193][T12123] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1118.513802][T12149] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1118.553487][T12123] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input166 [ 1118.593852][T18592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.594310][T18592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.690110][T12149] usb 5-1: Using ep0 maxpacket: 32 [ 1118.691712][T12149] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1118.693817][T12149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.728350][T12149] usb 5-1: config 0 descriptor?? [ 1118.734751][T12123] usb 1-1: USB disconnect, device number 127 [ 1118.963336][T12149] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1118.980193][T12149] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1118.983714][T12149] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1118.983770][T12149] usb 5-1: media controller created [ 1119.062946][T12149] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1119.324916][T12149] az6027: usb out operation failed. (-71) [ 1119.325478][T12149] az6027: usb out operation failed. (-71) [ 1119.325493][T12149] stb0899_attach: Driver disabled by Kconfig [ 1119.325505][T12149] az6027: no front-end attached [ 1119.325505][T12149] [ 1119.337170][T12149] az6027: usb out operation failed. (-71) [ 1119.337183][T12149] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1119.387653][T12149] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input167 [ 1119.421961][T12149] dvb-usb: schedule remote query interval to 400 msecs. [ 1119.421996][T12149] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1119.449462][T12149] usb 5-1: USB disconnect, device number 61 [ 1119.564850][T12112] az6027: usb out operation failed. (-71) [ 1119.568996][T12112] az6027: usb out operation failed. (-71) [ 1119.569009][T12112] stb0899_attach: Driver disabled by Kconfig [ 1119.569034][T12112] az6027: no front-end attached [ 1119.569034][T12112] [ 1119.572155][T12112] az6027: usb out operation failed. (-71) [ 1119.572199][T12112] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1119.647505][T12112] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input168 [ 1119.679319][T12112] dvb-usb: schedule remote query interval to 400 msecs. [ 1119.679346][T12112] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1119.713997][T12149] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1119.731612][T12112] usb 4-1: USB disconnect, device number 39 [ 1119.917534][T12112] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1120.100755][T18614] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 1120.102593][T18614] pim6reg0: tun_chr_ioctl cmd 35111 [ 1121.096776][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.097267][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.168744][T16493] kaweth 3-1:1.0: Error setting SOFS wait [ 1121.168989][T16493] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 1121.206923][T16493] usb 3-1: USB disconnect, device number 67 [ 1121.321385][T13407] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1121.425245][T18637] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1121.470324][T13407] usb 4-1: Using ep0 maxpacket: 16 [ 1121.471132][T13407] usb 4-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1121.472185][T13407] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.472217][T13407] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1121.525137][T13407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.525178][T13407] usb 4-1: Product: syz [ 1121.525195][T13407] usb 4-1: Manufacturer: syz [ 1121.525213][T13407] usb 4-1: SerialNumber: syz [ 1121.559319][T13407] usb 4-1: config 0 descriptor?? [ 1123.888326][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1124.113623][T13407] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input169 [ 1124.238044][T13407] imon:send_packet: packet tx failed (-71) [ 1124.250352][T13407] imon 4-1:0.0: panel buttons/knobs setup failed [ 1124.524976][T13407] rc_core: IR keymap rc-imon-pad not found [ 1124.524998][T13407] Registered IR keymap rc-empty [ 1124.525134][T13407] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1124.525155][T13407] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1124.527202][T13407] imon:send_packet: packet tx failed (-71) [ 1124.542611][T13407] imon 4-1:0.0: remote input dev register failed [ 1124.542822][T13407] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1124.903750][T13407] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1124.936783][T13407] usb 4-1: USB disconnect, device number 40 [ 1125.269877][T13407] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1125.427372][T12112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1125.452470][T13407] usb 4-1: Using ep0 maxpacket: 32 [ 1125.453807][T13407] usb 4-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1125.456750][T13407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.504892][T13407] usb 4-1: config 0 descriptor?? [ 1125.528022][T13407] as10x_usb: device has been detected [ 1125.538094][T13407] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1125.594992][T13407] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1125.609812][T12112] usb 1-1: Using ep0 maxpacket: 32 [ 1125.610590][T12112] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1125.611801][T12112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.654481][T12112] usb 1-1: config 0 descriptor?? [ 1125.658890][T13407] as10x_usb: error during firmware upload part1 [ 1125.674441][T13407] Registered device nBox DVB-T Dongle [ 1125.831520][T18658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.851407][T18658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.867627][T12112] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1125.880598][T12112] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1125.882129][T12112] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1125.882166][T12112] usb 1-1: media controller created [ 1125.926177][T12112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1125.991623][T12148] usb 4-1: USB disconnect, device number 41 [ 1126.054501][T12148] Unregistered device nBox DVB-T Dongle [ 1126.061919][T12148] as10x_usb: device has been disconnected [ 1126.224953][T12112] az6027: usb out operation failed. (-71) [ 1126.225487][T12112] az6027: usb out operation failed. (-71) [ 1126.225503][T12112] stb0899_attach: Driver disabled by Kconfig [ 1126.225513][T12112] az6027: no front-end attached [ 1126.225513][T12112] [ 1126.227693][T12112] az6027: usb out operation failed. (-71) [ 1126.227705][T12112] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1126.270482][T12112] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input171 [ 1126.294483][T12112] dvb-usb: schedule remote query interval to 400 msecs. [ 1126.294509][T12112] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1126.316987][T12112] usb 1-1: USB disconnect, device number 2 [ 1126.467864][T12112] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1126.614765][T18682] tipc: Failed to remove unknown binding: 66,0,0/2525722827:3363150212/3363150213 [ 1126.615109][T18682] tipc: Failed to remove unknown binding: 66,0,0/2525722827:3363150212/3363150213 [ 1126.773304][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1127.479886][T12123] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1127.629976][T12123] usb 1-1: Using ep0 maxpacket: 32 [ 1127.632734][T12123] usb 1-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1127.634788][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.638459][T12123] usb 1-1: config 0 descriptor?? [ 1127.684499][T12123] as10x_usb: device has been detected [ 1127.685758][T12123] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1127.715984][T12123] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1127.737325][T12123] as10x_usb: error during firmware upload part1 [ 1127.738020][T12123] Registered device nBox DVB-T Dongle [ 1127.851012][T18700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.851515][T18700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.853834][T18700] FAULT_INJECTION: forcing a failure. [ 1127.853834][T18700] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.853866][T18700] CPU: 1 UID: 0 PID: 18700 Comm: syz.0.