last executing test programs: 23.586151586s ago: executing program 3 (id=1579): recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) sendfile(r7, r7, 0x0, 0x2000fb) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000340)=[{0x0}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0) 20.717443282s ago: executing program 0 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a10", 0x1d6}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) write(r5, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f0000000740)='\xb4\x00\xa09c\x99\x0eZ\xe6\xe8\xd7_', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.T\x82\xe8\xd9\xc3*\xaf\xe8\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000ac0)='*:-$[f\x8dh\b\x002\xf7\x12\xf9\xbc1\x8b\x82F\x1dB{\x96\xfe\xadJ0`\xa9\x90\xbe\xdc}\xee\x06!\f2&1\x1d\xbf\xad1\xd7\xf5\x82\xe0\xfe\xde\xff\x92\xba(z\xa1\xcb\xa5m\xa5h\xfc\xcf\x01\xfe\x9b,G4\v;\x82\xf3\x85\xe8\"\x8b\xee\'aK\xf0\xe1v\xeb\x81\xbc\xb3\x13YI\xdb\x89\x9a\xde\x85g\xa6Y\xb1T\x00\xdd\x06\x12CMNK\x1c5\xf2J\xac\x8d\xa0\xf6 \x1b\xb0\xd2\x98xq\xe4\x1203\x85le']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 19.26425918s ago: executing program 4 (id=1585): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad672"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) rmdir(&(0x7f0000000380)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0xf29b) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4001c00) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') 18.899366721s ago: executing program 3 (id=1586): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x400000000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 16.526628033s ago: executing program 3 (id=1587): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1124, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f4, 0x2, [@TCA_TCINDEX_ACT={0x10f0, 0x7, [@m_xt={0x19c, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x79, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1124}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.363754347s ago: executing program 0 (id=1589): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6, 0x0, 0xffffffffffffffff}) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x32) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x6, &(0x7f00000000c0), 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 14.882335729s ago: executing program 4 (id=1591): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.703285263s ago: executing program 4 (id=1592): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r3) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x4, 0x1000, 0x100000, &(0x7f0000000000)='/', 0x2, 0x0, &(0x7f0000000d40)="d0f9"}) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r7 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000240)) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 10.74687351s ago: executing program 1 (id=1596): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.546649404s ago: executing program 3 (id=1597): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x400000000000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 10.503449292s ago: executing program 4 (id=1598): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce6010203010902"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffd) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_io_uring_setup(0xbf2, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x5c}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x0, @fd_index=0x4, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 9.303919814s ago: executing program 0 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1d6}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) write(r5, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f0000000740)='\xb4\x00\xa09c\x99\x0eZ\xe6\xe8\xd7_', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.T\x82\xe8\xd9\xc3*\xaf\xe8\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000ac0)='*:-$[f\x8dh\b\x002\xf7\x12\xf9\xbc1\x8b\x82F\x1dB{\x96\xfe\xadJ0`\xa9\x90\xbe\xdc}\xee\x06!\f2&1\x1d\xbf\xad1\xd7\xf5\x82\xe0\xfe\xde\xff\x92\xba(z\xa1\xcb\xa5m\xa5h\xfc\xcf\x01\xfe\x9b,G4\v;\x82\xf3\x85\xe8\"\x8b\xee\'aK\xf0\xe1v\xeb\x81\xbc\xb3\x13YI\xdb\x89\x9a\xde\x85g\xa6Y\xb1T\x00\xdd\x06\x12CMNK\x1c5\xf2J\xac\x8d\xa0\xf6 \x1b\xb0\xd2\x98xq\xe4\x1203\x85le']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 9.19381311s ago: executing program 3 (id=1600): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) io_setup(0x239f, &(0x7f0000000380)=0x0) r12 = eventfd2(0x5, 0x1) io_submit(r11, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r12, 0x0, 0x0, 0x800002, 0x0, 0x0, r12}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r12, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x0, r12}]) 9.072663858s ago: executing program 2 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 8.627025688s ago: executing program 2 (id=1602): socket$inet(0x2, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.051572014s ago: executing program 2 (id=1603): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r0, 0x0, 0xffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.611347878s ago: executing program 2 (id=1604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r3, 0x402, 0x5) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 6.530480819s ago: executing program 4 (id=1605): syz_pidfd_open(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100d}, 0x50) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.479640634s ago: executing program 1 (id=1606): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r4], 0x20) 6.035649721s ago: executing program 1 (id=1607): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 2.595918249s ago: executing program 3 (id=1608): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1124, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f4, 0x2, [@TCA_TCINDEX_ACT={0x10f0, 0x7, [@m_xt={0x19c, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x79, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1124}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.536705386s ago: executing program 1 (id=1609): syz_emit_ethernet(0x2cb, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x295, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2.518534198s ago: executing program 0 (id=1610): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 2.343329499s ago: executing program 1 (id=1611): syz_io_uring_setup(0xbd9, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/105, 0x69}], 0x1}, 0x2120) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20044100) read$msr(r0, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="9db99c8b9427aaaaaeaaaa0086dd607468dd00083afffe800000000000000004000000000012ff02000000000000000000000000000180009078"], 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0) 2.34284228s ago: executing program 0 (id=1612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035577f", 0x7}], 0x2) 689.688987ms ago: executing program 1 (id=1613): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x1000, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x24020400) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) listen(r0, 0x0) 299.424009ms ago: executing program 2 (id=1614): unshare(0x2c020400) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) lseek(r1, 0x7f, 0x0) 281.212847ms ago: executing program 0 (id=1615): socket$pptp(0x18, 0x1, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000280)={0x0, 0x3, 0x0, 'queue0\x00', 0x9}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0xc, 0x6, 0x5}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}}, 0x6, 0x2}, &(0x7f0000000000)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000005800010028bd", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000027c0)={0x14, r6, 0xf1f, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}], 0x1}) syz_usb_control_io$printer(r3, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 62.285229ms ago: executing program 4 (id=1616): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f2100402900"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000009c0)={&(0x7f00000000c0)=[{0x9, 0x800, 0x0, 0x0}, {0xb392, 0xa801, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): tec T1 USB2.0) [ 380.880242][ T37] usb 4-1: media controller created [ 380.883353][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.921656][ T37] dvb-usb: bulk message failed: -22 (6/0) [ 380.921741][ T37] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 380.927133][ T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 380.967193][ T37] dvb-usb: schedule remote query interval to 150 msecs. [ 380.967216][ T37] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 381.073633][ T8571] dvb-usb: bulk message failed: -22 (2/0) [ 381.090617][ T5948] usb 4-1: USB disconnect, device number 17 [ 382.189975][ T5948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 383.346277][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 386.369791][ T810] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 387.431395][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.431425][ T810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 387.431478][ T810] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 387.431503][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.438940][ T810] usb 3-1: config 0 descriptor?? [ 387.500908][ T810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 387.500956][ T810] dvb-usb: bulk message failed: -22 (3/0) [ 387.522594][ T810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 387.560337][ T810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 387.560396][ T810] usb 3-1: media controller created [ 387.562406][ T810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.638994][ T810] dvb-usb: bulk message failed: -22 (6/0) [ 387.639051][ T810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 387.704934][ T810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 387.735928][ T810] dvb-usb: schedule remote query interval to 150 msecs. [ 387.735953][ T810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 387.771924][ T810] usb 3-1: USB disconnect, device number 17 [ 389.910930][ T810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 391.129724][ T810] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 392.346371][ T810] usb 3-1: Using ep0 maxpacket: 16 [ 392.770970][ T810] usb 3-1: device descriptor read/all, error -71 [ 393.059805][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 393.211338][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 393.213836][ T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 393.213865][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.235562][ T9] usb 2-1: config 0 descriptor?? [ 393.344397][ T9] as10x_usb: device has been detected [ 393.345296][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 393.426771][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 393.501996][ T9] as10x_usb: error during firmware upload part1 [ 393.502440][ T9] Registered device nBox DVB-T Dongle [ 393.527413][ T9] usb 2-1: USB disconnect, device number 12 [ 393.587035][ T9] Unregistered device nBox DVB-T Dongle [ 393.660356][ T9] as10x_usb: device has been disconnected [ 397.104189][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.814'. [ 397.202395][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 397.202410][ T38] audit: type=1326 audit(1773319646.207:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.202446][ T38] audit: type=1326 audit(1773319646.207:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.202478][ T38] audit: type=1326 audit(1773319646.217:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.202509][ T38] audit: type=1326 audit(1773319646.217:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.202541][ T38] audit: type=1326 audit(1773319646.227:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.202571][ T38] audit: type=1326 audit(1773319646.237:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8703 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 397.430135][ T5948] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 397.584471][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 397.586311][ T5948] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 397.586332][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.591171][ T5948] usb 4-1: config 0 descriptor?? [ 397.797932][ T5948] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 397.845372][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.860060][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 397.860118][ T5948] usb 4-1: media controller created [ 397.950541][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.256490][ T5948] DVB: Unable to find symbol dib7000p_attach() [ 398.256503][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 398.409754][ T5948] rc_core: IR keymap rc-dib0700-rc5 not found [ 398.409771][ T5948] Registered IR keymap rc-empty [ 398.410650][ T5948] dvb-usb: could not initialize remote control. [ 398.410658][ T5948] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 398.417702][ T5948] usb 4-1: USB disconnect, device number 18 [ 398.659867][ T5948] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 398.745495][ T8737] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8737 comm: syz.1.819) [ 398.745748][ T38] audit: type=1800 audit(1773319647.777:67): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.819" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20243 res=0 errno=0 [ 399.070295][ T810] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 399.234988][ T810] usb 1-1: config 0 has no interfaces? [ 399.235028][ T810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.235051][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.286743][ T810] usb 1-1: config 0 descriptor?? [ 400.651842][ T37] usb 1-1: USB disconnect, device number 17 [ 400.873337][ T8762] fuse: Unknown parameter '0x0000000000000005' [ 402.202683][ T8774] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 8774 comm: syz.0.830) [ 402.206253][ T38] audit: type=1800 audit(1773319651.237:68): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.830" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20783 res=0 errno=0 [ 404.689924][ T8792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.629929][ T5810] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 405.856166][ T5810] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 405.856197][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.856217][ T5810] usb 5-1: config 0 has no interface number 0 [ 405.929211][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 405.929241][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.929266][ T5810] usb 5-1: Product: syz [ 405.929276][ T5810] usb 5-1: Manufacturer: syz [ 405.929286][ T5810] usb 5-1: SerialNumber: syz [ 405.975921][ T5810] usb 5-1: config 0 descriptor?? [ 405.979229][ T5810] hub 5-1:0.31: bad descriptor, ignoring hub [ 