6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.680426][T10805] usb 6-1: Product: syz [ 808.684825][T10805] usb 6-1: Manufacturer: syz [ 808.689532][T10805] usb 6-1: SerialNumber: syz [ 808.772537][T10805] usb 6-1: config 0 descriptor?? [ 808.849652][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 808.859102][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.867395][ T7101] usb 2-1: Product: syz [ 808.871815][ T7101] usb 2-1: Manufacturer: syz [ 808.876525][ T7101] usb 2-1: SerialNumber: syz [ 809.002065][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 809.046285][ T7101] usb 2-1: config 0 descriptor?? [ 809.287489][ T7] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 809.412953][ T7] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 809.421100][ T7] usb 4-1: can't read configurations, error -22 [ 809.462537][T10805] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 809.473170][T10805] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 809.480125][T10805] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 809.619893][T10805] peak_usb: probe of 6-1:0.0 failed with error -22 [ 809.664435][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 809.676284][T23441] udc-core: couldn't find an available UDC or it's busy [ 809.683550][T23441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 809.701302][T10805] usb 6-1: USB disconnect, device number 109 [ 809.954707][ T7] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 810.082734][ T7] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 810.090875][ T7] usb 4-1: can't read configurations, error -22 [ 810.162790][ T7] usb usb4-port1: attempt power cycle [ 810.474945][T10805] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 810.592504][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 810.742617][ T7] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 810.750588][T10805] usb 6-1: Using ep0 maxpacket: 32 21:50:46 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x11000000}]}}) 21:50:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x44434282}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d30102030109021200010000000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0xf, {0xf, 0xf, "4932d3ca5d924906be0cdea204"}}, &(0x7f0000000040)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "51f2770d4f57ccdec56e033aaae0dc9e849cf292279b68a1e23b62b482ef5c4223a569dbc7b77393de4cd6ffd5bb6bc2f22eb253a66ded9c0de177e26c2bb96879a96d776af1dbbf18aaf8a0992a731232f3b1dc4cc5cf848b5d5f86083c1a32c596dc3cd0d0f7f716c791f415a788dca31a058acef031ceb9130c42544886c1df1984f3f2940829b6ad39b26ec21adfa57a0edca9373733de1ebd1b8778640b230e03249c7ebf06154e2ccc57d70e4a2fb938f7265e52fd976ad63a86c6"}}, &(0x7f0000000140)={0x0, 0xf, 0x81, {0x5, 0xf, 0x81, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0xca67}, @generic={0x5b, 0x10, 0xa, "d38b052b4430b254f3c444809d0c1488d49fe193854cf01ec0778716d6ef05b09fdd98d13bd36f987cf4fd36f2a1f15e739b13ba0fa5bf453b2f36eeee6d2ee233d7b73ae0c8b651e9172850d8f23a219feaf534eaeb7878"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x401, [0xf, 0x18000]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0x0, "95a302fa", "931b3a99"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x5, 0x9, 0x4, 0xf7a7, 0x80}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:50:46 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 810.865126][ T7] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 810.870853][ T7101] usb 2-1: USB disconnect, device number 121 [ 810.873610][ T7] usb 4-1: can't read configurations, error -22 21:50:47 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x8b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201100103000010250da1a440000102030509027900010104207f09040003030202"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x41, {0x41, 0x6, "1371e0dc89901085f0971dc3d3aa629a46bbdae2cb78fd443e4370a6862170d99d427518a065dfd3cf50c3008ad01c410e1eea36adbb7b2db59cd00e6a3781"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x93, "837d927e2bd57f9d676f4e41df0321a72d242893fa1634d808a492b12a40446cb358d0b382c4f4ad1865840b42c7a349cd3ac2b842e29f1e1902bd9e628bc9ac37898ce2c167165e18004badea259bdc2517061d4f1b8a2f60d2b561a0b6edae610b2a8591135eb4247fe43e635a962752173af4fa5111ce34e575b586f30bc15648ae978ffe7fac60db77676409596f83c6bd"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000200)={0x0, 0x8, 0x1}}) [ 811.181972][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd 21:50:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x54fcfca5}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x12000000}]}}) [ 811.251041][T10805] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=3c.57 [ 811.260462][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.268782][T10805] usb 6-1: Product: syz [ 811.273208][T10805] usb 6-1: Manufacturer: syz [ 811.331493][T10805] usb 6-1: config 0 descriptor?? [ 811.355925][T10805] usb 6-1: can't set config #0, error -71 [ 811.363750][ T7] usb 4-1: too many configurations: 91, using maximum allowed: 8 [ 811.409142][T10805] usb 6-1: USB disconnect, device number 110 [ 811.492822][ T7] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 811.500952][ T7] usb 4-1: can't read configurations, error -22 [ 811.522787][ T7101] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 811.577490][ T7] usb usb4-port1: unable to enumerate USB device 21:50:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x25000000}]}}) 21:50:47 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000380)="d560079bc4a12b919f42", 0xa}], 0x1}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="b885815f74f0ad5de665e13b60c34e7640de172a075acddd95e0dcfa82c76baeb06250358f76cf4176cf011dcfe6e1d86a549f7b691ddeb589e0dd548ba692e5c2aea357ad19415b2d979ec7f5cc084f816ccbe08b5b0834"], 0xfc}}, 0x0) 21:50:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x59050000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 811.912567][ T7101] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.940114][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.946653][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 21:50:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x60}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 811.981834][T10805] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 812.056405][T23557] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.103212][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 812.112686][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.120828][ T7101] usb 2-1: Product: syz [ 812.125289][ T7101] usb 2-1: Manufacturer: syz [ 812.129997][ T7101] usb 2-1: SerialNumber: syz [ 812.148667][ T7101] usb 2-1: config 0 descriptor?? [ 812.192846][T23565] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 812.232168][T10805] usb 6-1: Using ep0 maxpacket: 16 21:50:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x5c000000}]}}) 21:50:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x5a84ffff}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 812.392629][T10805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.405200][T10805] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.418906][T10805] usb 6-1: config 1 interface 0 has no altsetting 0 21:50:48 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb4073403b0904a0f578000000210902120001000000000904"], 0x0) syz_usb_connect(0x3, 0xa48, &(0x7f00000001c0)={{0x12, 0x1, 0x11, 0x17, 0xae, 0xa4, 0x20, 0x50d, 0x103, 0x1579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa36, 0x4, 0x8, 0x0, 0xa0, 0x5, [{{0x9, 0x4, 0xc4, 0xf9, 0xa, 0xf6, 0xdd, 0xa8, 0xff, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1f, 0x6, 0x10}, {0x6, 0x24, 0x1a, 0x6, 0xc}, [@mdlm_detail={0x77, 0x24, 0x13, 0x20, "d902db8f7d827c8dd3d5bc7d734b1a2447f7df8f23bfab73c94549b21bd33dab10d3c51a64e6825276fcb60e7bfbc1379c698d2cb09483721ad90ded2d45b4bda1785f5c2525e26a637db81d534810da2c6519e0fb5f102bc1b3890454570514ce1385de54bb6dc03f62fc0818935aee5c33c1"}, @mdlm={0x15, 0x24, 0x12, 0x2}, @dmm={0x7, 0x24, 0x14, 0xfff8, 0x1c42}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0x3, 0x5}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0xb1, 0x1, 0x20}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x7, 0x8, 0xc0, [@generic={0xb9, 0xc, "8d3cb29fe05e4478ce623669df553a14640f321c4c0dd68d49025648585626d3413bd1df19ffb64d7eb75e16a891177edd766202ea7e02a975e2a3097dcfaae94b6695586bf11af0f92e00b02a2a529c5cd14506b6879091f9774e0ed488c1712cbaebf7be7962fe54959134644621cf9aeca3389881e06f9fb160e6ebb9384091256ab86886e739c79930d99df88a5485239e6f64cb60a0184fb0f3d7b4f4509cdd840c7b26a14f1b93e36796c10f1d8d149d353ee856"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x101}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x20, 0x7, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xd3, 0x7, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x7, 0xd4, 0x86, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x1, 0x7b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x67, 0x40, 0x3, [@generic={0x58, 0x0, "c6de684b603d86120481753e0d6dae198b36d63bbd708ad91410c3e9bb8781ba8ccc1183f05d2967f87ca7ebb6a27df31f1821fef7e77f29334a4ffcb5fc17c5e7b5adfdc6e0327b7058d374075ff121abcf493ffe34"}]}}]}}, {{0x9, 0x4, 0xb1, 0x80, 0x8, 0xd6, 0xb3, 0xc5, 0x20, [@generic={0x1f, 0x0, "e762682f8885ec3227bc9797fd48df297c6646faed6a8c59f1e24b6512"}, @uac_control={{0xa, 0x24, 0x1, 0x2}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x5f2, 0x6, "fd"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x82, 0x4, 0x40, 0x0, 0x20, 0x2, [@generic={0xe1, 0x3, "566986b4222e6c102a044d8f5e47f360f0b922c9bb94ae522f37e5df753292bef9bf8482a9f0cb7f18e73eae6482f510ac331779242cbef0ff12615e86ceabe9a5202b624b235aaa08ef298b239f25edd016a2d7aa2c82971fdc73b07e60beceddaa2bd586aec64616d66dad6c60a44b4b89b35593d940dca08ed78ef0130af4d2d4a045771282db99c843f49bfb364d50ed654d6a4a06c58850317a1ab473f18b8468157bd3bcde15e44150d5919763c7f786395afebea89572a6991e6b322ac930f6ad648795e83a3eb0a5edd5d10e1f759b2e79f0ffac076fc2eecd6ce3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1f, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x7f, 0xb2, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0xfc, 0x80}, @generic={0x7d, 0x2d, "20154509a2cdcf46b7c0e8520108704e0d9db5dc2ca2c1a58d8b8d3cb436fa8c4d3504ea9772b0019d57283a3872273ba9b31b4e0f812c92430bcaae093409ebb953ca79c1627f9096df08dc51a833133020e1bec31e7acce7415326eafeb2f0c063677f14b2ba4c13fe13f4b6e0b538fdcc1cd843ed3e2b6cb78e"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xee, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x4, 0x1, 0xab}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x5, 0x40, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffd}]}}, {{0x9, 0x5, 0xc, 0x3703b1db3a39bf9b, 0x3ff, 0xbf, 0xce, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0xfff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x4a, 0xff, [@generic={0x5f, 0xc, "4098c0b3e5b9db5c1b95e916465ac991bac06a7498012b3feb5360f6181f8ecc02fba7a1077b6d8f50fada30ecd6b95a740d0328428120addef939d8168bdd628e3233260e7fb242d02f1834937b57a79bc4c6dc40168a48a2e1c002bc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd3, 0x1}]}}]}}, {{0x9, 0x4, 0x35, 0x5, 0xc, 0xff, 0x1, 0x39, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '4'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1f30, 0xfffd, 0x7f}, [@mdlm_detail={0xe, 0x24, 0x13, 0x89, "89d6888f0792d6b50076"}]}, @uac_as], [{{0x9, 0x5, 0x0, 0xc, 0x400, 0xff, 0x12, 0x1f}}, {{0x9, 0x5, 0xa, 0x1f, 0x200, 0xa0, 0x9, 0x7}}, {{0x9, 0x5, 0x8, 0x1c, 0x400, 0x46, 0x57}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x71, 0xd1, 0x7f}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x7f, 0x80, 0x9, [@generic={0x88, 0x1, "7f0a3c80b8cf322f325a90252ae5ce177a777f7e6d2b5a58c4de31c47de31e380d8960e0df9ebc42ddbffa4b50981cfed01a1482d95e2cc11f701fa9e6af2eb42c1acb72765eca9e475e6c9071d4478f9cd9be04cab8b150b1583ad297055d85d351bc63e3ce676b5b037327270cf4bfd9d5852c3a4fb5ceb8676f9d4aff6e292968628bce77"}, @generic={0x2a, 0xc, "d3b966a99cff5d3fb46f7581fa8b37e28da4e81b9a55f970153598128e9bb4a68e2bed051c90f7ca"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x40, 0x1, 0x4, [@generic={0xf3, 0x0, "8b088f4ef487b1df822b1023517ee8363adb75b5d2237ec7d15a5b918b3882f3767e38dd284d7197c5aa929794f6a0b71b79f1a748ba10bc1e575e0cdd972dba50ad8560eed31b86cd8843bf5f4e97d203c29fa078e5d0ba5cd28612c4749e14a25554f6d6e1a39660f0285f797801050d94e13b13d2b570e0c4fa2800a601aa8887873bcc2902e5d2481c4f96ca0dca56202b4f9eaab93bfdcedbd7443c3698d343c3263d5ec0f945524b75134fa8eed30ce4588c563e6965b9771240e1eb7deb5ca31a6d437570e4875d3103957b4a4a124209453a95ad41adaaad586b00700d2e91f4514243de4c256a3f3cad1fa97a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x9, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x7, 0x10, 0x33f, 0x6, 0x20, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe0, 0x2a73}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x0, 0x40, 0x81, 0x3f}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x4, 0x2e, 0x8, [@generic={0x9c, 0x23, "e5e3045552df2d197aad6549aebcd44ea16a872ef12daa5de460adb8b1e0294b939468a410ab77f2a903b67662038b55959ea67ff9212ee56baf04fff5e336acf3d6c39ab973221fc1bea9ea7a7ece6ff351a10f2e4bb4f4902b56279b7dc40b0507b016d71ced58993add6f6dd4310e677f7bb2c9d74d1da82a45d2c0ab33c595ef5330bb92a7f0d7513af91c1db13c9f913e658cd7fa5c784e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x8, [@generic={0xd4, 0x22, "955552fd1801d812a8b04e4573f30ec7284566e944de5b0854fa78a33328af466deb54555ba493d56202acb0c52877cfdfda1dcfab509023387bad121fa900596818581f84ac8baf25e6a6bec6c4706d8321be6eb1f73374c1a7e41192e4b85c4b3659f4dfc7bd0268d68091fde47ed200d9f27a6fda6b93ddf76c3ee40385642906f93e97bc2c781d4bbca27f3c7a46e8e16e9906e8a22f4a42b5d0c052f6561a5c25998f7697164e3cdc9d83708e8cac26269dd18a11669f140e71596a3e3001af3c1d12e582d7f1aaa4fa22b5197742a6"}, @generic={0x6b, 0xf, "7d1a54f1a3947f9e4ecde07c3a7d9ecfe21f72c1ab2d9d21e8dd548a82e475030eb07093ff88515b0d4fa15da48f65f21c3f14d9f02cec26c8062d864e2f56cfd8ea68e543a092d658992869ae9fa5337e2c25f1047556dc58b830f76a27e7067ad32fdedc5aafdf85"}]}}]}}, {{0x9, 0x4, 0x2e, 0x1e, 0x1, 0x84, 0x56, 0xd3, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "89cd44f67739"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6aea, 0x8, 0x0, 0xe1}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x2}, @mdlm={0x15, 0x24, 0x12, 0xffc0}, @ncm={0x6, 0x24, 0x1a, 0x47a5, 0x14}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '{8'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0xd0f, 0x4}}], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0xfe, 0x8, 0x8, [@generic={0x59, 0x10, "3742493cce5d0dbba1118aa1fc1982acf6bfdf5458e3f4a888884f17d3c933c9431884d6d98b542a6d529a4421a457a8170f36697ab435038bb74f2c10d279f3fb098f705aabf603911121147738b2bafc21a08884215b"}, @generic={0x6a, 0x7, "ad495c7cf02b63fab7a1e4b37cbd1a8a8e06b012343219948efffd23ea27d813b7ea85001e2458b2141b349a40aeec080a28db3d847b33407dc1568f64c1b5c7b649f9156767e49c4bbf539bfccc24f46c681e6b85186badd453871c30b4886340723f981d806503"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x5, 0x1, 0x3f, 0x40, 0xcf}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x15, 0x8, 0x6, 0x3f}]}, 0x7, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x80c}}, {0x53, &(0x7f0000000c40)=@string={0x53, 0x3, "deb04425728eedcee59e9d0f0ea878d67fcc8fbfe35957257ca74e3eaa6dffaf0dbd48653fa642474149e4ce4b39b29c144674196fd95a9f67f6dcff5afb1fc1154d2c79b900c27b9c2d2693f47df2db7e"}}, {0xc9, &(0x7f0000000cc0)=@string={0xc9, 0x3, "192efb2d519460d4eb71742b7d776a3b88f7952553c546ed5d3158c64b139268fdf53506fb321c8e69d2e595ffa5fdf87fda79681e8ae750a2dcde0362195bb4a8f071c1c3727af7d0876b511a264cf55508fe43c94b23739def0db93d13f74968bfa5e86af342558ee49d7c963b173b930463a81fc4282632ad031ff318e45211d155ebcdf1356b7c94b8fe66dcce9aae75b8727e873da09a02cd6a9f2b52daa91e09bd8136301fcc45486565521ea898e45108db2a11dde36bbac4dad9abd0e324102fdb6c6c"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xecb9}}]}) [ 812.662883][T10805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.673405][T10805] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.687003][T10805] usb 6-1: config 1 interface 0 has no altsetting 0 [ 812.919976][T10805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.930732][T10805] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.943965][T10805] usb 6-1: config 1 interface 0 has no altsetting 0 [ 813.031869][T10805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.042325][T10805] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.055911][T10805] usb 6-1: config 1 interface 0 has no altsetting 0 [ 813.136013][ T7101] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 813.142016][T10805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.154069][T10805] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.167309][T10805] usb 6-1: config 1 interface 0 has no altsetting 0 [ 813.332167][T10805] usb 6-1: New USB device found, idVendor=0d25, idProduct=a4a1, bcdDevice= 0.40 [ 813.341488][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.349852][T10805] usb 6-1: Product: syz [ 813.354254][T10805] usb 6-1: Manufacturer: syz [ 813.358961][T10805] usb 6-1: SerialNumber: syz [ 813.452869][ T7101] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 813.724615][T10805] cdc_acm 6-1:1.0: Zero length descriptor references [ 813.734404][T10805] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 813.769320][T10805] usb 6-1: USB disconnect, device number 111 [ 814.172715][ T7101] usb 4-1: New USB device found, idVendor=093b, idProduct=a004, bcdDevice=78.f5 [ 814.182122][ T7101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 21:50:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0xf, {0xf, 0xf, "4932d3ca5d924906be0cdea204"}}, &(0x7f0000000040)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "51f2770d4f57ccdec56e033aaae0dc9e849cf292279b68a1e23b62b482ef5c4223a569dbc7b77393de4cd6ffd5bb6bc2f22eb253a66ded9c0de177e26c2bb96879a96d776af1dbbf18aaf8a0992a731232f3b1dc4cc5cf848b5d5f86083c1a32c596dc3cd0d0f7f716c791f415a788dca31a058acef031ceb9130c42544886c1df1984f3f2940829b6ad39b26ec21adfa57a0edca9373733de1ebd1b8778640b230e03249c7ebf06154e2ccc57d70e4a2fb938f7265e52fd976ad63a86c6"}}, &(0x7f0000000140)={0x0, 0xf, 0x81, {0x5, 0xf, 0x81, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0xca67}, @generic={0x5b, 0x10, 0xa, "d38b052b4430b254f3c444809d0c1488d49fe193854cf01ec0778716d6ef05b09fdd98d13bd36f987cf4fd36f2a1f15e739b13ba0fa5bf453b2f36eeee6d2ee233d7b73ae0c8b651e9172850d8f23a219feaf534eaeb7878"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x401, [0xf, 0x18000]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0x0, "95a302fa", "931b3a99"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x5, 0x9, 0x4, 0xf7a7, 0x80}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:50:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}]}}) [ 814.214454][ T7101] usb 4-1: config 0 descriptor?? [ 814.214517][T10805] usb 2-1: USB disconnect, device number 122 [ 814.263785][ T7101] go7007-loader 4-1:0.0: can't handle multiple config [ 814.270701][ T7101] go7007-loader 4-1:0.0: probe failed [ 814.458783][T23578] udc-core: couldn't find an available UDC or it's busy [ 814.466184][T23578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 814.496251][ T7] usb 4-1: USB disconnect, device number 11 [ 814.551980][T10352] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 814.781849][T10805] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 814.801736][T10352] usb 6-1: Using ep0 maxpacket: 16 [ 814.922422][T10352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.932883][T10352] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.946104][T10352] usb 6-1: config 1 interface 0 has no altsetting 0 [ 815.031913][T10352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.042364][T10352] usb 6-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.055461][T10352] usb 6-1: config 1 interface 0 has no altsetting 0 21:50:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000280)=""/4096) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"202a2fac9ae12d8ad6d9e000a6560d15", r4, 0x0, {0x0, 0x1}, {0x5, 0x7fff000}, 0x5, [0x4, 0x6100000000, 0x3f, 0x6, 0xffffffffffffffff, 0x2, 0x0, 0x1f, 0x0, 0x3, 0x1, 0x0, 0x3ff, 0xffffffffffff7fff, 0x4, 0x5]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x48}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) write(r3, &(0x7f0000000040)="1b4c02aae5efa32ef723c76045d58fe4a7e5c4a0bfac6bbca34a7402883a9027afac6e", 0x23) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000200)={0x6, &(0x7f0000001680)=[{@fixed}, {@fixed}, {@none}, {@fixed}, {@none}, {@fixed}]}) 21:50:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x5ccddbcd}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:50:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x2}]}}) [ 815.202173][T10352] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 815.210097][T10352] usb 6-1: can't read configurations, error -71 [ 815.264232][ T7101] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 815.332445][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 815.341866][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.349994][T10805] usb 2-1: Product: syz [ 815.354448][T10805] usb 2-1: Manufacturer: syz [ 815.359148][T10805] usb 2-1: SerialNumber: syz [ 815.418304][T10805] usb 2-1: config 0 descriptor?? 21:50:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x3}]}}) 21:50:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x794b1e9b}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 815.583879][ T7101] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 815.752263][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 815.826074][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 815.908857][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 815.916388][T10805] usb 2-1: media controller created 21:50:51 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x3, 0x2, 0xfa}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[{0x38, 0x105, 0x7, "3ba9c00f8dbc2184c2b268512dfaa2ce7e5ba3bff0e5997c268239c618b21e7f6dca"}], 0x38}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = accept4$inet(r1, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10, 0x800) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x207}, 0x20) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 21:50:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 816.110368][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 21:50:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x4}]}}) [ 816.192293][ T7101] usb 4-1: unable to read config index 2 descriptor/all [ 816.199413][ T7101] usb 4-1: can't read configurations, error -71 21:50:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 816.993773][T23664] bridge0: port 2(vlan3) entered blocking state [ 817.001865][T23664] bridge0: port 2(vlan3) entered disabled state [ 817.032279][T10805] az6027: usb out operation failed. (-71) [ 817.032326][T10805] stb0899_attach: Driver disabled by Kconfig [ 817.032358][T10805] az6027: no front-end attached [ 817.032358][T10805] [ 817.062499][T10805] az6027: usb out operation failed. (-71) [ 817.068329][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 817.077726][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 817.269795][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 817.276926][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 817.291003][T10805] usb 2-1: USB disconnect, device number 123 [ 817.486403][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:50:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0xf, {0xf, 0xf, "4932d3ca5d924906be0cdea204"}}, &(0x7f0000000040)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "51f2770d4f57ccdec56e033aaae0dc9e849cf292279b68a1e23b62b482ef5c4223a569dbc7b77393de4cd6ffd5bb6bc2f22eb253a66ded9c0de177e26c2bb96879a96d776af1dbbf18aaf8a0992a731232f3b1dc4cc5cf848b5d5f86083c1a32c596dc3cd0d0f7f716c791f415a788dca31a058acef031ceb9130c42544886c1df1984f3f2940829b6ad39b26ec21adfa57a0edca9373733de1ebd1b8778640b230e03249c7ebf06154e2ccc57d70e4a2fb938f7265e52fd976ad63a86c6"}}, &(0x7f0000000140)={0x0, 0xf, 0x81, {0x5, 0xf, 0x81, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0xca67}, @generic={0x5b, 0x10, 0xa, "d38b052b4430b254f3c444809d0c1488d49fe193854cf01ec0778716d6ef05b09fdd98d13bd36f987cf4fd36f2a1f15e739b13ba0fa5bf453b2f36eeee6d2ee233d7b73ae0c8b651e9172850d8f23a219feaf534eaeb7878"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x401, [0xf, 0x18000]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0x0, "95a302fa", "931b3a99"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x5, 0x9, 0x4, 0xf7a7, 0x80}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:50:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x7c000000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:53 executing program 5: ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0x400fff}) syz_usb_connect(0x0, 0x12a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x31, 0xfd, 0x20, 0x16d8, 0x7006, 0x16d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x7, 0x3, 0x7b, 0x4b, 0x43, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x8, 0x10, 0x80, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xca, 0xf9, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd2, 0xb3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x14, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8e, 0x8, 0x3, [@generic={0xd4, 0x1, "742c2abe01acfc3b7445d9699c12d09e5f51314dd95a55ab47c50c80a94177267199b59d815fb2a957f63a330c8a4468f0a5df0b64092a4b20fbfda4db47690e5e8411c49cd29340a004c57fd012f3caba26c06a0cfe5128574ce824cc1e5f6a1d9288361aeff98714488c4a78e8eccabfb1e202e21fd77aeb72b87b02a6b298ebddd155b60ed0176864fcd507cc268a89b459682d4f26bff2401ef1f3eb7d547af22b893430edff4a87ebec61b2b3bd8989beff61fc5067e6106efb2c40a30b3750fa6f6f3c74d76acf9613a830dd7f28f3"}]}}]}}, {{0x9, 0x4, 0x3a, 0x0, 0x0, 0x26, 0x79, 0xdc}}]}}]}}, 0x0) 21:50:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x5}]}}) 21:50:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:50:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x6}]}}) [ 818.272745][T22760] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 818.280912][ T7101] usb 2-1: new high-speed USB device number 124 using dummy_hcd 21:50:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x82424344}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 818.562462][T22760] usb 6-1: Using ep0 maxpacket: 32 21:50:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:50:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8dffffff}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 818.682693][T22760] usb 6-1: config 0 has an invalid interface number: 96 but max is 1 [ 818.690953][T22760] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 818.700034][T22760] usb 6-1: config 0 has an invalid interface number: 58 but max is 1 [ 818.708558][T22760] usb 6-1: config 0 has no interface number 0 [ 818.714856][T22760] usb 6-1: config 0 has no interface number 1 [ 818.721070][T22760] usb 6-1: config 0 interface 96 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 818.732198][T22760] usb 6-1: config 0 interface 96 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 818.743321][T22760] usb 6-1: config 0 interface 96 has no altsetting 0 [ 818.924972][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 818.934368][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.942733][ T7101] usb 2-1: Product: syz [ 818.947011][ T7101] usb 2-1: Manufacturer: syz [ 818.951894][ T7101] usb 2-1: SerialNumber: syz [ 819.010886][ T7101] usb 2-1: config 0 descriptor?? [ 819.102756][T22760] usb 6-1: New USB device found, idVendor=16d8, idProduct=7006, bcdDevice=16.d8 [ 819.112232][T22760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.120539][T22760] usb 6-1: Product: syz [ 819.125016][T22760] usb 6-1: Manufacturer: syz [ 819.129719][T22760] usb 6-1: SerialNumber: syz [ 819.272063][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 819.297699][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.357775][T22760] usb 6-1: config 0 descriptor?? [ 819.427222][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 819.434766][ T7101] usb 2-1: media controller created [ 819.506692][T22760] option 6-1:0.96: GSM modem (1-port) converter detected [ 819.546507][T22760] option 6-1:0.58: GSM modem (1-port) converter detected [ 819.573313][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.647783][T10805] usb 6-1: USB disconnect, device number 114 [ 819.659675][T10805] option 6-1:0.96: device disconnected [ 819.668477][T10805] option 6-1:0.58: device disconnected [ 819.867640][T23664] bridge0: port 2(vlan3) entered blocking state [ 819.876896][T23664] bridge0: port 2(vlan3) entered disabled state 21:50:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x7}]}}) 21:50:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x9b1e4b79}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 820.412132][ T7101] az6027: usb out operation failed. (-71) [ 820.418023][ T7101] stb0899_attach: Driver disabled by Kconfig [ 820.424276][ T7101] az6027: no front-end attached [ 820.424276][ T7101] [ 820.638636][ T7101] az6027: usb out operation failed. (-71) [ 820.644862][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 820.654264][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 820.972364][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 820.979508][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. 