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.853894][T18700] Tainted: [L]=SOFTLOCKUP [ 1127.853903][T18700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1127.853916][T18700] Call Trace: [ 1127.853925][T18700] [ 1127.853934][T18700] dump_stack_lvl+0xe8/0x150 [ 1127.853980][T18700] should_fail_ex+0x3eb/0x540 [ 1127.854013][T18700] should_failslab+0xa8/0x100 [ 1127.854048][T18700] __kmalloc_cache_noprof+0x9e/0x600 [ 1127.854077][T18700] ? nsim_fib_event_nb+0x185/0x11d0 [ 1127.854193][T18700] ? nsim_fib_event_nb+0x185/0x11d0 [ 1127.854228][T18700] nsim_fib_event_nb+0x185/0x11d0 [ 1127.854260][T18700] ? lock_acquire+0x115/0x350 [ 1127.854295][T18700] notifier_call_chain+0x1a5/0x3d0 [ 1127.854325][T18700] ? atomic_notifier_call_chain+0x26/0x180 [ 1127.854354][T18700] atomic_notifier_call_chain+0xda/0x180 [ 1127.854400][T18700] call_fib_notifiers+0x31/0x60 [ 1127.854483][T18700] fib6_add_rt2node+0x15f3/0x3940 [ 1127.854596][T18700] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 1127.854630][T18700] ? fib6_add_1+0xd74/0x13e0 [ 1127.854675][T18700] fib6_add+0x9ae/0x1a20 [ 1127.854717][T18700] ? __pfx_fib6_add+0x10/0x10 [ 1127.854755][T18700] ? ip6_route_add+0xc9/0x1b0 [ 1127.854813][T18700] ip6_route_add+0xde/0x1b0 [ 1127.854842][T18700] ipv6_route_ioctl+0x393/0x4e0 [ 1127.854874][T18700] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1127.854925][T18700] ? __might_fault+0xaf/0x130 [ 1127.854951][T18700] inet6_compat_ioctl+0x3b1/0x3c0 [ 1127.854978][T18700] ? __pfx_inet6_compat_ioctl+0x10/0x10 [ 1127.855024][T18700] compat_sock_ioctl+0x179/0xcc0 [ 1127.855061][T18700] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1127.855094][T18700] ? __lock_acquire+0x747/0x2de0 [ 1127.855126][T18700] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1127.855163][T18700] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1127.855200][T18700] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1127.855231][T18700] ? kmem_cache_free+0x182/0x650 [ 1127.855266][T18700] ? lock_acquire+0x115/0x350 [ 1127.855311][T18700] ? __might_fault+0xaf/0x130 [ 1127.855337][T18700] __do_fast_syscall_32+0x28b/0x6c0 [ 1127.855368][T18700] ? do_fast_syscall_32+0x33/0x70 [ 1127.855393][T18700] ? asm_int80_emulation+0x1a/0x20 [ 1127.855415][T18700] ? do_int80_emulation+0x299/0x500 [ 1127.855450][T18700] ? trace_irq_disable+0x3b/0x140 [ 1127.855487][T18700] do_fast_syscall_32+0x33/0x70 [ 1127.855527][T18700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1127.855554][T18700] RIP: 0023:0xf7f43f1c [ 1127.855574][T18700] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1127.855593][T18700] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1127.855617][T18700] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000890b [ 1127.855633][T18700] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1127.855647][T18700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1127.855660][T18700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1127.855674][T18700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1127.855707][T18700] [ 1127.950224][T18697] kvm: pic: level sensitive irq not supported [ 1127.961391][T18697] kvm: pic: non byte write [ 1128.284000][T13407] usb 1-1: USB disconnect, device number 3 [ 1128.342101][T13407] Unregistered device nBox DVB-T Dongle [ 1128.354644][T13407] as10x_usb: device has been disconnected [ 1131.774956][T18738] tipc: Failed to remove unknown binding: 66,0,0/0:664608147/664608148 [ 1131.778409][T18738] tipc: Failed to remove unknown binding: 66,0,0/0:664608147/664608148 [ 1132.139944][T12123] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1132.293446][T12123] usb 1-1: Using ep0 maxpacket: 32 [ 1132.294571][T12123] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1132.295901][T12123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.331701][T12123] usb 1-1: config 0 descriptor?? [ 1132.551140][T12123] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1132.556947][T12123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1132.576452][T16493] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1132.584633][T12123] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1132.584712][T12123] usb 1-1: media controller created [ 1132.640994][T12123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.752573][T16493] usb 4-1: Using ep0 maxpacket: 32 [ 1132.753508][T16493] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1132.755580][T16493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.784399][T16493] usb 4-1: config 0 descriptor?? [ 1132.854228][T18747] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4000'. [ 1132.995012][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1133.011246][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1133.017399][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1133.017478][T16493] usb 4-1: media controller created [ 1133.074184][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.364758][T16493] az6027: usb out operation failed. (-71) [ 1133.377984][T16493] az6027: usb out operation failed. (-71) [ 1133.377998][T16493] stb0899_attach: Driver disabled by Kconfig [ 1133.378006][T16493] az6027: no front-end attached [ 1133.378006][T16493] [ 1133.385473][T16493] az6027: usb out operation failed. (-71) [ 1133.385487][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1133.420165][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input172 [ 1133.446519][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1133.446547][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1133.480305][T16493] usb 4-1: USB disconnect, device number 42 [ 1133.646923][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1133.758978][T12123] az6027: usb out operation failed. (-71) [ 1133.759377][T12123] az6027: usb out operation failed. (-71) [ 1133.759393][T12123] stb0899_attach: Driver disabled by Kconfig [ 1133.759405][T12123] az6027: no front-end attached [ 1133.759405][T12123] [ 1133.786398][T12123] az6027: usb out operation failed. (-71) [ 1133.786414][T12123] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1133.789573][T12123] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input173 [ 1133.816354][T12123] dvb-usb: schedule remote query interval to 400 msecs. [ 1133.816380][T12123] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1133.818638][T12123] usb 1-1: USB disconnect, device number 4 [ 1133.872784][T12123] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1133.873232][T18760] netlink: 'syz.2.4003': attribute type 12 has an invalid length. [ 1133.873251][T18760] netlink: 'syz.2.4003': attribute type 29 has an invalid length. [ 1133.873266][T18760] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1133.873287][T18760] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1134.163224][T18763] Format for deleting device is "id" (uint). [ 1134.273508][T18767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1134.275091][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1134.770482][T12148] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1134.829869][T16493] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1134.921487][T12148] usb 4-1: Using ep0 maxpacket: 32 [ 1134.923258][T12148] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1134.924126][T12148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.929195][T12148] usb 4-1: config 0 descriptor?? [ 1134.979891][T16493] usb 1-1: Using ep0 maxpacket: 32 [ 1134.980659][T16493] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1134.983136][T16493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.013754][T16493] usb 1-1: config 0 descriptor?? [ 1135.141009][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1135.162757][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.169179][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1135.169239][T12148] usb 4-1: media controller created [ 1135.219636][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.244609][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1135.260474][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.293311][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1135.293368][T16493] usb 1-1: media controller created [ 1135.336447][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.950210][T12148] az6027: usb out operation failed. (-71) [ 1135.950718][T12148] az6027: usb out operation failed. (-71) [ 1135.950733][T12148] stb0899_attach: Driver disabled by Kconfig [ 1135.950744][T12148] az6027: no front-end attached [ 1135.950744][T12148] [ 1135.953444][T12148] az6027: usb out operation failed. (-71) [ 1135.953457][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1135.965611][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input174 [ 1135.986912][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1135.986933][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1136.003346][T12148] usb 4-1: USB disconnect, device number 43 [ 1136.242477][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1136.286046][T16493] az6027: usb out operation failed. (-71) [ 1136.286405][T16493] az6027: usb out operation failed. (-71) [ 1136.286422][T16493] stb0899_attach: Driver disabled by Kconfig [ 1136.286433][T16493] az6027: no front-end attached [ 1136.286433][T16493] [ 1136.288016][T16493] az6027: usb out operation failed. (-71) [ 1136.288027][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1136.333858][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input175 [ 1136.336962][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1136.336985][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1136.370347][T16493] usb 1-1: USB disconnect, device number 5 [ 1136.479712][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1136.707610][T18785] tipc: Failed to remove unknown binding: 66,0,0/2525722827:3113857389/3113857390 [ 1136.708167][T18785] tipc: Failed to remove unknown binding: 66,0,0/2525722827:3113857389/3113857390 [ 1136.756067][T18786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1137.018906][T18792] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1137.112169][T18794] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 1137.114757][T18794] syzkaller0: entered promiscuous mode [ 1137.114781][T18794] syzkaller0: entered allmulticast mode [ 1137.150150][T18794] tipc: Enabled bearer , priority 0 [ 1137.157476][T18793] tipc: Resetting bearer [ 1137.315883][T18793] tipc: Disabling bearer [ 1137.747663][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4015'. [ 1138.321968][T16493] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1138.471695][T16493] usb 4-1: Using ep0 maxpacket: 32 [ 1138.472378][T16493] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 1138.473830][T16493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.473864][T16493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.517165][T16493] usb 4-1: config 0 descriptor?? [ 1138.529573][T16493] hub 4-1:0.0: USB hub found [ 1138.736792][T16493] hub 4-1:0.0: 1 port detected [ 1139.800033][T12123] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1139.829327][T16493] usb 4-1: USB disconnect, device number 44 [ 1139.961236][T12123] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1139.967273][T12123] usb 3-1: config index 0 descriptor too short (expected 284, got 28) [ 1139.967307][T12123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.967322][T12123] usb 3-1: config 0 has no interfaces? [ 1139.999189][T12123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.999217][T12123] usb 3-1: Product: syz [ 1139.999235][T12123] usb 3-1: Manufacturer: syz [ 1139.999250][T12123] usb 3-1: SerialNumber: syz [ 1140.040035][T12123] usb 3-1: config 0 descriptor?? [ 1141.454906][T18843] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1142.271180][T16493] usb 3-1: USB disconnect, device number 68 [ 1142.846998][T18858] TC_ACT_REPEAT abuse ? [ 1143.316664][T18862] syz_tun: entered promiscuous mode [ 1143.316780][T18862] vlan0: entered promiscuous mode [ 1143.931362][T12148] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1144.080137][T12148] usb 1-1: Using ep0 maxpacket: 32 [ 1144.080962][T12148] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1144.082150][T12148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.084150][T12148] usb 1-1: config 0 descriptor?? [ 1144.301641][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1144.322145][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.326789][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1144.326827][T12148] usb 1-1: media controller created [ 1144.414670][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.766854][T12148] az6027: usb out operation failed. (-71) [ 1144.768988][T12148] az6027: usb out operation failed. (-71) [ 1144.769001][T12148] stb0899_attach: Driver disabled by Kconfig [ 1144.769008][T12148] az6027: no front-end attached [ 1144.769008][T12148] [ 1144.771797][T12148] az6027: usb out operation failed. (-71) [ 1144.771810][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1144.778675][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input176 [ 1144.792246][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1144.792262][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1144.829270][T12148] usb 1-1: USB disconnect, device number 6 [ 1145.670403][T16493] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1145.829834][T16493] usb 5-1: Using ep0 maxpacket: 32 [ 1145.830743][T16493] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1145.832248][T16493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.833255][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1145.893260][T16493] usb 5-1: config 0 descriptor?? [ 1146.099307][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1146.117512][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1146.118275][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1146.118314][T16493] usb 5-1: media controller created [ 1146.192192][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1146.643959][T16493] az6027: usb out operation failed. (-71) [ 1146.644274][T16493] az6027: usb out operation failed. (-71) [ 1146.644284][T16493] stb0899_attach: Driver disabled by Kconfig [ 1146.644292][T16493] az6027: no front-end attached [ 1146.644292][T16493] [ 1146.644641][T16493] az6027: usb out operation failed. (-71) [ 1146.644664][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1146.698960][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input177 [ 1146.722496][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1146.722515][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1146.761866][T16493] usb 5-1: USB disconnect, device number 62 [ 1146.856938][ T6158] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1146.941113][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1147.010562][ T6158] usb 1-1: Using ep0 maxpacket: 32 [ 1147.011594][ T6158] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1147.016073][ T6158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.046778][ T6158] usb 1-1: config 0 descriptor?? [ 1147.353029][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1147.376845][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1147.377595][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1147.377631][ T6158] usb 1-1: media controller created [ 1147.465906][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1147.729097][ T6158] az6027: usb out operation failed. (-71) [ 1147.729474][ T6158] az6027: usb out operation failed. (-71) [ 1147.729490][ T6158] stb0899_attach: Driver disabled by Kconfig [ 1147.729500][ T6158] az6027: no front-end attached [ 1147.729500][ T6158] [ 1147.730065][ T6158] az6027: usb out operation failed. (-71) [ 1147.730083][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1147.782192][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input178 [ 1147.802629][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 1147.802655][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1147.862512][ T6158] usb 1-1: USB disconnect, device number 7 [ 1148.063876][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1148.520393][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1148.730902][ T6158] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1148.879897][ T6158] usb 5-1: Using ep0 maxpacket: 32 [ 1148.880692][ T6158] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1148.882097][ T6158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.927065][ T6158] usb 5-1: config 0 descriptor?? [ 1149.167518][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1149.185346][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1149.200855][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1149.200911][ T6158] usb 5-1: media controller created [ 1149.331403][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1150.133465][ T6158] az6027: usb out operation failed. (-71) [ 1150.136934][ T6158] az6027: usb out operation failed. (-71) [ 1150.136954][ T6158] stb0899_attach: Driver disabled by Kconfig [ 1150.136967][ T6158] az6027: no front-end attached [ 1150.136967][ T6158] [ 1150.137495][ T6158] az6027: usb out operation failed. (-71) [ 1150.137522][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1150.194761][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input179 [ 1150.226232][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 1150.226249][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1150.252960][ T6158] usb 5-1: USB disconnect, device number 63 [ 1150.409263][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1150.785418][T18924] netlink: 'syz.2.4050': attribute type 7 has an invalid length. [ 1150.981402][ T6158] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1151.130690][ T6158] usb 4-1: Using ep0 maxpacket: 32 [ 1151.133412][ T6158] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1151.134738][ T6158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.140205][ T6158] usb 4-1: config 0 descriptor?? [ 1151.242309][T13407] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1151.374365][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1151.379084][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1151.396877][T13407] usb 3-1: Using ep0 maxpacket: 32 [ 1151.405140][T13407] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1151.405298][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1151.405334][ T6158] usb 4-1: media controller created [ 1151.412642][T13407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.445136][T13407] usb 3-1: config 0 descriptor?? [ 1151.481621][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1151.689090][T13407] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1151.710052][ T6158] az6027: usb out operation failed. (-71) [ 1151.710605][ T6158] az6027: usb out operation failed. (-71) [ 1151.710636][ T6158] stb0899_attach: Driver disabled by Kconfig [ 1151.710644][ T6158] az6027: no front-end attached [ 1151.710644][ T6158] [ 1151.712294][T13407] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1151.712663][ T6158] az6027: usb out operation failed. (-71) [ 1151.712674][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1151.719415][T13407] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1151.719470][T13407] usb 3-1: media controller created [ 1151.724373][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input180 [ 1151.803358][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 1151.803375][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1151.826557][ T6158] usb 4-1: USB disconnect, device number 45 [ 1151.871988][T13407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.139111][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1152.166997][T13407] az6027: usb out operation failed. (-71) [ 1152.176943][T13407] az6027: usb out operation failed. (-71) [ 1152.176961][T13407] stb0899_attach: Driver disabled by Kconfig [ 1152.176971][T13407] az6027: no front-end attached [ 1152.176971][T13407] [ 1152.177750][T13407] az6027: usb out operation failed. (-71) [ 1152.177761][T13407] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1152.178079][T12132] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1152.178222][T12132] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1152.252017][T13407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input181 [ 1152.272337][T13407] dvb-usb: schedule remote query interval to 400 msecs. [ 1152.272354][T13407] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1152.303710][T12132] usb 2-1: USB disconnect, device number 54 [ 1152.322398][T13407] usb 3-1: USB disconnect, device number 69 [ 1152.454763][T18945] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 1152.528502][T13407] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1153.780336][ T6158] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1153.937062][ T6158] usb 3-1: Using ep0 maxpacket: 32 [ 1153.938277][ T6158] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1153.944583][ T6158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.976782][ T6158] usb 3-1: config 0 descriptor?? [ 1154.019371][T18963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4060'. [ 1154.214434][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1154.232326][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1154.235217][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1154.235261][ T6158] usb 3-1: media controller created [ 1154.328468][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.630302][ T6158] az6027: usb out operation failed. (-71) [ 1154.631278][ T6158] az6027: usb out operation failed. (-71) [ 1154.631289][ T6158] stb0899_attach: Driver disabled by Kconfig [ 1154.631297][ T6158] az6027: no front-end attached [ 1154.631297][ T6158] [ 1154.632428][ T6158] az6027: usb out operation failed. (-71) [ 1154.632442][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1154.659147][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input182 [ 1154.712997][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 1154.713014][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1154.747458][ T6158] usb 3-1: USB disconnect, device number 70 [ 1155.047474][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1155.461760][T12123] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1155.632396][T12123] usb 2-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1155.659453][T12123] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1155.659488][T12123] usb 2-1: config 5 has no interface number 0 [ 1155.659516][T12123] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1155.659536][T12123] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1155.659551][T12123] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1155.726724][T12123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.726756][T12123] usb 2-1: Product: syz [ 1155.726768][T12123] usb 2-1: Manufacturer: syz [ 1155.726778][T12123] usb 2-1: SerialNumber: syz [ 1156.126570][T18973] loop4: detected capacity change from 0 to 7 [ 1156.212107][T18973] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1156.212851][T18973] loop4: partition table partially beyond EOD, truncated [ 1156.216096][T18973] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1156.782079][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 1156.878850][T18986] syzkaller0: entered promiscuous mode [ 1156.878878][T18986] syzkaller0: entered allmulticast mode [ 1158.429979][T13407] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1158.593451][T13407] usb 5-1: Using ep0 maxpacket: 32 [ 1158.595815][T13407] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1158.599087][T13407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.649135][T13407] usb 5-1: config 0 descriptor?? [ 1158.945523][T13407] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1158.969946][T13407] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1158.986158][T13407] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1158.986218][T13407] usb 5-1: media controller created [ 1159.077478][T13407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.479578][T13407] az6027: usb out operation failed. (-71) [ 1159.480085][T13407] az6027: usb out operation failed. (-71) [ 1159.480104][T13407] stb0899_attach: Driver disabled by Kconfig [ 1159.480116][T13407] az6027: no front-end attached [ 1159.480116][T13407] [ 1159.488974][T13407] az6027: usb out operation failed. (-71) [ 1159.488994][T13407] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1159.549795][T13407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input183 [ 1159.554422][T13407] dvb-usb: schedule remote query interval to 400 msecs. [ 1159.554446][T13407] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1159.557899][T13407] usb 5-1: USB disconnect, device number 64 [ 1159.814220][T13407] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1160.017613][T12123] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1160.107478][T12123] usb 2-1: USB disconnect, device number 55 [ 1161.470120][T13407] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1161.621387][T13407] usb 5-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 1161.622588][T13407] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1161.622617][T13407] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1161.622639][T13407] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1161.622688][T13407] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1161.622718][T13407] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1161.696884][T13407] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1161.696905][T13407] usb 5-1: Product: syz [ 1161.696916][T13407] usb 5-1: Manufacturer: syz [ 1161.727867][T13407] cdc_wdm 5-1:1.0: skipping garbage [ 1161.727882][T13407] cdc_wdm 5-1:1.0: skipping garbage [ 1161.746526][T13407] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1161.746548][T13407] cdc_wdm 5-1:1.0: Unknown control protocol [ 1162.024693][T19024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.042843][T19024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.084319][T16493] usb 5-1: USB disconnect, device number 65 [ 1162.600184][ T30] audit: type=1326 audit(1793293097.642:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600244][ T30] audit: type=1326 audit(1793293097.642:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600321][ T30] audit: type=1326 audit(1793293097.652:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600355][ T30] audit: type=1326 audit(1793293097.652:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600385][ T30] audit: type=1326 audit(1793293097.652:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600416][ T30] audit: type=1326 audit(1793293097.662:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600447][ T30] audit: type=1326 audit(1793293097.662:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600477][ T30] audit: type=1326 audit(1793293097.662:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.600514][ T30] audit: type=1326 audit(1793293097.662:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1162.852607][ T30] audit: type=1326 audit(1793293097.922:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19029 comm="syz.3.4077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1163.350517][T12132] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1163.399979][T13407] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1163.420181][ T6158] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1163.519788][T12132] usb 3-1: Using ep0 maxpacket: 32 [ 1163.520703][T12132] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1163.521959][T12132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.524254][T12132] usb 3-1: config 0 descriptor?? [ 1163.590002][ T6158] usb 5-1: Using ep0 maxpacket: 32 [ 1163.591082][T13407] usb 4-1: New USB device found: idVendor=041e, idProduct=3010, bcdDevice=1.00 [ 1163.591295][ T6158] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1163.592955][T13407] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.593114][T13407] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.593178][T13407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.596995][ T6158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.646523][ T6158] usb 5-1: config 0 descriptor?? [ 1163.673381][T13407] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 1163.727517][T12132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1163.740969][T12132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.743811][T12132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1163.743870][T12132] usb 3-1: media controller created [ 1163.791499][T12132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.913484][ T6158] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1163.933612][ T6158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.936366][ T6158] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1163.936404][ T6158] usb 5-1: media controller created [ 1164.006899][ T6158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.067910][T19030] TC_ACT_REPEAT abuse ? [ 1164.358451][T13407] usb 4-1: USB disconnect, device number 46 [ 1164.755172][T12132] az6027: usb out operation failed. (-71) [ 1164.755622][T12132] az6027: usb out operation failed. (-71) [ 1164.755638][T12132] stb0899_attach: Driver disabled by Kconfig [ 1164.755649][T12132] az6027: no front-end attached [ 1164.755649][T12132] [ 1164.774328][T12132] az6027: usb out operation failed. (-71) [ 1164.774342][T12132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1164.781618][T12132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input184 [ 1164.824517][T12132] dvb-usb: schedule remote query interval to 400 msecs. [ 1164.824538][T12132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1164.837616][T12132] usb 3-1: USB disconnect, device number 71 [ 1164.985886][ T6158] az6027: usb out operation failed. (-71) [ 1164.992872][ T6158] az6027: usb out operation failed. (-71) [ 1164.992930][ T6158] stb0899_attach: Driver disabled by Kconfig [ 1164.992962][ T6158] az6027: no front-end attached [ 1164.992962][ T6158] [ 1165.017059][ T6158] az6027: usb out operation failed. (-71) [ 1165.017074][ T6158] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1165.044425][ T6158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input185 [ 1165.063262][ T6158] dvb-usb: schedule remote query interval to 400 msecs. [ 1165.063282][ T6158] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1165.095280][ T6158] usb 5-1: USB disconnect, device number 66 [ 1165.121824][T12132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1165.300582][ T6158] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1165.665550][T19051] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1165.787083][T19051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.834301][T19051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.895475][T19051] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1165.949357][T19051] bond0 (unregistering): Released all slaves [ 1166.669839][T12132] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1166.820150][T12132] usb 3-1: Using ep0 maxpacket: 32 [ 1166.821017][T12132] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1166.822354][T12132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.852762][T12132] usb 3-1: config 0 descriptor?? [ 1166.959897][T16493] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1167.069166][T12132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1167.086962][T12132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1167.088485][T12132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1167.088523][T12132] usb 3-1: media controller created [ 1167.131670][T16493] usb 5-1: Using ep0 maxpacket: 16 [ 1167.132360][T16493] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1167.133667][T12132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.135585][T16493] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.135608][T16493] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.193110][T16493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.193139][T16493] usb 5-1: Product: syz [ 1167.193154][T16493] usb 5-1: Manufacturer: syz [ 1167.193170][T16493] usb 5-1: SerialNumber: syz [ 1167.256347][T16493] usb 5-1: 0:2 : does not exist [ 1167.429862][T12112] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1167.493724][T16493] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1167.494457][T12132] az6027: usb out operation failed. (-71) [ 1167.494825][T12132] az6027: usb out operation failed. (-71) [ 1167.494842][T12132] stb0899_attach: Driver disabled by Kconfig [ 1167.494849][T12132] az6027: no front-end attached [ 1167.494849][T12132] [ 1167.495230][T12132] az6027: usb out operation failed. (-71) [ 1167.495246][T12132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1167.546649][T12132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input186 [ 1167.570265][T12132] dvb-usb: schedule remote query interval to 400 msecs. [ 1167.570290][T12132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1167.595446][T12132] usb 3-1: USB disconnect, device number 72 [ 1167.610076][T12112] usb 1-1: Using ep0 maxpacket: 32 [ 1167.610758][T12112] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1167.615093][T12112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.654545][T12112] usb 1-1: config 0 descriptor?? [ 1167.818463][T12132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1167.885340][T16493] usb 5-1: USB disconnect, device number 67 [ 1167.888756][T12112] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1167.961639][T12112] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1167.963867][T12112] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1167.963904][T12112] usb 1-1: media controller created [ 1168.048367][T12112] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.387991][T12112] az6027: usb out operation failed. (-71) [ 1168.388901][T12112] az6027: usb out operation failed. (-71) [ 1168.388918][T12112] stb0899_attach: Driver disabled by Kconfig [ 1168.388930][T12112] az6027: no front-end attached [ 1168.388930][T12112] [ 1168.391816][T12112] az6027: usb out operation failed. (-71) [ 1168.391830][T12112] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1168.407183][T12112] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input187 [ 1168.467886][T12112] dvb-usb: schedule remote query interval to 400 msecs. [ 1168.467904][T12112] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1168.494928][T12112] usb 1-1: USB disconnect, device number 8 [ 1168.663790][T12112] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1169.130898][T16493] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1169.286285][T16493] usb 5-1: Using ep0 maxpacket: 32 [ 1169.287875][T16493] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1169.289403][T16493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.323427][T16493] usb 5-1: config 0 descriptor?? [ 1169.399906][T12123] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1169.547245][T16493] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1169.552866][T12123] usb 3-1: Using ep0 maxpacket: 32 [ 1169.554824][T12123] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1169.558172][T12123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.582380][T16493] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1169.587814][T16493] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1169.587850][T16493] usb 5-1: media controller created [ 1169.617843][T12123] usb 3-1: config 0 descriptor?? [ 1169.668592][T16493] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.872815][T12123] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1169.898685][T16493] az6027: usb out operation failed. (-71) [ 1169.899131][T16493] az6027: usb out operation failed. (-71) [ 1169.899141][T16493] stb0899_attach: Driver disabled by Kconfig [ 1169.899149][T16493] az6027: no front-end attached [ 1169.899149][T16493] [ 1169.899598][T16493] az6027: usb out operation failed. (-71) [ 1169.899607][T16493] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1169.947347][T12123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1169.948808][T12123] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1169.948847][T12123] usb 3-1: media controller created [ 1169.976477][T16493] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input188 [ 1169.998130][T16493] dvb-usb: schedule remote query interval to 400 msecs. [ 1169.998147][T16493] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1169.999938][T16283] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1170.029444][T16493] usb 5-1: USB disconnect, device number 68 [ 1170.080840][T12123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.150381][T16283] usb 1-1: Using ep0 maxpacket: 32 [ 1170.151588][T16283] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1170.155472][T16283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.202349][T16283] usb 1-1: config 0 descriptor?? [ 1170.316159][T12123] az6027: usb out operation failed. (-71) [ 1170.317761][T12123] az6027: usb out operation failed. (-71) [ 1170.317778][T12123] stb0899_attach: Driver disabled by Kconfig [ 1170.317790][T12123] az6027: no front-end attached [ 1170.317790][T12123] [ 1170.318883][T12123] az6027: usb out operation failed. (-71) [ 1170.318894][T12123] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1170.369422][T16493] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1170.384757][T12123] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input189 [ 1170.416482][T12123] dvb-usb: schedule remote query interval to 400 msecs. [ 1170.416501][T12123] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1170.445471][T12123] usb 3-1: USB disconnect, device number 73 [ 1170.494129][T16283] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1170.510689][T16283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1170.516393][T16283] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1170.516434][T16283] usb 1-1: media controller created [ 1170.619318][T16283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.722435][T12123] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1171.362795][T16283] az6027: usb out operation failed. (-71) [ 1171.363361][T16283] az6027: usb out operation