405.979268][ T5810] hub 5-1:0.31: probe with driver hub failed with error -5 [ 406.024334][ T5810] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 406.300639][ T37] usb 5-1: USB disconnect, device number 9 [ 408.681014][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 411.613530][ T8830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.244528][ T8854] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 414.352769][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 414.465437][ T8856] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 414.998249][ T1233] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 415.191566][ T1233] usb 2-1: device descriptor read/64, error -71 [ 415.950447][ T1233] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 416.279860][ T8872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.479811][ T1233] usb 2-1: device descriptor read/64, error -71 [ 416.591333][ T1233] usb usb2-port1: attempt power cycle [ 416.941751][ T1233] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 416.961788][ T1233] usb 2-1: device descriptor read/8, error -71 [ 417.145580][ T8893] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 417.201002][ T1233] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 417.224398][ T1233] usb 2-1: device descriptor read/8, error -71 [ 417.249932][ T5799] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 417.293436][ T8895] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 417.293764][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'. [ 417.331699][ T1233] usb usb2-port1: unable to enumerate USB device [ 417.432073][ T5799] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 417.432104][ T5799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.432124][ T5799] usb 1-1: config 0 has no interface number 0 [ 417.435912][ T5799] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 417.435943][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.435963][ T5799] usb 1-1: Product: syz [ 417.436226][ T5799] usb 1-1: Manufacturer: syz [ 417.436243][ T5799] usb 1-1: SerialNumber: syz [ 417.520629][ T5799] usb 1-1: config 0 descriptor?? [ 417.535066][ T5799] hub 1-1:0.31: bad descriptor, ignoring hub [ 417.535111][ T5799] hub 1-1:0.31: probe with driver hub failed with error -5 [ 417.556366][ T5799] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 417.990947][ T5810] usb 1-1: USB disconnect, device number 18 [ 419.291417][ T8919] netlink: 96 bytes leftover after parsing attributes in process `syz.0.876'. [ 421.439759][ T5799] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 421.579807][ T5799] usb 4-1: device descriptor read/64, error -71 [ 421.630639][ T810] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 421.812495][ T810] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 421.812525][ T810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.812546][ T810] usb 3-1: config 0 has no interface number 0 [ 421.815543][ T810] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 421.815572][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.815591][ T810] usb 3-1: Product: syz [ 421.815605][ T810] usb 3-1: Manufacturer: syz [ 421.815620][ T810] usb 3-1: SerialNumber: syz [ 421.819761][ T5799] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 421.849027][ T810] usb 3-1: config 0 descriptor?? [ 421.891712][ T810] hub 3-1:0.31: bad descriptor, ignoring hub [ 421.891828][ T810] hub 3-1:0.31: probe with driver hub failed with error -5 [ 421.989738][ T5799] usb 4-1: device descriptor read/64, error -71 [ 422.010421][ T810] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 422.010492][ T810] uvcvideo 3-1:0.31: No valid video chain found. [ 422.102633][ T5799] usb usb4-port1: attempt power cycle [ 422.219967][ T810] usb 3-1: USB disconnect, device number 20 [ 422.637799][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 422.709742][ T5799] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 422.740319][ T5799] usb 4-1: device descriptor read/8, error -71 [ 423.024253][ T5799] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 423.045290][ T5799] usb 4-1: device descriptor read/8, error -71 [ 423.153155][ T5799] usb usb4-port1: unable to enumerate USB device [ 424.622241][ T5799] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 424.815784][ T5799] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 424.815815][ T5799] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 424.815835][ T5799] usb 5-1: config 0 has no interface number 0 [ 424.815880][ T5799] usb 5-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 424.815905][ T5799] usb 5-1: config 0 interface 66 has no altsetting 0 [ 424.815929][ T5799] usb 5-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 424.815945][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.826318][ T5799] usb 5-1: config 0 descriptor?? [ 425.166850][ T5799] usb 5-1: string descriptor 0 read error: -71 [ 425.228991][ T5799] usb 5-1: USB disconnect, device number 10 [ 426.446326][ T8976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.897'. [ 429.260631][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'. [ 430.659969][ T5810] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 430.810872][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 430.832684][ T5810] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 430.832716][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.832750][ T5810] usb 1-1: Product: syz [ 430.832765][ T5810] usb 1-1: Manufacturer: syz [ 430.832780][ T5810] usb 1-1: SerialNumber: syz [ 430.885693][ T5810] usb 1-1: config 0 descriptor?? [ 430.904458][ T5810] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 430.904497][ T5810] dvb-usb: bulk message failed: -22 (2/0) [ 430.958900][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.959500][ T5810] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 430.959539][ T5810] usb 1-1: media controller created [ 431.019483][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.074932][ T5810] usb 1-1: selecting invalid altsetting 7 [ 431.074953][ T5810] cxusb: set interface failed [ 431.074977][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 431.097241][ T9013] cxusb: i2c wr: len=80 is too big! [ 431.097241][ T9013] [ 431.159887][ T5810] DVB: Unable to find symbol lgdt330x_attach() [ 431.159899][ T5810] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 431.289718][ T5810] rc_core: IR keymap rc-dvico-portable not found [ 431.289741][ T5810] Registered IR keymap rc-empty [ 431.291730][ T5810] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 431.297984][ T5810] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input14 [ 431.366910][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 431.366928][ T5810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 431.387500][ T5810] usb 1-1: USB disconnect, device number 19 [ 431.515937][ T5810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 433.509845][ T809] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 433.686579][ T809] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.686626][ T809] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 433.686646][ T809] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 433.731587][ T809] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.731619][ T809] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 433.731640][ T809] usb 2-1: Product: syz [ 433.731654][ T809] usb 2-1: Manufacturer: syz [ 433.731669][ T809] usb 2-1: SerialNumber: syz [ 433.785742][ T809] cdc_mbim 2-1:1.0: skipping garbage [ 434.000500][ T9033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.368697][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 434.619393][ T9033] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.828314][ T809] cdc_mbim 2-1:1.0: failed to get mac address [ 434.830562][ T809] cdc_mbim 2-1:1.0: bind() failure [ 434.880947][ T809] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 434.881914][ T809] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 434.883926][ T809] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 435.094515][ T809] usb 2-1: USB disconnect, device number 17 [ 435.811615][ T9056] kernel profiling enabled (shift: 6) [ 435.912699][ T9056] input: syz0 as /devices/virtual/input/input15 [ 436.200076][ T5799] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 436.369824][ T5799] usb 2-1: Using ep0 maxpacket: 32 [ 436.385200][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 436.385231][ T5799] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 436.411533][ T5799] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 436.411626][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.411683][ T5799] usb 2-1: Product: syz [ 436.411725][ T5799] usb 2-1: Manufacturer: syz [ 436.411767][ T5799] usb 2-1: SerialNumber: syz [ 436.480094][ T5799] usb 2-1: config 0 descriptor?? [ 436.523945][ T5799] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.245070][ T5799] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 437.273462][ T5799] usb 2-1: USB disconnect, device number 18 [ 437.433393][ T9014] udevd[9014]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.429868][ T5810] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 438.593932][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 438.598513][ T5810] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 438.598535][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.598549][ T5810] usb 2-1: Product: syz [ 438.598559][ T5810] usb 2-1: Manufacturer: syz [ 438.598569][ T5810] usb 2-1: SerialNumber: syz [ 438.650449][ T5810] usb 2-1: config 0 descriptor?? [ 438.668288][ T5810] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 438.668324][ T5810] dvb-usb: bulk message failed: -22 (2/0) [ 438.698711][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 438.699361][ T5810] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 438.699399][ T5810] usb 2-1: media controller created [ 438.770410][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 438.813832][ T5810] usb 2-1: selecting invalid altsetting 7 [ 438.813849][ T5810] cxusb: set interface failed [ 438.813859][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 438.858735][ T9074] cxusb: i2c wr: len=80 is too big! [ 438.858735][ T9074] [ 439.070080][ T5810] DVB: Unable to find symbol lgdt330x_attach() [ 439.070097][ T5810] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 439.289684][ T5810] rc_core: IR keymap rc-dvico-portable not found [ 439.289707][ T5810] Registered IR keymap rc-empty [ 439.291019][ T5810] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 439.323478][ T5810] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 439.343244][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 439.343266][ T5810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 439.393311][ T5810] usb 2-1: USB disconnect, device number 19 [ 439.713191][ T5810] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 439.950625][ T9091] netlink: 96 bytes leftover after parsing attributes in process `syz.1.932'. [ 439.970501][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 440.034846][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.034897][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.081656][ T810] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 440.288744][ T810] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.288797][ T810] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 440.288827][ T810] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 440.313483][ T810] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.313533][ T810] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 440.313553][ T810] usb 4-1: Product: syz [ 440.313567][ T810] usb 4-1: Manufacturer: syz [ 440.313587][ T810] usb 4-1: SerialNumber: syz [ 440.375358][ T810] cdc_mbim 4-1:1.0: skipping garbage [ 440.572123][ T9085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.179978][ T9085] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.183281][ T1233] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 441.332669][ T1233] usb 5-1: config 0 has no interfaces? [ 441.332710][ T1233] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.332736][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.338176][ T1233] usb 5-1: config 0 descriptor?? [ 441.383874][ T810] cdc_mbim 4-1:1.0: failed to get mac address [ 441.384387][ T810] cdc_mbim 4-1:1.0: bind() failure [ 441.432969][ T810] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 441.433913][ T810] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 441.435666][ T810] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 441.486659][ T810] usb 4-1: USB disconnect, device number 23 [ 441.787709][ T810] usb 5-1: USB disconnect, device number 11 [ 442.978725][ T38] audit: type=1326 audit(1773319692.007:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9102 comm="syz.3.