21:50:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x40, 0x7, 0xf, {0xf, 0xf, "4932d3ca5d924906be0cdea204"}}, &(0x7f0000000040)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "51f2770d4f57ccdec56e033aaae0dc9e849cf292279b68a1e23b62b482ef5c4223a569dbc7b77393de4cd6ffd5bb6bc2f22eb253a66ded9c0de177e26c2bb96879a96d776af1dbbf18aaf8a0992a731232f3b1dc4cc5cf848b5d5f86083c1a32c596dc3cd0d0f7f716c791f415a788dca31a058acef031ceb9130c42544886c1df1984f3f2940829b6ad39b26ec21adfa57a0edca9373733de1ebd1b8778640b230e03249c7ebf06154e2ccc57d70e4a2fb938f7265e52fd976ad63a86c6"}}, &(0x7f0000000140)={0x0, 0xf, 0x81, {0x5, 0xf, 0x81, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0xca67}, @generic={0x5b, 0x10, 0xa, "d38b052b4430b254f3c444809d0c1488d49fe193854cf01ec0778716d6ef05b09fdd98d13bd36f987cf4fd36f2a1f15e739b13ba0fa5bf453b2f36eeee6d2ee233d7b73ae0c8b651e9172850d8f23a219feaf534eaeb7878"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1, 0x0, 0x401, [0xf, 0x18000]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x4, 0x0, "95a302fa", "931b3a99"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x3, 0x5, 0x9, 0x4, 0xf7a7, 0x80}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:50:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:50:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x8}]}}) 21:50:56 executing program 5: ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100)) clone3(&(0x7f0000000800)={0x40320400, 0x0, 0x0, 0x0, {}, &(0x7f0000000040)=""/172, 0xac, 0x0, 0x0}, 0x58) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x200) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000180)) 21:50:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xa17c0000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 821.055304][ T7101] usb 2-1: USB disconnect, device number 124 [ 821.270763][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:50:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:50:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xa5f60000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:50:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x9}]}}) [ 821.933181][ T7101] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 822.094691][T23795] bridge0: port 2(vlan3) entered blocking state [ 822.106804][T23795] bridge0: port 2(vlan3) entered disabled state 21:50:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xa}]}}) 21:50:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xa5fcfad5}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 822.632771][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 822.643211][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.651439][ T7101] usb 2-1: Product: syz [ 822.656122][ T7101] usb 2-1: Manufacturer: syz [ 822.660823][ T7101] usb 2-1: SerialNumber: syz 21:50:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xb}]}}) 21:50:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 822.846889][ T7101] usb 2-1: config 0 descriptor?? [ 823.112831][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 823.160811][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 823.231315][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 823.238929][ T7101] usb 2-1: media controller created [ 823.481363][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.232518][ T7101] az6027: usb out operation failed. (-71) [ 824.238350][ T7101] stb0899_attach: Driver disabled by Kconfig [ 824.245050][ T7101] az6027: no front-end attached [ 824.245050][ T7101] [ 824.274481][ T7101] az6027: usb out operation failed. (-71) [ 824.281273][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 824.290465][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input61 [ 824.314298][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 824.321423][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 824.335863][ T7101] usb 2-1: USB disconnect, device number 125 [ 824.423331][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xa5fcfc54}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:00 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f00002b6000/0x400000)=nil, &(0x7f000042b000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) r5 = dup3(r3, r4, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f00002d1000/0x6000)=nil, 0x6000, 0x2, 0x80010, r0, 0x0) r7 = eventfd(0x3) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r7, 0x81, 0x0, 0xfbd9, 0x1, 0x1, {0x0, r8}}, 0x200) write$FUSE_INIT(r5, 0x0, 0x0) 21:51:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xc}]}}) 21:51:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 21:51:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xd}]}}) [ 825.601720][ T7101] usb 2-1: new high-speed USB device number 126 using dummy_hcd 21:51:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xcddbcd5c}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 825.697025][T23919] bridge0: port 2(vlan3) entered blocking state [ 825.705558][T23919] bridge0: port 2(vlan3) entered disabled state [ 826.132604][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 826.142104][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.150255][ T7101] usb 2-1: Product: syz [ 826.154757][ T7101] usb 2-1: Manufacturer: syz [ 826.159455][ T7101] usb 2-1: SerialNumber: syz 21:51:02 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0xa1000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r7, @ANYBLOB="2c67726f75705f69643d4d3e48935fb31bb10432777f6de35f1827cea49fbf4483fb4eca787cab0f2e9461b1735fdd209997c7fa491de1390fd4d6e67d1731e04655815bb33e187a06f9bcf0de23f90315c5397ba2371ccf4dd5f0c667b4988ae0af9a5882fdc64536dfdf1f37e29235d8097cec72050cf8db2f64742a9db0394ac666d5a10358d7cb61a942f092423f8d3a6d679211e0c26b10f2", @ANYRESDEC=r5, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c61707072616973655f747970653d696d617369672c646f6e745f6d6561737572652c6673757569643d66623433660365332d003664372d666437342d313765612d65623464303137512c657569643e", @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0x000000000000007f,fscontext=root,uid>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) statx(0xffffffffffffff9c, &(0x7f0000002880)='./file0\x00', 0x1000, 0x200, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000280)="0383eeb045ce6e1c024618afbfa5810b7f905a9497fc5e698abfc1c808242bb6bdcce1203842589d6f43efc4e1cd1028819fc0cacf0dd29d712b456b9a679e5a540ba8d356e9391e7d3966c97b1c100203c44b6783652347ec0941dfb2a49900049d3a46956f732d1df9c662ae26776a8135cb84b38261b8c8ae3b0e392969e8057f681fc883767e20e194ca5f5e1ae46158ebec5b8f82d550268fcc60bbdf68a0d32b7919f780752a9cf4300464745d4b0874c7dc2190546e9d04db26737b96e2739bcee701ba14a94bb389460fbe9924c9f9ad388049e8f7db8efb019195941c14ff494d5acbbb4a93011f229587543716d67f81ef735e9257d530c270ea133aeb086d1242aa51e88fdcb897d309711b6518001f3f3b631af36ecea52eab0c6b6d2559e63ed217b685343094a7429249aaba558f04933d4a3259b73c5e0a40e411b383ff8dc0d642997164896941ab4ac18600afe56f183e4aa6a64efe2c68a24100e7099b81ccd459aa4364128f4ea0a6bbc837d79387367858a6e151507c1850b654659c8d9adf9595bd8865ff5001a3e4d5e1f78e742de50adbb293165fee197766f04139eeefb3d05a3246e82594bb8c1488b60c057a5056b52d13a5d5c2d6ae962eee5fed7f9e5e8d6686f198329925dc59ebe03c7dde682cba85987b52e32ae02c0ecdbfc2466617d46011a3c95d2831696356c6f072144b76eb3ce83bad3b1b6e07fd80df90e1c1a623a6db46568aad355976cc8393e720fda1d49cea28fe32d1dc7ec1ec0e3f70799c61fabec23831e607feb21e5fa75f2741fc7b1eebcd26e47e023ad25fa192ebfef50ab3540d2ccf6c7650bd0ed1bc4e4133442e3971cbce1e01725f56fa664bcf09acf9fcd697e367050c8b9522b26790c94d1a82c7f40a907503cb253d3a74f27ad11bd81a86623839fec52401302526c0545ca9773bbf1a150bad94ae85f8c29619243a81fbcb138926f8319383fecc46ecc2ce022283fce429fe40b305dca57e260b8d5b62188fa6279bbaad97b7cf6ff6179ab9ed5fcf69001d11a9c88ad56afad43ecf856fafe41de65112c7d3b4c9b276f5d64128ead98163e5a319b0eb4888f0af74183dff5c6c1ee36b073421b9894fe22571afef6e1f18371c2d30bb3bf965e3d536b31ac5759c7a0940010f307e0ebe0b858cb1c349451f7fc9f4af953391f56b4f1658dc9592a78f6303d5122ff5bbc11f6f79be5fdf9ac7699057b24ea94639910a0a821b66ce24a094f7dc75191e56bcd6b57fbb91c0c5b65aaa2212f7d5d756f99dcebf3525dd79987e325ee3cf5c1a13220f7c9837888a9966d10b15e2aa27202e335455543afd83242b385b24228a964de05d80a274f7968e1ae7937e963afa17831aa257e795562c219677c1e1c0fea52986bd307835fdb620709afc709ae5ee4397e628ed5b5ba03558144ba4bfc6a99ed3d1b6ac450dbbda5d6e03095ff734ef53d2b99ad02c56c10a5e9e45a3069cecdb0a7c70d28e25b9ec2374bf7e5c8f2cecfe8063d7b3c9378ddc8fc4024580d988bb0392dea013b2fadc37ef75e8e378b3bc5a6af6b53197d0e1cd10da5613d9bc2673683587aab159868069f679e54641f2c6bac40a64f49c77a8790b6d89cb6e29a53f9e3cf5f19b3751503cc4d5689d1b381fedf8562541fec5fbbbd4fbd8a01fd6b8c8778e89e6b2f0fb2c878a72cc8b69f4d7ccccab004586ae794521a193aa50ba86cc8dd0243431bb06f29b5a6cf2a254dc885fdb34695a73a1ca6f1a4f3fdf925c87d0fe3d6f924843f838a4efaabe609e5cbe0b7d1a12372fb5fbf9f12b95aee51ef1ba5993964670d34fcf9605643aaa1154a79d2c70258c5bdc5eee9385be7776aa7dcc97ba015e32adc48896b71428a2fd1cd186dc621f4ec6904afea749eeac1dc30bcbab1534b2299ebfd9ceca65926ac529efb278185fc164db985f731be1fdb9878056e54dd9b280f79f927b9c574134003babf119e5e8055e790ef3ea80455d5a804cde2c2532fe68e933e540ad6d74005943d6dcee871eadbc9a02149c8d89b7366a151114b1916a47af3abb9e8abd7fa274106aa545e9526752d2852f7e1b54477e17b983c73d0761cff04e7da902ea438aed92bb7157eb2cb859af87aa72d30941b06c3f982f4f741d582bdbb92ee10cccad5b6608b43c273349fa042eca2060c439575ee84f4f466693320a4a29157eb621ddbeb3ad4f38795cd0392b3b3a1cc3aa1fa3dff600457b1a15a39841f48e797aff045c3381b80fed11dfc26db6cdf776480d915e7772eb03a58fe176d857706bdcdd50fd6f768613d8216dc7332df812704d4e15369533309f71a3081826c6f9eceac68e8a74106409c2102d5775fb2a4ea912d403dedce6a7b4b8d23aea454f24acffbbba6b7c1186536067503748b8bfbf673ada072790b745345e6a8447446b25ed6db7ddafe5c2654fe344ff0b6a8a50eb87dc182117dde9231b92fdc08a85424f3666aca06e2d446e443a3b94c7b267240e72244ca55105acec709805fc856817394f262ce5d0b964a0e1d207f835e6d9d43fa61c0a16c6b02f0fa70f3e7e79007bfa9f00ec60bfdb6f5e463abc1379181fa0f28d56e4301460a4958f64758fbe2e36dfd7d7a2e5a1d5b087d6bd7337a84cde4019ad4ad0ea4088c905262b4307838a0d20d021974a3b0a6e9ee13e2cade602d4b131252cc90af4a352856d4cab3ca8bb54aaa64aee6fa0d227242c99ae4e254288380607dee2b433d81a7814395cd2ab28cb92c477c49ee6ff79014e4bbf948836e2a4f0198a5703af6017812443d3397a4272b5ffbcdec069951e1ea5e40d49584c3c0399501feff1255072554a00eb0c0c9822477e9bdfdcecafb841b71f9a92e11b9bb96f9d7d1271b63985d1cb0d276142df8f6422dbad161136f98280ff61e7845a76e44255e2729e7bd02b3b9279a13994e204768ebfc8c145b607ddc9904f6a09c2c5b2e934cc7884d0044c584c3cdd8fa2e76ae645fba30ebf0ea2533802b25c1383e17d3432247bece474118913b2799a0aa04c025d85149256c9f0a052db6bc05fb9c0907ca0f2d9fc1f7c30816a50670326b74e72294c43ac8224d6694e3e8be3fe194d272988cd300735309a17c97595afabaa20280a73b1cebeafcd5a743b501c0f51dc57524bba361b9c0e0311b84cb74f1520ad66965ad807691ab415bd17e3a5ba567fe5ad30581dad620e4d30f1c51a1a3fce62465928ddd1b3c050f58168e02e0099af73fb239bab18357c0309a6e635d1301d7460d9f39ddfa6773dfae86920193bfea4b16030e4234dd33ebae44ec06cc28a02ac445daa568b5daf74023718440b107c1db47e37be94d94dfc0046b1e7339c93432999fe9d428a7b13806fe3ca63bb470f35cf3908bb17fcf555e9756919fe502b8b911ba0da62a9a9b1af8a80d685908df6cadd0012b6da1fa6f37ca3f5b91279efacd215b27fb10c98b51cc302e77b798c59fb794eef133c6ad4d7c15fd1d5ab7021e37b6a0109fd5eb5d2d6632f8efdbeee8fd064a4af45bfbbf1900804384e8fe74cc13bcc1bacf00ad4836d59a33f162db11064a3855dea0bcae6f02e33d272e155b469ed2fe4259d35935408be190550a8637838149467685a304ee46e08845a7d4f094e075a0d56474d525560489a54351094a6331cbb52fe3e38e1e2b1fab97c2127e7245daad57310df17d40397506a4279d3db4b54de23c8fd4cc89bb8465f535a4e48eb7912b76720b96d5f5051fb417dd1ee9eef2d86f4015d3dc70e96b7bd6332fb3e4a385b13e4e9298cbe04325534bc671f3770784cc68d8d6d56871a4809d47b8d09dbc0f428c6bd5fd23be9b0a555661bf3deb1c0d2c2f51ecdc45caed56273f5b99e07fc3d4bb64abdfa3495f4050caa49611257eaf68657ee5f416a3c250469054f379182e10158cac069b612a3d041633f7dfdd0b0052663ed96004ef08683773732f36fbd5e3b08a37b6d7dde83df8fcfbd5e9ec7b98cd8b41e03d8b38930a4b944b1829a9fa52321698060c19abfaa2276f4b4e8af394f036fea2552be16c175a87e23e5113bcfa81b8b6f57d8e978c51441732671fde169032b926f54432c83debd777148eb36635f94d05d57eed1afe4e88595194752ee30a2b8bacbd7070f47c2f2a50e9ef7f3ba0491a1ecdf8c0aa51e9ee7956dea685bbeb2e431695650b5835c42ab41ec8e46af2157d17bd4bac2f390bc09e7f8d1d82b3a2069e78ad6a8147c19d22aed07cd17c5d157c9de2f0821fa8d7741dbd89a0ff89daebd5ad4e1e9dd7b837d22cc5f53201744ab5d81f22d4a955bf0049dd51b35c4b069f7800280e54b2a917f5f66e5f0622cf1584ff891c54469cf5ceb1ee66e87dbe29462a6218e2cc5787b678582a887f848ec95494cb6bbe82f8c6fe3a44d7c6d8bc97fa6e44e5828c6670114d38dabafa8228b5b98ad57b8841c255d85799e3bfe87ad586849313f764e8acd7b64a703bcab86b32da2e679cc46b4b368e3d7b8654418fd363ee6ddb39c88fec548ecd68729064e7fa3d55709577415e1ecb5fe97b5001b843672ea2dbd54aad4918e3085487a18b3d025de63884ce2a0fd6a424b8e8c22e3adfe1b5a38f41255fc29bf581510caaa72bae0e0c1a4c4304ac010a2013943ec0a231a35460e2ecfcb60bde62ed320a8776ae8da043c1469279ba44e871d751bf308f42d2bee4e7b719cdfa347a840d543da69f856dc0d3b486357e6905f4b35dd7b8f26c9918113eb7b322543a7b990181484b3d7bcd2c1a7adf0fd972327cc2eb713b3eff526f6481dbed1ca477d7694537e8bb3fd0162c4132e27e0547eca560c92c0279892da64fc7ecbcd450cf73002be182a6c8da52fedd7a876f03736c8428b9deeaf3513297e966288bb0db11fed1f2db70b722417060397fcd1857264b41027b172ff8439c59f765cc9418eaaa76fcc96c1803d43e6d15c0826388f24181115c7e8e1b2fe555914fa7275a778c6466e486996cb10c800c6675cd2bc508058d8d47ca956d137a09daca658e1d49f91049ea1cce1b3fdca1437e4567deb22abd5694beb36c0f9177808491106d8fdf0edff0419899cda836979f0bdbdee150457ff23f4d20da02c3515988045c354bd6bff64a07ab19a388cfa2590960b9c91a6803610f2d8ec594d7f8a51726289a81851c5115bbaf886b551cdc862c1bfe5feea19e3f1c5f0048676d9e6430fc0dbeeab467e016240de132d74679a23f57b3a7fafee362c2735c33dc03ceef2b171180dd1548290960960e12e9f5b0947b4862ecbdfffd0c7ae2523586a32c91d392d4c0ef8792274c32724b5328abfea1dbd56633de5e447a27de2bc54db769ee557c97a50c48ab6ba9d2cf7a9b38d567ae2f6472edeb8e6502acdb6db7591a889af4de95d960bd0ce559dc72a8e53bfcd4f5948765e6fe382128f4f9827a2c98634214bebe8a10344a5052a2dbe04f35729e1125a16b25b32987a439a3077cff6c6fbc4543e931e422e6f58858b69dd8a04792d336cda6e81675f1bce0701f47696e2959f378e7d3ae06bf5a5447b56b7d3069f4082f8999cce5e92a20b3c2bb83cdaf7552b541cd694e6c10fc3bf9ee6a5802c5a697c946622bae7047faea7a952f7517196e31d25cce7658c6aa50664600d33c79ca04e68d3a85ea434af87d36784302ea313feee8e7aa222c03e5cdd60c5dfe95c75a140916d30ac628d7e024829e4086cd2bbef186d1af31c1d013cd307ff8e7a42211942593aa9c9a0ad8431ed686c46e4bb7e4cfc5228402aa1cf3b224d6d975bab462b1fdf55d535c28b6411da85ba4440408b39c8dfbd40b3df4d1c02feea3dfa173e187ad2a6854b619f9277dd6adfb3229af44d00ebb0cfa8ca42a51a257533bcefd4c739592bfae228a6460ee769a583b84cb699b92aaccae0e2cdcb6031a5f6432a7cfb7d416b43b6d72029dc5d7b0315bf1c4f90204182b760cec963cb8152ec2d6707d2187d0ae60a20a70b04b52160474b7e101c404e298907444a823c6ba45638d7eef44d1fb6251f8f81952604b9a170c066f49585bd816721f3941884656760e532801a4b89a743e14c9c54b46e05d4cad05808b982f7181a3594087f2dd9aa08e6cd8e1949a45b811e114c82fb70f896b3115534b2fdcc683c0e93e1a1a46685f25d63ce1c4a1ac6900b1fd26be1526a15bf5380e1c74ebf6a01e7be22488da3555b260ba8c76dc688a1f7974436c12d5ffdff2d58e7c15596512fddef51d0c39193397ef5b3a03b25f543895ab6ff568d18f84a3b711ca47ecbecb81207e4de3b83b0e1eb2bceb66d63754bfb6d573b0071999425c83236db3790137d59594cc76017077e7cb40c5c820eafc244b2f270b0a38183143d8c817a851d807b15527f0593d730be293fd2c7bd1dd699fc7d5245ab21265666a2871a31f5634c437cfd92acd160b5d79376106bad6a267624a5d167bfcbb601ad5ee002776e550a547977015bb0d368aefe53b9d467936514aeec32ef277d6cf8226c79202a5a152d463ae4bcb8e32c707b3afd225b43c727c44f3bc494fc33773c314cb13f9c8db5f794c19ba9c6d0bb9125f1002c3c3ba9c05698fa12a855e809aaba3af17ee08ace0d81311ac053083a51cf7bd9427911ed336275a042213797d13c6fa8390cd48b4fa35c5b15f7d7e8bf0b78f1dae6a11eef62fefeed29b8f4677bb4637540fec04bd338279ca69c158f592b08cb5944fd9608e1492496da81903efd84897e0c1d6b92cc28ca2325f627fd3d693715cf7d2ccf73b9fe8a897078bd004753957abfbe8962f9467f4200021e47b47f9cd49d3e1464312e7f3b5ff86357dad22d493d23db4ecaec5d0cb1140163bebad31b70bac52ae4b818b2313bbe5e2ba06a5409fc0ce815470ced8e487033c19b1b7c21dcc0a23e20041f0493bf628abc29f9a8de9ac46cd7dd7f1490e6bab614675d0d004d4393c2e0065099a51fd9d64521774f70e19f6e2974f9552cb6abe915939b2341342fe7298f16cd33712040c86c6f51027fbfbb08b243b6a3a850fba32293dfd08524aad461d9cf7d2ec07f7e3bfd45fb0bc56cb4b259ebffbfea25a3a0fbc0782b20e8f23cee456c497cd98eebd83715fd95e95fbccfc51998b483e00b2416b5ce3e456ea1f1e3df10454e1550522d0dbb9f87b5f7ede5c3b96e9e8f96ec5952ae2b2b7d5b7a90169ba00ecc6334b44693e0e63bdbbd6da7259b8dc49efae0a45e620778df87373182dfd40c52210391f6e90df7eb7aef5895f7281ebd9ab41e323f7be99408c03ed47f0518180ecdae215715b47b306f412a8900e1cfca109e667a6d853c601708550fc168e0d50e5bfe17fb71df59096e0db23eebf40ea93e975f0b674ce173765710c0175bce80e0fa175b58a4ca13f08eb5e8688cbbaa16967bf23244e48f67e344ddb09bb7557a7a4bf5666687cacfa96afb293e92953f0db31b54be5c1426f03ecaaf71ad7cf293ec73f02d8ebdc1468cf6ea7c1e3aacb53fb721f78d0c35c2d2c1586c5bc87310e4351c5760fc5bd1eb2cf03440b52b0ba8c840a95e6899272fae9d4fe1c0917a4bd1c793ead3bb1f66fa53c9f93c9690b777c0bc6cfb6a2baf1a99e2098caccd28852d6f0684759bbaf4a3897ef0774bf57397676338f09fe88da3de7c23161779bfbde9972608f2531bd9b5572332e04fd650137394c71bfcb74a1ef2a55e6852d87a3750627ac60fe3dcd99b9b3940b62faea31a18679aae1d93f4f01a9253de6bf8f59452a637f32b3c38378f221e1b1b7b5c3889767a4bdfe1106a556f826e597247d5ca4a1ef7ab3bbd9b05980d3c2cfcb6002de9a880b01da08d0277de7bdd904e1488cbd1da535d4b95efb0217b150307fbc12fe18754625acd21ba6b71486964ad31b585bd76e4ec4b2b4e97bab997f526dd2a1b506968ed793bc0f1775d7b9a955d28844cd24f98105aecb2623e0eb5d8571d38f9f5e52b000e3a2b7a1733908286941faf8f25bef8be5bea1297261e52e595bae9cf45f6b78cab16d2aa6b844d27f15e3e78239037ced24142f61a377aadc2a800207e0e6a9db612c68ab20e801bb963a9c15544ff9704c070cbb7016e82e55a9a1c36fddd2c92224dad1a299272ad5fc3ccda2ea80e4dd1cec80000b6d326263d0b444a06e6b07934cf97abcc79b3ff7b2caeac2109bce9f0f495d35edd1f59df608c11ccf703b009ad0b56bf6e3b9be76ba42b4acc9ad6e9e32971c18ae0db92f1af2bcc75eac77cd3bace1beb50e4caefe01d04e4b8355ea48c4df41515f9636e119b41c6a5998d201f1fc0f687951779a8fa83b849740dcc1cd7afbb4e664efc44fc1402eed825536b9c73999ea92ee4710466adc47ae29b0ec19cb74967e007fb80876bcf3f202eee861baeb781e6d90386abe39854df1253c9ede64f210ddbc80550c9491d130a89050b35cd29a353e9784b002d6e8986471e0aeb47687d43a35fd1ac642d469d3abd86e31d9f4e3ea5b4ee54788796e5157e61821296ed66ab5651bf26c6908cb29726bec5794117c09b6d38c6ff4f85e20b3f9495b0b7c54ba0527f710ec16a2be635d8a42e3dbc3928ac0637bae0b851266e2709e9b97b5f9446dc1f7942e2d8bec368c2d307cf2ae7baee9405e3f730f35791659bc4abff4b737366268fd1eb62173e340ca59f2bada1dad4e2c589d71f4da99f0745341a36fdfa97c5519d1a30607a8d28baac48daecc4236aee295b665ea37b25fe903e3f25201835c24c00bcf2513d07ddc4f446acd50389f8b823156445c907eb4ec77dc26cd410b25aade827156a9bf35c73d8603c7bac5b21c0615d296dc71e887fea86852ba785bd16caa59e0af6f7a2019c1d2c9776c46cbb8da31c9e066e93345d419a6a4b31016a62a553e1510e10f7e225230168bdabc42c45e867c69ac0252b39244b8c8a02936226f9f73e710c0a4a385740e1d9796c9a681a323f4a73ba16553f298568fae2e4991b87ccb693a908a393aeee4142e38e91e98effde4b1931cd6b67c8d57aa2fd6c0b91e0c8725821542f5d561a25a4493f3798136d32b0f8a5a48add90d1df968e88458772e960640298d181a87b0edcbb40561f1a69d81450d68c9f3da8f77651ae884514dfae4323dd5677d94f99f4d2074ba175ef60350c516e90aa18d7e30cecdbe08193494a360be0e2dcce325ca3767cb998385988db4f15a100c6be34fbfbd29cab8f8de5974a000e43947eb382ee06eafef3238807ec6cb8a4b3f3d63b5a9d85e07219e041d9ee495d85cb5749f474ef2dd61647ab6e41147346b0d06212110a1a8338712b6792d513d2219d4d6d617481146bdbf79c84867f1436f37e85ba817df028a96bcdc6bf6a7d794366abb1743361eafbc8c95a3f7bf4da0a4c5763d0169fe78769936ab74eb785e29102bb48a51313aba0c63d1fc1460bda22e466d5d0a75a5dfedc5f6b96e1f74ebe9772fe02d27ea640221114638139d1447e145dee44509302e4db6f976e9b4f08b64a4cf1142a21b68a04e548c4b1b1330614f140a19c0110e034341a8138258dabf320159bc94745cdd1327ff6ff92d6309f3666e012454dfeb903ca5b2d1cd77621d02ce9cfb205b080c25a43517105bff5e3aff339cf5d0b766570c8c8581c056188d4a7efdb4c15e9a1a40b6df36db490684ba0af7684271a9d3633a80df9d0d93093996ebff7560f18922a9cc63c5864591783b089088e1349f33ba1d90f1c8c2815b24e6943d618f8c1d4e01e9748fcc0852a44101fc93217ea3f201ff3b31dfd913cca21acb51ff5bae11aacdb88402d55b05e4b02e0a817982de174f55523b0498bbeaf9c2762c76578c5906945642892acda213aef115357470fcbbad37df2a908751dfe6aadb0ea3a6b085b999612bf49357f5114e01f0aed0ef1e9cb1a8223f09941a69bbec406fa18c6add333660a75ffccdf174e79ad8dd3bbd32c50b9a03ef5621bd99ef7acc2d17ecb60bb36b0db2df2905b275a11f438237951616ad20f284621cc9c217d48acd444f8e5e21c1df225e72cf8c670d6671169ea6e28a0a5298ac699c81b64f568a309cb6c85bf207e060af76552ad11dd1fb44242634c3a0bb8767546b7fce712dc34ada26d9b2f928f43321f767d8d2c2a130b3729969b72f07e60dea55e9b0f823205be3881caaef5883e8a33c7db7f681a3dfdc241c18c55e88767272bcf205ffaafd6a0a17134297c62e7cd45dfbc2c3c1bba978a7da7a2eb942e8c4731515c221da494919190dfb16922fb68701cfd0a17e13c25d2f5d6468f34a26616c830d54fa1ea297d4d981e050655a5fd48d75e20d23639881b40eef12bb2fbe75f1739e78a3ffef1d2f847f74835664811d93515acad4bdafde37c9441701fc2a56b298e42a10b6f1039275501b6a2b56d3a803818fb7ee66537f3b85f77bd70693d420921d409b3ea7689809c93769112401a2a9c996f8ed384b68bb9bf96fe83e3dfaa26f256860969c3ecdab780c53f2ee1963676148b0adea52dd3c381eb809adea47383ca4512f61799fd15d906a908530c3551d1ef89a54c97571d5d64a2bcc07f971445f24b94e3fbd05a62cda9307c86d8eb53f0db77ff945ba9a226fe537539db3fc2ce8dc76c1dac18cc68504410401b35d15bb23c95d15edddd821cf8854b4437ed831ef7b7eea6ccd0478abd85f800ea76e72deac080cd6cce6b8eb21dc24965e214aa562f004582f90bb219ebb7da3447740fd063f4a8336fd1516d73cc276cf6815a4ef85db44c5d2db48e3643106591a5b0b7d4e61907b1bb7c1b0eb39f23707db2444e42320c05902b3c6a92c2c113ff16064f277749554810dda0d6614c749c8163e0dee5cbb3ce21fc354014f9017fcc2a365f0d57002d9a8426c779529306b1f20b9df3449ae8fcea844ccd1428f3cfd88fdfb4620a41aab2d4bf91f57150f5939db1ea042f3b8456ff02e3e34f51aac1092ab3cd4174aadddd1ef3731ae57f1eaa1f0bd936ce50115fac6371da34be0c274ac30ab4dceb8349ce789cff80513a7a200426b85dea3736830d85f879d9067e1e16d29cf1a6846d5c99a15baa10a94da84e134b8a98cacdd75ad3e28ab796ea5d8c8cb44b67d5378f4b6bc5d753c03986f010a38cce5c8455094d3eeb57a0de2cff1a62255d89ddd82e39e3df3ecfbcda3bbf05fa92da3ce1e9d9ac8cbda1367af52df364a76424f5d1c1b3e5f75dfe985ddd91672245f34d83ac277180fef8214e048e58394a8b77e1206912b8f4803716b00d6e681abd3fc3f738f83ea4ab6b14b0b403263ff3a521d7c8136a58582c732bf31c82c4dd7158008444d4ac1e57708002b21e630125f5396959ba6eaee4e2339281a38b73139508fe25c4254b7de38cc4b7692eb5d2302db7ec2ad6a625609c105de53e8f7e204a8c89259dd2d23e618b5a19abb6cd985378430ebd014f79789f4521230b4548ec923622103ea851f03949de0d03a8161ca26f5123b3977659f5058f781553c51dc77813e9919863ce93c08554a7c88cf6d15ce30f8f85f9d061ede3e381dec2a42110c9fe508a470a2b93adaf9d8546cced56", 0x2000, &(0x7f0000002ac0)={&(0x7f0000000180)={0x50, 0x0, 0x2, {0x7, 0x22, 0x5, 0xa00, 0x400, 0x7, 0x14302000, 0xeba0}}, &(0x7f0000000200)={0x18, 0x0, 0x8000, {0x9}}, &(0x7f0000002280)={0x18, 0xffffffffffffffda, 0x9, {0x6}}, &(0x7f00000022c0)={0x18, 0xffffffffffffffda, 0x44e0, {0xca}}, &(0x7f0000002300)={0x18, 0xfffffffffffffff5, 0x80, {0x800}}, &(0x7f0000002340)={0x28, 0x0, 0x8000, {{0x80, 0xcb, 0x0, 0xffffffffffffffff}}}, &(0x7f0000002380)={0x60, 0xfffffffffffffffe, 0xffffffff00000001, {{0x7, 0x3, 0x8, 0x7, 0x4, 0x3, 0x5, 0x5}}}, &(0x7f0000002400)={0x18, 0x0, 0x2c, {0x3f}}, &(0x7f0000002440)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000002480)={0x20, 0xfffffffffffffffe, 0x3}, &(0x7f00000024c0)={0x78, 0xffffffffffffffda, 0x0, {0x5, 0x1, 0x0, {0x3, 0x3, 0x7, 0x3, 0x8, 0x1f, 0x4, 0x3, 0x5, 0xc000, 0x1, 0xee00, 0x0, 0xd4b6, 0x7fff}}}, &(0x7f0000002540)={0x90, 0x0, 0xb22c, {0x6, 0x0, 0x0, 0x5, 0x7, 0x8, {0x1, 0x7, 0x0, 0x20, 0x80000001, 0x2, 0x5, 0xfffffffe, 0x8000, 0x6000, 0x1, r2, 0xee00, 0x3f, 0xfff}}}, &(0x7f0000002600)={0xc8, 0xfffffffffffffff5, 0x0, [{0x1, 0x5, 0xa, 0x1, '/dev/fuse\x00'}, {0x1, 0xfd19, 0x1, 0x4, '\x93'}, {0x0, 0xc42, 0x8, 0xf48, 'group_id'}, {0x3, 0xffffffffffffff7f, 0x0, 0x3}, {0x2, 0x6, 0x0, 0x5}, {0x0, 0x80, 0x5, 0x80000000, '^!:{]'}]}, &(0x7f0000002700)={0x158, 0x0, 0xffffffff, [{{0x0, 0x1, 0x6121, 0x1000, 0x2870, 0x2, {0x1, 0x1, 0x3, 0x8, 0x10000, 0xe5, 0x200, 0x0, 0xfff, 0x8000, 0x2, 0xee00, 0xee01, 0x5, 0x20000}}, {0x3, 0xa0d3, 0x8, 0xfffffffc, 'group_id'}}, {{0x3, 0x2, 0x1f, 0x200, 0x1ff, 0x7, {0x0, 0x5, 0x77c198a4, 0x3, 0x2, 0x5, 0x4, 0x2, 0x1, 0x8000, 0x3, 0xffffffffffffffff, r5, 0x1, 0x8000}}, {0x2, 0x1, 0xa, 0x5, '/dev/fuse\x00'}}]}, &(0x7f00000029c0)={0xa0, 0x0, 0x1, {{0x0, 0x1, 0x8, 0x0, 0x20, 0x5, {0x6, 0x10001, 0x10001, 0xb7, 0x3, 0x20, 0x7, 0x10000, 0x8, 0x8000, 0x1ff, r9, r10, 0x9, 0x9}}, {0x0, 0x8}}}, &(0x7f0000002a80)={0x20, 0x0, 0x8, {0x2, 0x0, 0xfffffffc, 0x1}}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close(r0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1400}}]}}) 21:51:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xe}]}}) [ 826.381109][ T7101] usb 2-1: config 0 descriptor?? 21:51:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xcdf9d7fc}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 826.561168][T23943] fuse: Bad value for 'group_id' [ 826.672549][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 826.697040][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 826.749719][T23953] fuse: Bad value for 'group_id' [ 826.794436][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 826.802170][ T7101] usb 2-1: media controller created [ 827.024366][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.111974][ T7101] stb0899_attach: Driver disabled by Kconfig [ 828.118064][ T7101] az6027: no front-end attached [ 828.118064][ T7101] [ 828.144925][ T7101] az6027: usb out operation failed. (-71) [ 828.150750][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 828.159970][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 828.182257][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 828.189396][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 828.213649][ T7101] usb 2-1: USB disconnect, device number 126 [ 828.252330][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x10}]}}) 21:51:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xd5fafca5}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp, 0x0, 0x0, 0x1200, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145) write$binfmt_misc(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xff6c) symlink(&(0x7f0000000380)='./file1\x00', 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0xfef5, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') io_setup(0x3ff, &(0x7f0000000500)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='pids.events\x00', 0x275a, 0x0) recvfrom$unix(r1, &(0x7f0000000400)=""/67, 0x43, 0x0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = creat(&(0x7f0000000540)='./file1\x00', 0x102) r3 = open_tree(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000002c0)={0x9e0000, 0x8, 0xffffd331, r1, 0x0, &(0x7f0000000200)={0x990a78, 0xd2ae, '\x00', @p_u8=&(0x7f00000001c0)}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0x4, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000340)={0x0, 0x2, 0x4, 0x7fffffd}) 21:51:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xa}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 828.731427][ C0] sd 0:0:1:0: tag#6604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.741712][ C0] sd 0:0:1:0: tag#6604 CDB: Test Unit Ready [ 828.747811][ C0] sd 0:0:1:0: tag#6604 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.757149][ C0] sd 0:0:1:0: tag#6604 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.766526][ C0] sd 0:0:1:0: tag#6604 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.775894][ C0] sd 0:0:1:0: tag#6604 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.785321][ C0] sd 0:0:1:0: tag#6604 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.794685][ C0] sd 0:0:1:0: tag#6604 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.804134][ C0] sd 0:0:1:0: tag#6604 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.813439][ C0] sd 0:0:1:0: tag#6604 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.822803][ C0] sd 0:0:1:0: tag#6604 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.832250][ C0] sd 0:0:1:0: tag#6604 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.841705][ C0] sd 0:0:1:0: tag#6604 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.851030][ C0] sd 0:0:1:0: tag#6604 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 828.860379][ C0] sd 0:0:1:0: tag#6604 CDB[c0]: 00 00 00 00 00 00 00 00 21:51:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x11}]}}) 21:51:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x12}]}}) 21:51:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xf5ffffff}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xb}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 829.282073][ T7101] usb 2-1: new high-speed USB device number 127 using dummy_hcd 21:51:05 executing program 5: sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037ec594086051a4058ac000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x660, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x348, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x102, 0x3, "f65c3ff73771fac4c8799bc7c84b027e842875d7fa3eb2e1a3348ba4fbbd5b57b5acc6c918b947108127a0f3a27b4fb7588381dd6216afc6b51dd6214f45351cfac10be187b3dd5e3e4cbb82df22c7fcabfc8fc96c9fe1497a642aced86ef5b709cf7eb848171f81bd1b083c26d74d0e711108a310e5ac61f65dd40345086a6a1f6229bfaef6b3736861c391a1992518f8ad487be90b8dcd3d86232c5c2bc7ae90942525eacf02a62b56848e630fef434a7a60ea5a3e97e491db6ad031eb8c535feff42882604fecfc89a27554fd620db268d752e1226aa6646e8956699fcf26f5577d2f090eabc7a841414c514e75b40ba2d04b2bc7c500a1de7c071ac7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xed, 0x3, "eceddc5e786665002d6e15037e635ae923bc932d9ceeacb987275c0c932e9f46df8c7db937e0f190b158b44e70e741d8f0a9d3b8dfa197de41812e79c903c9ab70202d334ff026c37c166e86bf7d37696e7a9b8cb55c77b3014bb53d981f378381f17640da0c14cd5a4505d8b4f4cf6eb0f744321f8bcdf93205e06a969bd760a7334404511e925af9ed5c331cf7f55738e770f2ee845830f13f5f31ede2a238b9d400071023f5a81b42d00d19bf30dde62c850f0776ef3c643c2d32d212280b7c28a986b30dc35e02af5aa1d195d11af38537977415f4aee68225fcd0a69ccc1bcacdcfd2c3c08b84"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "bd273ef5d77368af9a5b8fa365d5bb5ab755fb9f4f2eb88f6760"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xee, 0x3, "b060459cb12edc4f5636d5c3882151dae27c3e2ca1bacb1495a9e6f73853d19679406aa17c719bee54338a817df416891e578a38b908c522a056219e21c4c8aa19f23e2381c1ceb08e14265f202dfdff5849030430d02011899028dac81ae033457a4cad8e860e46642b060144b4f8987636f42828fce37cdf87eba42b32acc70151fe587899f918f74a478d68500050a8fa892153400bfa46036b026b1a2ff087bd267074089fe943205b76dc297f6e004aa31bf9d0638c9a45608b5b004c6d09f842510c706343d9b21bcf9e97ab3a32d38ba1ba9b34129bfb7f3b749fa539875fedf1d9b58de9dbe6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd87}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x100}}}}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a3439dd914391cb458de1987bec4d7c8b96c52ae26096035163abc605a80d1f481c52b2c"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d3edccd8e605654bf2816da69752343be8ba72dc1cee15d155"}}, @TIPC_NLA_NODE_ID={0x83, 0x3, "dd4c03ff1205d5fb39210b114ad38d65cbc1b6ebcc74fa28474fef947f40a54e3f39b86c540ccfd142449a9b26afef9359fe3dba0742f829f2a40c8dc96d152687b36f2115bf30aa333908bb7f863af32e5de65e02fd7d05c96da286c985a21b10b5cc44373ec096af57ebcb10ce9457ec911006bfde807beec9788b86cb57"}, @TIPC_NLA_NODE_ID={0x43, 0x3, "935862c9b95da0cb975065d115ccf7dac96adca36f430ccb3a3b928bc48d19f46f66b3935f60242405a4720f6656a37f86ad7f1aa37177f205012e0317d915"}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x660}, 0x1, 0x0, 0x0, 0x20}, 0x34018084) 21:51:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x25}]}}) [ 829.902522][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 829.912956][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.921187][ T7101] usb 2-1: Product: syz [ 829.925884][ T7101] usb 2-1: Manufacturer: syz [ 829.930589][ T7101] usb 2-1: SerialNumber: syz [ 830.032135][T10805] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 830.041393][ T7101] usb 2-1: config 0 descriptor?? [ 830.305547][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 830.417038][ T7101] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 830.427882][ T7101] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 830.485540][T10805] usb 6-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ac.58 [ 830.495956][T10805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.573160][T10805] usb 6-1: config 0 descriptor?? [ 830.848798][T23999] bridge0: port 2(vlan3) entered blocking state [ 830.859859][T23999] bridge0: port 2(vlan3) entered disabled state [ 831.147607][ T7101] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 831.162912][ T7101] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfa810000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x5c}]}}) 21:51:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:07 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0xc0840, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x34}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendfile(r1, r4, 0x0, 0x7) getsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000), &(0x7f00000001c0)=0x4) preadv(r0, &(0x7f0000005f00)=[{&(0x7f0000000e40)=""/4109, 0x100d}], 0x1, 0x2000, 0x0) [ 831.980048][ T7] usb 2-1: USB disconnect, device number 127 21:51:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x300}]}}) 21:51:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfc000000}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 832.952257][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd 21:51:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x500}]}}) 21:51:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xf}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfcd7f9cd}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x600}]}}) [ 833.675754][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 833.685259][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.693672][ T7] usb 2-1: Product: syz [ 833.700471][ T7] usb 2-1: Manufacturer: syz [ 833.705854][ T7] usb 2-1: SerialNumber: syz [ 833.884766][T24079] bridge0: port 2(vlan3) entered blocking state [ 833.895905][T24079] bridge0: port 2(vlan3) entered disabled state [ 834.054401][ T7] usb 2-1: config 0 descriptor?? [ 834.352857][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 834.363499][ T7] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 834.372796][ T7] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 834.382638][T10805] rtl8150 6-1:0.0: couldn't reset the device [ 834.388891][T10805] rtl8150: probe of 6-1:0.0 failed with error -5 [ 834.586565][T10805] usb 6-1: USB disconnect, device number 115 [ 834.992836][ T7] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 835.008351][ T7] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xffff845a}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x700}]}}) 21:51:11 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000500), 0x2c0900, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x9, @pix_mp={0x0, 0x0, 0x34324d59}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2600, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x80000001, 0x3f, 0xb5315258, 0x7, 0x1, 0x6, 0x5, 0x9, 0x0, 0x1, 0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000002c0)) 21:51:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 835.375841][ T7101] usb 2-1: USB disconnect, device number 2 21:51:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xffffff8d}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:11 executing program 5: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'dummy0\x00', {0x2, 0x0, @initdev}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='cgroup\x00', 