failed. (-71) [ 1171.363373][T16283] stb0899_attach: Driver disabled by Kconfig [ 1171.363381][T16283] az6027: no front-end attached [ 1171.363381][T16283] [ 1171.363785][T16283] az6027: usb out operation failed. (-71) [ 1171.363800][T16283] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1171.369614][T16283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input190 [ 1171.388655][T16283] dvb-usb: schedule remote query interval to 400 msecs. [ 1171.388671][T16283] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1171.401892][T16283] usb 1-1: USB disconnect, device number 9 [ 1171.622297][T16283] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1172.045074][T19100] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1172.203013][T19100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.232414][T19103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 1172.236223][T19100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.261600][T12123] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1172.283342][T19100] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1172.333579][T19100] bond0 (unregistering): Released all slaves [ 1172.412056][T12123] usb 3-1: Using ep0 maxpacket: 32 [ 1172.413035][T12123] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1172.414417][T12123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.419162][T12123] usb 3-1: config 0 descriptor?? [ 1172.652641][T12123] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1172.657661][T12123] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1172.658610][T12123] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1172.658648][T12123] usb 3-1: media controller created [ 1172.753207][T12123] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1172.908424][T12123] az6027: usb out operation failed. (-71) [ 1172.909300][T12123] az6027: usb out operation failed. (-71) [ 1172.909320][T12123] stb0899_attach: Driver disabled by Kconfig [ 1172.909327][T12123] az6027: no front-end attached [ 1172.909327][T12123] [ 1172.909619][T12123] az6027: usb out operation failed. (-71) [ 1172.909628][T12123] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1172.957827][T12123] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input191 [ 1172.987480][T12123] dvb-usb: schedule remote query interval to 400 msecs. [ 1172.987497][T12123] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1173.029479][T12123] usb 3-1: USB disconnect, device number 74 [ 1173.377306][T12123] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1173.389908][T16283] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1173.544142][T16283] usb 1-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1173.565300][T16283] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 1173.565332][T16283] usb 1-1: config 5 has no interface number 0 [ 1173.565377][T16283] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1173.565409][T16283] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.565434][T16283] usb 1-1: config 5 interface 123 has no altsetting 0 [ 1173.636407][T16283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.636566][T16283] usb 1-1: Product: syz [ 1173.636584][T16283] usb 1-1: Manufacturer: syz [ 1173.636600][T16283] usb 1-1: SerialNumber: syz [ 1173.980007][T19110] loop4: detected capacity change from 0 to 7 [ 1174.106810][T19110] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1174.106865][T19110] loop4: partition table partially beyond EOD, truncated [ 1174.132514][T19110] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1174.333356][T12132] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1174.512992][T12132] usb 3-1: Using ep0 maxpacket: 16 [ 1174.513945][T12132] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1174.516130][T12132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.516169][T12132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1174.553801][T12132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.553828][T12132] usb 3-1: Product: syz [ 1174.553843][T12132] usb 3-1: Manufacturer: syz [ 1174.553864][T12132] usb 3-1: SerialNumber: syz [ 1174.609185][T12132] usb 3-1: 0:2 : does not exist [ 1174.815951][T12132] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1175.025596][T12132] usb 3-1: USB disconnect, device number 75 [ 1175.749048][T12132] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1175.776955][T12132] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1176.437472][T19136] TC_ACT_REPEAT abuse ? [ 1177.039058][T19129] FAULT_INJECTION: forcing a failure. [ 1177.039058][T19129] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.039093][T19129] CPU: 0 UID: 0 PID: 19129 Comm: syz.1.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.039121][T19129] Tainted: [L]=SOFTLOCKUP [ 1177.039128][T19129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1177.039142][T19129] Call Trace: [ 1177.039150][T19129] [ 1177.039159][T19129] dump_stack_lvl+0xe8/0x150 [ 1177.039200][T19129] should_fail_ex+0x3eb/0x540 [ 1177.039230][T19129] should_failslab+0xa8/0x100 [ 1177.039259][T19129] ? do_getname+0x2e/0x250 [ 1177.039279][T19129] kmem_cache_alloc_noprof+0x9c/0x600 [ 1177.039309][T19129] ? do_getname+0x2e/0x250 [ 1177.039327][T19129] do_getname+0x2e/0x250 [ 1177.039372][T19129] ? getname_flags+0x11/0x20 [ 1177.039394][T19129] do_sys_openat2+0xce/0x200 [ 1177.039417][T19129] ? __pfx_do_sys_openat2+0x10/0x10 [ 1177.039443][T19129] ? ksys_write+0x242/0x270 [ 1177.039463][T19129] ? __pfx_ksys_write+0x10/0x10 [ 1177.039483][T19129] __ia32_compat_sys_openat+0x131/0x160 [ 1177.039522][T19129] do_int80_emulation+0x198/0x500 [ 1177.039548][T19129] ? trace_irq_disable+0x3b/0x140 [ 1177.039575][T19129] ? asm_int80_emulation+0x1a/0x20 [ 1177.039599][T19129] ? clear_bhb_loop+0x70/0xc0 [ 1177.039613][T19129] ? clear_bhb_loop+0x70/0xc0 [ 1177.039630][T19129] asm_int80_emulation+0x1a/0x20 [ 1177.039644][T19129] RIP: 0023:0xf71677ab [ 1177.039673][T19129] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1177.039691][T19129] RSP: 002b:00000000f54263cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1177.039712][T19129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5426490 [ 1177.039726][T19129] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1177.039738][T19129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1177.039750][T19129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1177.039762][T19129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1177.039792][T19129] [ 1177.406917][T16283] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1177.482855][T16283] usb 1-1: USB disconnect, device number 10 [ 1177.623292][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.623338][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.777928][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1178.439892][T16283] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1178.519812][T12132] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1178.590528][T16283] usb 2-1: Using ep0 maxpacket: 32 [ 1178.591334][T16283] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1178.593068][T16283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.598966][T16283] usb 2-1: config 0 descriptor?? [ 1178.679827][T12148] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1178.699811][T12132] usb 1-1: Using ep0 maxpacket: 32 [ 1178.705342][T12132] usb 1-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1178.725691][T12132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.745393][T12132] usb 1-1: config 0 descriptor?? [ 1178.809480][T16283] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1178.836199][T16283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.837536][T16283] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1178.837571][T16283] usb 2-1: media controller created [ 1178.842150][T12148] usb 4-1: Using ep0 maxpacket: 32 [ 1178.859852][T12148] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1178.895441][T12148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.920674][T12148] usb 4-1: config 0 descriptor?? [ 1178.970408][T12132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1178.974074][T16283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.006240][T12132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1179.082824][T12132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1179.088617][T12132] usb 1-1: media controller created [ 1179.139408][T12132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.159222][T16283] az6027: usb out operation failed. (-71) [ 1179.159639][T16283] az6027: usb out operation failed. (-71) [ 1179.159654][T16283] stb0899_attach: Driver disabled by Kconfig [ 1179.159664][T16283] az6027: no front-end attached [ 1179.159664][T16283] [ 1179.162238][T16283] az6027: usb out operation failed. (-71) [ 1179.162280][T16283] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1179.207323][T16283] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input192 [ 1179.243557][T16283] dvb-usb: schedule remote query interval to 400 msecs. [ 1179.243591][T16283] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1179.247473][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1179.265605][T16283] usb 2-1: USB disconnect, device number 56 [ 1179.281029][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1179.282714][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1179.282758][T12148] usb 