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb440c799 code=0x0 [ 445.109825][ T810] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 445.294533][ T810] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 445.294609][ T810] usb 2-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.294653][ T810] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 445.294677][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.559830][ T810] usb 2-1: string descriptor 0 read error: -71 [ 445.859016][ T810] usb 2-1: USB disconnect, device number 20 [ 446.362338][ T9157] capability: warning: `syz.1.952' uses deprecated v2 capabilities in a way that may be insecure [ 446.516780][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 447.428620][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.956'. [ 447.679701][ T1233] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 447.829791][ T1233] usb 4-1: Using ep0 maxpacket: 32 [ 447.832940][ T1233] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 447.832969][ T1233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.875180][ T1233] usb 4-1: config 0 descriptor?? [ 448.083591][ T1233] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 448.127670][ T1233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.154063][ T1233] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 448.154124][ T1233] usb 4-1: media controller created [ 448.219131][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.505674][ T1233] DVB: Unable to find symbol dib7000p_attach() [ 448.505694][ T1233] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 448.639776][ T1233] rc_core: IR keymap rc-dib0700-rc5 not found [ 448.639798][ T1233] Registered IR keymap rc-empty [ 448.640073][ T1233] dvb-usb: could not initialize remote control. [ 448.640084][ T1233] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 448.731710][ T1233] usb 4-1: USB disconnect, device number 24 [ 449.009247][ T1233] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 449.531697][ T5799] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 449.744132][ T9201] process 'syz.0.965' launched '/dev/fd/6' with NULL argv: empty string added [ 449.771919][ T5799] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 449.771981][ T5799] usb 3-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.772027][ T5799] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 449.772052][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.983651][ T5799] usb 3-1: string descriptor 0 read error: -71 [ 450.490602][ T5799] usb 3-1: USB disconnect, device number 21 [ 451.799229][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 453.035656][ T9231] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 453.360020][ T5948] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 453.520963][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 453.523544][ T5948] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 453.523584][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.578434][ T5948] usb 4-1: config 0 descriptor?? [ 453.829190][ T5948] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 453.853353][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.855993][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 453.856052][ T5948] usb 4-1: media controller created [ 453.906004][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.022188][ T5948] DVB: Unable to find symbol dib7000p_attach() [ 454.022207][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 454.209885][ T5948] rc_core: IR keymap rc-dib0700-rc5 not found [ 454.209909][ T5948] Registered IR keymap rc-empty [ 454.210189][ T5948] dvb-usb: could not initialize remote control. [ 454.210200][ T5948] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 454.387800][ T5948] usb 4-1: USB disconnect, device number 25 [ 454.461588][ T5948] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 455.433625][ T9259] netlink: 96 bytes leftover after parsing attributes in process `syz.2.981'. [ 456.785944][ T38] audit: type=1326 audit(1773319705.807:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9251 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb440c799 code=0x7ffc0000 [ 456.786001][ T38] audit: type=1326 audit(1773319705.817:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9251 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fceb440c799 code=0x7ffc0000 [ 456.786045][ T38] audit: type=1326 audit(1773319705.817:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9251 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb440c799 code=0x7ffc0000 [ 456.786091][ T38] audit: type=1326 audit(1773319705.817:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9251 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb440c799 code=0x7ffc0000 [ 456.890037][ T809] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 457.049851][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 457.065439][ T809] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 457.065471][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.065491][ T809] usb 2-1: Product: syz [ 457.065505][ T809] usb 2-1: Manufacturer: syz [ 457.065526][ T809] usb 2-1: SerialNumber: syz [ 457.127026][ T809] usb 2-1: config 0 descriptor?? [ 457.552014][ T809] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 457.623315][ T809] usb 2-1: USB disconnect, device number 21 [ 458.379746][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 458.784499][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.991'. [ 458.831575][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 458.999848][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 459.002569][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 459.002590][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.008849][ T9] usb 1-1: config 0 descriptor?? [ 459.222914][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 459.228451][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.248551][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 459.248605][ T9] usb 1-1: media controller created [ 459.285044][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.602510][ T9] DVB: Unable to find symbol dib7000p_attach() [ 459.602527][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 459.739676][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 459.739699][ T9] Registered IR keymap rc-empty [ 459.739996][ T9] dvb-usb: could not initialize remote control. [ 459.740008][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 459.809772][ T9] usb 1-1: USB disconnect, device number 20 [ 459.877381][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 459.989734][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 460.149734][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 460.174950][ T31] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 460.174981][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.175002][ T31] usb 5-1: Product: syz [ 460.175017][ T31] usb 5-1: Manufacturer: syz [ 460.175032][ T31] usb 5-1: SerialNumber: syz [ 460.212189][ T31] usb 5-1: config 0 descriptor?? [ 460.239983][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 460.240034][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 460.283840][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.296984][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 460.297142][ T31] usb 5-1: media controller created [ 460.390050][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.417330][ T9297] cxusb: i2c wr: len=80 is too big! [ 460.417330][ T9297] [ 460.456635][ T31] usb 5-1: selecting invalid altsetting 7 [ 460.456659][ T31] cxusb: set interface failed [ 460.456673][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 460.620947][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 460.620964][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 460.739756][ T809] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 460.751114][ T31] rc_core: IR keymap rc-dvico-portable not found [ 460.751177][ T31] Registered IR keymap rc-empty [ 460.766822][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 460.891484][ T809] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 460.891506][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.891520][ T809] usb 1-1: config 0 has no interface number 0 [ 460.894010][ T809] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 460.894031][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.894046][ T809] usb 1-1: Product: syz [ 460.894057][ T809] usb 1-1: Manufacturer: syz [ 460.894067][ T809] usb 1-1: SerialNumber: syz [ 460.899281][ T809] usb 1-1: config 0 descriptor?? [ 460.908682][ T809] hub 1-1:0.31: bad descriptor, ignoring hub [ 460.908786][ T809] hub 1-1:0.31: probe with driver hub failed with error -5 [ 460.914647][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input21 [ 461.012641][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 461.012658][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 461.044821][ T809] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 461.044850][ T809] uvcvideo 1-1:0.31: No valid video chain found. [ 461.056250][ T31] usb 5-1: USB disconnect, device number 12 [ 461.124805][ T809] usb 1-1: USB disconnect, device number 21 [ 461.378856][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 465.102369][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1006'. [ 465.339811][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 465.419762][ T5948] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 465.491859][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 465.495587][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 465.495618][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.570333][ T9] usb 5-1: config 0 descriptor?? [ 465.609722][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 465.623489][ T5948] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 465.623519][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.684615][ T5948] usb 4-1: config 0 descriptor?? [ 465.756712][ T5948] as10x_usb: device has been detected [ 465.758200][ T5948] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 465.775991][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 465.796177][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.813600][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 465.813666][ T9] usb 5-1: media controller created [ 465.848765][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.868015][ T5948] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 465.907947][ T5948] as10x_usb: error during firmware upload part1 [ 465.908591][ T5948] Registered device nBox DVB-T Dongle [ 465.984913][ T9] DVB: Unable to find symbol dib7000p_attach() [ 465.984932][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 466.089775][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 466.089797][ T9] Registered IR keymap rc-empty [ 466.090209][ T9] dvb-usb: could not initialize remote control. [ 466.090221][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 466.093742][ T9] usb 5-1: USB disconnect, device number 13 [ 466.188166][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 466.499705][ T31] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 467.954214][ T31] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 467.954246][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.954268][ T31] usb 1-1: config 0 has no interface number 0 [ 467.975925][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 467.975975][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.975997][ T31] usb 1-1: Product: syz [ 467.976013][ T31] usb 1-1: Manufacturer: syz [ 467.976030][ T31] usb 1-1: SerialNumber: syz [ 467.991153][ T31] usb 1-1: config 0 descriptor?? [ 467.994125][ T31] hub 1-1:0.31: bad descriptor, ignoring hub [ 467.994164][ T31] hub 1-1:0.31: probe with driver hub failed with error -5 [ 467.997411][ T31] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 467.997444][ T31] uvcvideo 1-1:0.31: No valid video chain found. [ 468.300297][ T5848] usb 4-1: USB disconnect, device number 26 [ 468.320287][ T31] usb 1-1: USB disconnect, device number 22 [ 468.344381][ T5848] Unregistered device nBox DVB-T Dongle [ 468.361224][ T5848] as10x_usb: device has been disconnected [ 469.357249][ T9389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.469735][ T5948] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 473.581793][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1033'. [ 473.626602][ T5948] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 473.626634][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.626653][ T5948] usb 1-1: config 0 has no interface number 0 [ 473.629283][ T5948] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 473.629310][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.629335][ T5948] usb 1-1: Product: syz [ 473.629346][ T5948] usb 1-1: Manufacturer: syz [ 473.629356][ T5948] usb 1-1: SerialNumber: syz [ 473.704917][ T5948] usb 1-1: config 0 descriptor?? [ 473.719149][ T5948] hub 1-1:0.31: bad descriptor, ignoring hub [ 473.719187][ T5948] hub 1-1:0.31: probe with driver hub failed with error -5 [ 473.784260][ T5948] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 473.784296][ T5948] uvcvideo 1-1:0.31: No valid video chain found. [ 473.819831][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 473.969827][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 473.973746][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 473.973778][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.985929][ T9] usb 3-1: config 0 descriptor?? [ 474.020226][ T809] usb 1-1: USB disconnect, device number 23 [ 474.958421][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 475.449112][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 475.456664][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 475.456815][ T9] usb 3-1: media controller created [ 475.527653][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.669791][ T9] DVB: Unable to find symbol dib7000p_attach() [ 475.669804][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 475.799773][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 475.799796][ T9] Registered IR keymap rc-empty [ 475.800005][ T9] dvb-usb: could not initialize remote control. [ 475.800012][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 475.856077][ T9] usb 3-1: USB disconnect, device number 22 [ 476.001700][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 477.692591][ T38] audit: type=1326 audit(1773319726.697:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720146][ T38] audit: type=1326 audit(1773319726.697:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720202][ T38] audit: type=1326 audit(1773319726.697:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720246][ T38] audit: type=1326 audit(1773319726.697:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7379b9e007 code=0x7ffc0000 [ 477.720292][ T38] audit: type=1326 audit(1773319726.707:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720338][ T38] audit: type=1326 audit(1773319726.707:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720444][ T38] audit: type=1326 audit(1773319726.707:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720490][ T38] audit: type=1326 audit(1773319726.707:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720536][ T38] audit: type=1326 audit(1773319726.707:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 477.720582][ T38] audit: type=1326 audit(1773319726.707:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9468 comm="syz.2.