0x0, &(0x7f0000000540)='pids') chdir(&(0x7f0000000080)='./file0\x00') clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') msgsnd(r0, &(0x7f00000002c0)={0x2, "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"}, 0x104, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x2c) creat(&(0x7f0000000140)='./file0\x00', 0x24) msgrcv(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000001e00"/24], 0x18, 0x0, 0x3000) msgrcv(r0, &(0x7f0000000180)={0x0, ""/133}, 0x8d, 0x3, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0308737bfb"], 0x40, 0x0) r1 = msgget$private(0x0, 0x23) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000400)=""/187) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 21:51:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x900}]}}) [ 836.051802][ T7101] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 836.270205][T24155] bridge0: port 2(vlan3) entered blocking state [ 836.281765][T24155] bridge0: port 2(vlan3) entered disabled state 21:51:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0xfffffff5}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xa00}]}}) [ 836.732284][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 836.741817][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.749944][ T7101] usb 2-1: Product: syz [ 836.754623][ T7101] usb 2-1: Manufacturer: syz [ 836.759437][ T7101] usb 2-1: SerialNumber: syz 21:51:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "d21789f64f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 836.851778][ T7101] usb 2-1: config 0 descriptor?? [ 837.122082][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 837.132936][ T7101] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 837.142132][ T7101] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 837.648043][ T7101] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 837.663516][ T7101] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x11}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xb00}]}}) 21:51:14 executing program 5: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'dummy0\x00', {0x2, 0x0, @initdev}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='cgroup\x00', 0x0, &(0x7f0000000540)='pids') chdir(&(0x7f0000000080)='./file0\x00') clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') msgsnd(r0, &(0x7f00000002c0)={0x2, "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"}, 0x104, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x2c) creat(&(0x7f0000000140)='./file0\x00', 0x24) msgrcv(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000001e00"/24], 0x18, 0x0, 0x3000) msgrcv(r0, &(0x7f0000000180)={0x0, ""/133}, 0x8d, 0x3, 0x0) msgsnd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0308737bfb"], 0x40, 0x0) r1 = msgget$private(0x0, 0x23) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000400)=""/187) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 21:51:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d1218b6a2977c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 838.674992][T22760] usb 2-1: USB disconnect, device number 3 21:51:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xc00}]}}) 21:51:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13299533dea3afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 839.354834][T22760] usb 2-1: new high-speed USB device number 4 using dummy_hcd 21:51:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xd00}]}}) 21:51:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x60}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x3, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 839.829700][T24225] bridge0: port 2(vlan3) entered blocking state [ 839.839534][T24225] bridge0: port 2(vlan3) entered disabled state [ 839.913763][T22760] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 839.923097][T22760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.931220][T22760] usb 2-1: Product: syz [ 839.935678][T22760] usb 2-1: Manufacturer: syz [ 839.940383][T22760] usb 2-1: SerialNumber: syz 21:51:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xe00}]}}) [ 840.083797][T22760] usb 2-1: config 0 descriptor?? [ 840.391859][T22760] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 840.402771][T22760] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 840.412599][T22760] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 841.064184][T22760] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 841.081247][T22760] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x4, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x1100}]}}) 21:51:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x10}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 841.920611][T22760] usb 2-1: USB disconnect, device number 4 21:51:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x1200}]}}) 21:51:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x2}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 842.677716][T10805] usb 2-1: new high-speed USB device number 5 using dummy_hcd 21:51:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x2500}]}}) 21:51:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x3}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 843.198096][T24284] bridge0: port 2(vlan3) entered blocking state [ 843.208505][T24284] bridge0: port 2(vlan3) entered disabled state 21:51:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x5c00}]}}) [ 843.322494][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 843.334248][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.343114][T10805] usb 2-1: Product: syz [ 843.347391][T10805] usb 2-1: Manufacturer: syz [ 843.352358][T10805] usb 2-1: SerialNumber: syz [ 843.629259][T10805] usb 2-1: config 0 descriptor?? [ 843.934443][T24287] bridge0: port 3(vlan2) entered blocking state [ 843.945178][T24287] bridge0: port 3(vlan2) entered disabled state [ 844.023140][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 844.033891][T10805] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 844.046454][T10805] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 844.818255][T10805] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 844.833767][T10805] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x80000}]}}) 21:51:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 21:51:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 845.273800][T10805] usb 2-1: USB disconnect, device number 5 21:51:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x1000000}]}}) 21:51:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x2}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 846.179754][T24369] bridge0: port 2(vlan3) entered blocking state [ 846.189764][T24369] bridge0: port 2(vlan3) entered disabled state [ 846.249311][T10805] usb 2-1: new high-speed USB device number 6 using dummy_hcd 21:51:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x3}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x2000000}]}}) [ 846.730767][T24358] bridge0: port 3(vlan2) entered blocking state [ 846.741279][T24358] bridge0: port 3(vlan2) entered disabled state 21:51:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x3000000}]}}) 21:51:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 846.942875][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 846.952273][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.960400][T10805] usb 2-1: Product: syz [ 846.964917][T10805] usb 2-1: Manufacturer: syz [ 846.969620][T10805] usb 2-1: SerialNumber: syz [ 846.983716][T10805] usb 2-1: config 0 descriptor?? [ 847.232657][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 847.243293][T10805] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 847.252552][T10805] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 847.732982][T10805] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 847.748251][T10805] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0xee, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c955bc96052f8107670422519a5d67d49e33fb1eb545aaedf9ec9efc189d588ab970dd41d661685840d7b30faa2f6f3a2791cbb180333a75d95bf3ca4c66d102ab6172697c3a353a17f209c6143f0a6eeef3189232ed70ec613c5a6aa4db1716ab96d64641d691b1055fa7398136c1bff8d805259ee15eb09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x5}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0xec1}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x4000000}]}}) 21:51:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 21:51:24 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x9763}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x1010, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x1}, 0x8000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x806, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x2aa7, &(0x7f0000000180)={0x0, 0x3f73, 0x1, 0x1, 0x2c9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x6}, 0x10001) syz_io_uring_setup(0x2de3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1de, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd=r4, 0xfffffffffffffffd, &(0x7f00000002c0)=""/33, 0x21, 0xe, 0x0, {0x0, r7}}, 0x40) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 848.563269][ T67] usb 2-1: USB disconnect, device number 6 21:51:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x5000000}]}}) 21:51:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x6}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 849.141704][ T67] usb 2-1: new high-speed USB device number 7 using dummy_hcd 21:51:25 executing program 5: unshare(0x40000000) r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0xa) perf_event_open(0x0, r3, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x05\x00\xdd\xd4\b\xbb\xbb\xb0]\t\xee\x89dD7\xb1\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00p\x16\xc4\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00'/77) unshare(0x0) 21:51:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x6000000}]}}) [ 849.692678][ T67] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 849.701974][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.710108][ T67] usb 2-1: Product: syz [ 849.714572][ T67] usb 2-1: Manufacturer: syz [ 849.719275][ T67] usb 2-1: SerialNumber: syz 21:51:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x33fe0}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 849.840985][ T67] usb 2-1: config 0 descriptor?? 21:51:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x7}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 849.935804][T24433] bridge0: port 2(vlan3) entered blocking state [ 849.947064][T24433] bridge0: port 2(vlan3) entered disabled state [ 850.123256][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 850.154091][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 850.265417][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 850.273071][ T67] usb 2-1: media controller created [ 850.506376][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.570919][ T67] stb0899_attach: Driver disabled by Kconfig [ 851.577098][ T67] az6027: no front-end attached [ 851.577098][ T67] [ 851.607930][ T67] az6027: usb out operation failed. (-71) [ 851.614139][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 851.624372][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 851.707926][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 851.715276][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 851.753555][ T67] usb 2-1: USB disconnect, device number 7 [ 851.852789][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x7000000}]}}) 21:51:27 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x32, 0xfe, 0x2a, 0x8, 0xccd, 0x10af, 0x9bae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdc, 0xd9, 0x56, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002980)={0x2c, &(0x7f00000027c0)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0}) 21:51:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x7c}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x20000094}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x8000000}]}}) 21:51:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xfc}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 852.462611][T10805] usb 6-1: new high-speed USB device number 116 using dummy_hcd 21:51:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x9000000}]}}) [ 852.702534][T10805] usb 6-1: Using ep0 maxpacket: 8 [ 852.866270][T24527] bridge0: port 2(vlan3) entered blocking state [ 852.875853][T24527] bridge0: port 2(vlan3) entered disabled state [ 852.905327][T12746] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 852.958420][T10805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 852.968972][T10805] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=9b.ae [ 852.978360][T10805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.103110][T10805] usb 6-1: config 0 descriptor?? 21:51:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x7ffff000}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) [ 853.173855][T10805] em28xx 6-1:0.0: New device @ 480 Mbps (0ccd:10af, interface 0, class 0) [ 853.182860][T10805] em28xx 6-1:0.0: DVB interface 0 found: bulk 21:51:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xa000000}]}}) 21:51:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x300}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 853.473199][T10805] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 853.533038][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 853.542466][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.550594][T12746] usb 2-1: Product: syz [ 853.555096][T12746] usb 2-1: Manufacturer: syz [ 853.559813][T12746] usb 2-1: SerialNumber: syz [ 853.664427][T10805] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 853.672669][T10805] em28xx 6-1:0.0: board has no eeprom [ 853.762180][T12746] usb 2-1: config 0 descriptor?? [ 853.821891][T10805] em28xx 6-1:0.0: Identified as Terratec Grabby (card=67) [ 853.829232][T10805] em28xx 6-1:0.0: dvb set to bulk mode. [ 853.836170][ T7] em28xx 6-1:0.0: Registering snapshot button... [ 853.844300][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64 [ 853.958087][T10805] usb 6-1: USB disconnect, device number 116 [ 853.965802][T10805] em28xx 6-1:0.0: Disconnecting em28xx [ 854.019389][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 854.029993][T12746] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 854.039172][T12746] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 854.055648][ T7] em28xx 6-1:0.0: Remote control support is not available for this card. [ 854.099073][T10805] em28xx 6-1:0.0: Closing input extension [ 854.105457][T10805] em28xx 6-1:0.0: Deregistering snapshot button [ 854.176042][T10805] em28xx 6-1:0.0: Freeing device [ 854.564697][T10805] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 854.827100][T10805] usb 6-1: Using ep0 maxpacket: 8 [ 854.920144][T12746] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 854.935821][T12746] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 854.952717][T10805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 854.962860][T10805] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=9b.ae [ 854.972297][T10805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.095228][T10805] usb 6-1: config 0 descriptor?? [ 855.302236][T10805] usb 6-1: can't set config #0, error -71 [ 855.353399][T10805] usb 6-1: USB disconnect, device number 117 21:51:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xb000000}]}}) 21:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x500}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 21:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:31 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x32, 0xfe, 0x2a, 0x8, 0xccd, 0x10af, 0x9bae, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xdc, 0xd9, 0x56, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002980)={0x2c, &(0x7f00000027c0)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0}) [ 855.397910][ T67] usb 2-1: USB disconnect, device number 8 21:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x559}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xc000000}]}}) [ 855.971717][ T7101] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 855.989739][T10805] usb 6-1: new high-speed USB device number 118 using dummy_hcd 21:51:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x2, 0x0, 0x0, 0x4000091}, 0x0) [ 856.231921][T10805] usb 6-1: Using ep0 maxpacket: 8 21:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x600}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 856.352512][T10805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 856.362706][T10805] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=9b.ae [ 856.372101][T10805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.404278][T24621] bridge0: port 2(vlan3) entered blocking state [ 856.413631][T24621] bridge0: port 2(vlan3) entered disabled state [ 856.475751][T10805] usb 6-1: config 0 descriptor?? 21:51:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xd000000}]}}) [ 856.521059][T10805] em28xx 6-1:0.0: New device @ 480 Mbps (0ccd:10af, interface 0, class 0) [ 856.530095][T10805] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 856.763781][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 856.773190][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.781316][ T7101] usb 2-1: Product: syz [ 856.785755][ T7101] usb 2-1: Manufacturer: syz [ 856.790451][ T7101] usb 2-1: SerialNumber: syz 21:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x700}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 856.858610][ T7101] usb 2-1: config 0 descriptor?? [ 856.964738][T10805] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 857.114797][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 857.125382][ T7101] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 857.132354][T10805] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 857.134567][ T7101] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 857.142586][T10805] em28xx 6-1:0.0: board has no eeprom [ 857.421797][T10805] em28xx 6-1:0.0: Identified as Terratec Grabby (card=67) [ 857.429176][T10805] em28xx 6-1:0.0: dvb set to bulk mode. [ 857.436299][T12746] em28xx 6-1:0.0: Registering snapshot button... [ 857.444317][T12746] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input65 [ 857.480327][T10805] usb 6-1: USB disconnect, device number 118 [ 857.487843][T10805] em28xx 6-1:0.0: Disconnecting em28xx [ 857.507888][T12746] em28xx 6-1:0.0: Remote control support is not available for this card. [ 857.529986][T10805] em28xx 6-1:0.0: Closing input extension [ 857.537283][T10805] em28xx 6-1:0.0: Deregistering snapshot button [ 857.605151][T10805] em28xx 6-1:0.0: Freeing device [ 858.338681][ T7101] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 858.354069][ T7101] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0xe000000}]}}) 21:51:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x3f00}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x8, 0x0, 0x0, 0x4000091}, 0x0) 21:51:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 858.690804][ T7101] usb 2-1: USB disconnect, device number 9 21:51:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x10000000}]}}) 21:51:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x4000}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 859.411764][ T7101] usb 2-1: new high-speed USB device number 10 using dummy_hcd 21:51:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x5905}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x11000000}]}}) 21:51:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0xa, 0x0, 0x0, 0x4000091}, 0x0) [ 859.800515][T24717] bridge0: port 2(vlan3) entered blocking state [ 859.828191][T24717] bridge0: port 2(vlan3) entered disabled state [ 859.962855][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 859.972409][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.980527][ T7101] usb 2-1: Product: syz [ 859.984962][ T7101] usb 2-1: Manufacturer: syz [ 859.989662][ T7101] usb 2-1: SerialNumber: syz 21:51:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x12000000}]}}) [ 860.140325][ T7101] usb 2-1: config 0 descriptor?? [ 860.406243][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 860.416950][ T7101] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 860.430397][ T7101] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 860.526230][T24710] bridge0: port 3(vlan2) entered blocking state [ 860.557934][T24710] bridge0: port 3(vlan2) entered disabled state [ 860.730205][ T7101] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 860.747337][ T7101] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x77, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb821bf38a7a7e13ba2db71a9e51c09b40332548229f0dae8c755e5f69acb6a2a307fa1f7f975fad669db16e9034826e08da18369afa495cc7c8f05c95"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x7c00}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x25000000}]}}) 21:51:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x600, 0x0, 0x0, 0x4000091}, 0x0) 21:51:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 862.069415][T10805] usb 2-1: USB disconnect, device number 10 21:51:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x7ca1}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {0x0, 0x5c000000}]}}) 21:51:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0x81fa}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 862.722622][T10805] usb 2-1: new high-speed USB device number 11 using dummy_hcd 21:51:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}]}}) [ 863.014696][T24785] bridge0: port 2(vlan3) entered blocking state [ 863.023679][T24785] bridge0: port 2(vlan3) entered disabled state 21:51:39 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x2, 0x0, 0x4000091}, 0x0) [ 863.242768][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 863.252284][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.260415][T10805] usb 2-1: Product: syz [ 863.264979][T10805] usb 2-1: Manufacturer: syz [ 863.269675][T10805] usb 2-1: SerialNumber: syz 21:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xa17c}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 863.414093][T10805] usb 2-1: config 0 descriptor?? [ 863.483215][T24784] bridge0: port 3(vlan2) entered blocking state [ 863.491974][T24784] bridge0: port 3(vlan2) entered disabled state [ 863.791084][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 863.807683][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 863.868597][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 863.876469][T10805] usb 2-1: media controller created [ 864.072110][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.121919][T10805] stb0899_attach: Driver disabled by Kconfig [ 865.128013][T10805] az6027: no front-end attached [ 865.128013][T10805] [ 865.151945][T10805] az6027: usb out operation failed. (-71) [ 865.157767][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 865.166793][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input66 [ 865.180780][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 865.188176][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 865.209018][T10805] usb 2-1: USB disconnect, device number 11 [ 865.284463][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x2}]}}) 21:51:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xa5f6}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:41 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x3, 0x0, 0x4000091}, 0x0) 21:51:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x3}]}}) 21:51:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xf6a5}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 866.106060][T10805] usb 2-1: new high-speed USB device number 12 using dummy_hcd 21:51:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x4}]}}) [ 866.593715][T24869] bridge0: port 2(vlan3) entered blocking state [ 866.603124][T24869] bridge0: port 2(vlan3) entered disabled state [ 866.633069][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 21:51:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x5}]}}) [ 866.642704][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.650837][T10805] usb 2-1: Product: syz [ 866.655310][T10805] usb 2-1: Manufacturer: syz [ 866.660044][T10805] usb 2-1: SerialNumber: syz [ 866.735373][T10805] usb 2-1: config 0 descriptor?? 21:51:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xfa81}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x6}]}}) [ 866.992199][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 867.002939][T10805] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 867.012248][T10805] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 867.154066][T24871] bridge0: port 3(vlan2) entered blocking state [ 867.162702][T24871] bridge0: port 3(vlan2) entered disabled state [ 867.306656][T10805] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 867.321992][T10805] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x4, 0x0, 0x4000091}, 0x0) 21:51:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4, 0xfc00}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x7}]}}) 21:51:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 868.811295][T22760] usb 2-1: USB disconnect, device number 12 21:51:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x8}]}}) 21:51:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0200"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 869.359323][T22760] usb 2-1: new high-speed USB device number 13 using dummy_hcd 21:51:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x9}]}}) 21:51:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0300"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 869.944656][T24932] bridge0: port 2(vlan3) entered blocking state [ 869.953389][T24932] bridge0: port 2(vlan3) entered disabled state [ 869.965142][T22760] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 869.974600][T22760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.982936][T22760] usb 2-1: Product: syz [ 869.987242][T22760] usb 2-1: Manufacturer: syz 21:51:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x5, 0x0, 0x4000091}, 0x0) [ 869.992059][T22760] usb 2-1: SerialNumber: syz [ 870.109499][T22760] usb 2-1: config 0 descriptor?? 21:51:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0400"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 870.372511][T22760] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 870.383182][T22760] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 870.392357][T22760] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 870.699127][T24939] bridge0: port 3(vlan2) entered blocking state [ 870.708562][T24939] bridge0: port 3(vlan2) entered disabled state [ 870.729799][T22760] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 870.745723][T22760] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xa}]}}) 21:51:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6, 0x0, 0x4000091}, 0x0) 21:51:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 872.063067][T12746] usb 2-1: USB disconnect, device number 13 21:51:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xb}]}}) [ 872.781937][T22760] usb 2-1: new high-speed USB device number 14 using dummy_hcd 21:51:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x7, 0x0, 0x4000091}, 0x0) 21:51:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xc}]}}) 21:51:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0700"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 873.158419][T24997] bridge0: port 2(vlan3) entered blocking state [ 873.168654][T24997] bridge0: port 2(vlan3) entered disabled state [ 873.412841][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.419303][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 21:51:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a7c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 873.642763][T22760] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 873.652202][T22760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.660321][T22760] usb 2-1: Product: syz [ 873.664894][T22760] usb 2-1: Manufacturer: syz [ 873.669590][T22760] usb 2-1: SerialNumber: syz [ 873.713803][T25000] bridge0: port 3(vlan2) entered blocking state [ 873.722591][T25000] bridge0: port 3(vlan2) entered disabled state [ 873.833478][T22760] usb 2-1: config 0 descriptor?? [ 874.175890][T22760] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 874.186569][T22760] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 874.195755][T22760] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 874.313254][T22760] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 874.328864][T22760] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:51:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x3c, "e69d7e27bcf2474be6015c48797b4f65d26308ab91b1ee5474f30ac23580e53b389ecb801353b0906a75f15d702f6523e69f029333e07f9ff7afbb82"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xd}]}}) 21:51:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5afc00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x8, 0x0, 0x4000091}, 0x0) 21:51:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 875.438481][T12746] usb 2-1: USB disconnect, device number 14 [ 875.737301][T25059] bridge0: port 2(vlan3) entered blocking state [ 875.749587][T25059] bridge0: port 2(vlan3) entered disabled state 21:51:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xe}]}}) 21:51:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000300"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 876.205644][T10352] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 876.441721][T25064] bridge0: port 3(vlan2) entered blocking state [ 876.451354][T25064] bridge0: port 3(vlan2) entered disabled state 21:51:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x10}]}}) 21:51:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x11}]}}) [ 876.884786][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 876.894206][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.902848][T10352] usb 2-1: Product: syz [ 876.907124][T10352] usb 2-1: Manufacturer: syz [ 876.912981][T10352] usb 2-1: SerialNumber: syz 21:51:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x9, 0x0, 0x4000091}, 0x0) [ 876.993733][T10352] usb 2-1: config 0 descriptor?? [ 877.252836][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 877.287542][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 877.409488][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 877.416978][T10352] usb 2-1: media controller created [ 877.621074][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.635286][T10352] stb0899_attach: Driver disabled by Kconfig [ 878.641388][T10352] az6027: no front-end attached [ 878.641388][T10352] [ 878.661918][T10352] az6027: usb out operation failed. (-71) [ 878.667841][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 878.690279][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 878.712696][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 878.719843][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 878.749694][T10352] usb 2-1: USB disconnect, device number 15 [ 878.823762][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a590500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x12}]}}) 21:51:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xa, 0x0, 0x4000091}, 0x0) 21:51:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x25}]}}) [ 879.721015][T25151] bond1: (slave vlan3): Opening slave failed 21:51:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 880.206934][T25152] bridge0: port 3(vlan2) entered blocking state [ 880.218118][T25152] bridge0: port 3(vlan2) entered disabled state [ 880.226172][T12746] usb 2-1: new high-speed USB device number 16 using dummy_hcd 21:51:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x5c}]}}) 21:51:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000700"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x300}]}}) 21:51:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xb, 0x0, 0x4000091}, 0x0) [ 880.771929][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 880.781384][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.789779][T12746] usb 2-1: Product: syz [ 880.794242][T12746] usb 2-1: Manufacturer: syz [ 880.798962][T12746] usb 2-1: SerialNumber: syz [ 880.921365][T12746] usb 2-1: config 0 descriptor?? [ 881.184915][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 881.197300][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.240128][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 881.247577][T12746] usb 2-1: media controller created [ 881.364502][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.452296][T12746] stb0899_attach: Driver disabled by Kconfig [ 882.458391][T12746] az6027: no front-end attached [ 882.458391][T12746] [ 882.493052][T12746] az6027: usb out operation failed. (-71) [ 882.498829][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 882.507927][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 882.521293][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 882.528705][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 882.550115][T12746] usb 2-1: USB disconnect, device number 16 [ 882.618100][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:51:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:51:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a003f00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:51:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x500}]}}) 21:51:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xc, 0x0, 0x4000091}, 0x0) 21:51:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:51:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a004000"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 883.381330][T25230] bridge0: port 3(vlan2) entered blocking state [ 883.390166][T25230] bridge0: port 3(vlan2) entered disabled state 21:51:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x600}]}}) [ 883.601803][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 884.061768][T25236] bond1: (slave vlan3): Opening slave failed 21:51:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x700}]}}) 21:51:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a055900"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 884.292668][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 884.302086][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.310273][ T7] usb 2-1: Product: syz [ 884.314934][ T7] usb 2-1: Manufacturer: syz [ 884.319709][ T7] usb 2-1: SerialNumber: syz [ 884.403614][ T7] usb 2-1: config 0 descriptor?? 