4-1: media controller created [ 1179.352015][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.461973][T12132] az6027: usb out operation failed. (-71) [ 1179.462393][T12132] az6027: usb out operation failed. (-71) [ 1179.462405][T12132] stb0899_attach: Driver disabled by Kconfig [ 1179.462413][T12132] az6027: no front-end attached [ 1179.462413][T12132] [ 1179.466427][T12132] az6027: usb out operation failed. (-71) [ 1179.466440][T12132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1179.483945][T12132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input193 [ 1179.531458][T12132] dvb-usb: schedule remote query interval to 400 msecs. [ 1179.531686][T12132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1179.566613][T12132] usb 1-1: USB disconnect, device number 11 [ 1179.716718][T16283] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1179.792137][T19167] tipc: Enabling of bearer rejected, failed to enable media [ 1179.792583][T12132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1179.907776][T12148] az6027: usb out operation failed. (-71) [ 1179.908345][T12148] az6027: usb out operation failed. (-71) [ 1179.908356][T12148] stb0899_attach: Driver disabled by Kconfig [ 1179.908363][T12148] az6027: no front-end attached [ 1179.908363][T12148] [ 1179.909021][T12148] az6027: usb out operation failed. (-71) [ 1179.909036][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1179.951893][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input194 [ 1179.971563][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1179.971585][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1179.991929][T12148] usb 4-1: USB disconnect, device number 47 [ 1180.124729][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1181.136760][T19187] macvtap1: entered promiscuous mode [ 1181.136938][T19187] macvtap1: entered allmulticast mode [ 1181.137253][T19187] batadv_slave_0: entered promiscuous mode [ 1181.137266][T19187] batadv_slave_0: entered allmulticast mode [ 1181.186914][T19187] team0: Device macvtap1 failed to register rx_handler [ 1181.191796][T19187] batadv_slave_0: left allmulticast mode [ 1181.216099][T19187] batadv_slave_0: left promiscuous mode [ 1181.440944][T12114] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1181.596279][T12114] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1181.597088][T12114] usb 1-1: not running at top speed; connect to a high speed hub [ 1181.597112][T12114] usb 1-1: New USB device found: idVendor=046d, idProduct=0960, bcdDevice=c4.e0 [ 1181.639385][T12114] usb 1-1: config 2 has an invalid interface number: 171 but max is 0 [ 1181.639414][T12114] usb 1-1: config 2 has no interface number 0 [ 1181.639450][T12114] usb 1-1: config 2 interface 171 has no altsetting 0 [ 1181.674826][T12114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.674846][T12114] usb 1-1: Product: syz [ 1181.674855][T12114] usb 1-1: Manufacturer: syz [ 1181.674865][T12114] usb 1-1: SerialNumber: syz [ 1181.840109][T19197] ucma_write: process 746 (syz.3.4123) changed security contexts after opening file descriptor, this is not allowed. [ 1183.734438][T12148] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1183.891114][T12148] usb 3-1: Using ep0 maxpacket: 32 [ 1183.892028][T12148] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1183.893552][T12148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.930508][T12148] usb 3-1: config 0 descriptor?? [ 1184.134996][T12114] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 1184.150857][T12114] gspca_sunplus: reg_w_riv err -71 [ 1184.158242][T12114] sunplus 1-1:2.171: probe with driver sunplus failed with error -71 [ 1184.193702][T12114] usb 1-1: USB disconnect, device number 12 [ 1184.218287][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1184.240374][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1184.242882][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1184.243256][T12148] usb 3-1: media controller created [ 1184.349615][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.513166][T19209] TC_ACT_REPEAT abuse ? [ 1184.719882][T12132] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1184.899869][T12132] usb 4-1: Using ep0 maxpacket: 32 [ 1184.906539][T12132] usb 4-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1184.927954][T12132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.928537][T12148] az6027: usb out operation failed. (-71) [ 1184.929843][T12148] az6027: usb out operation failed. (-71) [ 1184.929858][T12148] stb0899_attach: Driver disabled by Kconfig [ 1184.929869][T12148] az6027: no front-end attached [ 1184.929869][T12148] [ 1184.957938][T12148] az6027: usb out operation failed. (-71) [ 1184.957953][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1184.981987][T12132] usb 4-1: config 0 descriptor?? [ 1184.983917][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input195 [ 1185.007561][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1185.007577][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1185.029211][T12148] usb 3-1: USB disconnect, device number 76 [ 1185.154256][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1185.187144][T12132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1185.205492][T12132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.206642][T12132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1185.207134][T12132] usb 4-1: media controller created [ 1185.259889][T12132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.331356][ T8732] IPVS: starting estimator thread 0... [ 1185.419950][T19220] IPVS: using max 39 ests per chain, 93600 per kthread [ 1185.661334][T12132] az6027: usb out operation failed. (-71) [ 1185.661729][T12132] az6027: usb out operation failed. (-71) [ 1185.661740][T12132] stb0899_attach: Driver disabled by Kconfig [ 1185.661748][T12132] az6027: no front-end attached [ 1185.661748][T12132] [ 1185.662802][T12132] az6027: usb out operation failed. (-71) [ 1185.662818][T12132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1185.722208][T12132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input196 [ 1185.741729][T12132] dvb-usb: schedule remote query interval to 400 msecs. [ 1185.741745][T12132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1185.780637][T12132] usb 4-1: USB disconnect, device number 48 [ 1186.041668][T12132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1186.162149][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 1187.921391][ T65] IPVS: starting estimator thread 0... [ 1188.010271][T19256] IPVS: using max 41 ests per chain, 98400 per kthread [ 1191.080101][T12132] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1191.239850][T12132] usb 3-1: Using ep0 maxpacket: 32 [ 1191.240648][T12132] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1191.242058][T12132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.249271][T12132] usb 3-1: config 0 descriptor?? [ 1191.332727][T19277] netlink: 'syz.0.4145': attribute type 29 has an invalid length. [ 1191.449892][T12114] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1191.494203][T12132] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1191.507363][T12132] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1191.520371][T12132] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1191.520424][T12132] usb 3-1: media controller created [ 1191.564724][T12132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1191.601789][T12114] usb 5-1: Using ep0 maxpacket: 32 [ 1191.602569][T12114] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1191.625073][T12114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.654012][T12114] usb 5-1: config 0 descriptor?? [ 1191.905137][T12114] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1191.924700][T12114] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1191.949819][T12114] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1191.949871][T12114] usb 5-1: media controller created [ 1192.064422][T12114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1192.296873][T12114] az6027: usb out operation failed. (-71) [ 1192.297243][T12114] az6027: usb out operation failed. (-71) [ 1192.297257][T12114] stb0899_attach: Driver disabled by Kconfig [ 1192.297267][T12114] az6027: no front-end attached [ 1192.297267][T12114] [ 1192.297934][T12114] az6027: usb out operation failed. (-71) [ 1192.297949][T12114] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1192.341049][T16283] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1192.372998][T12114] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input197 [ 1192.404411][T12114] dvb-usb: schedule remote query interval to 400 msecs. [ 1192.404445][T12114] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1192.457930][T12114] usb 5-1: USB disconnect, device number 69 [ 