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379b9c799 code=0x7ffc0000 [ 482.015620][ T9496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.148197][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 482.399691][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 482.712641][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 482.738988][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 482.739021][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.781551][ T9] usb 5-1: config 0 descriptor?? [ 482.989243][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 483.570557][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 483.592980][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 483.593130][ T9] usb 5-1: media controller created [ 483.645364][ T9514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.717460][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.171190][ T9] DVB: Unable to find symbol dib7000p_attach() [ 484.171217][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 484.301157][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 484.301180][ T9] Registered IR keymap rc-empty [ 484.301505][ T9] dvb-usb: could not initialize remote control. [ 484.301516][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 484.316175][ T9] usb 5-1: USB disconnect, device number 14 [ 484.687572][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 486.945102][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 487.069791][ T31] usb 5-1: device descriptor read/64, error -71 [ 487.338786][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 487.479811][ T31] usb 5-1: device descriptor read/64, error -71 [ 487.589994][ T31] usb usb5-port1: attempt power cycle [ 487.984154][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 488.800554][ T31] usb 5-1: device descriptor read/8, error -71 [ 488.830876][ T9547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.059698][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 489.138810][ T6494] IPVS: starting estimator thread 0... [ 489.154627][ T31] usb 5-1: device descriptor read/8, error -71 [ 489.260149][ T9554] IPVS: using max 12 ests per chain, 28800 per kthread [ 489.260461][ T31] usb usb5-port1: unable to enumerate USB device [ 489.419720][ T9340] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 489.519341][ T9559] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 489.569679][ T9340] usb 4-1: Using ep0 maxpacket: 32 [ 489.572511][ T9340] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 489.572542][ T9340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.623727][ T9340] usb 4-1: config 0 descriptor?? [ 489.646436][ T9340] as10x_usb: device has been detected [ 489.647316][ T9340] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 489.674678][ T9340] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 489.704757][ T9340] as10x_usb: error during firmware upload part1 [ 489.717464][ T9340] Registered device nBox DVB-T Dongle [ 491.199722][ T31] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 491.461830][ T31] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 491.461852][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.461867][ T31] usb 3-1: config 0 has no interface number 0 [ 491.464079][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 491.464100][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.464114][ T31] usb 3-1: Product: syz [ 491.464124][ T31] usb 3-1: Manufacturer: syz [ 491.464135][ T31] usb 3-1: SerialNumber: syz [ 491.476416][ T31] usb 3-1: config 0 descriptor?? [ 491.538377][ T31] hub 3-1:0.31: bad descriptor, ignoring hub [ 491.538418][ T31] hub 3-1:0.31: probe with driver hub failed with error -5 [ 491.560910][ T31] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 491.560947][ T31] uvcvideo 3-1:0.31: No valid video chain found. [ 491.840049][ T31] usb 3-1: USB disconnect, device number 23 [ 492.686394][ T9595] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 493.154134][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 493.279892][ T9] usb 3-1: device descriptor read/64, error -71 [ 493.993649][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 494.026462][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 494.839737][ T9] usb 3-1: device descriptor read/64, error -71 [ 494.950007][ T9] usb usb3-port1: attempt power cycle [ 495.299857][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 495.321517][ T9] usb 3-1: device descriptor read/8, error -71 [ 495.560585][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 495.580539][ T9] usb 3-1: device descriptor read/8, error -71 [ 495.694708][ T9] usb usb3-port1: unable to enumerate USB device [ 495.709436][ T31] usb 4-1: USB disconnect, device number 27 [ 495.861074][ T31] Unregistered device nBox DVB-T Dongle [ 495.883085][ T31] as10x_usb: device has been disconnected [ 497.781735][ T38] kauditd_printk_skb: 29 callbacks suppressed [ 497.781752][ T38] audit: type=1800 audit(1773319746.817:113): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1092" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 498.394201][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 498.634867][ T9654] : entered promiscuous mode [ 500.119807][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 500.272413][ T31] usb 4-1: config 0 has no interfaces? [ 500.274916][ T31] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 500.274942][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.274960][ T31] usb 4-1: Product: syz [ 500.274979][ T31] usb 4-1: Manufacturer: syz [ 500.274988][ T31] usb 4-1: SerialNumber: syz [ 500.331363][ T31] usb 4-1: config 0 descriptor?? [ 500.669690][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 500.857241][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.857263][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.857296][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.883120][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.883152][ T31] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 500.883173][ T31] usb 5-1: Product: syz [ 500.883190][ T31] usb 5-1: Manufacturer: syz [ 500.883206][ T31] usb 5-1: SerialNumber: syz [ 500.894875][ T31] cdc_mbim 5-1:1.0: skipping garbage [ 500.894895][ T31] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 500.894949][ T31] cdc_mbim 5-1:1.0: bind() failure [ 501.503563][ T9340] usb 4-1: USB disconnect, device number 28 [ 501.513649][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.513722][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.925457][ T31] usb 5-1: USB disconnect, device number 19 [ 503.289703][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 503.439741][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 503.443644][ T9] usb 2-1: config 0 has no interfaces? [ 503.446750][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.446778][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.446799][ T9] usb 2-1: Product: syz [ 503.446819][ T9] usb 2-1: Manufacturer: syz [ 503.446829][ T9] usb 2-1: SerialNumber: syz [ 503.515916][ T9] usb 2-1: config 0 descriptor?? [ 505.279993][T10119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.010397][ T810] usb 2-1: USB disconnect, device number 22 [ 506.291678][ T38] audit: type=1800 audit(1773319755.307:114): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1111" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 508.080735][ T6494] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 508.219814][T10136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.283606][ T6494] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.283627][ T6494] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.283662][ T6494] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.286244][ T6494] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.286265][ T6494] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 508.286280][ T6494] usb 4-1: Product: syz [ 508.286290][ T6494] usb 4-1: Manufacturer: syz [ 508.286301][ T6494] usb 4-1: SerialNumber: syz [ 508.297776][ T6494] cdc_mbim 4-1:1.0: skipping garbage [ 508.297796][ T6494] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 508.297838][ T6494] cdc_mbim 4-1:1.0: bind() failure [ 511.100687][ T9] usb 4-1: USB disconnect, device number 29 [ 512.374865][T10189] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1127'. [ 513.892810][T10205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.599733][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 514.759943][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 514.765859][ T31] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 514.765883][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.765897][ T31] usb 2-1: Product: syz [ 514.765908][ T31] usb 2-1: Manufacturer: syz [ 514.765919][ T31] usb 2-1: SerialNumber: syz [ 514.809241][ T31] usb 2-1: config 0 descriptor?? [ 514.824316][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 514.824379][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 514.885639][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 514.886475][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 514.886535][ T31] usb 2-1: media controller created [ 514.939039][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.970566][ T31] usb 2-1: selecting invalid altsetting 7 [ 514.970589][ T31] cxusb: set interface failed [ 514.970602][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 515.013320][T10210] cxusb: i2c wr: len=80 is too big! [ 515.013320][T10210] [ 515.287584][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 515.287605][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 515.590012][ T31] rc_core: IR keymap rc-dvico-portable not found [ 515.590035][ T31] Registered IR keymap rc-empty [ 515.593191][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 515.596732][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input25 [ 515.664984][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 515.665010][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 515.686240][ T31] usb 2-1: USB disconnect, device number 23 [ 515.984976][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 517.905237][T10243] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1143'. [ 520.786932][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 521.411095][T10283] input: syz1 as /devices/virtual/input/input26 [ 522.020056][T10295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.631624][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 523.989851][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 524.171794][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 524.189510][ T31] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 524.189729][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.189753][ T31] usb 5-1: Product: syz [ 524.189767][ T31] usb 5-1: Manufacturer: syz [ 524.189781][ T31] usb 5-1: SerialNumber: syz [ 524.197012][ T31] usb 5-1: config 0 descriptor?? [ 524.219273][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 524.219310][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 524.361891][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.363278][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 524.363337][ T31] usb 5-1: media controller created [ 524.400235][T10320] cxusb: i2c wr: len=80 is too big! [ 524.400235][T10320] [ 524.447870][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.509962][ T31] usb 5-1: selecting invalid altsetting 7 [ 524.509984][ T31] cxusb: set interface failed [ 524.509998][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 524.610726][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 524.610743][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 524.732213][ T31] rc_core: IR keymap rc-dvico-portable not found [ 524.732228][ T31] Registered IR keymap rc-empty [ 524.736576][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 524.781262][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input27 [ 524.810140][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 524.810164][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 524.813133][ T31] usb 5-1: USB disconnect, device number 20 [ 524.987292][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 525.008074][T10329] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1166'. [ 527.852638][ T9340] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 528.100741][ T9340] usb 1-1: config 0 has an invalid interface number: 158 but max is 1 [ 528.100764][ T9340] usb 1-1: config 0 has an invalid interface number: 239 but max is 1 [ 528.100778][ T9340] usb 1-1: config 0 has no interface number 0 [ 528.100789][ T9340] usb 1-1: config 0 has no interface number 1 [ 528.100828][ T9340] usb 1-1: config 0 interface 158 has no altsetting 0 [ 528.100842][ T9340] usb 1-1: config 0 interface 239 has no altsetting 0 [ 528.105979][ T9340] usb 1-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice= 3.d9 [ 528.106002][ T9340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.106016][ T9340] usb 1-1: Product: syz [ 528.106026][ T9340] usb 1-1: Manufacturer: syz [ 528.106036][ T9340] usb 1-1: SerialNumber: syz [ 528.162448][ T9340] usb 1-1: config 0 descriptor?? [ 528.524426][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 528.715326][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 532.531360][ T6494] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 532.680594][ T6494] usb 5-1: Using ep0 maxpacket: 32 [ 532.683560][ T6494] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 532.683591][ T6494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.732656][ T6494] usb 5-1: config 0 descriptor?? [ 532.949134][ T6494] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 533.016181][ T6494] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 533.033662][ T6494] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 533.033736][ T6494] usb 5-1: media controller created [ 533.138049][ T6494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 533.241323][ T9340] usb 1-1: bad CDC descriptors [ 533.490031][ T6494] DVB: Unable to find symbol dib7000p_attach() [ 533.510312][ T6494] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 533.595921][ T809] usb 1-1: USB disconnect, device number 24 [ 533.859715][ T6494] rc_core: IR keymap rc-dib0700-rc5 not found [ 533.859736][ T6494] Registered IR keymap rc-empty [ 533.860025][ T6494] dvb-usb: could not initialize remote control. [ 533.860036][ T6494] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 533.872596][ T6494] usb 5-1: USB disconnect, device number 21 [ 534.098397][ T6494] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 534.176490][T10418] input: syz1 as /devices/virtual/input/input29 [ 536.431226][ T810] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 536.982881][ T810] usb 1-1: Using ep0 maxpacket: 8 [ 536.987613][ T810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.987639][ T810] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 536.987692][ T810] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 536.987709][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.033359][ T810] usb 1-1: config 0 descriptor?? [ 539.634592][ T6494] usb 1-1: USB disconnect, device number 25 [ 541.981369][T10475] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1204'. [ 549.415094][ T38] audit: type=1326 audit(1773319798.447:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb440c799 code=0x0 [ 551.018174][T10521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.056812][ T809] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 551.230646][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 551.233748][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.233768][ T809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.233795][ T809] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 551.233812][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.241837][ T809] usb 2-1: config 0 descriptor?? [ 553.621368][T10534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.304487][ T5799] usb 2-1: USB disconnect, device number 24 [ 557.119651][ T6494] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 557.289788][ T6494] usb 1-1: Using ep0 maxpacket: 32 [ 557.292357][ T6494] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 557.292387][ T6494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.297814][ T6494] usb 1-1: config 0 descriptor?? [ 557.501032][ T6494] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 557.511865][ T6494] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.570024][ T6494] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 557.570066][ T6494] usb 1-1: media controller created [ 557.639808][ T6494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.100966][ T6494] DVB: Unable to find symbol dib7000p_attach() [ 558.100978][ T6494] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 558.199724][ T6494] rc_core: IR keymap rc-dib0700-rc5 not found [ 558.199746][ T6494] Registered IR keymap rc-empty [ 558.200029][ T6494] dvb-usb: could not initialize remote control. [ 558.200039][ T6494] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 558.254612][ T6494] usb 1-1: USB disconnect, device number 26 [ 558.431915][ T6494] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 562.930423][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930494][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.509751][ T810] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 567.661541][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 567.662478][ T810] usb 2-1: no configurations [ 567.662491][ T810] usb 2-1: can't read configurations, error -22 [ 567.789746][ T810] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 567.832192][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 567.832212][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 567.913698][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 567.913717][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 567.949628][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 567.950659][ T810] usb 2-1: no configurations [ 567.950677][ T810] usb 2-1: can't read configurations, error -22 [ 567.953664][ T810] usb usb2-port1: attempt power cycle [ 568.299731][ T810] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 568.322011][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 568.322844][ T810] usb 2-1: no configurations [ 568.322860][ T810] usb 2-1: can't read configurations, error -22 [ 568.449705][ T810] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 568.473979][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 568.475364][ T810] usb 2-1: no configurations [ 568.475376][ T810] usb 2-1: can't read configurations, error -22 [ 568.475666][ T810] usb usb2-port1: unable to enumerate USB device [ 568.651340][ T810] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 568.815029][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 568.817413][ T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 568.817442][ T810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 568.839834][ T810] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 568.839887][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.839903][ T810] usb 5-1: Product: syz [ 568.839914][ T810] usb 5-1: Manufacturer: syz [ 568.839925][ T810] usb 5-1: SerialNumber: syz [ 568.896807][ T810] usb 5-1: config 0 descriptor?? [ 568.994108][ T810] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 569.258278][ T810] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 569.288809][ T810] usb 5-1: USB disconnect, device number 22 [ 569.482520][T10636] udevd[10636]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.746085][ T38] audit: type=1326 audit(1773319820.777:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10649 comm="syz.0.1250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92e158c799 code=0x0 [ 573.040226][ T809] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 573.699694][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 573.722497][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.722526][ T809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.722555][ T809] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 573.722580][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.772950][ T809] usb 2-1: config 0 descriptor?? [ 575.048227][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 575.349658][ T809] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 575.509658][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 575.512913][ T809] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 575.512935][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.521240][ T809] usb 4-1: config 0 descriptor?? [ 575.738347][ T809] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 575.767537][ T809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 575.771151][ T809] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 575.771308][ T809] usb 4-1: media controller created [ 575.966443][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 576.119695][ T6494] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 576.162951][ T809] DVB: Unable to find symbol dib7000p_attach() [ 576.162964][ T809] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 576.269704][ T6494] usb 3-1: Using ep0 maxpacket: 32 [ 576.272278][ T6494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 576.272309][ T6494] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 576.274950][ T6494] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 576.274977][ T6494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.274997][ T6494] usb 3-1: Product: syz [ 576.275012][ T6494] usb 3-1: Manufacturer: syz [ 576.275027][ T6494] usb 3-1: SerialNumber: syz [ 576.352016][ T6494] usb 3-1: config 0 descriptor?? [ 576.409932][ T6494] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.439679][ T809] rc_core: IR keymap rc-dib0700-rc5 not found [ 576.439701][ T809] Registered IR keymap rc-empty [ 576.439993][ T809] dvb-usb: could not initialize remote control. [ 576.440004][ T809] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 576.492225][ T809] usb 4-1: USB disconnect, device number 30 [ 576.676357][ T809] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 576.790983][ T6494] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 576.860462][ T5799] usb 2-1: USB disconnect, device number 29 [ 576.862029][ T6494] usb 3-1: USB disconnect, device number 28 [ 576.899707][ T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 576.966354][T10618] udevd[10618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.049673][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 577.051998][ T37] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 577.052029][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.101507][ T37] usb 5-1: config 0 descriptor?? [ 577.308987][ T37] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 577.364261][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.366393][ T37] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 577.366447][ T37] usb 5-1: media controller created [ 577.418489][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.527138][ T37] DVB: Unable to find symbol dib7000p_attach() [ 577.527157][ T37] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 577.636839][ T37] rc_core: IR keymap rc-dib0700-rc5 not found [ 577.636863][ T37] Registered IR keymap rc-empty [ 577.637141][ T37] dvb-usb: could not initialize remote control. [ 577.637152][ T37] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 577.683454][ T37] usb 5-1: USB disconnect, device number 23 [ 577.766279][ T37] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 579.849719][ T37] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 580.007976][ T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 580.008012][ T37] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 580.008037][ T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 580.020190][ T37] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 580.020221][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.020242][ T37] usb 5-1: Product: syz [ 580.020258][ T37] usb 5-1: Manufacturer: syz [ 580.020273][ T37] usb 5-1: SerialNumber: syz [ 580.100036][ T37] usb 5-1: config 0 descriptor?? [ 580.110025][T10713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.110273][T10713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 580.131041][ T37] usb 5-1: ucan: probing device on interface #0 [ 580.312698][ T37] usb 5-1: ucan: could not read protocol version, ret=28 [ 580.312718][ T37] usb 5-1: ucan: probe failed; try to update the device firmware [ 581.146162][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1269'. [ 581.389662][ T6494] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 581.539637][ T6494] usb 4-1: Using ep0 maxpacket: 32 [ 581.542021][ T6494] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 581.542053][ T6494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.549492][ T6494] usb 4-1: config 0 descriptor?? [ 581.685813][ T9340] usb 5-1: USB disconnect, device number 24 [ 581.788365][ T6494] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 581.837770][ T6494] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.838568][ T6494] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 581.838626][ T6494] usb 4-1: media controller created [ 581.875624][ T6494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.979392][ T6494] DVB: Unable to find symbol dib7000p_attach() [ 581.979409][ T6494] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 582.119637][ T6494] rc_core: IR keymap rc-dib0700-rc5 not found [ 582.119660][ T6494] Registered IR keymap rc-empty [ 582.119953][ T6494] dvb-usb: could not initialize remote control. [ 582.119964][ T6494] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 582.282356][ T6494] usb 4-1: USB disconnect, device number 31 [ 582.344758][ T6494] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 582.560484][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 582.610080][ T37] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 582.712676][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.712747][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.712792][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 582.712821][ T31] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 582.712846][ T31] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.717653][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.717686][ T31] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 582.717707][ T31] usb 3-1: Product: syz [ 582.717723][ T31] usb 3-1: Manufacturer: syz [ 582.717737][ T31] usb 3-1: SerialNumber: syz [ 582.759627][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 582.781264][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 582.781356][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 582.856486][ T37] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 582.856519][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.856594][ T37] usb 2-1: Product: syz [ 582.856610][ T37] usb 2-1: Manufacturer: syz [ 582.856625][ T37] usb 2-1: SerialNumber: syz [ 582.885192][ T31] cdc_mbim 3-1:1.0: skipping garbage [ 582.897679][ T37] usb 2-1: config 0 descriptor?? [ 582.941944][ T37] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.058417][T10739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 583.486989][ T37] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 583.578668][ T37] usb 2-1: USB disconnect, device number 30 [ 585.182162][T10756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 585.341295][ T31] cdc_mbim 3-1:1.0: bind() failure [ 585.381461][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 585.386309][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 585.409738][ T31] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 585.489577][ T31] usb 3-1: USB disconnect, device number 29 [ 585.515117][T10693] udevd[10693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.969689][ T5799] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 589.133774][ T5799] usb 1-1: Using ep0 maxpacket: 8 [ 589.149904][ T5799] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.149933][ T5799] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.149975][ T5799] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 589.149999][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.158604][ T5799] usb 1-1: config 0 descriptor?? [ 589.259627][ T38] audit: type=1800 audit(1773319838.267:117): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1287" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 591.754606][ T5799] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 591.932683][ T5799] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.932734][ T5799] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 591.932755][ T5799] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 591.932773][ T5799] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 591.936950][ T5799] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.936987][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 591.937002][ T5799] usb 4-1: Product: syz [ 591.937013][ T5799] usb 4-1: Manufacturer: syz [ 591.937024][ T5799] usb 4-1: SerialNumber: syz [ 592.050865][ T5799] cdc_mbim 4-1:1.0: skipping garbage [ 592.246151][T10805] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 592.862284][T10805] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 593.066213][ T5799] cdc_mbim 4-1:1.0: bind() failure [ 593.107317][ T5799] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 593.119280][ T5799] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 593.150326][ T5799] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 593.170234][ T5799] usb 4-1: USB disconnect, device number 32 [ 593.212857][T10619] udevd[10619]: setting mode of /dev/bus/usb/004/032 to 020664 failed: No such file or directory [ 593.213048][T10619] udevd[10619]: setting owner of /dev/bus/usb/004/032 to uid=0, gid=0 failed: No such file or directory [ 593.275720][ T9340] usb 1-1: USB disconnect, device number 27 [ 595.122370][T10832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.618245][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 596.889712][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 597.039654][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 597.061975][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 597.061999][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.069257][ T9] usb 2-1: config 0 descriptor?? [ 597.249644][ T37] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 597.308346][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 597.334036][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 597.356992][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 597.357041][ T9] usb 2-1: media controller created [ 597.399667][ T37] usb 5-1: device descriptor read/64, error -71 [ 597.404439][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 597.649804][ T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 597.720059][ T9] DVB: Unable to find symbol dib7000p_attach() [ 597.720077][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 597.790503][ T37] usb 5-1: device descriptor read/64, error -71 [ 597.899978][ T37] usb usb5-port1: attempt power cycle [ 598.009652][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 598.009676][ T9] Registered IR keymap rc-empty [ 598.009892][ T9] dvb-usb: could