21:52:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x900}]}}) 21:52:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf, 0x0, 0x4000091}, 0x0) [ 884.682063][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 884.693110][ T7] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 884.702292][ T7] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 884.864609][ T7] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 884.880063][ T7] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:52:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xa00}]}}) 21:52:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a007c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x10, 0x0, 0x4000091}, 0x0) [ 886.155342][ T7] usb 2-1: USB disconnect, device number 17 [ 886.707635][T25299] bond1: (slave vlan3): Opening slave failed 21:52:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xb00}]}}) 21:52:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5aa17c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 887.086215][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd 21:52:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x11, 0x0, 0x4000091}, 0x0) 21:52:03 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xc00}]}}) 21:52:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5afa8100"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 887.651055][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 887.660564][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.668925][ T7] usb 2-1: Product: syz [ 887.673370][ T7] usb 2-1: Manufacturer: syz [ 887.678140][ T7] usb 2-1: SerialNumber: syz [ 887.870331][ T7] usb 2-1: config 0 descriptor?? [ 888.132444][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 888.143160][ T7] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 888.152630][ T7] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 888.459319][ T7] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 888.474812][ T7] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 21:52:05 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340), &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:05 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902900003010000000904000000010101000a0b"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x60, {0x60, 0x5, "a5fa97e271fa30dd90a4534c4a9da7a93e86a10ea4130843ad577ddac7baf24becf423e1fd86f75b6d3e617661c6d98b119436212fadc006826522cbc403d7f6673b8c820ef30de69b08d1bcb06f792e927a2b2bcd7a17154974cad41117"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x5, 0x67, "4442c54138b62c6414b9e162b4b7abe6599a337f76589192f8972b971922151b249f4ec3732db91e6b68a2a63d9ce22765c0b21f8fdd5cd531a271db85deb69f842d09566669753eef26664f2aa655f9aff38dab4e6a093033ab8374e93684a85ca26646b96038"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000200)=ANY=[@ANYBLOB="208102010000041c"], &(0x7f0000000240)={0x20, 0x82, 0x1, ' '}, &(0x7f0000000280)={0x20, 0x83, 0x3, "6cde9d"}, &(0x7f0000000300)={0x20, 0x84, 0x3, 'FGK'}, &(0x7f0000000340)={0x20, 0x85, 0x3, "88296f"}}) 21:52:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xd00}]}}) 21:52:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a7ca100"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x60, 0x0, 0x4000091}, 0x0) 21:52:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 889.372645][ T7] usb 2-1: USB disconnect, device number 18 21:52:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xe00}]}}) 21:52:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5af6a500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 889.824476][T10352] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 889.972282][ T67] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 890.121869][T10352] usb 6-1: Using ep0 maxpacket: 8 21:52:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x1100}]}}) [ 890.243017][T10352] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.253684][T10352] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 21:52:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5aa5f600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x300, 0x0, 0x4000091}, 0x0) 21:52:06 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x1200}]}}) [ 890.483318][T10352] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 890.492638][T10352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.500775][T10352] usb 6-1: Product: syz [ 890.505303][T10352] usb 6-1: Manufacturer: syz [ 890.510020][T10352] usb 6-1: SerialNumber: syz [ 890.541908][ T67] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 890.551176][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.559595][ T67] usb 2-1: Product: syz [ 890.563995][ T67] usb 2-1: Manufacturer: syz [ 890.568701][ T67] usb 2-1: SerialNumber: syz [ 890.662127][ T67] usb 2-1: config 0 descriptor?? [ 890.922322][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 890.933051][ T67] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 890.943666][ T67] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 891.132229][T10352] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 891.139419][T10352] usb 6-1: cannot find UAC_HEADER [ 891.146597][T10352] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 891.181392][T10352] usb 6-1: USB disconnect, device number 119 [ 891.410227][ T67] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 891.425922][ T67] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 891.871665][ T7] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 892.111671][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 892.232091][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.242661][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.414580][ T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.424169][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.432522][ T7] usb 6-1: Product: syz [ 892.436828][ T7] usb 6-1: Manufacturer: syz [ 892.441736][ T7] usb 6-1: SerialNumber: syz [ 892.622937][ T7] usb 6-1: unknown interface protocol 0x1, assuming v1 [ 892.630126][ T7] usb 6-1: cannot find UAC_HEADER [ 892.636082][ T7] snd-usb-audio: probe of 6-1:1.0 failed with error -22 21:52:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a81fa00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x2500}]}}) [ 892.695951][ T7] usb 6-1: USB disconnect, device number 120 [ 892.727275][T22760] usb 2-1: USB disconnect, device number 19 21:52:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x500, 0x0, 0x4000091}, 0x0) 21:52:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x5c00}]}}) 21:52:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00fc00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 893.461871][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd 21:52:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x80000}]}}) 21:52:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000001000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:09 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x600, 0x0, 0x4000091}, 0x0) 21:52:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 893.982573][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 893.991942][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.000137][ T7] usb 2-1: Product: syz [ 894.004674][ T7] usb 2-1: Manufacturer: syz [ 894.009451][ T7] usb 2-1: SerialNumber: syz [ 894.154194][ T7] usb 2-1: config 0 descriptor?? [ 894.403211][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 894.476728][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 894.551859][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 894.559324][ T7] usb 2-1: media controller created [ 894.773920][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.722428][ T7] stb0899_attach: Driver disabled by Kconfig [ 895.728638][ T7] az6027: no front-end attached [ 895.728638][ T7] [ 895.751892][ T7] az6027: usb out operation failed. (-71) [ 895.760062][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 895.769452][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 895.786130][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 895.793437][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 895.809679][ T7] usb 2-1: USB disconnect, device number 20 [ 895.878186][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x1000000}]}}) 21:52:12 executing program 5: r0 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) syz_usb_connect(0x0, 0x4c1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) 21:52:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000002000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:12 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x700, 0x0, 0x4000091}, 0x0) 21:52:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x2000000}]}}) [ 896.717113][T25501] bridge0: port 2(vlan3) entered blocking state [ 896.726397][T25501] bridge0: port 2(vlan3) entered disabled state [ 896.821657][T22760] usb 6-1: new high-speed USB device number 121 using dummy_hcd 21:52:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000003000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 897.111615][ T7101] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 897.119488][T22760] usb 6-1: device descriptor read/64, error 18 21:52:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x3000000}]}}) [ 897.392489][T22760] usb 6-1: new high-speed USB device number 122 using dummy_hcd 21:52:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x900, 0x0, 0x4000091}, 0x0) 21:52:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000004000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 897.582275][T22760] usb 6-1: device descriptor read/64, error 18 [ 897.682031][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 897.691243][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.700670][ T7101] usb 2-1: Product: syz [ 897.705310][ T7101] usb 2-1: Manufacturer: syz [ 897.710117][ T7101] usb 2-1: SerialNumber: syz [ 897.730852][T22760] usb usb6-port1: attempt power cycle [ 897.766013][T25530] bond1: (slave vlan3): Opening slave failed [ 897.915804][ T7101] usb 2-1: config 0 descriptor?? [ 898.161997][T22760] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 898.192660][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 898.228816][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.338074][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 898.345603][ T7101] usb 2-1: media controller created [ 898.382748][T22760] usb 6-1: device descriptor read/8, error -61 [ 898.515477][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.682923][T22760] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 898.892723][T22760] usb 6-1: device descriptor read/8, error -61 [ 899.012228][T22760] usb usb6-port1: unable to enumerate USB device [ 899.532313][ T7101] stb0899_attach: Driver disabled by Kconfig [ 899.538409][ T7101] az6027: no front-end attached [ 899.538409][ T7101] [ 899.564394][ T7101] az6027: usb out operation failed. (-71) [ 899.570218][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 899.579266][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 899.597274][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 899.604581][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 899.620810][ T7101] usb 2-1: USB disconnect, device number 21 [ 899.684289][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000005000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x4000000}]}}) 21:52:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:15 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xa00, 0x0, 0x4000091}, 0x0) 21:52:15 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x2020000) r1 = signalfd(r0, &(0x7f0000000080)={[0x2a]}, 0x8) setns(r1, 0x20000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0xa1000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r5, @ANYBLOB="2c67726f75705f69643d4d3e48935fb31bb10432777f6de35f1827cea49fbf4483fb4eca787cab0f2e9461b1735fdd209997c7fa491de1390fd4d6e67d1731e04655815bb33e187a06f9bcf0de23f90315c5397ba2371ccf4dd5f0c667b4988ae0af9a5882fdc64536dfdf1f37e29235d8097cec72050cf8db2f64742a9db0394ac666d5a10358d7cb61a942f092423f8d3a6d679211e0c26b10f2", @ANYRESDEC=r3, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c61707072616973655f747970653d696d617369672c646f6e745f6d6561737572652c6673757569643d66623433660365332d003664372d666437342d313765612d65623464303137512c657569643e", @ANYRESDEC=r2, @ANYBLOB=',fsmagic=0x000000000000007f,fscontext=root,uid>', @ANYRESDEC=r2, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000000c0)="605e587360f8ffbb3b4419545548443c07af001743c5f6fc884d9682892a42c6a00585e989bf72860239cf2fe33a177065bf0712051e87631d151b244ab7691907cff30dfa79778481413616440e35e15a0bcee0640358d171157f2936f729ed31275afcc4637285247a3b06868ad9a60f29e63326de9ccef632e919de252af30a3bbddc838d129e01d64ef86086657843b9f2db1607740258ef122c85c44651b72ba55f98e250a397a3d5797ae59c28685c2a8e46476ac5a1b1106b4ddd9ed79fba1ca144ca370d1d1dffdc931a82343d25bf4331e444cebc02ce17e5fee07aaf27430176372cf83284702c97adb48f542672af7fcca4fa18c7bc70678a6c2fcb6b628e4de6c398d80f9d3a8f99e83de7e70430d2616f1e3f839112d1b52f7fc332960cf0f0ad9f50919f2cb3bd82f17aa942773574e5c4c19e192c951feceea5ac4076728a5530f38ba9d1c4c87fc1af4842418234c54422aa94d610b84d8bfcdaf4fdc229365448c36003599969ce4a19825df1c308dfcd6595700fef9f1a382022de1150702944e866b73a0ac1e01426d9c13f2949544fe6a5da040d5718b9f94ae3f2524a98c79ca8cfc6cec5b473a043cff2eb834c263e8a5a5c6f290925a509f32ae1d98d2b990af9844955085ab3f777859239873d11fdcdc9e9b1859b96c0bfed76f289dbda9a737c644b8824cd69c6959f8e049a2859ee69be311cc25a8afc4dcd25a7ef83c2ed3c865bacb0f8399bb13653e0f3f8993db2f4a29e0d1d25912cfb6dc874ee6780d07d60472ddd5fde877c0b38291db6c3db76f957a8d1e5a52b2cdbff3b359e3f19028c51ecaff921f8fc3c88b418f6e32ce807e02007bba23982f001893bfee91f54f4543afcf237c3b926bea1de45ea2e9c5f09d3cf020c1c63490b189d9479ab275f04da403228fd98b48e3f5f0db16ea424c8af0833d33ab6aeca9686fdeae939eeb22487daaee74a23bbad47c6dfc6efbcf6dbcd9d07326470a7c6614411e4361539320bd92fd1c6b0cfc014b3e81eaf3d604417907b0598303b5e8c095d532f62f53e8d71d7c762784a78ee072038c2b602b3c92c01a9e64226a76fa2d4d306e69978ede8d143b793c65800ef10cbdb5efa67cd9a7e66e94471fdf3d52c573528e0c4cd61567570ca29ca42054d7eb1f80f6f71dfd616b3743ebc9a494d7090064e7e1a816471d027f4c7f8a605c9863157bd4e3d4707bc9514985252857c1525efc725378e04a9a02f851a4dd09f4fd4b786d008e3287058764f400bf8a7b08ed9b21647388001270aa932ca2998971504b11ab7a5b253c9a71ae831d27aee66d311f249b50800fad0742a5d0da236c5eb8c18859cd81d9f6b7e0e4a1f7930be070f5e2a8ecb3b433e0c5cd2530083514d5954eaea8042f0f4b826cbedf3e09051861dd8d0a54eec7f2204660e6bab481cef8971642911fb40e721bdcdeffe7729a3f6991fed2c32696431c9ff44fd0f0b3f81e013b21d45be6062f9745a21e4b8ae5f441f10a0708282fac09f1609bac377848c4ecd68f9a50465b682b1ca391cddd8377575a4b70f671688b30ba2acc8a80816ce32977716788ae6e38c2433e150f6eaef7e5b9c880d318f057a1fb3330cecb664897171151eec9a1e4d00960295e5af905f34a882930604e76fa00836aa98bb72645c0163404771e42b24e901b4ab3bafa2efdc7dbf10cc5dba82ce86dbcd958338f902840b73147c62978affe77f4f4855fedb404ac4f978bbd83991d7116a46f215475cdba1d57d7b5f882b8e8c7ce78334d03054c5d83a9218a8405abaf11386531982061fee4f48595d6ca4c93758af4dcca987ad0184bdabf452f740fecc835ed4f9cba842ad355936411718b1b2da63ec05d3144b1824978128d03fda4ab740dbce0e8c5813ce78fef951e85b53b145b272940b85ef4567cdece60adae05cb8ca5f7e09eb5cb9f23b24b691d95a85c55ecf16679bb1beeb1f9aafea7450d8c2cc9a7be25de73aa2ff77006d422bd4539b3c58243919cf450f057375bbc544d472651cdd53747875ee86512bfd2d428b50c95ce64d3a6a5d7ca750f2f2436b370474cf12964873e07196ab135b9a2cd929879e5943b3cb364f11d0f06278b8ae752b8156bda02949b2eca81e49eb481a1ff18ea6ca6e159064394545322f3a4cdceb1985975228f8ecba33a370fa1481248eac632c91860d44ea84296610754eb94bb7d1cd7ab47bb303b121cfc907c79ce1559dfb433187a78f96010231f4cb58a52c9f023ff8b4e90845a90f7f99a4c0fdd2749bc3be1794ed82c24d8565ac859a9451d974edbc9170e28029c80c8e212e9047082f59c9fe7aa696a48c77cb84be3210dcf5d3a3a4cef9f40985f149444e953c8273f0f56677fc8dbc1093cef99fa10ea6ebe40862eddeaaea316afce3d97ca5905f17243e978e68f92fc4b9a2c85442c9da5f9e3fcd9e3ae1709e08c011a55e18106826147d826277e50b9dee4774397790b46238e5f67f81c2ac61310931853e2c4131805c856490ae474a7e5f38008af693fe9219e481f4d41e16c99cfce5e351d4f77ec887c927a8f316052f01c0df8e29110c2c69d471bb0e518e030fb04a8853ee0d8a151b68c1de4f2478822b1b76a2b9b2351b13e88566c5fbac6a05d99458a1f543c237bc96d3b227c61dc1c4e31d1c8338b7ba1bfcd231550d4795d69720e10f88b1e14cad27e188edd6d3f53e898f0b159358487ef064d157d37e28008c55cb740dd43ec1c5cc1852dbee4f50ecefeeb85f58e16d5646418dab27feec52b1f549f7b98a46e9355b62e368024a515349f42868c27ff52289b930eff488c57f39eeb7138bba336ba23cf4024652b3689e14ebc58d4c38a6d9466bad5247d6c468ac5ab245c5961ec64ee685fab6a130b7d1888291d33a9813da46863bf55310a6e20bd7c5600c228a98af922e5631468d2adbe26353811d9ea4884474abc57822dd1dcc4c296a847d0f5acc5173d205dbb6a85f07b0dbfe40b31f4d9a310707f2f87a4d4223d143b015310157028c445b28e73331d017f740d42949524af0620608611dcb914a8b7c0dde140f8b13d4e5c0a980aa5475c3c2de8bd21727c5301ea116958a3d494809fef7d5bd20b5765e111d1c53d76685caebc776b20e6780dd717badde461adce0d5df859ceba8e322d8c9218297d50b63ecaaec975b1350cef08bccf53a4b7ae1bbc90ce4c72b694e33e2c1987c0477ba3778767636481adf9ba2a7d5211b32467b551298364f39b1475645e3afc17af843f376e511dae0c7463982b2568ddc61671c10609a9393dd441ded486468cd3430f7c7a3967d45c3108d53c76ef1706412dd00d5290dfe5e185d9e8ef98b9b8daf9598f892a55261601a390d4ffb595e79b4a9432d309a20d77a6f2261399adfadfa14532cf90b0ce2f10fdb25e71d27429509d87c5bfd8e70ddd3d9dae2d98f8cbe289d6279215efadb124289a3993c4409a649b9e178663ab5ff1af00345f47403d06915c1abba2048dab3278a8d4be7ac8b5acf2aebb9942c96a9b07870e9276ab61cbdcdb76bd3b916cea9785ef83ac09f2a21ea1e656148d34be69f1dd2b439f10d711df7dd5b0721825d491cca9525c8c7622537d23ff384152b685cbff2a253ffebe84583a800e18ccde51cdcdbabf5c1376424d4efaffc01a879169591561098261acd819457a8a77bcf0b0928333d1a56fe1c5aafd51b9f0015cbb7d0c02f47aced75aab9cba264251752ea7335904f9ac25c24eae2ab0d47e70e33a400ef9f973ed67c2baf3fd02e83c4328e3f296b85728736e8c555635d4285c1af870ab49ef47ddaac3c2afd445e60e9ea580f9c706855d70759e2c31d87e44d5b92a4d751c1d470e188f722ec34b45a26765bd2f65a1cd3a1537aaaca1ecb627531ffd64a3131f31bb2f727f43cf57dc73c7a413091b2771554646a436d3b3c840dd7c7f05209c07cf6d211952ea91bc98af712c2e77b08fb785bf9e9e21307910cd7d72fe303a84decd1cb300748329f783e3fa7cf0a1d4dc9837862d9480986c74351d48733145fbca5374d225ad25f9d3bd8c48f68006455ef25acf38943829fa9736270ddb7fd57ab3cba325c470ce3596697e69ebd01feaf52259f0f95deea1aa22a7b8aa35d6c95029a24487650b4608a322a1b1a9a19f7a439fbb7f42955e3bfe8cb3697c33b8dc454cea7979eb05d33c29c5396384bcb2388dfec0f7e8351a241c3c9b5f1416731be77e65d0105d5d107ebe1abea51aa585c871361553bc988cc0166ffc5b12fa091e8450df77e0a7b3248c0a1d1ee8bd10acdcc813cf0d9ddbb51f0ad532796ed0eddaa80462a5691a868b844757c11c314db231d1f99f30cd46da19c51d52b8283772efbb41d66a7011b9d98d5e4968244a0f0709c5595fc0c5f3aded663982cf1c0d283c926f2643cf3ed945c33088bd66af40f0b51aaacf5bb6dc40785d84c6ec8be1f694b670c9999431cab816dd6a417f24fe960e2444edc6947bee28b7d37427beb40d4ab51064e507a535a6d3d7bb0badacc614d87a4ffacb07143c172744405e027676f39bd0426e56ddeda8dd920857857cef7092038470c62daaff03adaca5f450fd2ec659ee7b4989d4eaf19ccab8b5df0a46d0fde680d5a2a21d8dc21b9a2a07ea64ffb54384fc51a148de317aaf5940233a870b0236ddefbebd0306bb7b7da4b8c4a451028f70636eab475f22b0512ea02a7527cd89acc6d9ffef7c8354a937b6ce966f14143f0cc80f6a04ed9a42db3f3b1d9330eb84acd0b8abf391eb8ac1797c58dbfd650323acddb992dfc5690a0ede2b646b3698b2f459eba7f85be9903636d9371c4693d627ec12f82d0502c412296f09c4290087d4d9ddeed4991c7289f8a1359fab611415bed56804b01b3832580d83a62af37f891ba5fd6821978083a11170d00100660686d66fe888880d1dad2aa9bbc233d181b95c03667915bb1358ef0bff5480b112dd48f4a6fa84a5fb1fc67ef4145202d9fe9d36242fb40be7bd7972bf8022652cf5ad49415e3f8843d8e1a31ebfb8a52de695b8bae49a5f135f545c3465bb8a91e73af1c7a353a2ceece0d0fc619396e67a82b5b4f2c0be7bb0a933428c3eb76c6fb850b298b855d0339ebcdf007f41f6d11dfe65cd123372f26f99ad5dfa7d69f16588cbb5aa986f553167d6c2977c928dbb943ad4281e731964b6f8a29e69cf35979dd9ca5588d0f38db340d153e69e502385e7e846d93e824b18d3517749e00913ecf5de6e75d24abe94e37d11aa96d4dad28041427a6e76173c6cebfe34084672554e58e6a22b430cd84d10796dfadd735241ef1d4e7de746bedb867a5aaefc0acb28651f23ef5846b5a06b32a968e65170a36af7cf6b0b84ab76a949f8e6a1a998d3c0f5d8d451fd744dc6a45e7c5439fda753d4a68bdfb93401758da64e0b889e00306189dfb562e8cd0a936679a594d7a7cbf450d18536cf4c35eb6881d8175d7e7ad1daf55cbe9fb4182ed0c4fa21d3fadca092cacfe8e231cb52108ad502989dbf0d357e09fd61d07b3db92a6cf810f4396a636d13b643f757360627d9dcee449bf2c848f831223095697859beb22af283020c57776291c78fde1be6085511202ab376144c257c0467fe48029bfcb5c880afe7e22b26abf9f690ce885077aaa7e95b514889ea7272f59ef28de3ee6ab137f92ce9048a191ee0f6a15a1dc5906744a32f67ece11ad7ec1e4f247cdadf6444e7991c809dd651117f48583e5e5620be933a27689f2ad67a18d3049caf01ca6b417979f5c2dd755e2caae552b422863f50f253a68974f645571f6faa1eff0725fb74e2ceb1523d4dbbb633c29a4bd22c61ff60a7f43ad39e48b5571f1e3b8d2276b9887edf7e1fd68d5bd6724373322a54e47bbc730791fa608007208dcd7d381e2084c25631c78c05df90656ebfc457ec29404de4b2a58afe1c80ba9f91d1055a7e88e22b73ae7f4cd5d8120f74b3aae8d24fe63441a236c1d4ed03f6cade326e367873e5c2ca0ed568396814c87b63191f3d1392fd7e9173334c33e4b27ecff7ce6aad30d325116f6e282581c83506b0da1066b7caea62c784f18da3bd88ae2dd1b1b305c46c4f35fe484859d0bdc2bab9e3db15814362bc062d2310dea77338f1b04e94fc06c4be111976e1fd6ab11d7ccc76de1fedfebc278858b50601937dced9aa5564fb70aff60b6a7547541649eadd297461bd7ff7249c95334da6d9fbccfae5437ad42d872f6700b7e20c82fb5b1b85e31d44b43509a0107ffac716d0d0c424e0748d2fa0be9b9fbe9dfdeeb1edd5e7bb234c6ae27f85353d068bc8a8bdae770d20f880f37ff498180e1cb2e04fcb4771df9bdd5011c009e5fa41644da39228d8760d04575ca9ff9c9479eb67dc3065d5b64e07c7ffc531890901d5c67622f3579a54a4979b0d2922295e719830c6abdf71688e89b91cea40744b3703085182f88f5ac88ebd8d569ec3e83c24322dd73f1a2c6a97489a450e22516daaace50a771f77e4213456a4cdb8b7f2c4818b9ab117f1a5b73c04f7e1932563ddf681468fecf0e49016354df91c5ab4c2e5bbbab52d5109bfd472e649d98c3bbf666b7b0fd5733cc84f62fafb640c4a0413359a0029e4ecf08bbc1602825d4e0c6550de53586b616f1a5c5432f62a180934775da9e6c9d43f0068aa9ec5c3f96394ac9749e860f81126421f711f32edb80955a2a1e0cf31465a9f02d39530936c78ce9ac591b629292694137d1824a658b95005306a707d846e7d37bd19dc980bfcae96a7ad4243e7685533f14d50fe0f06b407b60d2542b12855acbb033ea8e02122e21f8de0b56451db1c5ef42f240942fe85c4aab62c9d7bc184117d0646729cb613aa0918f1c2d0b0af1d79857a7ce7c08807f5b0fb177d784b574c88bfb12f2ecc6de6295103ef5186c01699e64dfe6d39116a5fc8699193d90b71ba78868498b18f217c8708081cdcb6f7ac46e5a331810c43482f32e57273c992d7354bc451da9616fe92fe1a029e037d437acac8ec2efe41472798e773015a349997e6d2dedcb2955769da3a7adde1e2dc1dd440ce20f8f758582cbdbb756d17e92ebab2eea91d761e5650bd6b46f4d0183bfe77fea1b80a55eb22c937140e443f05871cee4089cd9a113c100e3bc5bb088e75e1e459b9e40824c36c9d923a7d05f9bbbd8dc138ae8e18b2a5b06daad7b61ef8bb78a4c1bb6b30c7346bb116a0686cd7ab7bc70bd1af1d89477b6e289b587e12b3028bc9e800d0f1880239b81f5f5be0afeb28125c9a588624969a64b5be20f087cb0e4dd674a31a20d9a20b0b5dacfe9f8155b86c32de85f6e822ace3bdeebab45bd7cbab8c03df925d1aff185546e3daadb8a084377963999a403c81859bb6c75f12e287bca5df0311e42138d121614c1f6c1bef25e73dce357c1db4e96c8d929d93fa039f173e4d20b4b76e1e9b744fbbcdf66c2410a78fa8a6d96961fd41f05cfed302631ee20cc36dd9522e14a14f56420a137bb5058f2d6a1a286c383a0e6a88374391c92194ca9cf199a46c2322792e422aec195b058c0ea17d6ace0301503fa207efd47351b883f2eb6b1297b7564e4687e494675b47e8d93b56b12627b0bc317c4f337bf67f2887f523546ac149aa391c3be83956cbf387191d6e62a4b79125379f4b70ebc1519d935eae522379ea8c2e8bd904e54d38a63a3f66ffed2545f07e88c05a578b099fa33a307b60c805d0e4ad4ed480416a948482d23eb452b5ae517f5ee6dbd4f18cc54146cae593ccf91be8c0953089d20acb1f2f2fce8520d66bb79f78c1a730fdd82d7fe126542cb5769a971f4b19d7bc53b5043ea5c0c8113e9b67062a036249a0aeadb193cae305c1956128e4aad6eb1cccf8ed8d7e4493414b049c889087aea3c0431b18db2d1d8ebd7c039c72ac7fdda788acf1537225aa8308d7167ae9268a9c2580f1ba7db5b06e3081de98ad641b17599a86590e489c73075d9e7f462d0830ddde04784a79cb9d8b538a3244e38073a9365f1b039e31310f54d6e8f6709d12c91bf065f03fb35051f131497c2943b24759dac83ba5f76f530d60a653e90e9707027bb42117af8c0207c5b5a394f8115ce37dfc91fde1c59ed6e6b9f989f3e0638219dc650238ba05737d7649a74ae631ce95f3d1a36dcef2e17ed294ed58680dbea1243d9d093a3d8650f44424bbb6e8244cfe2fc8317a6a397c6608e0019aa8deec6e614c48a7fef0a06a3ff3cf4c656510b6bd6ac27774643ac8cc0fcc3e3e34fce98a33b93878d2d204be3c88105de5b8acd530bca5ebb924412a1a9e692bc868bf49ee49bb2a887fcd54529887de15dde09d7018cf404d454c61ff923fb8a8e0d85321c44178968b08897e89406adc388caf9e1b94bf201e1723de87fca6dbbf7d6d2e7a5a9c04d0e59a73db5b15da6c2018081f87c3a3a9c54c67946649fea0190eb38a8bd6be45497f8f3fbfcd3ec327e59d66d3080886fe4d98c84c8c1e2d2825ae29ca0ee592da41029752431839aaf1aca1843ae144df03dcf5e9485538807ff03f36c3d82ea778cf1cbf67fad3e724bc25d99495116a93e75eec3248fc42cf0465805eea7ad70a8d62e3d95d31920cc2bb979edad591f7053506174af8edafc943830ca4fe0cd3972eeb5e0cba2dcfe5fb58a13a7a02f2866a07f17449d5524bcb53c536c30bfd7dcfa2a7d18920c08889b0c1548be2070501363971e0b0f65f1579f824e81c278ecc8b1d3627356ba46cd8ee012702a72d3ecc5b83b765aa2e4b87a84b92ba96f1861099982f31a307a18321a28fba1c250ff0dc0784e9d5d8665009a24c5729577eedf0d057be61ab2691d9652d9b7687b01d9dc1a70da1b13af226824adbd1ce1c6182db3920b656ef292ed5de995ade15506e338e29eaa4fd03756c2ac0f8579f4d43132d7426776f8244347e7290876613c1d3bf050ec44837e16a4ab4ff8bf8abcfa0459e30a0ca046745a47460fe6dd665e32996a4358cc11b1c411f3941eb66d4bd3eda811d9846648b8782ea2c0f3c99ff30f7bac92038ef023ebe37ae4d423c3e6269ad93c6358d31acdbfc0f186881843ffa6d193078b161cecbd5c65166ab4a289e1bb8c689ee32fdb42bf3bcfab01a2fa17924dcd5abb005e54f3f4d8cb204208c9656d42730cc9cccc5356aa1d90257691fecc2dc0b916fd41ca4acee16a9f82259fea7a6ad5eeebe46cb873786e1a8bad025ecaf28647da709ffc82af9c64e469bbd45ea1234a96eaa69bab33d4258965f30b17b3dffcb790d26393b2ada63a6220a2cb0b72f2177288cbde94be32c3c27b0f33630898dfe01d0472342850b94a275a740406858984dc7d874b9fcd86b3c6a7ac8f9fa1ff586f840b0feaf8e1b3345c9b7a26feb54fc3f2b33cc0d3dbecab0545c1e9332f05206eb67377de655a3d0a2c4cdf06cc295869a7f9b3871316e032425200808a7596ef2e1b5b3263ccd28b0cf438703b5c10adc68b19427d8676f3bd33edc3fc15b4adf1b077a37ef97747d8e1015c3087ba9373f00fbe982c851aa996e03d89a3a84d80283622317f199ad8430977366e91ddad66ff75aee717f78afcb957b163d1346a46dbe27146f3cfedab05f7714d448cc23aea13be874d744ee35b4ef3060307a545b6c73fb9e00b3d32dbdb9d79e1d271542bfb4498e886a365303765ace977abeb993919dd75e42dcab5e14f485b1fdd4e4f992ad55dd67cdd28b343a665a296b5ff32d8ec22b9399aed8936ac3ac48bef48cd978b030594f23dd20e3ac9b7c6e46e97164263a3298909d15c387b82aad4ae682f529ec08842f18a56c4e9e226a2fe0c6b1e238178b6ac47c69a5c74568d4df59ca7249e9cbdb94a64d07bc71a115e06ea8e5ffa5a05eb66f29fd5a87791a3861e2b8c7ad5c804ed3faa6b8fb736d635587269e8737cb0adfc4a952fd5986b36c903122125ef5ff63593d3a747620889576a7380966d2c9599709fa1e06be9d5fa0393c02aa8ac634b65411c57e37df3dc24f490e85bac271b465cae24356a2c593e850eccf748d91c67c3b0b3dbf4ad21e48263f079541b1cd2645df01a0625e61b3c40d7b3119051ee45dece7ab33302e5aabb78a028be9ee94211d66ada8897cbf73a6d1996a41a090fcd7738968230b72ece1006e554449706a74b8517315a925197073121e9b17a3ceeb6d32468b256ad13c48fc87a0e3242712ec56f84c031c6d0111858ab9f361e688340862fa9d103c019c2bc6e9927c32f04dae53af39693a5bc43391b6b120d8b1bef7009e15c36b9c6b4ced117971413896abeea4c39a4ab3b73fc3a23933ac44b31cacf029c8e1f165e609b5346419a3261a4850fce5d31b3833129aa4e1e9151570e68cf714b6ba22b04dcea06f9b40d67a11520613f9d26c89936cbc494dcd65b589cac73d85e51d66f7f48ae457116b351a39438db0c60a9d0067fed06cea3cbfd786bdaeb29ecddaa83dd957a0719b98d72bb4f5af99fd3ee1cc5a2f1e7568c32194278d7356c48f4331dfbdc8022a334da1a193dd234403e4b012e0eb293e5bf300ed0777f62bd1370310d99193d066c4e3d0f2d29f1ed430b2074d5d8262df74871e2eb006afea18f58dafbaa57cb0d1dbbacd698b25795caa863df89137272fc7d573abc2ec5149553e795b760ca579f5c7f1cbefbb83e2496007a3ab6877629096fba1d61e7bbc3d47f07905199266776273b2bddcfa8c46bcf0d5bac91688f136ec8b8379eea23c87ff79623f4de2c945ceb2034a71844875696b0ebe49cfa88894ab219d675968161f369754191229fbf94fd4eb0cca4121b558cd31f3ca90d08b8717a8c3e6a771f8ee7398da1f77bfe9b15d19841f6e91fb2d2eb96ad6997afe042554cfb0a632150161dc1b98b57c886a32db422109be1ac8f5c165055be9d7c2d4c895c5a1d668bffcc9a0aa64c4a104f32744d645f76eb6794f1396e34e8cba5c91aabe2f56285ab4300b68f14691c581901a2bb9868a772e2ed4e3ed4e97be69e98abd961af0a2b0f2ba4cc8ecfef41ee4fafc50f90d64c8a84320af60993e14ec3324d57d872a9ff250c375bcf3fcc35ba935bfaf3e78ad1d7c8d0387ae854ee993d42ec2efe123691cc5c26a71484fb70ba5636d50b128593febf88ca15b2d402782fdb9b6a1f1baacee8332c35852516119929bb253f9b3f1094be2edeaa5bae4c20ea53b588ee78a44c776b3a6cf5abb5e9b995b0e03f48f57168c66a3d41d6742cfce2d4bf398caccdcbd64d060aee82c6cef7fd2671765d65fe2f26d8799c336abee053c243aeb9e58e9aaadcd71c8fdb4824342fcac91275803874fd2cddf72bfad97e04212163f4be8ee16a79b8367084e64adc38751af807eb9f88a10d35c0b774e8ca1516c8685712bcb027dce3ac0870619e10ce5cb29c054e51ff01c0e0d3a9a91352f6d3701a233284ce92cf53c22cb098d7f76e7d1947d0aacad649ec35f59d3f56dff5837c0e129bab8363e6a5cbb81284a88e4ab46063424a10060d3ecb8c6bdddd325a3fa589116a13270e3056d520a692d4d758ee49976de0dae5", 0x2000, &(0x7f0000004780)={&(0x7f00000020c0)={0x50, 0x0, 0x7fff, {0x7, 0x22, 0x8, 0x180081, 0x96dd, 0x4, 0x5, 0x22}}, &(0x7f0000002140)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000002180)={0x18, 0x0, 0xde}, &(0x7f00000021c0)={0x18, 0x0, 0x26}, &(0x7f0000002200)={0x18, 0xfffffffffffffff5, 0x800, {0x80000001}}, &(0x7f0000002240)={0x28, 0x0, 0x10001, {{0x5}}}, &(0x7f0000002280)={0x60, 0x0, 0x8, {{0x2, 0xeb1, 0x7, 0xffffffff, 0xffffffffffffb367, 0x2, 0x9c6, 0x10000}}}, &(0x7f0000002300)={0x18, 0xffffffffffffffda, 0x435, {0x81}}, &(0x7f0000002340)={0x16, 0x0, 0x5, {'.-\x92\x16.