1192.511922][T16283] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1192.511951][T16283] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1192.515249][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.515304][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.515329][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.518655][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.518716][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.518743][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.549475][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.549606][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.549673][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.632005][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.632058][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.632081][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.641627][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.641763][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.641844][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.708524][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.708590][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.708611][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.741907][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.741962][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.741996][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.777593][T16283] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1192.777897][T16283] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1192.777927][T16283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1192.818472][T16283] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1192.818490][T16283] usb 1-1: Product: syz [ 1192.818500][T16283] usb 1-1: Manufacturer: syz [ 1192.818527][T16283] usb 1-1: SerialNumber: syz [ 1192.865147][T16283] usb 1-1: config 0 descriptor?? [ 1192.953389][T16283] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1193.123555][T12114] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1193.193190][T12132] az6027: usb out operation failed. (-71) [ 1193.194292][T12132] az6027: usb out operation failed. (-71) [ 1193.194321][T12132] stb0899_attach: Driver disabled by Kconfig [ 1193.194333][T12132] az6027: no front-end attached [ 1193.194333][T12132] [ 1193.196209][T12132] az6027: usb out operation failed. (-71) [ 1193.196226][T12132] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1193.245860][T12132] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input198 [ 1193.245937][T19280] netlink: 'syz.0.4146': attribute type 34 has an invalid length. [ 1193.245955][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'. [ 1193.293967][T12132] dvb-usb: schedule remote query interval to 400 msecs. [ 1193.293996][T12132] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1193.327792][T12132] usb 3-1: USB disconnect, device number 77 [ 1193.690228][T19280] bond1: option lacp_strict: invalid value (110) [ 1193.740146][T19280] bond1 (unregistering): Released all slaves [ 1193.814586][T12132] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1194.219142][T16283] usb 1-1: USB disconnect, device number 13 [ 1194.260640][T16283] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1194.309855][T12148] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1194.457529][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1194.467597][T12148] usb 5-1: Using ep0 maxpacket: 32 [ 1194.473358][T12148] usb 5-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1194.483597][T12148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.523718][T12148] usb 5-1: config 0 descriptor?? [ 1194.748228][T12148] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1194.772827][T12148] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1194.789935][T12148] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1194.789974][T12148] usb 5-1: media controller created [ 1194.825248][T12148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.161510][T12148] az6027: usb out operation failed. (-71) [ 1195.161858][T12148] az6027: usb out operation failed. (-71) [ 1195.161868][T12148] stb0899_attach: Driver disabled by Kconfig [ 1195.161875][T12148] az6027: no front-end attached [ 1195.161875][T12148] [ 1195.162168][T12148] az6027: usb out operation failed. (-71) [ 1195.162177][T12148] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1195.167348][T12148] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input199 [ 1195.205040][T12148] dvb-usb: schedule remote query interval to 400 msecs. [ 1195.205056][T12148] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1195.242995][T12148] usb 5-1: USB disconnect, device number 70 [ 1195.399877][T13407] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1195.486189][T12148] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1195.550594][T13407] usb 2-1: Using ep0 maxpacket: 32 [ 1195.554834][T13407] usb 2-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1195.592233][T13407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.614109][T13407] usb 2-1: config 0 descriptor?? [ 1195.884152][T13407] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1195.937609][T13407] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.958340][T13407] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1195.967091][T13407] usb 2-1: media controller created [ 1196.035906][T13407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.318728][T19304] [ 1196.321136][T19304] ============================================ [ 1196.327307][T19304] WARNING: possible recursive locking detected [ 1196.333531][T19304] syzkaller #0 Tainted: G L [ 1196.339635][T19304] -------------------------------------------- [ 1196.345816][T19304] syz.1.4151/19304 is trying to acquire lock: [ 1196.351940][T19304] ffff8880251635e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 1196.362824][T19304] [ 1196.362824][T19304] but task is already holding lock: [ 1196.370231][T19304] ffff8880251635e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 1196.380760][T19304] [ 1196.380760][T19304] other info that might help us debug this: [ 1196.388841][T19304] Possible unsafe locking scenario: [ 1196.388841][T19304] [ 1196.396339][T19304] CPU0 [ 1196.399641][T19304] ---- [ 1196.402957][T19304] lock(&sb->s_type->i_mutex_key#10); [ 1196.408451][T19304] lock(&sb->s_type->i_mutex_key#10); [ 1196.413947][T19304] [ 1196.413947][T19304] *** DEADLOCK *** [ 1196.413947][T19304] [ 1196.422111][T19304] May be due to missing lock nesting notation [ 1196.422111][T19304] [ 1196.430547][T19304] locks held by syz.1.4151/19304: 1, last CPU#0: [ 1196.436900][T19304] #0: ffff8880251635e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 1196.447834][T19304] [ 1196.447834][T19304] stack backtrace: [ 1196.453756][T19304] CPU: 0 UID: 0 PID: 19304 Comm: syz.1.4151 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.464807][T19304] Tainted: [L]=SOFTLOCKUP [ 1196.469153][T19304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1196.479254][T19304] Call Trace: [ 1196.482561][T19304] [ 1196.485532][T19304] dump_stack_lvl+0xe8/0x150 [ 1196.490191][T19304] print_deadlock_bug+0x27a/0x290 [ 1196.495266][T19304] __lock_acquire+0x25db/0x2de0 [ 1196.500154][T19304] ? __lock_acquire+0x747/0x2de0 [ 1196.505161][T19304] lock_acquire+0x115/0x350 [ 1196.509699][T19304] ? blkdev_buffered_write+0xd7/0x160 [ 1196.515113][T19304] down_read+0x45/0x320 [ 1196.519300][T19304] ? blkdev_buffered_write+0xd7/0x160 [ 1196.524702][T19304] blkdev_buffered_write+0xd7/0x160 [ 1196.529934][T19304] blkdev_write_iter+0x6d5/0x810 [ 1196.534924][T19304] vfs_write+0x612/0xba0 [ 1196.539212][T19304] ? __pfx_vfs_write+0x10/0x10 [ 1196.544028][T19304] ? __fget_files+0x3a2/0x420 [ 1196.548737][T19304] ? __fget_files+0x2a/0x420 [ 1196.553363][T19304] ? fdget+0x1ac/0x250 [ 1196.557468][T19304] ksys_write+0x150/0x270 [ 1196.561839][T19304] ? __pfx_ksys_write+0x10/0x10 [ 1196.566726][T19304] ? __might_fault+0xaf/0x130 [ 1196.571434][T19304] __do_fast_syscall_32+0x28b/0x6c0 [ 1196.576687][T19304] ? do_fast_syscall_32+0x33/0x70 [ 1196.581741][T19304] ? asm_int80_emulation+0x1a/0x20 [ 1196.586886][T19304] ? do_int80_emulation+0x299/0x500 [ 1196.592118][T19304] do_fast_syscall_32+0x33/0x70 [ 1196.597003][T19304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.603363][T19304] RIP: 0023:0xf740ef1c [ 1196.607457][T19304] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1196.627118][T19304] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1196.635561][T19304] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1196.643570][T19304] RDX: 00000000fffffd86 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.651575][T19304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1196.659578][T19304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1196.667580][T19304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1196.675595][T19304] [ 1196.709950][T13407] az6027: usb out operation failed. (-71) [ 1196.711771][T13407] az6027: usb out operation failed. (-71) [ 1196.711787][T13407] stb0899_attach: Driver disabled by Kconfig [ 1196.711796][T13407] az6027: no front-end attached [ 1196.711796][T13407] [ 1196.713356][T13407] az6027: usb out operation failed. (-71) [ 1196.713369][T13407] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1196.714568][T13407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input200 [ 1196.753303][T13407] dvb-usb: schedule remote query interval to 400 msecs. [ 1196.753325][T13407] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1196.774513][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1196.774939][T13407] usb 2-1: USB disconnect, device number 57 [ 1196.875202][T13407] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.