not initialize remote control. [ 598.009899][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 598.018005][ T9] usb 2-1: USB disconnect, device number 31 [ 598.161702][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 598.259708][ T37] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 598.288294][ T37] usb 5-1: device descriptor read/8, error -71 [ 598.519905][ T37] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 598.542379][ T37] usb 5-1: device descriptor read/8, error -71 [ 598.650083][ T37] usb usb5-port1: unable to enumerate USB device [ 599.089688][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 599.220840][ T37] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 599.260837][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.260887][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 599.260926][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 599.260945][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 599.264703][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.264732][ T9] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 599.264756][ T9] usb 2-1: Product: syz [ 599.264767][ T9] usb 2-1: Manufacturer: syz [ 599.264777][ T9] usb 2-1: SerialNumber: syz [ 599.375414][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 599.379746][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 599.379780][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 599.379807][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 599.427256][ T37] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 599.427298][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.427320][ T37] usb 1-1: Product: syz [ 599.427335][ T37] usb 1-1: Manufacturer: syz [ 599.427349][ T37] usb 1-1: SerialNumber: syz [ 599.535843][ T37] usb 1-1: config 0 descriptor?? [ 599.550946][T10870] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 599.551188][T10870] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 599.574906][T10868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 599.592200][ T37] usb 1-1: ucan: probing device on interface #0 [ 599.760330][ T37] usb 1-1: ucan: could not read protocol version, ret=28 [ 599.760357][ T37] usb 1-1: ucan: probe failed; try to update the device firmware [ 600.182191][T10868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.383602][ T9] cdc_mbim 2-1:1.0: bind() failure [ 600.413677][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 600.416523][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 600.439037][ T9] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 600.475825][ T9] usb 2-1: USB disconnect, device number 32 [ 601.409269][ T38] audit: type=1800 audit(1773319850.427:118): pid=10893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1316" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 601.569136][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 601.679816][ T9340] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 601.819680][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 601.837696][ T9340] usb 3-1: Using ep0 maxpacket: 32 [ 601.845079][ T9340] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 601.845111][ T9340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.874421][ T9340] usb 3-1: config 0 descriptor?? [ 601.979656][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 601.985402][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 601.985433][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.064901][ T9] usb 4-1: config 0 descriptor?? [ 602.086907][ T9340] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 602.111077][ T37] usb 1-1: USB disconnect, device number 28 [ 602.177370][ T9340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.178604][ T9340] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 602.178677][ T9340] usb 3-1: media controller created [ 602.254572][ T9340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.299320][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 602.318069][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 602.358020][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 602.358081][ T9] usb 4-1: media controller created [ 602.402342][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.495245][ T9340] DVB: Unable to find symbol dib7000p_attach() [ 602.495263][ T9340] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 602.739376][ T9] DVB: Unable to find symbol dib7000p_attach() [ 602.739404][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 602.759953][ T9340] rc_core: IR keymap rc-dib0700-rc5 not found [ 602.759975][ T9340] Registered IR keymap rc-empty [ 602.760256][ T9340] dvb-usb: could not initialize remote control. [ 602.760267][ T9340] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 602.764618][ T9340] usb 3-1: USB disconnect, device number 30 [ 603.042299][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 603.042319][ T9] Registered IR keymap rc-empty [ 603.042611][ T9] dvb-usb: could not initialize remote control. [ 603.042621][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 603.231558][ T9] usb 4-1: USB disconnect, device number 33 [ 603.255395][ T9340] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 603.364451][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 604.239736][ T37] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 604.402027][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 604.419200][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.419228][ T37] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 604.449814][ T37] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 604.449849][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.449864][ T37] usb 2-1: Product: syz [ 604.449875][ T37] usb 2-1: Manufacturer: syz [ 604.449885][ T37] usb 2-1: SerialNumber: syz [ 604.479194][ T37] usb 2-1: config 0 descriptor?? [ 606.056799][ T38] audit: type=1800 audit(1773319855.087:119): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1333" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 606.092155][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 606.262229][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 606.262254][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 606.262274][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 606.266919][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 606.266943][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.267025][ T9] usb 3-1: Product: syz [ 606.267037][ T9] usb 3-1: Manufacturer: syz [ 606.267048][ T9] usb 3-1: SerialNumber: syz [ 606.343828][ T9] usb 3-1: config 0 descriptor?? [ 606.344592][T10950] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 606.344743][T10950] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 606.373559][ T9] usb 3-1: ucan: probing device on interface #0 [ 606.547360][ T9] usb 3-1: ucan: could not read protocol version, ret=28 [ 606.547381][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 606.588374][ T38] audit: type=1326 audit(1773319855.617:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.589278][ T38] audit: type=1326 audit(1773319855.617:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.648930][ T38] audit: type=1326 audit(1773319855.677:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.651557][ T38] audit: type=1326 audit(1773319855.677:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.652555][ T38] audit: type=1326 audit(1773319855.687:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.719960][ T38] audit: type=1326 audit(1773319855.737:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10964 comm="syz.4.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f024367c799 code=0x7ffc0000 [ 606.906863][ T9] usb 2-1: USB disconnect, device number 33 [ 609.345955][ T9] usb 3-1: USB disconnect, device number 31 [ 618.116875][ T5848] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 618.572108][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 618.572133][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 618.572152][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 618.574404][ T5848] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 618.574426][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.574441][ T5848] usb 3-1: Product: syz [ 618.574452][ T5848] usb 3-1: Manufacturer: syz [ 618.574463][ T5848] usb 3-1: SerialNumber: syz [ 618.579209][ T5848] usb 3-1: config 0 descriptor?? [ 618.580369][T11021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.580672][T11021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.765283][ T5848] usb 3-1: ucan: probing device on interface #0 [ 618.793214][ T5848] usb 3-1: ucan: could not read protocol version, ret=28 [ 618.793234][ T5848] usb 3-1: ucan: probe failed; try to update the device firmware [ 620.473224][ T31] usb 3-1: USB disconnect, device number 32 [ 620.507712][T11046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.185556][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.185630][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.635852][ T38] audit: type=1800 audit(1773319874.667:126): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1365" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 627.859871][ T38] audit: type=1326 audit(1773319876.887:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11091 comm="syz.3.1371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fceb440c799 code=0x0 [ 629.652103][ T38] audit: type=1800 audit(1773319878.667:128): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1378" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 629.841261][T11126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.779651][ T5848] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 630.851987][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 630.955864][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 630.968787][ T5848] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 630.968822][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.968844][ T5848] usb 2-1: Product: syz [ 630.968861][ T5848] usb 2-1: Manufacturer: syz [ 630.968877][ T5848] usb 2-1: SerialNumber: syz [ 631.266502][ T5848] usb 2-1: config 0 descriptor?? [ 631.701140][ T5848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 632.044334][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.045173][ T5848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 632.045214][ T5848] usb 2-1: media controller created [ 632.114465][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.163789][ T5848] zl10353_read_register: readreg error (reg=127, ret==0) [ 632.163859][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 632.163873][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 632.406865][ T5848] usb 2-1: USB disconnect, device number 34 [ 632.611099][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 634.699748][ T31] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 635.029860][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 635.707669][ T31] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 635.707703][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.823439][ T31] usb 5-1: config 0 descriptor?? [ 636.036088][ T31] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 636.050133][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.050725][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 636.050762][ T31] usb 5-1: media controller created [ 636.087583][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.797579][ T31] DVB: Unable to find symbol dib7000p_attach() [ 637.797597][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 638.092310][ T31] rc_core: IR keymap rc-dib0700-rc5 not found [ 638.092335][ T31] Registered IR keymap rc-empty [ 638.092625][ T31] dvb-usb: could not initialize remote control. [ 638.092635][ T31] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 638.132096][ T31] usb 5-1: USB disconnect, device number 29 [ 638.213345][ T31] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 638.249730][ T5799] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 638.400072][ T5799] usb 4-1: Using ep0 maxpacket: 16 [ 638.407151][ T5799] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 638.407189][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.407204][ T5799] usb 4-1: Product: syz [ 638.407214][ T5799] usb 4-1: Manufacturer: syz [ 638.407225][ T5799] usb 4-1: SerialNumber: syz [ 638.457733][ T5799] usb 4-1: config 0 descriptor?? [ 638.933919][ T5799] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 638.953086][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 638.954880][ T5799] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 638.954918][ T5799] usb 4-1: media controller created [ 639.038877][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.443395][ T5799] zl10353_read_register: readreg error (reg=127, ret==0) [ 639.443468][ T5799] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 639.443483][ T5799] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 639.529874][ T5799] usb 4-1: USB disconnect, device number 34 [ 639.825285][ T5799] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 641.527817][T11220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.619796][ T5848] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 647.792622][ T5848] usb 1-1: config 0 has no interfaces? [ 647.793818][ T5848] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 647.793847][ T5848] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 647.793868][ T5848] usb 1-1: Manufacturer: syz [ 647.842377][ T5848] usb 1-1: config 0 descriptor?? [ 649.193844][ T6494] usb 1-1: USB disconnect, device number 29 [ 649.269692][ T9340] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 649.419656][ T9340] usb 3-1: Using ep0 maxpacket: 16 [ 649.469622][ T9340] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 649.469654][ T9340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.469675][ T9340] usb 3-1: Product: syz [ 649.469690][ T9340] usb 3-1: Manufacturer: syz [ 649.469704][ T9340] usb 3-1: SerialNumber: syz [ 649.525908][ T9340] usb 3-1: config 0 descriptor?? [ 650.669640][ T9340] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 650.678000][ T9340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.678996][ T9340] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 650.679052][ T9340] usb 3-1: media controller created [ 651.129016][ T9340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.260197][ T9340] zl10353_read_register: readreg error (reg=127, ret==0) [ 651.260271][ T9340] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 651.260286][ T9340] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 651.284985][ T9340] usb 3-1: USB disconnect, device number 33 [ 651.472985][ T9340] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 651.969786][ T9340] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 652.209662][ T9340] usb 2-1: Using ep0 maxpacket: 32 [ 652.216973][ T9340] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 