\x00'}}, &(0x7f0000002380)={0x20, 0x0, 0x2}, &(0x7f00000023c0)={0x78, 0x0, 0x20, {0x8, 0x2, 0x0, {0x3, 0x3, 0xfffffffffffffffa, 0x0, 0x6, 0x5, 0x2, 0x1000, 0x2, 0x6000, 0x9, 0xffffffffffffffff, 0x0, 0x100, 0x400000}}}, &(0x7f0000002440)={0x90, 0x0, 0xd7, {0x4, 0x0, 0x5, 0x4, 0x1ff, 0x6, {0x6, 0x8001, 0x1, 0x9, 0x7, 0x4, 0x3, 0x7fffffff, 0xa4df, 0x2000, 0x3, 0x0, r3, 0x1, 0x1000}}}, &(0x7f0000002500)={0x58, 0x0, 0xfffffffffffffffd, [{0x4, 0x401, 0x7, 0x7fffffff, 'ns/mnt\x00'}, {0x0, 0x80000001, 0xb, 0x6, '/dev/nvram\x00'}]}, &(0x7f00000045c0)={0xb0, 0x0, 0x0, [{{0x0, 0x3, 0x8001, 0x7, 0x3, 0x3288, {0x5, 0x7f, 0x0, 0x7ff, 0x2, 0x3, 0x6, 0x8d9a, 0x3, 0x8000, 0x7f, 0xee00, r6}}, {0x2, 0x5, 0x1, 0x6, '\x00'}}]}, &(0x7f0000004680)={0xa0, 0x0, 0x81, {{0x2, 0x3, 0x100000000, 0x8, 0x10000, 0x9, {0x3, 0x401, 0x0, 0xfffffffffffffff9, 0x14800, 0x3, 0x200, 0x3, 0x8, 0xc000, 0x1ff, 0xee00, 0x0, 0xff, 0x9}}, {0x0, 0x12}}}, &(0x7f0000004740)={0x20, 0x0, 0x80000001, {0x7fffffff, 0x0, 0xbf71, 0x3}}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setns(r0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) [ 900.209418][T25583] bond1: (slave vlan3): Opening slave failed 21:52:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000006000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x5000000}]}}) 21:52:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 900.702407][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd 21:52:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x6000000}]}}) 21:52:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xb807, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000001500)=0x5) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a7", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000140)="f7", 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x7, 0x1, 0x8}) close(r0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000002c0)={&(0x7f0000000200)="0eeb392338c48bd5abfa1814d0b6e3a279ea4bad4d2f40c31857e5374af1722f8d08f95bee6d5eaf2785f51758cf4f46832b1e9a8ea065eff3e0619a52e4c4197fce3b1c3b9fb27cbb8a3a6ecf4e5086daae77842a26872194fc452b736c48c1b19d86461a5dc86585f227ea714dba2180af9c70794bdab1de1e1fd225c78df3dfc3df92b3fef62fea49bd8b62574df70ae3aeec5a5f6b4eef907709426a4ecea5073faf455ee916", 0xa8}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000001480)={&(0x7f0000000480)="942a2216dffb58dd8df3fd5ed7cd85963a5412776f4ab72c88539694b916ddb4535b80109cfa002bf08ab158949997f88eaacc833d28871d3137ea71cae1f96d2e3a503968c400f0b9e3c45af2c2709a428d73352e4f2292317ab72d17ea00993caadc517f01cf8503fb45df009fa16583edcae03602a810c8e2b8e5c456995bbf2b09e0682f01a19d4fe0342f87e70bae9bcd3249a884e7e0b9593fb1ddaf2e0c3b2b6115bb53efd3e627c84d03a160fe4052a4206e5279e48e2f2394ba06ba3055e22cd5a2a5b12f68b9fd20da5986836f2d9bdce22ddcdc7de12abf8b8029a6e7d917d1e1f7d02729c4a77b7be5d534f54d10d6b51447d94d348a31f1ceef2193ef4eade33f115bcf64bc6457013ebedbad4e347989f9427de7ddc072206a5b54d3e1b28c8556de050e20ce28e62b05d9352e87212526b3111fad9dbf0c0441505b6a098442e5e697bcdd99b45346284fbb00d5d83d4bcb6ac1e37ac5e73727366d3714c1022089616401eba24c57e634b4c0ff6c5c2ef052ead55709e20cb45293d21fe64807fadee26e28d62a3ae87d62b35e91f7bd2b5c5590e890a8c12990266f5f4b54650f9d1eeb014741d40de7f66ef3eced9e32b80df5f336419463b38ccbfbc72fd09b95b265db1ebbb2364f50c2dcc500b9c34c0ba54a722fe29a3c3c418091a5a082c1ad11c8e7b37d352462724f885e8abde2f76b0ff3b6ae9208d091e9a9d929d8eed0838a08c344eb7e364ec529228978c5b12117defabaab633839b89daa10a3587b80649b7c5f3587ec919fbf27d96f8a677635ee793aff2b643ef5a0b9ae42e55dd9329b6e70658704e3bbad8162221c06fd860823e7704a669afb2eb5cb3fc8c999b1ff5c228c39aedc81cced8b741ff51e18c8579fb2664451baff984db9a2aa7f6eee0271b681d6d0faa7047a3fe450ac502144587539b7ca785e81b1a0f0b74752582aea4f9dc655be82de85dfc7cb35d501e07e7fea387670c272f19a78980d95959cc5812d93c3cda4d8f8b3547a76bb747a7ade4030b8f2de679d09a3813a2d327ddd7e676e85ea04798559dc015eef7715bfb86186782da3773270e4ab456fb154b4efe4adf0ff3c23bdb80711653d90c2f49acdab0cf06bda51f131c2d1fc70657d29d8fe141ce579878d85833b0ce5c422470f9fbe73968f4f033331e2f21ac4ae304c3c3bf40ae893fc766f8fcb008b8f0355d5b1c7fabfdd3286d86b558846e1c31e989b148528f84826a6890bd169b876601a60690723cc908340c447fef45c79e895cc73e0264b5fd84f483e7bf343c112ebdf543c8dea11fcc1ea61a3686ca830398da2b6aa4c1c61d3310d3a905221bcd4db16c1a268e644c8b6d82159c7b234aa38e2cdf06244854def1678a1511714ffb3aa15abd2d795c3a24de5af63f840f38e49e99b92fa5e3369cbd5f3a76ea4d7ced13e69892378c702a5304c22a7afcf7a641b42a9eb7dda9f7cb145b7677bafa9b82e0cbf536a6cec83f943f843ea9088d1f0259e9efdd70d442b53ffb966197ea6c186fc483b974b22c062fa47a981ee46d2214d31fb9e41d6a8c957b700dd26e4cd33c081ccf9fa978f45760e3aa39bdaea8337a3e3a8f0494f42f145fb575039be95cc50c3a70a2488309f4062f2ba1f90e09257f8f976b3c139f388de278a6c2d8e6831bdb282e4adeb58cbc5f6a68dd69faf0618f948f2848bd8b60fca35bb5881e915e5fa84306a5c1d8ccf9956a7044c1688dc62e07e2fc10c2ef78665377a1aaa05ef04bcde19e958d2ede5f95aae8feab7274113c4913e249caf0a6cecca9a3b82b1a686c2f6c0434434f99651b0c34950eeae9d0485afcc0cdf25403cd60ddc22848a70351976c7e5fb3f7d4d9126bf13cde12860fe73213874a28266388e2e411f38053fc208d16728eb03832047e0d8499986c337801b5bce22ae92be049131dd400ef32a5db83b64f1dd62088becc89331378b5a83df43ba469306b53c756965b5a461afcc6cc943107336b3452352d3feb4efe9ab77aedf206551afdfe3c689dbeb90776f6a40c4191b9554c08bdfa14c7e836f3ceeaea076bea14cb3d236df834ed138664ef64faadfbae450c910bb6e06569a22d37da730025dcbd0dd9ac8a1aadf738c3bf5c3c3f9455ec6798254374238d15cab6abecd3a36e898a1e67812a2b62cfde655d53cac229617b69d56e2b4c05248e2ff19101057f318aa8d19a486be5d4d6100b617080d2d3951616f74a1e8d76a8ddce4aee992f963fd54d6702e0e10616b612c02eb6c01cb898d758903db336976763ef7bd41eda96a59a04c3eb7105a27ca2b4886cad467ef0e0c7dbdbf39e2c434eb0da90c6ec7de56357fb530ce53c7cad44218842b54da724173f9d0b5af86d3e3c2b735bcaf8e5ee91f217452e3f2212fce673772fd11de65cbb1945ace266b1eeafee8c8154157d99be40dc8e54b28513b51a8248456b5dfd0cd9e142aab4a4e9fe49d50b0a08db7c6938f873962356f6150923e5d28d5933e546b186714191c4e3026d3c6f73635d71bef232a287161645b10d6979fb9e0c105274105b4f6200bf804a4802d9c97db131e1c6fd5b29870b714a40aa086f0f923b6806a7b59861b4f8327d73e40652c52bad22f3c7bc1de099721e31a2596e934c04c34fd1b6b98eeb6073d4e3a34fc4bfa9c76aeab6fd4486d0536fa58073d50c466dc6606f06b845dd7b08974997cb2d63500c7c073695b3a332ddaac385de0b3a4f08c3b6c56a951135a95faaa47b2bbd88716afbee746d77c9d88d8f870e358f46e3fc143de60253c042fef1f73bedcf1130a8b5cfb4d0674b4ddd48910263e90a829056fe44207e499eebc6b84327c6b81f4ef5ac2d697e37402748c6cb57c3affe74156d5b300722124b1b07fcfcbda82a7d93337e385e65fa69883b35a8a2c12d8c8e81f05a7c4a8ce7f3c2f923d8d8ffb03a1ffc6dc556d90e90a9e31ad41f0ed7ce29acd83e581a469279ad89642bc5f3e1d8060ad49a15a9377a86424177e9afa49fc15f12fc3ca933839a061bd338ad35718bb85cebedaa41de9bc9d437e75c7bb802c3c85afc313fd8dfcae11c8dd1d1ef879b2972812f9e83a658940c3ddab6e5dfb549e3182b11c666cf0140f51b83d58c2ab1c9ce80b83ae22e5254efd55a77c293380e7f628243627f3b21c386a09caa8348d2c123b6cdc32f7beb648f6980607bbce520b13543e41f5915872fd4887696d5bbf0b2f2f6554e72cf254d7b212f7924772d3ec93ade108602d201610be0d26fd8400897c62132a9a01edc5c43220ac9b27b67f3467c02270783b29043ac72a2c1b5ead5009cda66838da4aa3859d168df6fb48af9d2db8e6a4255dde332d0be00d5638a77b05f1fd57d67b8d4da6347441d8906a9398884f3feffb5fa40deb89cf7cab553d60e1667229aade501d5f05fc5a727f3108d90d18310e387394d0472535b30c20437d188d2164386e7ba08ad56878263bf537b97d3e9e8a78f41d37b956189a5126b925122bbd512c0fc9e86bd71d07cea8bf5cd3f96d2af0e92e6a7a40fd6675fb8ed0192329d68e2880e517a0acb81fb267f88676bc5ff3413ae9a9fe437135f2e5e51d93df54f2d97dc8f1b9b677e2212c6f43a113bff8e97430cf4acb5c7706d6769fee64f570e3492a2c7320fc3b3e043da58c4ac11138946178fc3f905ba551cb9a7daa0e4741acc31ad8c931828538285c27350c791c808b8f6a87b4651a68b7cee67c329133a02d04bf07b77747e074a53009b270d38c931ada5b43c41ec59b2708d81a654cd194574eb8dae77aed716176caa9a42d72cd95e56410b1de4ac9fa9413a805f67951eb8e5d4ee5b6863977cc3ee5991bc542e569e0218b5f0db65378889a9f6a24e0024d8f523ab2e4ecafe583d50cb2de88c210f506c46beb3ed29bb4ed572c6edd2e8d3d8b62230c57ae3641214f40bfa9f71188e71da8f32bd532e5195b47e06c6b5a1baadd2506f536d6d137169df61ab0fd3c6499c8467b6c98498fe82c695b26f86f02846ab8f2af0af72f9ea571753d67e0fc2e33fdba869c2550c8cd07e76c8c507ed25037aa3d97c63278b49d6bcf4a082e856ab22b7c34d947030c63f25e7bfe35956d7a96d8e5f63b3fb830242e8e3c69cba2e2e1626bf53bd31c6eb44a990fc204e78e3dd6510c12e28f78edf2059ec1a88ee3264bac1a4f46bbba68c8de94023e69c5eeef577347d611d787a82436d953d6b4dd0ff3598c8bce90071a75d473b914ae4ca54ed72ca78bf3f35daea2ccb21c1857165ac4d3f36cb7dae23490260f9d79036fe0d3288127739413e19a5ecfe03c9a79136faf9cf0ca95127037c3dc5561716a74bc5e0d797f99c384f46cd1964b1920f428fe47e08561f1ce050a0d58251a74dac339781696e49c245ee5fd123bd215d8e185571e8a8816e91fffaf962b833142fb199203b6b0e6b0fd8570b735553e1debb80bf57d8e2486c1eb50b2d9f5cc8ff3d230783d323d2ad8753b6be41a843dda661e89e25d984e8a77a7d0e0876eac2c0774677de7b1892a6a6856b228bb816053548e5392c5bc372147e1b63f4e81b8936cc7464ad35092f91da72094d46c8a057a763fdc46afdcae21344b5a0e18a5ca5f1862aae175b999927fafd6557d693d78791f4b4215888947a08d7acde104680065394dbf47454105596674988389d91efb795f2371307f155519b466b8f808cb6233affff291c323e90bb5e9f20f5cc8325a82e652d62f1eb583fbfea4c935b025684771e7d5c976f896f7b629c71a66e7f4c471dab0c1090a6ae90856f931c617c7829a9fd13da8a3c101b6165b5761726f210a015bdbab77ad6c2c0f550255010f2e8c60eb5bb3962d468e161edbfe9ad4632bac2c5ce0f45d93257c6c780b90fe1fc5784bb9aaa58b662393fdf4d47b4fea730108fcbaa001f0c081b4d808f1fa23dcceebbc8bfa0c337328c8bca0cfbaa5c6d1852867983df979caa7c9bdab9a6e6a8318a7500316adc5045479e6cdcdac44f138be8020bc862862904ccdf0671151e1d731182ac7d926e8314b24bbce012b534a83aaca4756cb0cca5febf58321845a4a8456c93328a7bf4483d75c694d25d3664bd7d236b104c01eb7e7bc26b730881e894b360d9956c377bca168ff4b7c010de467effc06d78a524942d97b08a60b387fa145a4e3fd7706962291acd9f2d163ad920a142b75727469d1e10b32a6ff6d2c71f790ce60540e9ce3db6301fc916bf8b4d8b1a220514f97f2957e70888991296f1bc6736b0602c49796181509e478fa50d629bca81fad8ff88a2c359b718778b4f0f53f0dac3ac0ce867f1ea99eb93b6e64efd9c267fbf834dd02f7cf9e46c1934bb2c1365330c6529f0833bcf5fac078308b845af10bc8e064b57e366f5ba0143349780788b5e4db20832dcd88021f12cf69155ade7b9d126a05a152be4d672acb5e1bc2561145d62bd1c9d160096cb8a12441414d89a49c39064bc3de6cf8ca86a98b2e6dfe9731060869cdb912652ad8b1da7b5a2c7822dbb5be92c142133dce63958961647045bb399f79d68b4dd5bbf90a9bf580d2f85541accc839586979dbffd1e85cf3d9b2c63f2847c2e8be2f4f38f722a8abec14c23d4e8d15ae1f14acf67cce76cb57ee75af04a384b9a34d905cfca6538c8db5f18b2b4da22219e12d7dfd204770f0168ac3636f74c33f0615c214f62af90c1ddb40c7f94f96cd19caa7defe143f99208412da3fbfa27b5f1ded83ea2cc3c5651bfcdac08aea5660397af1857", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000480)="04", 0x1, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f00000003c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001640)={r3}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000014c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000380)="21b02335b78900ac7b1ffae0afef5e14121da2ec4d52548913b9cc14e4b5c273a6e52f2f9d2727fc0c7e7b9838b67d93ecbbcea668783ac9bcd4da44d8d323149015824e00d6d275fb5da35e777c3e496769e2bd5b7aa2b86da55d8b6a683086aa15fe9986db0a3ecb2c98bdbe0c9b5418ac6267141f5153d3268a08c7", 0x7d, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000001600)={0xd2c, 0x1, &(0x7f0000001540)=[0x7], &(0x7f0000001580)=[0x7f, 0x7, 0xde33, 0x6, 0x5, 0xd29, 0x57, 0x81, 0x5], &(0x7f00000015c0)=[0x4, 0x85bd, 0x0, 0x6, 0x2]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r6, 0x80000}) 21:52:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000007000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xb00, 0x0, 0x4000091}, 0x0) [ 901.265752][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 901.275131][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.285637][ T7] usb 2-1: Product: syz [ 901.289984][ T7] usb 2-1: Manufacturer: syz [ 901.296262][ T7] usb 2-1: SerialNumber: syz 21:52:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x7000000}]}}) [ 901.508326][ T7] usb 2-1: config 0 descriptor?? 21:52:17 executing program 5: r0 = epoll_create(0x2) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x6, &(0x7f00000000c0)={[0x1]}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x20008810, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) [ 901.762306][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 901.818330][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 901.941862][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 901.949411][ T7] usb 2-1: media controller created [ 902.154065][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 903.132548][ T7] stb0899_attach: Driver disabled by Kconfig [ 903.138736][ T7] az6027: no front-end attached [ 903.138736][ T7] [ 903.161836][ T7] az6027: usb out operation failed. (-71) [ 903.167848][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 903.177073][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 903.191797][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 903.199006][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 903.218461][ T7] usb 2-1: USB disconnect, device number 22 [ 903.287271][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000003f000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="7400000010000504000000000300000000000000", @ANYRES32=r2, @ANYBLOB="0000000000f8f700340012800b00010067656e657665000024000280080002"], 0x74}}, 0x0) socket(0x2b, 0xa, 0x4) 21:52:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x8000000}]}}) 21:52:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xc00, 0x0, 0x4000091}, 0x0) 21:52:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 903.849997][T25672] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 903.859706][T25672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x9000000}]}}) [ 904.083266][T25675] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 904.093433][T25675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000040000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 904.201706][ T7101] usb 2-1: new high-speed USB device number 23 using dummy_hcd 21:52:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0xffff965f, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000001940)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfd, {0x80, 0x14, 0x10, 0x2, 0xfc, 0x0, 0xff, 0x9, 0x3a00}, ["", "", "", "", "", ""]}, 0x1c}}, 0x1) 21:52:20 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf00, 0x0, 0x4000091}, 0x0) 21:52:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xa000000}]}}) 21:52:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a82424344000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 904.796342][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 904.805661][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.814020][ T7101] usb 2-1: Product: syz [ 904.818294][ T7101] usb 2-1: Manufacturer: syz [ 904.823118][ T7101] usb 2-1: SerialNumber: syz [ 905.003944][ T7101] usb 2-1: config 0 descriptor?? [ 905.292765][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 905.313397][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 905.356714][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 905.364225][ T7101] usb 2-1: media controller created [ 905.518563][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.624142][ T7101] stb0899_attach: Driver disabled by Kconfig [ 906.630233][ T7101] az6027: no front-end attached [ 906.630233][ T7101] [ 906.654608][ T7101] az6027: usb out operation failed. (-71) [ 906.660377][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 906.669421][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72 [ 906.703135][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 906.711752][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 906.729065][ T7101] usb 2-1: USB disconnect, device number 23 [ 906.799031][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xb000000}]}}) 21:52:22 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1000, 0xec, 0xe0, 0x1}]}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x11, 0x1, r0, 0x1, 0x0, 0x6, @remote}, 0x14) 21:52:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5aa5fcfc54000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x1100, 0x0, 0x4000091}, 0x0) 21:52:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xc000000}]}}) 21:52:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000559000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 907.702128][ T7101] usb 2-1: new high-speed USB device number 24 using dummy_hcd 21:52:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xd000000}]}}) 21:52:23 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x4788, 0x0, 0x4000091}, 0x0) 21:52:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5affff845a000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 908.300501][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 908.309883][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.318272][ T7101] usb 2-1: Product: syz [ 908.322717][ T7101] usb 2-1: Manufacturer: syz [ 908.327421][ T7101] usb 2-1: SerialNumber: syz 21:52:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x181083) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002080)={&(0x7f0000002040)=[0x1000000, 0x400, 0x8, 0x2, 0x1ff, 0x2, 0x1], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_fuse_handle_req(r6, &(0x7f0000006d40)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x18}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0xfffffffffffffff5}, 0x0, &(0x7f0000006880)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0xfffffffffffffffa, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e906a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6dd7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682600000080000000007048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f66de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47102b178a6ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e102243d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd00", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000006a40)='./file0/file0\x00', 0x0) stat(&(0x7f0000006c80)='./file0/file0\x00', &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004400)="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", 0x2000, &(0x7f0000008e00)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x10b, {0x7, 0x22, 0x511f, 0x40000, 0x401, 0x7f, 0x7, 0x2}}, &(0x7f0000006480)={0x18, 0x0, 0x1, {0x8}}, &(0x7f00000064c0)={0x18, 0x0, 0x1, {0x1f}}, &(0x7f0000006500)={0x18, 0x0, 0x2}, &(0x7f0000006540)={0x18, 0xffffffffffffffda, 0x0, {0x900000}}, &(0x7f0000006580)={0x28, 0x0, 0x7, {{0x7f, 0x8, 0x2, r5}}}, &(0x7f00000065c0)={0x60, 0x0, 0x0, {{0xe84, 0x0, 0x3, 0x6bd, 0x2, 0x5, 0x4, 0x5}}}, &(0x7f0000006680)={0x18, 0xfffffffffffffff5, 0x7, {0x3ff}}, &(0x7f00000066c0)={0x1a, 0x0, 0x504457e7, {'/dev/fuse\x00'}}, &(0x7f0000006700)={0x20, 0x0, 0x14000}, &(0x7f0000006740)={0x78, 0x0, 0x7, {0xe8b, 0x8, 0x0, {0x4, 0x101, 0xffffffffffffffce, 0x2, 0x3, 0x2, 0x400, 0xffffffff, 0x4, 0x2000, 0x2, 0x0, r8, 0x2, 0x7}}}, &(0x7f00000067c0)={0x90, 0x0, 0x7, {0x5, 0x2, 0x200, 0x3725, 0x7, 0x0, {0x5, 0x28, 0x5, 0x3, 0x6, 0x4, 0x7fff, 0x7, 0xb346a650, 0xc000, 0x2, r3, 0x0, 0x6, 0xffff}}}, &(0x7f0000006a80)={0x138, 0x0, 0x3, [{0x1, 0x80, 0xa, 0x6835, '/dev/fuse\x00'}, {0x5, 0x1, 0x10, 0x7, '\\.$%{$]**[:^\xc2)#,'}, {0x5, 0x80, 0x0, 0x17}, {0x1, 0x5, 0x4, 0x6, '\'.,a'}, {0x6, 0x7ff, 0x1, 0x3, '\x00'}, {0x5, 0x100000001, 0x8, 0x1, 'group_id'}, {0x3, 0x1, 0x6, 0xffff895c, '!$!%./'}, {0x3, 0x1, 0x5, 0x2, 'fuse\x00'}, {0x6, 0x10000, 0x2, 0xf8a7, 'fd'}]}, &(0x7f0000006bc0)={0xb0, 0x0, 0xff, [{{0x1, 0x1, 0x32b, 0xc77c, 0xcc, 0x6, {0x6, 0x1000, 0x80000001, 0x3a, 0x2, 0xfffffffffffffff7, 0x14, 0x888f, 0x81, 0xa000, 0x5f8, r7, r4, 0x0, 0x1}}, {0x6, 0x9, 0x1, 0x7f1, '\x00'}}]}, &(0x7f0000008d40)={0xa0, 0x0, 0x6, {{0x3, 0x3, 0x8, 0x10001, 0x86, 0x4, {0x3, 0x200, 0x171400000000000, 0x4, 0x3, 0x3, 0x0, 0x8001, 0x80000000, 0x6000, 0x1, r3, 0x0, 0x0, 0x7}}}}, &(0x7f0000006940)={0x20, 0x0, 0x9, {0x5, 0x0, 0x7, 0x9}}}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010000000000000d000006241a00000009058103000000000009fc000000020d00000904010102020d0000090582020000000000090503"], 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x550c, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x4, 0x7, 0x5, 0x7, 0x3, 0xffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000043c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000075e20400"/18]) write(r9, &(0x7f0000000040)="beab7ab2d19c41fbe892259befe6512d3705ba5ee482ac6bf110552c74a834b74a83290005fbfb414f2bba79676d60efb0f20bf948dae7e7b246afe718cecfd566bde6bf1cb311acc05950615315a4e7d7b6cbcbaecd6dd12a66de856a291090a21fc0cd68886875b624a729b74fab885f75a09be3c334f0c3259538927c", 0x7e) syz_usb_disconnect(0xffffffffffffffff) [ 908.506988][ T7101] usb 2-1: config 0 descriptor?? [ 908.771895][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 908.798175][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 908.833706][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 908.841054][ T7101] usb 2-1: media controller created [ 908.922787][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.095253][T24124] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 909.363697][T24124] usb 6-1: Using ep0 maxpacket: 32 [ 909.482400][T24124] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.493653][T24124] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.504167][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.514271][T24124] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 909.524531][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 168, changing to 11 [ 909.535906][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1168, setting to 1024 [ 909.547202][T24124] usb 6-1: config 1 interface 1 has no altsetting 0 [ 909.711900][T24124] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 909.721087][T24124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.729439][T24124] usb 6-1: Product: syz [ 909.733879][T24124] usb 6-1: Manufacturer: syz [ 909.738591][T24124] usb 6-1: SerialNumber: syz [ 910.095043][ T7101] stb0899_attach: Driver disabled by Kconfig [ 910.101143][ T7101] az6027: no front-end attached [ 910.101143][ T7101] [ 910.122040][ T7101] az6027: usb out operation failed. (-71) [ 910.127872][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 910.136702][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73 [ 910.162298][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 910.169334][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 910.194283][ T7101] usb 2-1: USB disconnect, device number 24 [ 910.215100][T24124] usb 6-1: selecting invalid altsetting 0 [ 910.220986][T24124] usb 6-1: selecting invalid altsetting 0 [ 910.227187][T24124] cdc_ncm 6-1:1.0: bind() failure [ 910.269711][T24124] usb 6-1: selecting invalid altsetting 0 [ 910.276191][T24124] cdc_ncm: probe of 6-1:1.1 failed with error -22 [ 910.283423][T24124] usb 6-1: selecting invalid altsetting 0 [ 910.289261][T24124] cdc_mbim: probe of 6-1:1.1 failed with error -22 [ 910.302066][T24124] usb 6-1: selecting invalid altsetting 0 [ 910.307903][T24124] usbtest: probe of 6-1:1.1 failed with error -22 [ 910.387881][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 910.445774][T24124] usb 6-1: USB disconnect, device number 125 21:52:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c8ed"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0xe000000}]}}) 21:52:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5acddbcd5c000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:26 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x4888, 0x0, 0x4000091}, 0x0) 21:52:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 911.042354][T24124] usb 6-1: new high-speed USB device number 126 using dummy_hcd 21:52:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x10000000}]}}) 21:52:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a9b1e4b79000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 911.254497][ T7101] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 911.285750][T24124] usb 6-1: Using ep0 maxpacket: 32 21:52:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x5865, 0x0, 0x4000091}, 0x0) [ 911.402773][T24124] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.414259][T24124] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.426491][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 911.436961][T24124] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 911.446968][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 168, changing to 11 [ 911.458322][T24124] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1168, setting to 1024 [ 911.469685][T24124] usb 6-1: config 1 interface 1 has no altsetting 0 21:52:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x11000000}]}}) 21:52:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000007c000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 911.577428][T25825] bridge0: port 2(vlan3) entered blocking state [ 911.584165][T25825] bridge0: port 2(vlan3) entered disabled state 21:52:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x12000000}]}}) [ 911.841843][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 911.851176][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.859523][ T7101] usb 2-1: Product: syz [ 911.864064][ T7101] usb 2-1: Manufacturer: syz [ 911.868772][ T7101] usb 2-1: SerialNumber: syz 21:52:27 executing program 5: r0 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x7e, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x3, 0x0, 0x0, "00009000", '\"O\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xe9, &(0x7f0000000100)=ANY=[]) [ 912.054222][ T7101] usb 2-1: config 0 descriptor?? [ 912.155067][T24124] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.164628][T24124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.249527][T24124] usb 6-1: can't set config #1, error -71 [ 912.279424][T24124] usb 6-1: USB disconnect, device number 126 [ 912.336478][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 912.368367][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 912.405655][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 912.413035][ T7101] usb 2-1: media controller created [ 912.474436][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 912.672308][T24124] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 912.931719][T24124] usb 6-1: Using ep0 maxpacket: 16 [ 913.052118][T24124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.064628][T24124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.076302][T24124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 913.086332][T24124] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 913.096333][T24124] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.181727][T24124] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 913.190879][T24124] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 913.199124][T24124] usb 6-1: Manufacturer: syz [ 913.207213][T24124] usb 6-1: config 0 descriptor?? [ 913.521696][T24124] rc_core: IR keymap rc-hauppauge not found [ 913.527719][T24124] Registered IR keymap rc-empty [ 913.533029][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.563218][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.603149][T24124] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 913.622188][ T7101] stb0899_attach: Driver disabled by Kconfig [ 913.628357][ T7101] az6027: no front-end attached [ 913.628357][ T7101] [ 913.657054][ T7101] az6027: usb out operation failed. (-71) [ 913.663022][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 913.664169][T24124] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 913.671845][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input75 [ 913.748177][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 913.753784][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.755787][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 913.797018][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.816895][ T7101] usb 2-1: USB disconnect, device number 25 [ 913.836964][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.874831][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.915054][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.918088][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 913.957497][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 913.998199][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.039316][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.074913][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 21:52:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a44434282000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x25000000}]}}) 21:52:29 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6000, 0x0, 0x4000091}, 0x0) 21:52:29 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 914.115305][T24124] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 914.166530][T24124] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 914.174890][T24124] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 914.271604][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 914.291632][ C0] mceusb 6-1:0.0: Error: urb status = -71 [ 914.310198][T24124] usb 6-1: USB disconnect, device number 127 [ 914.316445][ C0] mceusb 6-1:0.0: Error: urb status = -71 21:52:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x5c000000}]}}) [ 914.489701][T25919] bridge0: port 2(vlan3) entered blocking state [ 914.500215][T25919] bridge0: port 2(vlan3) entered disabled state 21:52:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5affffff8d000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 914.839365][ T7101] usb 2-1: new high-speed USB device number 26 using dummy_hcd 21:52:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}]}}) [ 915.031738][T24124] usb 6-1: new high-speed USB device number 2 using dummy_hcd 21:52:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6558, 0x0, 0x4000091}, 0x0) 21:52:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a794b1e9b000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 915.271892][T24124] usb 6-1: Using ep0 maxpacket: 16 21:52:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x2}]}}) [ 915.409453][T24124] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.419883][T24124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.431127][T24124] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 915.441028][T24124] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 915.450926][T24124] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.473087][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 915.482838][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.490964][ T7101] usb 2-1: Product: syz [ 915.495385][ T7101] usb 2-1: Manufacturer: syz [ 915.500094][ T7101] usb 2-1: SerialNumber: syz [ 915.588740][ T7101] usb 2-1: config 0 descriptor?? [ 915.743003][T24124] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 915.752444][T24124] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 915.760567][T24124] usb 6-1: Manufacturer: syz [ 915.845009][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 915.878049][T24124] usb 6-1: config 0 descriptor?? [ 915.892123][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.945057][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 915.952443][ T7101] usb 2-1: media controller created 21:52:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x3}]}}) [ 916.002580][T24124] usb 6-1: can't set config #0, error -71 [ 916.040874][T24124] usb 6-1: USB disconnect, device number 2 [ 916.063227][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.201656][ T7101] stb0899_attach: Driver disabled by Kconfig [ 917.207772][ T7101] az6027: no front-end attached [ 917.207772][ T7101] [ 917.231994][ T7101] az6027: usb out operation failed. (-71) [ 917.237811][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 917.246734][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 917.262537][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 917.269574][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 917.286781][ T7101] usb 2-1: USB disconnect, device number 26 [ 917.356888][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00007ca1000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x680b, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) prctl$PR_GET_SECCOMP(0x15) r0 = getpid() syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0, 0x44}}, 0x40000) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0xb}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f00000015c0)=""/151, 0x97}, {&(0x7f0000000500)=""/106, 0x6a}], 0x5, &(0x7f0000001700)=""/171, 0xab}, 0xcff}, {{&(0x7f00000017c0)=@un=@abs, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)=""/71, 0x47}], 0x1, &(0x7f00000018c0)=""/128, 0x80}, 0x8000}, {{&(0x7f0000001940)=@can, 0x80, &(0x7f0000001e00)=[{&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/177, 0xb1}, {&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/188, 0xbc}, {&(0x7f0000001c00)=""/171, 0xab}, {&(0x7f0000001cc0)=""/245, 0xf5}, {&(0x7f0000001dc0)=""/9, 0x9}], 0x7, &(0x7f0000001e80)=""/239, 0xef}, 0x4bc8}, {{&(0x7f0000001f80)=@x25, 0x80, &(0x7f0000002040)=[{&(0x7f0000002000)}], 0x1}, 0x6}, {{&(0x7f0000002080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005280)=[{&(0x7f0000002100)=""/57, 0x39}, {&(0x7f0000004180)=""/4096, 0x1000}, {0xfffffffffffffffc}, {&(0x7f0000005180)=""/214, 0xd6}], 0x4}, 0x10001}], 0x5, 0x42, &(0x7f0000005400)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x453efeed) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000d1400080000000005dbdf250800010000000000080001000100000008000300020000000800010000001dc0"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) creat(&(0x7f0000000140)='./file0\x00', 0x0) 21:52:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x8100, 