652.217005][ T9340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.217033][ T9340] usb 2-1: Product: syz [ 652.217049][ T9340] usb 2-1: Manufacturer: syz [ 652.217064][ T9340] usb 2-1: SerialNumber: syz [ 652.290961][ T9340] usb 2-1: config 0 descriptor?? [ 652.420812][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 652.615634][ T9340] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 652.615684][ T9340] dvb-usb: bulk message failed: -22 (2/0) [ 652.683383][ T9340] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.692259][ T9340] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 652.692413][ T9340] usb 2-1: media controller created [ 652.791490][ T9340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.888944][ T9340] usb 2-1: selecting invalid altsetting 7 [ 652.888966][ T9340] cxusb: set interface failed [ 652.888992][ T9340] dvb-usb: bulk message failed: -22 (1/0) [ 652.960511][ T9340] DVB: Unable to find symbol lgdt330x_attach() [ 652.960530][ T9340] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 653.107513][T11304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 653.107764][T11304] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 653.150560][ T9340] rc_core: IR keymap rc-dvico-portable not found [ 653.150583][ T9340] Registered IR keymap rc-empty [ 653.152276][ T9340] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 653.187675][ T9340] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input41 [ 653.211783][ T9340] dvb-usb: schedule remote query interval to 100 msecs. [ 653.211800][ T9340] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 653.273029][ T9340] usb 2-1: USB disconnect, device number 35 [ 655.190847][ T9340] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 655.499627][ T5799] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 655.731621][ T5799] usb 3-1: config 0 has no interfaces? [ 655.733441][ T5799] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 655.733462][ T5799] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 655.733477][ T5799] usb 3-1: Manufacturer: syz [ 655.737662][ T5799] usb 3-1: config 0 descriptor?? [ 657.151709][ T5948] usb 3-1: USB disconnect, device number 34 [ 657.334501][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 657.931861][T11345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1439'. [ 657.932120][T11345] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1439'. [ 659.152674][ T37] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 659.712439][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 659.746102][ T37] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 659.746135][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.746157][ T37] usb 2-1: Product: syz [ 659.746172][ T37] usb 2-1: Manufacturer: syz [ 659.746188][ T37] usb 2-1: SerialNumber: syz [ 659.796772][ T37] usb 2-1: config 0 descriptor?? [ 659.808803][ T37] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 659.808855][ T37] dvb-usb: bulk message failed: -22 (2/0) [ 659.841537][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.842378][ T37] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 659.842436][ T37] usb 2-1: media controller created [ 659.891649][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.932200][ T37] usb 2-1: selecting invalid altsetting 7 [ 659.932224][ T37] cxusb: set interface failed [ 659.932238][ T37] dvb-usb: bulk message failed: -22 (1/0) [ 660.001493][T11347] cxusb: i2c wr: len=80 is too big! [ 660.001493][T11347] [ 660.017432][ T37] DVB: Unable to find symbol lgdt330x_attach() [ 660.017448][ T37] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 660.140607][ T37] rc_core: IR keymap rc-dvico-portable not found [ 660.140630][ T37] Registered IR keymap rc-empty [ 660.149033][ T37] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 660.174119][ T37] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input42 [ 660.191007][ T37] dvb-usb: schedule remote query interval to 100 msecs. [ 660.191030][ T37] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 660.217080][ T37] usb 2-1: USB disconnect, device number 36 [ 660.344940][ T37] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 661.623339][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 663.546488][ T37] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 664.042193][ T37] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 664.042242][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.043789][ T37] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 664.043818][ T37] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 664.043840][ T37] usb 2-1: Manufacturer: syz [ 664.113874][ T37] usb 2-1: config 0 descriptor?? [ 664.151806][ T37] igorplugusb 2-1:0.0: incorrect number of endpoints [ 665.583830][ T5948] usb 2-1: USB disconnect, device number 37 [ 666.929762][ T9340] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 667.087770][ T9340] usb 2-1: Using ep0 maxpacket: 8 [ 667.101482][ T9340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.101502][ T9340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.101530][ T9340] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 667.101547][ T9340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.193803][ T9340] usb 2-1: config 0 descriptor?? [ 669.499639][ T5799] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 669.583472][ T5948] usb 2-1: USB disconnect, device number 38 [ 669.679637][ T9340] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 669.731812][ T5799] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 669.731845][ T5799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.733131][ T5799] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 669.733169][ T5799] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 669.733191][ T5799] usb 4-1: Manufacturer: syz [ 669.739297][ T5799] usb 4-1: config 0 descriptor?? [ 669.839610][ T9340] usb 1-1: Using ep0 maxpacket: 8 [ 669.852363][ T9340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.852450][ T9340] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.852558][ T9340] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 669.852624][ T9340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.887114][ T9340] usb 1-1: config 0 descriptor?? [ 669.901198][ T5799] igorplugusb 4-1:0.0: incorrect number of endpoints [ 670.357441][ T5799] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 670.570310][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 670.577708][ T5799] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 670.577739][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.583652][ T5799] usb 5-1: config 0 descriptor?? [ 670.805332][ T5799] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 670.820796][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 670.821583][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 670.821770][ T5799] usb 5-1: media controller created [ 670.868667][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.263941][ T9340] usb 4-1: USB disconnect, device number 35 [ 671.306111][ T5799] DVB: Unable to find symbol dib7000p_attach() [ 671.306124][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 671.599639][ T5799] rc_core: IR keymap rc-dib0700-rc5 not found [ 671.599661][ T5799] Registered IR keymap rc-empty [ 671.599875][ T5799] dvb-usb: could not initialize remote control. [ 671.599882][ T5799] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 671.654945][ T5799] usb 5-1: USB disconnect, device number 30 [ 671.756387][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 673.107517][ T9340] usb 1-1: USB disconnect, device number 30 [ 676.399701][ T5799] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 676.589744][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 676.594167][ T5799] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 676.594189][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.622712][ T5799] usb 5-1: config 0 descriptor?? [ 676.829693][ T5848] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 676.834981][ T5799] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 676.893047][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 676.893641][ T5799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 676.893681][ T5799] usb 5-1: media controller created [ 676.962669][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.001545][ T5848] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 677.001578][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.007645][ T5848] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 677.007674][ T5848] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 677.007699][ T5848] usb 4-1: Manufacturer: syz [ 677.087280][ T5848] usb 4-1: config 0 descriptor?? [ 677.138988][ T5848] igorplugusb 4-1:0.0: incorrect number of endpoints [ 677.220508][ T5799] DVB: Unable to find symbol dib7000p_attach() [ 677.220521][ T5799] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 677.419648][ T5799] rc_core: IR keymap rc-dib0700-rc5 not found [ 677.419671][ T5799] Registered IR keymap rc-empty [ 677.451443][ T5799] dvb-usb: could not initialize remote control. [ 677.451455][ T5799] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 677.520285][ T5799] usb 5-1: USB disconnect, device number 31 [ 677.604139][ T5799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 679.740313][ T9340] usb 4-1: USB disconnect, device number 36 [ 685.679658][ T37] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 685.795771][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.795847][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.850246][ T37] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 685.850277][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.850328][ T37] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.910102][ T37] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 685.910135][ T37] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 685.910157][ T37] usb 3-1: Manufacturer: syz [ 685.950688][ T37] usb 3-1: config 0 descriptor?? [ 685.968928][ T37] igorplugusb 3-1:0.0: incorrect number of endpoints [ 687.609703][ T37] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 687.692817][ T9340] usb 3-1: USB disconnect, device number 35 [ 687.763509][ T37] usb 1-1: config 0 has no interfaces? [ 687.765796][ T37] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 687.765818][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.765832][ T37] usb 1-1: Product: syz [ 687.765843][ T37] usb 1-1: Manufacturer: syz [ 687.765853][ T37] usb 1-1: SerialNumber: syz [ 687.820023][ T37] usb 1-1: config 0 descriptor?? [ 688.128312][T11563] cgroup: fork rejected by pids controller in /syz0 [ 690.539659][ T5799] usb 1-1: USB disconnect, device number 31 [ 695.150051][ T9340] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 696.251937][ T9340] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 696.251970][ T9340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.252018][ T9340] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.253577][ T9340] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 696.253604][ T9340] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 696.253625][ T9340] usb 1-1: Manufacturer: syz [ 696.395799][ T9340] usb 1-1: config 0 descriptor?? [ 696.412189][ T9340] igorplugusb 1-1:0.0: incorrect number of endpoints [ 696.509613][ T5848] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 697.495514][ T5848] usb 4-1: config 0 has no interfaces? [ 697.523094][ T5848] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 697.523137][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.523159][ T5848] usb 4-1: Product: syz [ 697.523175][ T5848] usb 4-1: Manufacturer: syz [ 697.523189][ T5848] usb 4-1: SerialNumber: syz [ 697.593208][ T5848] usb 4-1: config 0 descriptor?? [ 697.859300][ T9340] usb 1-1: USB disconnect, device number 32 [ 698.095715][T12266] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1521'. [ 698.239176][T12279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1522'. [ 699.566326][ T31] usb 4-1: USB disconnect, device number 37 [ 701.909968][T12305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.419659][ T810] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 703.571629][ T810] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 703.571652][ T810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.571703][ T810] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.572768][ T810] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 703.572788][ T810] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 703.572803][ T810] usb 1-1: Manufacturer: syz [ 703.576470][ T810] usb 1-1: config 0 descriptor?? [ 703.667362][ T810] igorplugusb 1-1:0.0: incorrect number of endpoints [ 704.959670][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 705.084571][T12344] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1536'. [ 705.111465][ T31] usb 4-1: config 0 has no interfaces? [ 705.147400][ T31] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 705.147430][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.147453][ T31] usb 4-1: Product: syz [ 705.147465][ T31] usb 4-1: Manufacturer: syz [ 705.147475][ T31] usb 4-1: SerialNumber: syz [ 705.349033][ T31] usb 4-1: config 0 descriptor?? [ 705.665177][ T31] usb 1-1: USB disconnect, device number 33 [ 706.286574][ T37] usb 4-1: USB disconnect, device number 38 [ 708.620927][T12564] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1543'. [ 712.009629][ T9340] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 712.159630][ T9340] usb 4-1: Using ep0 maxpacket: 8 [ 712.881109][ T9340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.881138][ T9340] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 712.881177][ T9340] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 712.881201][ T9340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.978542][ T9340] usb 4-1: config 0 descriptor?? [ 718.536694][ T9340] usb 4-1: can't set config #0, error -110 [ 718.954739][ T5848] usb 4-1: USB disconnect, device number 39 [ 719.509035][T12636] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1563'. [ 721.379614][ T5848] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 721.565215][ T5848] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 721.565241][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 721.565260][ T5848] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 721.569732][ T5848] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 721.569763][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.569783][ T5848] usb 5-1: Product: syz [ 721.569797][ T5848] usb 5-1: Manufacturer: syz [ 721.569812][ T5848] usb 5-1: SerialNumber: syz [ 721.650108][ T5848] usb 5-1: config 0 descriptor?? [ 721.651011][T12641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 721.651142][T12641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 721.681105][ T5848] usb 5-1: ucan: probing device on interface #0 [ 721.858442][ T5848] usb 5-1: ucan: could not read protocol version, ret=28 [ 721.858462][ T5848] usb 5-1: ucan: probe failed; try to update the device firmware [ 721.942080][ T9340] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 722.122774][ T9340] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 722.122796][ T9340] usb 3-1: config 0 has no interface number 0 [ 722.127879][ T9340] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 722.127901][ T9340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.127916][ T9340] usb 3-1: Product: syz [ 722.127926][ T9340] usb 3-1: Manufacturer: syz [ 722.127936][ T9340] usb 3-1: SerialNumber: syz [ 722.225185][ T9340] usb 3-1: config 0 descriptor?? [ 722.461642][ T9340] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 722.466248][ T9340] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 722.466531][ T9340] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 722.466568][ T9340] usb 3-1: media controller created [ 722.573220][ T9340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.792245][ T9340] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 723.793365][T12651] usb 3-1: dvb_usb_ec168: I2C read not implemented [ 723.980426][ T5848] usb 5-1: USB disconnect, device number 32 [ 724.057451][ T9340] usb 3-1: USB disconnect, device number 36 [ 725.779398][ T38] audit: type=1326 audit(1773319974.807:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12678 comm="syz.1.1576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a58c0c799 code=0x0 [ 730.755370][T12714] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1583'. [ 730.939637][ T6494] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 731.090215][ T6494] usb 4-1: Using ep0 maxpacket: 8 [ 731.228775][ T5948] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 731.418604][ T6494] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.418625][ T6494] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.418652][ T6494] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 731.418669][ T6494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.443221][ T5948] usb 3-1: config 0 has no interfaces? [ 731.445678][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 731.445714][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.445729][ T5948] usb 3-1: Product: syz [ 731.445740][ T5948] usb 3-1: Manufacturer: syz [ 731.445750][ T5948] usb 3-1: SerialNumber: syz [ 731.460552][ T6494] usb 4-1: config 0 descriptor?? [ 731.552961][ T5948] usb 3-1: config 0 descriptor?? [ 731.824435][ T6494] usb 4-1: USB disconnect, device number 40 [ 732.029645][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 734.186864][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 734.186900][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 734.186927][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 734.231511][ T31] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 734.231543][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.231564][ T31] usb 5-1: Product: syz [ 734.231578][ T31] usb 5-1: Manufacturer: syz [ 734.231593][ T31] usb 5-1: SerialNumber: syz [ 734.247823][ T31] usb 5-1: config 0 descriptor?? [ 734.462643][T12723] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 734.468250][T12723] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 734.503917][ T31] usb 5-1: ucan: probing device on interface #0 [ 734.508097][ T6494] usb 3-1: USB disconnect, device number 37 [ 734.691959][ T31] usb 5-1: ucan: could not read protocol version, ret=28 [ 734.691987][ T31] usb 5-1: ucan: probe failed; try to update the device firmware [ 736.139064][ T31] usb 5-1: USB disconnect, device number 33 [ 739.985114][T12758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1594'. [ 739.986081][T12758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1594'. [ 740.868607][ T6494] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 741.779345][ T6494] usb 2-1: device descriptor read/64, error -71 [ 741.840344][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 742.000917][ T31] usb 5-1: config 0 has no interfaces? [ 742.003496][ T31] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 742.003526][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.003548][ T31] usb 5-1: Product: syz [ 742.003563][ T31] usb 5-1: Manufacturer: syz [ 742.003579][ T31] usb 5-1: SerialNumber: syz [ 742.041145][ T6494] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 742.207391][T12779] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1600'. [ 742.217171][ T6494] usb 2-1: device descriptor read/64, error -71 [ 742.264145][ T31] usb 5-1: config 0 descriptor?? [ 742.330231][ T6494] usb usb2-port1: attempt power cycle [ 742.769679][ T6494] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 742.792886][ T6494] usb 2-1: device descriptor read/8, error -71 [ 743.162545][ T6494] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 743.190540][ T6494] usb 2-1: device descriptor read/8, error -71 [ 743.344393][ T6494] usb usb2-port1: unable to enumerate USB device [ 744.435533][ T37] usb 5-1: USB disconnect, device number 34 [ 747.234926][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.235012][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.815396][T12826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1615'. [ 751.089639][ T6494] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 751.259966][ T6494] usb 1-1: Using ep0 maxpacket: 32 [ 751.280337][ T6494] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 751.280370][ T6494] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.284614][ T6494] usb 1-1: config 0 descriptor?? [ 751.289895][ T5799] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 751.299551][ T5948] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 751.441944][ T5799] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.441975][ T5799] usb 3-1: config 0 has no interface number 0 [ 751.449027][ T5799] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 751.449291][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.449314][ T5799] usb 3-1: Product: syz [ 751.449329][ T5799] usb 3-1: Manufacturer: syz [ 751.449344][ T5799] usb 3-1: SerialNumber: syz [ 751.469524][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 751.505095][ T5948] usb 5-1: no configurations [ 751.505113][ T5948] usb 5-1: can't read configurations, error -22 [ 751.513814][ T6494] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 751.543011][ T6494] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.543862][ T5799] usb 3-1: config 0 descriptor?? [ 751.549008][ T6494] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 751.549124][ T6494] usb 1-1: media controller created [ 751.639736][ T5948] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 751.677246][ T6494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.789191][ T5799] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 751.799729][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 751.800754][ T5948] usb 5-1: no configurations [ 751.800771][ T5948] usb 5-1: can't read configurations, error -22 [ 751.801294][ T5948] usb usb5-port1: attempt power cycle [ 751.825575][ T5799] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 751.826463][ T5799] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 751.826600][ T5799] usb 3-1: media controller created [ 751.899601][ T37] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 751.903463][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.939716][ T6494] DVB: Unable to find symbol dib7000p_attach() [ 751.939743][ T6494] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 751.992068][T12832] ------------[ cut here ]------------ [ 751.992084][T12832] usb 1-1: BOGUS control dir, pipe 80002280 doesn't match bRequestType c0 [ 751.992113][T12832] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.2.1617/12832 [ 751.992310][T12832] Modules linked in: [ 751.992354][T12832] CPU: 1 UID: 0 PID: 12832 Comm: syz.2.1617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 751.992387][T12832] Tainted: [L]=SOFTLOCKUP [ 751.992396][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 751.992414][T12832] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 751.992447][T12832] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 751.992468][T12832] RSP: 0018:ffffc90007d97948 EFLAGS: 00010246 [ 751.992488][T12832] RAX: 0000000000000000 RBX: ffff888036111800 RCX: 0000000080002280 [ 751.992503][T12832] RDX: ffff888020691d40 RSI: ffffffff8bedd240 RDI: ffffffff8f764f10 [ 751.992522][T12832] RBP: 1ffff11006ed11b8 R08: 00000000000000c0 R09: 0000000000000000 [ 751.992537][T12832] R10: ffffc90007d97a40 R11: fffff52000fb2f54 R12: ffff888061c79100 [ 751.992555][T12832] R13: ffff888037688dc0 R14: 0000000080002280 R15: ffff888020691d40 [ 751.992572][T12832] FS: 00007f7377df66c0(0000) GS:ffff88812643f000(0000) knlGS:0000000000000000 [ 751.992591][T12832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.992607][T12832] CR2: 000000110c36eaba CR3: 0000000034942000 CR4: 00000000003526f0 [ 751.992628][T12832] Call Trace: [ 751.992642][T12832] [ 751.992660][T12832] ? __init_swait_queue_head+0xa9/0x150 [ 751.992752][T12832] usb_start_wait_urb+0x12b/0x510 [ 751.992793][T12832] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 751.992847][T12832] usb_control_msg+0x232/0x3e0 [ 751.992889][T12832] dib0700_i2c_xfer+0xbb2/0xf80 [ 751.993012][T12832] __i2c_transfer+0x79a/0x2020 [ 751.993093][T12832] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 751.993160][T12832] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 751.993196][T12832] ? i2c_transfer+0xc8/0x2d0 [ 751.993227][T12832] i2c_transfer+0x1cc/0x2d0 [ 751.993262][T12832] i2cdev_ioctl_rdwr+0x460/0x740 [ 751.993331][T12832] i2cdev_ioctl+0x6a8/0x890 [ 751.993360][T12832] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 751.993394][T12832] ? __fget_files+0x3a6/0x420 [ 751.993482][T12832] ? __fget_files+0x2a/0x420 [ 751.993516][T12832] ? bpf_lsm_file_ioctl+0x9/0x20 [ 751.993576][T12832] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 751.993606][T12832] __se_sys_ioctl+0xff/0x170 [ 751.993696][T12832] do_syscall_64+0x14d/0xf80 [ 751.993759][T12832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.993808][T12832] ? clear_bhb_loop+0x40/0x90 [ 751.993836][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.993860][T12832] RIP: 0033:0x7f7379b9c799 [ 751.993887][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.993907][T12832] RSP: 002b:00007f7377df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.993932][T12832] RAX: ffffffffffffffda RBX: 00007f7379e15fa0 RCX: 00007f7379b9c799 [ 751.993949][T12832] RDX: 00002000000009c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 751.993965][T12832] RBP: 00007f7379c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 751.993980][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.993994][T12832] R13: 00007f7379e16038 R14: 00007f7379e15fa0 R15: 00007ffce61dffc8 [ 751.994029][T12832] [ 751.994046][T12832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 751.994066][T12832] CPU: 1 UID: 0 PID: 12832 Comm: syz.2.1617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 751.994097][T12832] Tainted: [L]=SOFTLOCKUP [ 751.994106][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 751.994120][T12832] Call Trace: [ 751.994130][T12832] [ 751.994139][T12832] vpanic+0x56c/0xa60 [ 751.994193][T12832] ? __pfx__printk+0x10/0x10 [ 751.994218][T12832] ? __pfx_vpanic+0x10/0x10 [ 751.994248][T12832] ? is_bpf_text_address+0x292/0x2b0 [ 751.994279][T12832] ? is_bpf_text_address+0x26/0x2b0 [ 751.994320][T12832] panic+0xc5/0xd0 [ 751.994354][T12832] ? __pfx_panic+0x10/0x10 [ 751.994407][T12832] __warn+0x315/0x4f0 [ 751.994439][T12832] ? usb_submit_urb+0x1052/0x18b0 [ 751.994470][T12832] ? usb_submit_urb+0x1052/0x18b0 [ 751.994501][T12832] __report_bug+0x29a/0x540 [ 751.994605][T12832] ? usb_submit_urb+0x1052/0x18b0 [ 751.994636][T12832] ? __pfx___report_bug+0x10/0x10 [ 751.994662][T12832] ? lockdep_hardirqs_on+0x7a/0x110 [ 751.994706][T12832] ? usb_submit_urb+0x1119/0x18b0 [ 751.994754][T12832] report_bug_entry+0x19a/0x290 [ 751.994785][T12832] ? usb_submit_urb+0x1114/0x18b0 [ 751.994813][T12832] ? usb_submit_urb+0x1119/0x18b0 [ 751.994841][T12832] handle_bug+0xce/0x200 [ 751.994875][T12832] exc_invalid_op+0x1a/0x50 [ 751.994909][T12832] asm_exc_invalid_op+0x1a/0x20 [ 751.994930][T12832] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 751.994960][T12832] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 751.994979][T12832] RSP: 0018:ffffc90007d97948 EFLAGS: 00010246 [ 751.994999][T12832] RAX: 0000000000000000 RBX: ffff888036111800 RCX: 0000000080002280 [ 751.995016][T12832] RDX: ffff888020691d40 RSI: ffffffff8bedd240 RDI: ffffffff8f764f10 [ 751.995033][T12832] RBP: 1ffff11006ed11b8 R08: 00000000000000c0 R09: 0000000000000000 [ 751.995049][T12832] R10: ffffc90007d97a40 R11: fffff52000fb2f54 R12: ffff888061c79100 [ 751.995068][T12832] R13: ffff888037688dc0 R14: 0000000080002280 R15: ffff888020691d40 [ 751.995102][T12832] ? usb_submit_urb+0x10a3/0x18b0 [ 751.995137][T12832] ? __init_swait_queue_head+0xa9/0x150 [ 751.995173][T12832] usb_start_wait_urb+0x12b/0x510 [ 751.995211][T12832] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 751.995263][T12832] usb_control_msg+0x232/0x3e0 [ 751.995302][T12832] dib0700_i2c_xfer+0xbb2/0xf80 [ 751.995359][T12832] __i2c_transfer+0x79a/0x2020 [ 751.995390][T12832] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 751.995424][T12832] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 751.995458][T12832] ? i2c_transfer+0xc8/0x2d0 [ 751.995490][T12832] i2c_transfer+0x1cc/0x2d0 [ 751.995523][T12832] i2cdev_ioctl_rdwr+0x460/0x740 [ 751.995564][T12832] i2cdev_ioctl+0x6a8/0x890 [ 751.995593][T12832] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 751.995625][T12832] ? __fget_files+0x3a6/0x420 [ 751.995653][T12832] ? __fget_files+0x2a/0x420 [ 751.995686][T12832] ? bpf_lsm_file_ioctl+0x9/0x20 [ 751.995709][T12832] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 751.995749][T12832] __se_sys_ioctl+0xff/0x170 [ 751.995789][T12832] do_syscall_64+0x14d/0xf80 [ 751.995819][T12832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.995843][T12832] ? clear_bhb_loop+0x40/0x90 [ 751.995872][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.995894][T12832] RIP: 0033:0x7f7379b9c799 [ 751.995915][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.995934][T12832] RSP: 002b:00007f7377df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.995959][T12832] RAX: ffffffffffffffda RBX: 00007f7379e15fa0 RCX: 00007f7379b9c799 [ 751.995976][T12832] RDX: 00002000000009c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 751.995991][T12832] RBP: 00007f7379c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 751.996006][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.996020][T12832] R13: 00007f7379e16038 R14: 00007f7379e15fa0 R15: 00007ffce61dffc8 [ 751.996056][T12832] [ 751.996670][T12832] Kernel Offset: disabled