0x0, 0x4000091}, 0x0) 21:52:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x4}]}}) 21:52:33 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000f6a5000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x5}]}}) [ 918.280440][T22760] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 918.470985][T26007] bridge0: port 2(vlan3) entered blocking state [ 918.477690][T26007] bridge0: port 2(vlan3) entered disabled state 21:52:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5ad5fafca5000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x6}]}}) 21:52:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a54fcfca5000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x8847, 0x0, 0x4000091}, 0x0) [ 918.923561][T22760] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 918.932827][T22760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.940945][T22760] usb 2-1: Product: syz [ 918.945361][T22760] usb 2-1: Manufacturer: syz [ 918.950076][T22760] usb 2-1: SerialNumber: syz [ 919.038588][T22760] usb 2-1: config 0 descriptor?? [ 919.348293][T22760] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 919.364405][T22760] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 919.446466][T22760] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 919.454858][T22760] usb 2-1: media controller created [ 919.678813][T22760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 920.722052][T22760] stb0899_attach: Driver disabled by Kconfig [ 920.728116][T22760] az6027: no front-end attached [ 920.728116][T22760] [ 920.755772][T22760] az6027: usb out operation failed. (-71) [ 920.761776][T22760] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 920.769938][T22760] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input77 [ 920.785549][T22760] dvb-usb: schedule remote query interval to 400 msecs. [ 920.792808][T22760] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 920.807741][T22760] usb 2-1: USB disconnect, device number 27 [ 920.862706][T22760] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="2e07170589c8"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x7}]}}) 21:52:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a5ccddbcd000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x8848, 0x0, 0x4000091}, 0x0) 21:52:37 executing program 5: ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x2) set_mempolicy(0x2, &(0x7f0000000040)=0x10000101, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x200) write$dsp(r0, &(0x7f0000000080)="6bc80219deaa23e8f27558ffbc3bedc0f4b4d503b734920dcbdcb04bf13dbdce62d2046a4caebd2e188b3aa6b15f826a0377de5324c637c3b5adf8d1b729326cfd95d3519d1ab6e1470d55df023e36c6848d66ebf3dc04f7de852505ee9348efe0f801babbd6f9308bc4566dcfba3c2e041ff22017e16e07b93a728cec5bfaffc18ad7d54daaa748964c93e247", 0x8d) clone(0x4c12850c, 0x0, 0x0, 0x0, 0x0) 21:52:37 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffbfffd}]}) migrate_pages(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') 21:52:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x8}]}}) [ 921.812773][T26093] bridge0: port 2(vlan3) entered blocking state [ 921.819303][T26093] bridge0: port 2(vlan3) entered disabled state 21:52:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5afcd7f9cd000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 922.019977][ T23] audit: type=1326 audit(1635717157.830:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26148 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffb0000 [ 922.050014][T24124] usb 2-1: new high-speed USB device number 28 using dummy_hcd 21:52:38 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1d8ae53f1a1e4b29, 0x0) sendfile(r0, r6, &(0x7f0000000100)=0x8, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7f, 0x20, 0x21, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7800, 0x8, 0xb14525f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r7, 0x29, 0x87, 0x0, 0x6, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x700, 0x6fae, 0xfffffff6}}) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 21:52:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x34000, 0x0, 0x4000091}, 0x0) 21:52:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x9}]}}) [ 922.572864][T24124] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 922.587812][T24124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.596546][T24124] usb 2-1: Product: syz [ 922.600818][T24124] usb 2-1: Manufacturer: syz [ 922.605607][T24124] usb 2-1: SerialNumber: syz [ 922.788585][T24124] usb 2-1: config 0 descriptor?? [ 923.044061][T24124] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 923.068924][T24124] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.109988][T24124] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 923.117525][T24124] usb 2-1: media controller created [ 923.166869][T24124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.261647][T24124] stb0899_attach: Driver disabled by Kconfig [ 924.267802][T24124] az6027: no front-end attached [ 924.267802][T24124] [ 924.291762][T24124] az6027: usb out operation failed. (-71) [ 924.297534][T24124] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 924.306373][T24124] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 924.328378][T24124] dvb-usb: schedule remote query interval to 400 msecs. [ 924.335831][T24124] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 924.353410][T24124] usb 2-1: USB disconnect, device number 28 [ 924.417149][T24124] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'Ot'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:40 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5aa5fcfad5000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xa}]}}) 21:52:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x400300, 0x0, 0x4000091}, 0x0) 21:52:40 executing program 5: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x32, @empty, 0x4}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x1d, 0x22, '\x00', [@generic={0xfa, 0xda, "7bb97246766bb8354a61413a88f57527343da272e4a0501a708dbf3d6cfbc2dfe9b6fa9a20f6c930665441ddb0416260b43ff14b7758ca45e3da9fa741a72452c85d6158fc955aebb14091ced716b1ad91c268f603cd8380b28ef34caccfbbf31b8972a4884d698f1ba1fca3764599c52f9d67f2c4bf46954ca68e7e24e86a8b4b412a4ddbf737cb8ed57fd1ae5cd84c4fe2ad212d78c190ada410a3f7ffcd8bac03506c24b6b5a0f59ac4e775e7c2c4be5ed8e8a93a86cdac3aab0f3706ebf55478a1d908c78b826f8db7d4e957b864f7c01c5c657d28e96d4d"}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0xc43f, [0x6, 0x100000001]}}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x120) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x30002, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="db024721012554319e80445bf07cd4426e97994c00214475c12dd28a6d4f8f8fd580fe79187d7c012b58d34fa3a2c01f51473bbad2b958b9d147aca6f466d28e4b43ba5d9f", 0x45, 0x20001000, &(0x7f0000000240)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x27}, 0x1c) r1 = pidfd_getfd(r0, r0, 0x0) sendto$inet6(r1, &(0x7f0000000280)="e5bca239dc432d68d3261c0b097f8d9d115eb2d5c7bc38c7a7daf370f1cff9bab7088cc831cc77994b74969580cd6ec582e585b1923deac534bc4f988b4a0f0f7bd57da735ff4f608d08bc8bebf45bee06932954c0c6440a9c9a782ac9e3d85e8162", 0x62, 0x80, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @mcast2, 0x8}, 0x1c) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000380)={0x0, 0x4}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, 0xfff}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x38, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0xfffffffa, @loopback, 0x4d}, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdb}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000500)=@int=0x9, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000540)=0x2, 0x4) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000580)="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", 0x1000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001580), 0x2080, 0x0) recvfrom$inet6(r4, &(0x7f00000015c0)=""/182, 0xb6, 0x10003, &(0x7f0000001680)={0xa, 0x4e24, 0x2, @mcast1, 0x9}, 0x1c) r5 = signalfd4(r0, &(0x7f00000016c0)={[0x7]}, 0x8, 0x40000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001700)={r3, 0x9, 0x9, [0x1, 0xe16, 0x7110, 0x9, 0xbaf7, 0x8, 0x80, 0xfff, 0x3]}, &(0x7f0000001740)=0x1a) r7 = openat$incfs(r0, &(0x7f0000001780)='.log\x00', 0x22301, 0x52) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000017c0)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x6, 0x40}, &(0x7f0000001880)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000018c0)={r3, 0x46, "7aa082ba9d080fbdc6856339bc7c2cfe0e8585afcfa13469383c6dd79b3cd7abd4c2dd594e5be7e570f7a79e900885d1940d3207782c66dec741ffbd162bf3fd3005df2c976e"}, &(0x7f0000001940)=0x4e) 21:52:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xb}]}}) 21:52:41 executing program 5: io_uring_setup(0x6bdc, &(0x7f0000000640)) r0 = syz_io_uring_setup(0x7465, &(0x7f0000000140)={0x0, 0xfc4e, 0x8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) syz_io_uring_setup(0x606, &(0x7f0000000000)={0x0, 0xc4c4, 0x20, 0x0, 0x3b1, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 21:52:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5afffffff5000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 925.378913][T26213] bridge0: port 2(vlan3) entered blocking state [ 925.385606][T26213] bridge0: port 2(vlan3) entered disabled state [ 925.448185][T10352] usb 2-1: new high-speed USB device number 29 using dummy_hcd 21:52:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xc}]}}) 21:52:41 executing program 5: r0 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) connect$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x0, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a2) 21:52:41 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x1000000, 0x0, 0x4000091}, 0x0) [ 926.012245][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 926.021633][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.029767][T10352] usb 2-1: Product: syz [ 926.034183][T10352] usb 2-1: Manufacturer: syz [ 926.038882][T10352] usb 2-1: SerialNumber: syz [ 926.152605][T10352] usb 2-1: config 0 descriptor?? [ 926.444510][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 926.464934][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 926.583818][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 926.591268][T10352] usb 2-1: media controller created [ 926.660804][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.721835][T10352] stb0899_attach: Driver disabled by Kconfig [ 927.727882][T10352] az6027: no front-end attached [ 927.727882][T10352] [ 927.751916][T10352] az6027: usb out operation failed. (-71) [ 927.757787][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 927.766763][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input79 [ 927.782110][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 927.789141][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 927.800543][T10352] usb 2-1: USB disconnect, device number 29 [ 927.860629][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xd}]}}) 21:52:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000081fa000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:44 executing program 5: unshare(0x4a060480) openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xbafd1000) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x810020000000003, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x761dd9b386afc26b, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)) 21:52:44 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x2000000, 0x0, 0x4000091}, 0x0) 21:52:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000fc000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xe}]}}) [ 928.834946][T26290] bridge0: port 2(vlan3) entered blocking state [ 928.841629][T26290] bridge0: port 2(vlan3) entered disabled state [ 928.946229][T10352] usb 2-1: new high-speed USB device number 30 using dummy_hcd 21:52:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5acdf9d7fc000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x3000000, 0x0, 0x4000091}, 0x0) 21:52:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x10}]}}) 21:52:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a5a84ffff000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 929.538185][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 929.550114][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.558573][T10352] usb 2-1: Product: syz [ 929.562898][T10352] usb 2-1: Manufacturer: syz [ 929.567601][T10352] usb 2-1: SerialNumber: syz [ 929.744604][T10352] usb 2-1: config 0 descriptor?? [ 929.994651][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 930.011937][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 930.079003][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 930.086377][T10352] usb 2-1: media controller created [ 930.152375][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.235187][T10352] stb0899_attach: Driver disabled by Kconfig [ 931.241389][T10352] az6027: no front-end attached [ 931.241389][T10352] [ 931.262267][T10352] az6027: usb out operation failed. (-71) [ 931.268182][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 931.277201][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80 [ 931.343209][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 931.350343][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 931.385039][T10352] usb 2-1: USB disconnect, device number 30 [ 931.484291][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r1 = syz_io_uring_setup(0x3845, &(0x7f0000000180)={0x0, 0x5fd8, 0x0, 0x3, 0x10a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) r3 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r4 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r5 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r6 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r7 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000540)=0x0, &(0x7f00000000c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r11}}, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), 0x0, 0x0, 0x1, {0x0, r12}}, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x3, 0x45, &(0x7f0000000000)=""/69}, &(0x7f00000000c0)="03520f3c206c", 0x0, 0x81, 0x0, 0x0, 0x0}) 21:52:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x4000000, 0x0, 0x4000091}, 0x0) 21:52:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x11}]}}) 21:52:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a8dffffff000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x12}]}}) 21:52:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5af5ffffff000000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 932.202059][ T7101] usb 2-1: new high-speed USB device number 31 using dummy_hcd 21:52:48 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x100000000005, 0x401c0) r1 = epoll_create(0x3) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x200) r3 = openat$cgroup_freezer_state(r0, &(0x7f00000005c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000600)={0x80000014}) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) poll(&(0x7f00000001c0)=[{r4, 0x81}, {r1}, {r4, 0x8001}], 0x3, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0xff, 0x101000) fcntl$getflags(r6, 0x3) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000040)=0x1000, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) poll(&(0x7f0000000200)=[{r0, 0x1}, {r5, 0x3286}, {r7, 0xa00d}], 0x3, 0x6) [ 932.275475][T26402] bridge0: port 2(vlan3) entered blocking state [ 932.282114][T26402] bridge0: port 2(vlan3) entered disabled state 21:52:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x25}]}}) 21:52:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000400000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x5000000, 0x0, 0x4000091}, 0x0) [ 932.775091][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 932.784462][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.792919][ T7101] usb 2-1: Product: syz [ 932.797213][ T7101] usb 2-1: Manufacturer: syz [ 932.802030][ T7101] usb 2-1: SerialNumber: syz [ 932.940147][ T7101] usb 2-1: config 0 descriptor?? 21:52:48 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="f5001d0d66b5bca0fbb60000afebffffffffffff0000bf07f4ff00000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_return_failed\x00', r2}, 0x10) [ 933.228529][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 933.319340][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 933.418595][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 933.426367][ T7101] usb 2-1: media controller created [ 933.624120][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.551625][ T7101] stb0899_attach: Driver disabled by Kconfig [ 934.557792][ T7101] az6027: no front-end attached [ 934.557792][ T7101] [ 934.582063][ T7101] az6027: usb out operation failed. (-71) [ 934.587822][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 934.596642][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input81 [ 934.632219][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 934.639330][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 934.662732][ T7101] usb 2-1: USB disconnect, device number 31 [ 934.722222][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 934.814865][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.821330][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 21:52:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x88}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000100000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x5c}]}}) 21:52:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x7800, 0x7800, 0xb08, 0x8, {{0x7, 0x4, 0x1, 0xd, 0x1c, 0x67, 0x0, 0x3f, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_getlink={0x154, 0x12, 0x200, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x601, 0x10000}, [@IFLA_AF_SPEC={0x100, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0x6}]}}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x6}, {0x8, 0x3, 0x0, 0x0, 0x78}, {0x8, 0x1c, 0x0, 0x0, 0x4}, {0x8, 0x9}, {0x8, 0x12, 0x0, 0x0, 0x8000}, {0x8, 0x10, 0x0, 0x0, 0x1f}, {0x8, 0xb, 0x0, 0x0, 0x8}, {0x8, 0x12, 0x0, 0x0, 0x4}, {0x8, 0x1d, 0x0, 0x0, 0x7}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x1}, {0x8, 0x13, 0x0, 0x0, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x9}, {0x8, 0x10, 0x0, 0x0, 0x3}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x10}, {0x8, 0x16, 0x0, 0x0, 0x7}, {0x8, 0xf}, {0x8, 0xf, 0x0, 0x0, 0x2}]}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5e}]}]}, @IFLA_CARRIER={0x5}, @IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8010) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x201, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) 21:52:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6000000, 0x0, 0x4000091}, 0x0) 21:52:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 935.161959][T26476] bridge0: port 2(vlan3) entered blocking state [ 935.168497][T26476] bridge0: port 2(vlan3) entered disabled state 21:52:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000010000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1f4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x1b8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @NFTA_SET_FIELD_LEN={0xffffffffffffff28}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0x23c}}, 0x0) r1 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_getnexthop={0x48, 0x6a, 0x310, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x10) [ 935.635340][T10352] usb 2-1: new high-speed USB device number 32 using dummy_hcd 21:52:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x300}]}}) [ 935.933547][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 935.963363][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:52:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x7000000, 0x0, 0x4000091}, 0x0) 21:52:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x500}]}}) 21:52:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x1, 0x5) r1 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 936.177194][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 936.186709][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.195065][T10352] usb 2-1: Product: syz [ 936.199333][T10352] usb 2-1: Manufacturer: syz [ 936.205265][T10352] usb 2-1: SerialNumber: syz [ 936.332985][T10352] usb 2-1: config 0 descriptor?? [ 936.612441][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 936.659421][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 936.719257][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 936.726857][T10352] usb 2-1: media controller created [ 936.839378][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.951644][T10352] stb0899_attach: Driver disabled by Kconfig [ 937.957806][T10352] az6027: no front-end attached [ 937.957806][T10352] [ 937.981858][T10352] az6027: usb out operation failed. (-71) [ 937.987681][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 937.996698][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input82 [ 938.010814][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 938.018240][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 938.037760][T10352] usb 2-1: USB disconnect, device number 32 [ 938.107593][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x600}]}}) 21:52:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000020000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x400, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x2c8, 0x3, 0x3c0, 0x218, 0x240, 0x217, 0x218, 0x0, 0x328, 0x328, 0x328, 0x328, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @empty=0x22020000, 0x0, 0x0, 'veth0_to_batadv\x00', 'caif0\x00'}, 0x0, 0x1f8, 0x218, 0xe105, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x7, 0x0, 0x0, 0x0, 0x8000, 0x10000}}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 21:52:54 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x8000000, 0x0, 0x4000091}, 0x0) 21:52:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 938.596499][T26560] xt_connbytes: Forcing CT accounting to be enabled [ 938.603583][T26560] Cannot find set identified by id 0 to match [ 938.727339][T26567] Cannot find set identified by id 0 to match 21:52:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000030000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x700}]}}) 21:52:54 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000001980)="fc8657b2907c380189d8133c14b91574416f191d3b44e71e96d0ea736e9d9d69a98802053f9585d3939a2a553cf8f24a7d2eec3e94531602e82ebfdec4631a256266cbb001446a59878cb57f94343ce1692679b0e1bac53c4706f8b1a774de51e51918e845cedd2b682950b904614c75b187c0bdf20abd67ee592cb8", 0x7c, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x1c) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x4, 0x80, 0x3f, 0x5, 0x1f, 0xfc, 0x0, 0x9, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0xd15}) r2 = getpid() syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="bc6c628f88c04433febfe3e03f9396c3bd99d1b0c592269a169e88c84ef1c9a73c97391980c3568062e8e660c1"], 0x3c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000240)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001880)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="0389a1a44bdcb2121340460f8fc94289bdc3da8661109a579186caf25af6118d1d53a0e9389b6170c3ab871bd78d86c99b7ca2b5c30644eb585f7c903d75c87b414b78c4caac9d53cdf99988ca30ec1a102d01215de046343d1f89be5ec35141f4f565eff5ed4ee598c65753b05e2acd3dadedc0dd2552642ac52db61d6265330144541161c2eabb1e4694fb840146f7886d4f8bda98c13390df1c", 0x9b}, {&(0x7f0000001a00)="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", 0xfe}, {&(0x7f0000000200)="57b90510527c5d897c42ee857d478d65de0b932a0fdb1481a0b125cb16dbf65817196546a368e62fa6a9", 0x2a}, {&(0x7f0000001580)="e3d66431e163b9783db9d3dfdee1e95f19da510ddbdca8f578a3edce0d4ba71ff14fc505c5e676fbb88c55259e999f126f3f8ffb3749ff17a50200ee662e90bb38c64fa5e4beb434908d429ec5f5aa6bf43ac7cc8ca929c64aa22923a34e3a48601f87ef755db6f56856110421aaa7f772d588d0040f6cc47aa82dfd65408a3cc0106a75807995eb08d9f80bfefa8f21df69e54afed4a818ce68e3166ba88be7cf4f1f37349e0d63e4f1c3fd9670da6097d19f31c6321447bf8da4dce60517aee150501e3c6326df6ef195d5644a4f4ea78e822c2d7bf605fbde3667d947de8e3678333a85bb276d33c392c69ccbade4", 0xf0}, {&(0x7f0000001680)="59d371821ffc2af9196708797b7406c496c4062623c8bb4a596cd6acbc534909657536741b3b2875f12673dc6d605fd1d97a2b67838e39d77ead2965711e79eb1307adfe52b26df7e97833114fce8bcecdc24c53d5abc1fadae0236a5fcf067ac665bc98ad3e67f7692ca2469238d8fad2958af87496d59dbce7570beb0dabf3beddb09aa78e901035a7ded1c33fa63e1de10e3b61e19dd8f6973405f3e8b44189dd219e3e11cd687588ed59657c3c7125b094a967568c3ebf5b6d496d1c1bbf6864812b65a12107040944bd7e10a0", 0xcf}, {&(0x7f0000001780)="e6b729a1d391632661e8ebe21439b2cb0abdaf78197d01f635d22697ee03b530fb6dacd6fe0998e3314deb24b0e9f7c2878f7dd99fd338aea16d6df5540c6185e295ae53156477163e5c4303f7c58507e06fd3cd45c018177d0872c23e2b0c96b084b5fed4072247ea7968868ab78bdf8b7ee4e117b5196c33a7acff8358f7a731bcda67330ea80e4449ec4627a2e73308efbcbbda68a3d07e134e3633385b2a1f35d6661146d64b15025f6d8ae5d5ae3e80701784a3ab078e77fd3bd2b0b8a453ac5233e4b5aece46f04002cfa27567e025e064e18c3f2528f03db93759264891552ecb536c2e6a32594ea044", 0xed}], 0x7, &(0x7f0000001900)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}}], 0x1, 0x20000480) [ 938.975516][T26563] bridge0: port 2(vlan3) entered blocking state [ 938.982095][T26563] bridge0: port 2(vlan3) entered disabled state [ 938.996368][T10352] usb 2-1: new high-speed USB device number 33 using dummy_hcd 21:52:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x900}]}}) 21:52:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x9000000, 0x0, 0x4000091}, 0x0) 21:52:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000040000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 939.545228][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 939.554684][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.562998][T10352] usb 2-1: Product: syz [ 939.567261][T10352] usb 2-1: Manufacturer: syz [ 939.572098][T10352] usb 2-1: SerialNumber: syz [ 939.719047][T10352] usb 2-1: config 0 descriptor?? [ 940.033258][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 940.087987][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 940.164185][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 940.171685][T10352] usb 2-1: media controller created [ 940.225618][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.361674][T10352] stb0899_attach: Driver disabled by Kconfig [ 941.367759][T10352] az6027: no front-end attached [ 941.367759][T10352] [ 941.392763][T10352] az6027: usb out operation failed. (-71) [ 941.398549][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 941.407456][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input83 [ 941.431683][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 941.438728][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 941.457335][T10352] usb 2-1: USB disconnect, device number 33 [ 941.520369][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:52:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000050000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xa, 0x6a, 0x70, 0x40, 0x403, 0xe809, 0x7311, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x1, 0xf3, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x1, 0x1, 0x6, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x22, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "e9f673b94a"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x1, 0x3ff, 0xf9}, [@mdlm_detail={0x91, 0x24, 0x13, 0x8, "7e9dcd1f12b6129e60cbb288c3d684d2517bac8df352870e3c5130620efed8a4cf69d963b30ecbc3b5b890c5475e2cfafe371e4c5282f0fda5c24c2f5e1554394506fd4b57c29009ed76cb43eb7efaa42660096e857c18ff18ce1d8de9227d0d91cfd4db722bcddce76eb8d06db27671ac0b018dea76debef47c8f28de18b6a6a5dc9a08afd310331c0c6fc4dd"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3c02}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe7, 0x20, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x81, 0x6d, 0x4}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6c, 0x4, 0x1, 0x20, 0x61}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xbf, &(0x7f0000000200)=@string={0xbf, 0x3, "06827468314d4494120e8e2bd34de247e94858ae4af26feee55515f657c6a3c224c4fd3853149dc2b35691a04c5f16ccbb79f3073cf05d185c81b31e32f141101cd3bc1395e86e81e76771d07272c4b3b2124ae430a21804b2ef889d645ecef5fa86b73adc826fde45866232e8bfe7a5d5a729996aed77e0e07b0b25dd75fe8e2a20c71989b581a949e3303236cf72816c70da9f16e35677be27af26468de27cbf9fa9e2f07321b6085c96a9b88c47e8dccad7e9b32f7e29c74b7a19dd"}}, {0x57, &(0x7f0000000400)=@string={0x57, 0x3, "f0260f6e9f885c8cea3b2c16d2271a7bbe2788a7cfca666bed626954138af04c3f6062efaa70d26c52f44464fce40bff568fcb29b68486d61e82bf9cb4b4d2faa0bd05f4996b610c488f92880a8e3bdf68119493bc"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4ff}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000d80)={0x0, 0x0, 0x2, "a021"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x15, 0x2, '\b\x00'}, 0x0, 0x0, 0x0, 0x0}) 21:52:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xa00}]}}) 21:52:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:52:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xa000000, 0x0, 0x4000091}, 0x0) 21:52:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:52:57 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xb00}]}}) 21:52:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000060000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 942.242454][T10805] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 942.352413][T24124] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 942.458038][T26641] bridge0: port 2(vlan3) entered blocking state [ 942.464675][T26641] bridge0: port 2(vlan3) entered disabled state 21:52:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xc00}]}}) 21:52:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000070000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:52:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xb000000, 0x0, 0x4000091}, 0x0) [ 942.802574][T10805] usb 6-1: New USB device found, idVendor=0403, idProduct=e809, bcdDevice=73.11 [ 942.812188][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.820313][T10805] usb 6-1: Product: syz [ 942.824733][T10805] usb 6-1: Manufacturer: syz [ 942.829444][T10805] usb 6-1: SerialNumber: syz [ 942.888986][T10805] usb 6-1: config 0 descriptor?? [ 942.913403][T24124] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 942.922723][T24124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.930828][T24124] usb 2-1: Product: syz [ 942.935506][T24124] usb 2-1: Manufacturer: syz [ 942.940210][T24124] usb 2-1: SerialNumber: syz [ 942.964076][T10805] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 942.972768][T10805] usb 6-1: Detected FT-X [ 943.029799][T24124] usb 2-1: config 0 descriptor?? [ 943.148087][T26639] udc-core: couldn't find an available UDC or it's busy [ 943.155357][T26639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 21:52:59 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xd00}]}}) [ 943.288896][T10805] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 943.304919][T24124] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 943.333436][T24124] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.400229][T24124] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 943.407644][T24124] usb 2-1: media controller created [ 943.622486][T24124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.783884][T10805] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 943.805281][T10805] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 943.912640][T10805] usb 6-1: USB disconnect, device number 3 [ 943.976345][T10805] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 943.989619][T10805] ftdi_sio 6-1:0.0: device disconnected [ 944.651858][T10805] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 944.694781][T24124] stb0899_attach: Driver disabled by Kconfig [ 944.700906][T24124] az6027: no front-end attached [ 944.700906][T24124] [ 944.732775][T24124] az6027: usb out operation failed. (-71) [ 944.738580][T24124] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 944.747580][T24124] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input84 [ 944.764066][T24124] dvb-usb: schedule remote query interval to 400 msecs. [ 944.771104][T24124] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 944.790656][T24124] usb 2-1: USB disconnect, device number 34 [ 944.864072][T24124] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xe00}]}}) [ 945.232983][T10805] usb 6-1: New USB device found, idVendor=0403, idProduct=e809, bcdDevice=73.11 [ 945.242321][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.250441][T10805] usb 6-1: Product: syz [ 945.255043][T10805] usb 6-1: Manufacturer: syz [ 945.259745][T10805] usb 6-1: SerialNumber: syz [ 945.301009][T10805] usb 6-1: config 0 descriptor?? 21:53:01 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x5, 0x6f, 0x9, 0x1}, {0x200, 0xff, 0x3, 0x2}, {0xfff7, 0x5, 0x9, 0x4}]}) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x6, 0x1000000a, 0x4, 0x7, 0x8f, 0x7, 0x4, 0x1, 0x1000}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x200) ioctl$TIOCSBRK(r1, 0x5427) 21:53:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000000000003f0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xc000000, 0x0, 0x4000091}, 0x0) 21:53:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x1100}]}}) [ 945.411956][T10805] usb 6-1: can't set config #0, error -71 [ 945.453900][T10805] usb 6-1: USB disconnect, device number 4 21:53:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x1200}]}}) [ 945.699683][ T23] audit: type=1326 audit(1635717181.490:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.723212][ T23] audit: type=1326 audit(1635717181.500:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.746678][ T23] audit: type=1326 audit(1635717181.500:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.770133][ T23] audit: type=1326 audit(1635717181.510:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.793767][ T23] audit: type=1326 audit(1635717181.510:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.817292][ T23] audit: type=1326 audit(1635717181.520:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.840729][ T23] audit: type=1326 audit(1635717181.520:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.864179][ T23] audit: type=1326 audit(1635717181.520:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.887578][ T23] audit: type=1326 audit(1635717181.520:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.910992][ T23] audit: type=1326 audit(1635717181.520:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26749 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb140ee4ae9 code=0x7ffc0000 [ 945.938008][T12746] usb 2-1: new high-speed USB device number 35 using dummy_hcd 21:53:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000400000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:02 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x200) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) sync_file_range(r1, 0x1, 0x20, 0x6) set_mempolicy(0x5, &(0x7f0000000000)=0x3, 0x84) clone(0x4c00031a, 0x0, 0x0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1f}, 0xa) [ 946.200049][T26746] bridge0: port 2(vlan3) entered blocking state [ 946.206711][T26746] bridge0: port 2(vlan3) entered disabled state 21:53:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf000000, 0x0, 0x4000091}, 0x0) 21:53:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x2500}]}}) [ 946.557099][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 946.566412][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.574690][T12746] usb 2-1: Product: syz [ 946.578988][T12746] usb 2-1: Manufacturer: syz [ 946.583757][T12746] usb 2-1: SerialNumber: syz [ 946.720957][T12746] usb 2-1: config 0 descriptor?? [ 947.011882][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 947.046819][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 947.152695][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 947.163105][T12746] usb 2-1: media controller created [ 947.219921][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.021797][T12746] az6027: usb out operation failed. (-71) [ 948.027611][T12746] stb0899_attach: Driver disabled by Kconfig [ 948.033969][T12746] az6027: no front-end attached [ 948.033969][T12746] [ 948.051947][T12746] az6027: usb out operation failed. (-71) [ 948.057734][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 948.066675][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85 [ 948.084663][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 948.091925][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 948.106586][T12746] usb 2-1: USB disconnect, device number 35 [ 948.184165][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x5c00}]}}) 21:53:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000005590000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:04 executing program 5: r0 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0x81, 0x3) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607819d2299abfcb5a41d9385ebc00103a00fe800000000000000000004099517d79d6bbf8000000000000000000000000028600907800"/80], 0x0) 21:53:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:04 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x10000000, 0x0, 0x4000091}, 0x0) 21:53:04 executing program 5: ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x10}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x3, 0x203, 0x5, {0x5, 0x5aa9, 0x6, 0x7}}) 21:53:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000ffff845a0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:04 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x80000}]}}) [ 949.011843][T12746] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 949.086660][T26843] bridge0: port 2(vlan3) entered blocking state [ 949.093305][T26843] bridge0: port 2(vlan3) entered disabled state 21:53:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x11000000, 0x0, 0x4000091}, 0x0) 21:53:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000009b1e4b790000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 949.492981][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd 21:53:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x1000000}]}}) [ 949.535303][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 949.544698][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.553439][T12746] usb 2-1: Product: syz [ 949.557735][T12746] usb 2-1: Manufacturer: syz [ 949.562540][T12746] usb 2-1: SerialNumber: syz [ 949.763167][T12746] usb 2-1: config 0 descriptor?? [ 949.972545][ T7] usb 6-1: not running at top speed; connect to a high speed hub [ 950.022225][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 950.053762][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.065400][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.075541][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 950.085704][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 950.104379][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 950.177250][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 950.184728][T12746] usb 2-1: media controller created [ 950.295462][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 950.442771][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 950.452134][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.460402][ T7] usb 6-1: Product: syz [ 950.464952][ T7] usb 6-1: Manufacturer: syz [ 950.469729][ T7] usb 6-1: SerialNumber: syz [ 950.775061][ T7] cdc_ncm 6-1:1.0: bind() failure [ 950.788221][ T7] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 950.795400][ T7] cdc_ncm 6-1:1.1: bind() failure [ 950.830685][ T7] usb 6-1: USB disconnect, device number 5 [ 951.111744][T12746] az6027: usb out operation failed. (-71) [ 951.117665][T12746] stb0899_attach: Driver disabled by Kconfig [ 951.123981][T12746] az6027: no front-end attached [ 951.123981][T12746] [ 951.141704][T12746] az6027: usb out operation failed. (-71) [ 951.147556][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 951.159083][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 951.177967][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 951.185195][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 951.206131][T12746] usb 2-1: USB disconnect, device number 36 [ 951.268355][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:07 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b00)={0x24, &(0x7f0000000980)={0x20, 0xd, 0xab, {0xab, 0x11, "488966324546db93b8445847aaf350d5e86af61c06afa2a3e24a8ccd9d5d5c4b79a15a69573546fc959206e9a8a7937f11edf7ec73cb235192f62f45b7cc83c5cad2353c83e98fd0b60e8bce71d3dac6a66c69ebe428f8de3c167f9d87d31055afa14f5096e24e0e7cd30cf96cdf79afc6e280fc07c88ad8fdc82d0f8e159880be05ce718eac29bcde779f85168bc3b49fbdfc28c2721ed7bb789042d75d5d5e480fd6190387cd40c8"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000a80)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x0, "48ec"}, @local=@item_012={0x1, 0x2, 0xa, "01"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x5, "528c"}, @global=@item_4={0x3, 0x1, 0x8, "1e63e84f"}, @main=@item_4={0x3, 0x0, 0xc, "32afb410"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "e22f5fe5"}, @local=@item_4={0x3, 0x2, 0xa7058bc71136153c, "44e84e38"}]}}, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x6, 0x1, {0x22, 0xfd3}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x2000000}]}}) 21:53:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000000000007c0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:07 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x60000000, 0x0, 0x4000091}, 0x0) 21:53:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:07 executing program 5: getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)) [ 951.737809][T26930] bridge0: port 2(vlan3) entered blocking state [ 951.744501][T26930] bridge0: port 2(vlan3) entered disabled state 21:53:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x3000000}]}}) 21:53:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000444342820000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:07 executing program 5: socket(0x10, 0x3, 0x0) r0 = memfd_secret(0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018001f06b9409b0dffff00000212be0402000605040003034300040003000000fac8388827a685a168d0bf46d32345653600648dcaaf6c26c291214549935ade4a460c89b6ec0cff3959547f509062ba86c902000000000000000400160012000a000000000000000000000000f6b4f8eca0faed", 0x78, 0x20000000, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x6, 0x30, r1, 0x8000000) [ 952.103080][ T7] usb 2-1: new high-speed USB device number 37 using dummy_hcd 21:53:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x4000000}]}}) 21:53:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000ffffff8d0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:08 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x65580000, 0x0, 0x4000091}, 0x0) [ 952.622292][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 952.632027][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.640413][ T7] usb 2-1: Product: syz [ 952.644938][ T7] usb 2-1: Manufacturer: syz [ 952.649717][ T7] usb 2-1: SerialNumber: syz [ 952.781867][ T7] usb 2-1: config 0 descriptor?? [ 953.042050][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 953.080006][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 953.185360][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 953.193401][ T7] usb 2-1: media controller created [ 953.290816][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 954.131678][ T7] az6027: usb out operation failed. (-71) [ 954.137551][ T7] stb0899_attach: Driver disabled by Kconfig [ 954.143910][ T7] az6027: no front-end attached [ 954.143910][ T7] [ 954.161955][ T7] az6027: usb out operation failed. (-71) [ 954.167885][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 954.176882][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 954.198377][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 954.205725][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 954.229668][ T7] usb 2-1: USB disconnect, device number 37 [ 954.285720][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:10 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000b40)={0x0, 0xf, 0x12, "6476b4dd5c42f8a49b1638c80280f5d105a9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xc1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000c00)={0x20, 0x1, 0x7a, "cfb3614cbbb6197792c0c39ac3c6c2cdfda05525336b1e29cc0866d61bf0ca3e767603ed0e59956adfe5b4a3645e4915a28e9b20b8ccb0a756c972c5302c495940ba8f2b047af43dc2ecd4378985e47d66c642b34217cbc2ad2d403514dcc7b361d06859d6ba4a67481ad522af403590682cff3ac038faa3813d"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') readv(r0, &(0x7f0000000740)=[{0x0, 0x2}, {&(0x7f00000000c0)=""/200, 0xc8}], 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/5, 0x5}], 0x9) 21:53:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x5000000}]}}) 21:53:10 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x81000000, 0x0, 0x4000091}, 0x0) 21:53:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000000000007ca10000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:10 executing program 5: r0 = socket(0x11, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/65, 0x41}], 0x5, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 21:53:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x6000000}]}}) 21:53:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000000000f6a50000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 955.135392][T27008] bridge0: port 2(vlan3) entered blocking state [ 955.142058][T27008] bridge0: port 2(vlan3) entered disabled state [ 955.234830][ T7101] usb 2-1: new high-speed USB device number 38 using dummy_hcd 21:53:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x7000000}]}}) 21:53:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xe5, 0x7f}}, 0xe8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmmsg(r1, 0x0, 0x0, 0xb38ea96ead201a92) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg$unix(r1, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000006340)=[{0x0}], 0x1, &(0x7f0000006380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB=' \x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}}], 0x1, 0x2002, &(0x7f00000064c0)={0x77359400}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002940)=ANY=[@ANYBLOB="12010000d84bf120300927020000000000010902120001070000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000880)={0x20, 0x0, 0x14, "ff1597b09749ac3dfff912351bd1dea2c963203b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x85) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) write(r0, 0x0, 0x0) 21:53:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000d5fafca50000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 955.772584][ T7101] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 955.782041][ T7101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.790179][ T7101] usb 2-1: Product: syz [ 955.794632][ T7101] usb 2-1: Manufacturer: syz [ 955.799338][ T7101] usb 2-1: SerialNumber: syz [ 955.918424][ T7101] usb 2-1: config 0 descriptor?? [ 955.969126][T22760] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 956.186211][ T7101] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 956.221990][ T7101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 956.242945][ T7101] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 956.250230][ T7101] usb 2-1: media controller created [ 956.256168][T22760] usb 6-1: Using ep0 maxpacket: 32 [ 956.307484][ T7101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.392911][T22760] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 956.402187][T22760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.958810][T22760] usb 6-1: Direct firmware load for ar3k/AthrBT_0xb09715ff.dfu failed with error -2 [ 956.968489][T22760] usb 6-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xb09715ff.dfu [ 957.004611][T22760] Bluetooth: Patch file not found ar3k/AthrBT_0xb09715ff.dfu [ 957.012385][T22760] Bluetooth: Loading patch file failed [ 957.017946][T22760] ath3k: probe of 6-1:7.0 failed with error -2 [ 957.130579][T22760] usb 6-1: USB disconnect, device number 6 [ 957.381647][ T7101] stb0899_attach: Driver disabled by Kconfig [ 957.387802][ T7101] az6027: no front-end attached [ 957.387802][ T7101] [ 957.411691][ T7101] az6027: usb out operation failed. (-71) [ 957.417526][ T7101] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 957.426564][ T7101] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 957.440799][ T7101] dvb-usb: schedule remote query interval to 400 msecs. [ 957.448264][ T7101] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 957.469772][ T7101] usb 2-1: USB disconnect, device number 38 [ 957.528387][ T7101] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:13 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:13 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x88470000, 0x0, 0x4000091}, 0x0) 21:53:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x8000000}]}}) 21:53:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000000054fcfca50000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 957.922884][T12746] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 958.211654][T12746] usb 6-1: Using ep0 maxpacket: 32 21:53:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x9000000}]}}) 21:53:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000005ccddbcd0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 958.381802][T12746] usb 6-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice= 0.00 [ 958.391226][T12746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.455978][ T7] usb 2-1: new high-speed USB device number 39 using dummy_hcd 21:53:14 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x88480000, 0x0, 0x4000091}, 0x0) [ 958.746263][T27093] bridge0: port 2(vlan3) entered blocking state [ 958.752977][T27093] bridge0: port 2(vlan3) entered disabled state 21:53:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r0, 0x15}, 0x10) rename(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r3 = socket(0xa, 0x3, 0xbc) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x20000588, 0x3f0, 0x230, 0xffffffff, 0x0, 0x118, 0x4e0, 0x4e0, 0xffffffff, 0x4e0, 0x4e0, 0x5, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'ip_vti0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@private, @gre_key, @icmp_id}}}, {{@ipv6={@remote, @loopback, [], [], 'ip_vti0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@rand_addr=' \x01\x00'}}}, {{@ipv6={@dev, @remote, [], [], 'macsec0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2}}}, {{@ipv6={@local, @mcast2, [], [], 'wg1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@rand_addr=' \x01\x00', @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0xfc30) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x400, 0x25]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x0, 0x3, '\x00', {0x9}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x53b8bc33d710b53d}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_delroute={0x24, 0x19, 0x200, 0x72bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x80, 0x0, 0x3, 0xfe, 0x0, 0x800}, [@RTA_PRIORITY={0x8, 0x6, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x28011) [ 958.791970][T12746] Bluetooth: Can't get state to change to load ram patch err [ 958.799569][T12746] Bluetooth: Loading patch file failed [ 958.805541][T12746] ath3k: probe of 6-1:7.0 failed with error -71 [ 958.877640][T12746] usb 6-1: USB disconnect, device number 7 21:53:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xa000000}]}}) 21:53:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000fcd7f9cd0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 959.043556][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 959.052931][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.061220][ T7] usb 2-1: Product: syz [ 959.065738][ T7] usb 2-1: Manufacturer: syz [ 959.070520][ T7] usb 2-1: SerialNumber: syz [ 959.268079][ T7] usb 2-1: config 0 descriptor?? [ 959.327141][T27135] x_tables: duplicate underflow at hook 3 21:53:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xb000000}]}}) [ 959.561723][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 959.587336][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 959.707624][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 959.715246][ T7] usb 2-1: media controller created [ 959.900979][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 960.923451][ T7] stb0899_attach: Driver disabled by Kconfig [ 960.929653][ T7] az6027: no front-end attached [ 960.929653][ T7] [ 960.951698][ T7] az6027: usb out operation failed. (-71) [ 960.957583][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 960.966498][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input89 [ 960.992729][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 960.999887][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 961.019207][ T7] usb 2-1: USB disconnect, device number 39 [ 961.088632][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:17 executing program 5: syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x35, 0x41, 0x7, 0x10, 0x742, 0x200a, 0x2e7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x5, 0x32, 0x35, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x6, 0x698, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x3, 0xe1, 0x78, 0x8, 0x586, 0x401a, 0xa5fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x686, 0x1, 0x5e, 0x9, 0x40, 0x0, [{{0x9, 0x4, 0x99, 0xff, 0xc, 0x6c, 0x9f, 0x5e, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x93c9, 0x3}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x2], 0x20}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x3, 0x4, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x2, 0x3, 0x1f}]}], [{{0x9, 0x5, 0xd, 0x3, 0x10, 0x1, 0xc0, 0x7, [@generic={0xd5, 0x11, "79d74e9915a0ada2dc3237ebcb5074dc68a0bde7ca03c729510e8fe7cdb32ef0aa3ace43b24599c3cba1ac902f96221e505f61ab560da82704b5964b7ee8561a1f8d3c2df05e6c56c8a32a0923f7126269b71ac51842185b60b95dda98cb35193b940f8a30afadc5d6b8753b2805806dd26c57e7ca5574984a36147e061b950493073495939f2ac5994e1c86377b71c8776f5018cdea857f8a5f5d0c1ca5f3ee52700dc137029b43570f77a0be8f0e318bbe27a25ca1ea9afa6cbfb7aeea48220b8880e67ac4f60061f0ab8836a77e5a99218c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0x1d, 0xc, 0x20, 0x6, 0x0, 0x0, [@generic={0xc5, 0x2, "d156e1c77d256311b2c621886b6e73aab4651011e95bc59f3e024ca347012e804ea12ee968701924498623ff37ed69e66566dd41ea60a5593e282ecfbec243659123e1c8bfe83bcdfa39c1d64bd156e72a993f4919b426aff7153143990880a89fa421d59df7ddcd0df096a3eeb696fd8211cd44f264e9bab8b72cdd402627b4cbf060b66ef56b554196b5b1dce1e8af52f7b63978f9ecb1e82bbef741eb557bc31d3514884d2a17046e3b0507379fe070b99ea6f1679d18bf881e74d26fc2e0d02862"}, @generic={0x5c, 0x1, "c09ccd47c3103a2bdb6d45d68fa7b81a2f1260b3d47a76792a11213801b100961f08ab695ec0fc5213218763f32c303a4e1cf2805612101acaceb9b691d130bf2b37504b60eeecae78f41d0cba6a1d537963fdbf0b39dacdbe66"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3e7, 0x2, 0x0, 0x6, [@generic={0x33, 0x19ffac5f708d1d3d, "230a11ad7e5b9a17720277593061686913875b4d23d96a9dbd17f31d8d78efbc8519fafe4e03fab75ac007a508dfa65c1c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x3b, 0x1, 0xd0, [@generic={0x4f, 0x2, "6af9c939ca191c545eac980e66cba186bb67a735106e68d6ed308d73a3f45dce1fececcd56381d00417493620a03f3ddbe64ceca3a0df803fe32035a05ca0dcc728c2860c14d1ca9b9e82bc58c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x3c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x401}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4c, 0xed0}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0x1e, 0x9, [@generic={0x13, 0x21, "238fa55c6bb3ca1b119a104da33c4ba472"}, @generic={0xe7, 0x22, "30b61a074234f9aaec29f0fb9bf02088908fc13de90f7734ae272431cdc4bf4a0cce859c95380ad368786199e2be13b9239065a30018d7ecfe193f12cf1d9568a6501c5e7daab26366060efd5d11dd002b9784077b2b1390ddc748d53fdd7a3bc485c6b13ef7b9cb8c93ceb154f1cf90cbe6381d2831c289445d657bf0b70cc9038ed7a61b7241d7e6f324ac99e68818fb023647d2eddfa29fb9e109421eb54f20524fad9bd82f709e2dc5f09e9910056ff1dd36054741aef66358a498c8d74f53d18080e6e5a216883232fce2a8a7d0121e288b2c7ffe5355ab7da360b8f82828de9c938e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x3, 0x2, [@generic={0x9e, 0x23, "73e7d51f52b31d8cbcf187498eabb252ae8c9a3e429eab248c27128a8259c98c560563d6e147368afd6e4a7bb1b404950bfd0ff803f5eb048d408c33a6105ebbdc1e191960917b4a16c3fa53cd741a576b76aeb0956a6013c76bde4f8c54f8465497d4cc79088cd5f4a9798e22bb29971ef99fa90fb1a31d032d453693241cc0c162d47c599691b4c9954d22ba869e3c82ef328fcbb33dd5d6c598a9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x4}]}}, {{0x9, 0x5, 0xe, 0xf, 0x40, 0x2, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xc360}, @generic={0xb6, 0x5, "9fcfa9522743f4b39a0680915bf189d6b93702662a09e87c5c8b65209ada8665fb04e7f46edf4e91e155cccc83f49d3a599ab3f3855da758bed029cc0722704b86db16e769c7f8c81cd8984ed29599a960d15efef372d7e51ce735539896d9b09be7b3c6c441a8dfe76a36f1f66d9d2a31f1935be6c48b70afb6bc3fc327d4b3b9b60d691dcd5ce073870485feccb8c20d7772cbe1084f271348f8da476b0b6801034f0865d06fe35b3027fc2909bf06de05344a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0xff, 0x4, 0x0, [@generic={0xf, 0x23, "92112c0695e78b06f0dd57675a"}, @generic={0xd7, 0x31, "dca215aff57e58c585b136328633965dd325c36cb9e71f81b3021dfa34b09bbdc5fe3b0105f47949f2260ed82681dca0e30f0e1692abbe4bf4d5bc3a2ae926a3623985abf123177276c8a8dae8e7b9a2adca2a2737c8e52ea539613d63bcdf21d0fd0e75d9c668498e7925b4a43bf1b1ae6310e4bf24ccb2cb688c2f519295e6e902f6ed7706c603531839ee347e3f036afffa721fda6a227ea2ee228fa956664e75caf1b6e7fb44fc42e91ca1d55b80df955d6d8ca2c4948567a78caa037a88a5faa9e13ec69bf82c3d3caf06bc4ace507efbd320"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x2, 0x3}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x4, 0x5, 0x10, 0x8}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3840}}, {0xad, &(0x7f0000000880)=@string={0xad, 0x3, "96920451563ba6e03575d70abdd71c370a8dac458477a5701d3c6fce4b0a8e7fea0c15c0482935d77fc7d24d5ecf96d539778bda8d48c5dd7ebf315eae448218908c822dbfbb25cc4da33839ca1bc18bf7bbb3e5e9bbb6b330c17068f2f25ffa35e3a1aa1b44004bc3f8073a540dd3cef08026faacf2b8765e88bfc050cdcdcf640bf50a06f53a242e16793ebe3feaa1b8065d4dc373e057131e7faa44c8f28d5f39d41d231a3dad413bed"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c40}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x44d}}, {0x9c, &(0x7f0000000980)=@string={0x9c, 0x3, "2064e603061ec8cf9a3b7916d164dd013958fae740efd6ea880bf42606d62706021c4fddb3f2fa956ce01d03623a4bb4d8c818355a25bbf083c87ea5edf5fa7eeffe34f6e2a21cd6241194b0289800845c966383423bc7c17cc8e8143e76d575f6f0e1ccb3734cc0521fc4c96354059b4248477bc093aaa58a3e0745ee17893b94850f3ee383a37cfb3264a3becb0bb69b5a544197c6b05cb14e"}}, {0xdf, &(0x7f0000000a40)=@string={0xdf, 0x3, "cc78ed10d2e15a166a471b59150ad171fd8b7c9202fda2f88d232f711cf2017329e2635d69d2da465b97349a1735165ede31a9af42e7ecd291275dfde20b9c6c21938c9e5609c64016146d224b8ff6e07872c351a2594118413660c8062fd6d8b125bcb420fd1e82dc31d37f4aed833a70e73c06bc5e87fd5d2c07c71cdb65ea45a8c503fe61c995d0936949bbc2fe036543b2220c278143789140011b2bd548007cc8c40cd89a33d099befa53b51dba7ef26b00ccc0e5839542c36f2dad2182316bfbde7811c0b86ab49f7fb6d675090e69a37cd79d3f2026fe4f4db4"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000c40)={0x20, 0x24, 0xd3, {0xd3, 0x31, "dc8bf3545e0f08f296fa22cc3b87666f25e8ace49a2c12fc64b543fe9785399226e895f4dd87bed4a6c8da7d69cadb81ff08f22b79fe0470ab2347509978b945781c2fc6a3e00bf164d50e348f0bcbf178bf6d025820067c4854093a87b07e07608146c4d982228e0751ed1d391f7b8a6e9bd41f57feabd2af6d965ba7419d81a04c1a528f2f7bed3241e08c9d779ceb46b1bd946c48926c39e35574e7157bd8323c492138d88266cc5fb968bd3122bd04b5763a0ce226f36f7c413f001499fcb03991e31adae3d96e07ea89b41ed0bbda"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, &(0x7f0000000d80)={0x0, 0xf, 0xe0, {0x5, 0xf, 0xe0, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x1, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0xb, 0xf0}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "24f4d9baa66b75d936ea8eb74f4f8464"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x0, 0xf8}, @generic={0xaf, 0x10, 0x3, "0d8413ae8fa6ebcd94aa1de836e83b7c3f3b6032fb9bbe904159976752cdedcfd00e164f29af1fa5ceccd81c6a53b8c164ffb49105f4e5aa5d4feca7609d48493962093c8147ddb73e763798d6637830c0d92b2f192db31ec4d49acd524e2ab5ffd431c243aa968bfc829e24c1322999ab9bd40926a1d2a9f492eac4348c4eeb329fda136d9bc41b31e818479dbccb540117e995cd8fe8e7e12597d7b6a67cd0cc828d6343e8fdb83ea9bf65"}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x3, 0x0, 0x7, "571aecbe", "43f9ccee"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xab, 0x5, 0x90, 0x8001, 0x3ff}}}, &(0x7f0000001400)={0x84, &(0x7f0000000f40)={0x0, 0x0, 0xc4, "c32dc76b74d2fc054a66ec3f443301423c895736d9f96ea8462187a9dc8b474b8431d25a55c8d746f7b07f7f1337671ae1cd72cc922746a5de61f2c1b15e30408038a57c6b825db086de4ff59a8c16474da90d2c83d2e0557083ee54c89c07593cb13d003e4dbdbeeab64d593a54a74abc7c1c86cc7d31460903e3206b850bacbb39a225f643daf2257e00869953e34c97044e47aac84305b9b3886461f04cfbd0ef492b765a2d5f83cc6c49954a13c46238bb71b9b8d0123417dcfcaea9bc68e6258bad"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0xab}, &(0x7f0000001080)={0x0, 0x8, 0x1}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x120, 0x40}}, &(0x7f0000001140)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001180)={0x40, 0x9, 0x1, 0x1}, &(0x7f00000011c0)={0x40, 0xb, 0x2, 'XU'}, &(0x7f0000001200)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001240)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001280)={0x40, 0x17, 0x6, @local}, &(0x7f00000012c0)={0x40, 0x19, 0x2, "0e6f"}, &(0x7f0000001300)={0x40, 0x1a, 0x2, 0x7de3}, &(0x7f0000001340)={0x40, 0x1c, 0x1, 0x28}, &(0x7f0000001380)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000013c0)={0x40, 0x21, 0x1, 0xf6}}) 21:53:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000fffffff50000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:17 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x88a8ffff, 0x0, 0x4000091}, 0x0) 21:53:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xc000000}]}}) 21:53:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 961.788509][T27181] bridge0: port 2(vlan3) entered blocking state [ 961.795215][T27181] bridge0: port 2(vlan3) entered disabled state [ 961.831863][ T7101] usb 6-1: new high-speed USB device number 8 using dummy_hcd 21:53:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xd000000}]}}) 21:53:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000081fa0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 961.911647][T10352] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 962.082157][ T7101] usb 6-1: Using ep0 maxpacket: 16 [ 962.214582][ T7101] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 962.224603][ T7101] usb 6-1: config 5 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 21:53:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0xe000000}]}}) 21:53:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000000000fc0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x9effffff, 0x0, 0x4000091}, 0x0) [ 962.432764][ T7101] usb 6-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=2e.7d [ 962.442021][ T7101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.450156][ T7101] usb 6-1: Product: syz [ 962.454579][ T7101] usb 6-1: Manufacturer: syz [ 962.459290][ T7101] usb 6-1: SerialNumber: syz [ 962.512416][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 962.523177][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.531323][T10352] usb 2-1: Product: syz [ 962.535965][T10352] usb 2-1: Manufacturer: syz [ 962.540705][T10352] usb 2-1: SerialNumber: syz [ 962.556447][ T7101] HFC-S_USB: probe of 6-1:5.0 failed with error -5 21:53:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 962.574328][T10352] usb 2-1: config 0 descriptor?? [ 962.753577][ T7101] usb 6-1: USB disconnect, device number 8 [ 962.849477][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 962.889747][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 962.952210][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 962.959567][T10352] usb 2-1: media controller created [ 963.116476][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.659689][T27225] bridge0: port 2(vlan3) entered blocking state [ 963.666337][T27225] bridge0: port 2(vlan3) entered disabled state [ 964.051977][T10352] az6027: usb out operation failed. (-71) [ 964.059581][T10352] stb0899_attach: Driver disabled by Kconfig [ 964.066152][T10352] az6027: no front-end attached [ 964.066152][T10352] [ 964.102521][T10352] az6027: usb out operation failed. (-71) [ 964.108435][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 964.117593][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input90 [ 964.173504][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 964.180545][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 964.195614][T10352] usb 2-1: USB disconnect, device number 40 [ 964.253241][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x10000000}]}}) 21:53:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000ffffffff0000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:20 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xa9973fc7, 0x0, 0x4000091}, 0x0) 21:53:20 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000200"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x11000000}]}}) [ 965.082156][T10352] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 965.203800][ T67] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 965.259610][T27272] bridge0: port 2(vlan3) entered blocking state [ 965.270073][T27272] bridge0: port 2(vlan3) entered disabled state 21:53:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000300"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:21 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xc73f97a9, 0x0, 0x4000091}, 0x0) [ 965.642708][T10352] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 965.652132][T10352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.660258][T10352] usb 6-1: Product: syz [ 965.664688][T10352] usb 6-1: Manufacturer: syz [ 965.669396][T10352] usb 6-1: SerialNumber: syz [ 965.738067][T10352] usb 6-1: config 0 descriptor?? 21:53:21 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x12000000}]}}) [ 965.803899][ T67] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 965.813337][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.821936][ T67] usb 2-1: Product: syz [ 965.826224][ T67] usb 2-1: Manufacturer: syz [ 965.831013][ T67] usb 2-1: SerialNumber: syz 21:53:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 965.942003][ T67] usb 2-1: config 0 descriptor?? [ 966.003139][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 966.014044][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.121343][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 966.129405][T10352] usb 6-1: media controller created [ 966.192156][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 966.233551][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 966.294881][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 966.365228][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 966.373074][ T67] usb 2-1: media controller created [ 966.472852][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.309380][ T67] az6027: usb out operation failed. (-71) [ 967.315282][ T67] stb0899_attach: Driver disabled by Kconfig [ 967.321351][ T67] az6027: no front-end attached [ 967.321351][ T67] [ 967.341674][ T67] az6027: usb out operation failed. (-71) [ 967.347521][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 967.356553][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input91 [ 967.371725][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 967.378763][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 967.396218][ T67] usb 2-1: USB disconnect, device number 41 [ 967.451651][T10352] stb0899_attach: Driver disabled by Kconfig [ 967.457742][T10352] az6027: no front-end attached [ 967.457742][T10352] [ 967.482422][T10352] az6027: usb out operation failed. (-71) [ 967.488357][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 967.497987][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 967.519471][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 967.600562][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 967.608023][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 967.659394][T10352] usb 6-1: USB disconnect, device number 9 [ 967.717891][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000400"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:23 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf0ffffff, 0x0, 0x4000091}, 0x0) 21:53:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x25000000}]}}) 21:53:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 968.282637][T12746] usb 2-1: new high-speed USB device number 42 using dummy_hcd 21:53:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {0x0, 0x5c000000}]}}) 21:53:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000700"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 968.862335][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 968.874086][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.882973][T12746] usb 2-1: Product: syz [ 968.887264][T12746] usb 2-1: Manufacturer: syz [ 968.892061][T12746] usb 2-1: SerialNumber: syz 21:53:24 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}]}}) [ 968.971909][T10352] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 969.024721][T12746] usb 2-1: config 0 descriptor?? 21:53:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xffffa888, 0x0, 0x4000091}, 0x0) [ 969.282610][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 969.342764][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 969.448994][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 969.456560][T12746] usb 2-1: media controller created [ 969.509774][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.535331][T10352] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 969.544697][T10352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.553021][T10352] usb 6-1: Product: syz [ 969.557301][T10352] usb 6-1: Manufacturer: syz [ 969.562156][T10352] usb 6-1: SerialNumber: syz [ 969.741209][T10352] usb 6-1: config 0 descriptor?? [ 970.052030][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 970.067556][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 970.105402][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 970.112866][T10352] usb 6-1: media controller created [ 970.133968][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.322879][T12746] az6027: usb out operation failed. (-71) [ 970.328805][T12746] stb0899_attach: Driver disabled by Kconfig [ 970.335231][T12746] az6027: no front-end attached [ 970.335231][T12746] [ 970.371789][T12746] az6027: usb out operation failed. (-71) [ 970.377645][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 970.386728][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 970.420804][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 970.427991][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 970.449509][T12746] usb 2-1: USB disconnect, device number 42 [ 970.527055][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a007c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x2}]}}) 21:53:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 971.232678][T10352] stb0899_attach: Driver disabled by Kconfig [ 971.238781][T10352] az6027: no front-end attached [ 971.238781][T10352] [ 971.266777][T10352] az6027: usb out operation failed. (-71) [ 971.272889][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 971.306623][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 971.318641][ T67] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 971.343851][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 971.350912][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 971.369478][T10352] usb 6-1: USB disconnect, device number 10 [ 971.428700][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x3}]}}) 21:53:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xffffff7f, 0x0, 0x4000091}, 0x0) 21:53:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00fc00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 971.882482][ T67] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 971.892002][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.900131][ T67] usb 2-1: Product: syz [ 971.904560][ T67] usb 2-1: Manufacturer: syz [ 971.909443][ T67] usb 2-1: SerialNumber: syz [ 972.089496][T27495] bridge0: port 2(vlan3) entered blocking state [ 972.097907][T27495] bridge0: port 2(vlan3) entered disabled state [ 972.292068][ T67] usb 2-1: config 0 descriptor?? 21:53:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x4}]}}) 21:53:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000300"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 972.434921][ T5] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 972.572247][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 972.637428][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 972.680632][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 972.688440][ T67] usb 2-1: media controller created 21:53:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 972.748856][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 972.992746][ T5] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 973.002266][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.010464][ T5] usb 6-1: Product: syz [ 973.015286][ T5] usb 6-1: Manufacturer: syz [ 973.020059][ T5] usb 6-1: SerialNumber: syz [ 973.195339][ T5] usb 6-1: config 0 descriptor?? [ 973.398082][T27524] bridge0: port 2(vlan3) entered blocking state [ 973.409119][T27524] bridge0: port 2(vlan3) entered disabled state [ 973.453140][ T5] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 973.517367][ T5] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 973.549333][ T5] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 973.557369][ T5] usb 6-1: media controller created [ 973.612759][ T5] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 973.961980][ T67] stb0899_attach: Driver disabled by Kconfig [ 973.968081][ T67] az6027: no front-end attached [ 973.968081][ T67] [ 973.995223][ T67] az6027: usb out operation failed. (-71) [ 974.001119][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 974.010543][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input95 [ 974.026125][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 974.033654][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 974.060028][ T67] usb 2-1: USB disconnect, device number 43 [ 974.160342][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:30 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x5}]}}) 21:53:30 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xffffff9e, 0x0, 0x4000091}, 0x0) 21:53:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 974.702949][ T5] stb0899_attach: Driver disabled by Kconfig [ 974.709279][ T5] az6027: no front-end attached [ 974.709279][ T5] [ 974.739329][ T5] az6027: usb out operation failed. (-71) [ 974.745527][ T5] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 974.754459][ T5] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 974.822547][T27559] bridge0: port 2(vlan3) entered blocking state [ 974.832682][T27559] bridge0: port 2(vlan3) entered disabled state [ 974.984098][ T5] dvb-usb: schedule remote query interval to 400 msecs. [ 974.991266][ T5] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 975.011893][T12746] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 975.087665][ T5] usb 6-1: USB disconnect, device number 11 [ 975.263474][ T5] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:53:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x6}]}}) 21:53:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00590500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 975.623332][T12746] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 975.635057][T12746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.643891][T12746] usb 2-1: Product: syz [ 975.648177][T12746] usb 2-1: Manufacturer: syz [ 975.653081][T12746] usb 2-1: SerialNumber: syz 21:53:31 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xfffffff0, 0x0, 0x4000091}, 0x0) [ 975.816462][T12746] usb 2-1: config 0 descriptor?? 21:53:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x7}]}}) [ 975.963964][T27611] bond1: (slave vlan3): Opening slave failed [ 976.071846][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 976.088644][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 976.146242][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 976.153859][T12746] usb 2-1: media controller created [ 976.162537][ T67] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 976.258503][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.824541][ T67] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 976.833960][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.842361][ T67] usb 6-1: Product: syz [ 976.846650][ T67] usb 6-1: Manufacturer: syz [ 976.851363][ T67] usb 6-1: SerialNumber: syz [ 976.886566][ T67] usb 6-1: config 0 descriptor?? [ 977.151867][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 977.191826][T12746] az6027: usb out operation failed. (-71) [ 977.197665][T12746] stb0899_attach: Driver disabled by Kconfig [ 977.204069][T12746] az6027: no front-end attached [ 977.204069][T12746] [ 977.222295][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 977.232431][T12746] az6027: usb out operation failed. (-71) [ 977.238481][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 977.251009][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input97 [ 977.273083][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 977.280131][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 977.280354][ T67] usb 6-1: media controller created [ 977.287438][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 977.323842][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.357017][T12746] usb 2-1: USB disconnect, device number 44 [ 977.478094][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000700"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x8}]}}) 21:53:33 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x40030000000000, 0x0, 0x4000091}, 0x0) [ 977.981206][T27662] bridge0: port 2(vlan3) entered blocking state [ 977.989617][T27662] bridge0: port 2(vlan3) entered disabled state [ 978.241781][ T67] az6027: usb out operation failed. (-71) [ 978.247749][ T67] stb0899_attach: Driver disabled by Kconfig [ 978.254101][ T67] az6027: no front-end attached [ 978.254101][ T67] [ 978.362385][ T67] az6027: usb out operation failed. (-71) [ 978.368346][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 978.410227][ T7] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 978.455195][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input98 [ 978.536863][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 978.544315][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 978.674320][ T67] usb 6-1: USB disconnect, device number 12 [ 978.844500][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:34 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:53:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00003f00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x9}]}}) 21:53:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:34 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x100000000000000, 0x0, 0x4000091}, 0x0) [ 978.994358][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 979.005945][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.014760][ T7] usb 2-1: Product: syz [ 979.019108][ T7] usb 2-1: Manufacturer: syz [ 979.024028][ T7] usb 2-1: SerialNumber: syz 21:53:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00004000"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 979.347460][T27702] bond1: (slave vlan3): Opening slave failed [ 979.606186][ T7] usb 2-1: config 0 descriptor?? 21:53:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xa}]}}) [ 979.764275][T10805] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 979.875863][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 979.901241][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 979.970011][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 979.978170][ T7] usb 2-1: media controller created [ 980.082418][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.311999][T10805] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 980.321220][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.329731][T10805] usb 6-1: Product: syz [ 980.335216][T10805] usb 6-1: Manufacturer: syz [ 980.339942][T10805] usb 6-1: SerialNumber: syz [ 980.366302][T10805] usb 6-1: config 0 descriptor?? [ 980.632545][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 980.655864][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.740018][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 980.750467][T10805] usb 6-1: media controller created [ 980.792333][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.956271][ T7] az6027: usb out operation failed. (-71) [ 980.962548][ T7] stb0899_attach: Driver disabled by Kconfig [ 980.968734][ T7] az6027: no front-end attached [ 980.968734][ T7] [ 980.995217][ T7] az6027: usb out operation failed. (-71) [ 981.001148][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 981.010038][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input99 [ 981.024504][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 981.032094][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 981.050005][ T7] usb 2-1: USB disconnect, device number 45 [ 981.128498][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:37 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xb}]}}) 21:53:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00055900"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:37 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x200000000000000, 0x0, 0x4000091}, 0x0) [ 981.601995][T10805] az6027: usb out operation failed. (-71) [ 981.607899][T10805] stb0899_attach: Driver disabled by Kconfig [ 981.614127][T10805] az6027: no front-end attached [ 981.614127][T10805] [ 981.643209][T10805] az6027: usb out operation failed. (-71) [ 981.649188][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 981.658396][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input100 [ 981.808443][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 981.815828][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 982.099726][T27770] bond1: (slave vlan3): Opening slave failed [ 982.162773][T10805] usb 6-1: USB disconnect, device number 13 21:53:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xc}]}}) 21:53:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 21:53:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00007c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 982.221626][ T7] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 982.447736][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:38 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x300000000000000, 0x0, 0x4000091}, 0x0) 21:53:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xd}]}}) [ 982.752558][ T7] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 982.762100][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.770333][ T7] usb 2-1: Product: syz [ 982.774932][ T7] usb 2-1: Manufacturer: syz [ 982.779685][ T7] usb 2-1: SerialNumber: syz 21:53:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00a17c00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 982.948655][ T7] usb 2-1: config 0 descriptor?? [ 982.962235][ T67] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 983.330004][T27807] bond1: (slave vlan3): Opening slave failed [ 983.422933][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 983.441950][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 983.496814][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 983.504543][ T7] usb 2-1: media controller created [ 983.595117][ T67] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 983.604507][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.614458][ T67] usb 6-1: Product: syz [ 983.618739][ T67] usb 6-1: Manufacturer: syz [ 983.623973][ T67] usb 6-1: SerialNumber: syz [ 983.664179][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 983.764567][ T67] usb 6-1: config 0 descriptor?? [ 984.031971][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 984.044981][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 984.084252][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 984.091787][ T67] usb 6-1: media controller created [ 984.132260][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 984.502004][ T7] az6027: usb out operation failed. (-71) [ 984.507945][ T7] stb0899_attach: Driver disabled by Kconfig [ 984.514535][ T7] az6027: no front-end attached [ 984.514535][ T7] [ 984.612155][ T7] az6027: usb out operation failed. (-71) [ 984.618109][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 984.627460][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 984.705022][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 984.712633][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 984.729320][ T7] usb 2-1: USB disconnect, device number 46 [ 984.805106][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 21:53:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xe}]}}) 21:53:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00fa8100"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:40 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x400000000000000, 0x0, 0x4000091}, 0x0) [ 985.062669][ T67] az6027: usb out operation failed. (-71) [ 985.068491][ T67] stb0899_attach: Driver disabled by Kconfig [ 985.074770][ T67] az6027: no front-end attached [ 985.074770][ T67] [ 985.174258][ T67] az6027: usb out operation failed. (-71) [ 985.180222][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 985.190025][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input102 [ 985.483246][T27865] bond1: (slave vlan3): Opening slave failed [ 985.489833][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 985.497415][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. 21:53:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a007ca100"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 985.643899][ T67] usb 6-1: USB disconnect, device number 14 21:53:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x10}]}}) [ 985.919184][T10805] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 986.043304][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00f6a500"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x500000000000000, 0x0, 0x4000091}, 0x0) 21:53:42 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x11}]}}) [ 986.452830][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 986.462262][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.470384][T10805] usb 2-1: Product: syz [ 986.474838][T10805] usb 2-1: Manufacturer: syz [ 986.485767][T10805] usb 2-1: SerialNumber: syz [ 986.624674][T10805] usb 2-1: config 0 descriptor?? [ 986.655953][T27908] bond1: (slave vlan3): Opening slave failed [ 986.708443][ T67] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 986.882425][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 986.919872][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 986.968365][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 986.976145][T10805] usb 2-1: media controller created [ 987.058148][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 987.342766][ T67] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 987.352152][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.360285][ T67] usb 6-1: Product: syz [ 987.364828][ T67] usb 6-1: Manufacturer: syz [ 987.369530][ T67] usb 6-1: SerialNumber: syz [ 987.577359][ T67] usb 6-1: config 0 descriptor?? [ 987.834970][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 987.875833][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 987.920710][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 987.928232][ T67] usb 6-1: media controller created [ 987.952794][T10805] az6027: usb out operation failed. (-71) [ 987.958625][T10805] stb0899_attach: Driver disabled by Kconfig [ 987.959583][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 987.964891][T10805] az6027: no front-end attached [ 987.964891][T10805] [ 988.087710][T10805] az6027: usb out operation failed. (-71) [ 988.094180][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 988.103159][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 988.187978][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 988.195372][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 988.265021][T10805] usb 2-1: USB disconnect, device number 47 [ 988.339429][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 21:53:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00a5f600"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x12}]}}) 21:53:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:44 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x600000000000000, 0x0, 0x4000091}, 0x0) [ 988.671803][T27968] bond1: (slave vlan3): Opening slave failed 21:53:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x25}]}}) [ 988.801784][ T67] az6027: usb out operation failed. (-71) [ 988.807788][ T67] stb0899_attach: Driver disabled by Kconfig [ 988.814083][ T67] az6027: no front-end attached [ 988.814083][ T67] [ 988.883339][ T67] az6027: usb out operation failed. (-71) [ 988.889313][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 988.898963][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input104 [ 989.050903][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 989.058300][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 989.135759][T10805] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 989.135908][ T67] usb 6-1: USB disconnect, device number 15 [ 989.284354][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:45 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0081fa00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:45 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x700000000000000, 0x0, 0x4000091}, 0x0) 21:53:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:45 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x5c}]}}) 21:53:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 989.686551][T10805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 989.695889][T10805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.704233][T10805] usb 2-1: Product: syz [ 989.708519][T10805] usb 2-1: Manufacturer: syz [ 989.713601][T10805] usb 2-1: SerialNumber: syz [ 989.931856][ T67] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 989.985258][T10805] usb 2-1: config 0 descriptor?? [ 990.262062][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 990.286534][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 990.346266][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 990.353877][T10805] usb 2-1: media controller created [ 990.409762][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 990.533001][ T67] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 990.542516][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.550666][ T67] usb 6-1: Product: syz [ 990.555169][ T67] usb 6-1: Manufacturer: syz [ 990.559893][ T67] usb 6-1: SerialNumber: syz [ 990.570832][ T67] usb 6-1: config 0 descriptor?? [ 990.835627][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 990.861927][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 990.887301][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 990.894825][ T67] usb 6-1: media controller created [ 990.968463][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.251761][T10805] az6027: usb out operation failed. (-71) [ 991.257711][T10805] stb0899_attach: Driver disabled by Kconfig [ 991.264414][T10805] az6027: no front-end attached [ 991.264414][T10805] [ 991.297382][T10805] az6027: usb out operation failed. (-71) [ 991.303415][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 991.311847][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105 [ 991.329442][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 991.336800][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 991.355315][T10805] usb 2-1: USB disconnect, device number 48 [ 991.427117][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 21:53:47 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x300}]}}) 21:53:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a0000fc00"/15}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x800000000000000, 0x0, 0x4000091}, 0x0) 21:53:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 991.931888][ T67] az6027: usb out operation failed. (-71) [ 991.937833][ T67] stb0899_attach: Driver disabled by Kconfig [ 991.944118][ T67] az6027: no front-end attached [ 991.944118][ T67] [ 991.999479][ T67] az6027: usb out operation failed. (-71) [ 992.005823][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 992.014840][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input106 21:53:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000010000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 992.276262][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 992.283422][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 992.364710][ T67] usb 6-1: USB disconnect, device number 16 [ 992.438350][T10352] usb 2-1: new high-speed USB device number 49 using dummy_hcd 21:53:48 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x500}]}}) 21:53:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x900000000000000, 0x0, 0x4000091}, 0x0) [ 992.556244][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000020000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:48 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x600}]}}) [ 993.051861][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 993.061076][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.069386][T10352] usb 2-1: Product: syz [ 993.073837][T10352] usb 2-1: Manufacturer: syz [ 993.078541][T10352] usb 2-1: SerialNumber: syz [ 993.226631][T10352] usb 2-1: config 0 descriptor?? [ 993.385515][ T67] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 993.502944][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 993.523849][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 993.559209][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 993.566745][T10352] usb 2-1: media controller created [ 993.612286][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.002892][ T67] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 994.012517][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.020651][ T67] usb 6-1: Product: syz [ 994.025269][ T67] usb 6-1: Manufacturer: syz [ 994.029987][ T67] usb 6-1: SerialNumber: syz [ 994.098834][ T67] usb 6-1: config 0 descriptor?? [ 994.371855][ T67] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 994.386612][ T67] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 994.418611][ T67] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 994.426114][ T67] usb 6-1: media controller created [ 994.451916][T10352] az6027: usb out operation failed. (-71) [ 994.457862][T10352] stb0899_attach: Driver disabled by Kconfig [ 994.464162][T10352] az6027: no front-end attached [ 994.464162][T10352] [ 994.493392][ T67] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 994.514879][T10352] az6027: usb out operation failed. (-71) [ 994.520702][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 994.530404][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input107 [ 994.575461][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 994.582570][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 994.598803][T10352] usb 2-1: USB disconnect, device number 49 [ 994.713716][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:50 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xa00000000000000, 0x0, 0x4000091}, 0x0) 21:53:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000030000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:50 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x700}]}}) 21:53:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 995.372262][ T67] az6027: usb out operation failed. (-71) [ 995.378161][ T67] stb0899_attach: Driver disabled by Kconfig [ 995.384492][ T67] az6027: no front-end attached [ 995.384492][ T67] [ 995.467077][ T67] az6027: usb out operation failed. (-71) [ 995.473616][ T67] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 995.482684][ T67] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input108 21:53:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000040000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 995.692007][ T67] dvb-usb: schedule remote query interval to 400 msecs. [ 995.700623][ T67] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 995.767733][ T67] usb 6-1: USB disconnect, device number 17 21:53:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:51 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x900}]}}) 21:53:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:51 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xb00000000000000, 0x0, 0x4000091}, 0x0) [ 995.924313][ T67] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000050000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 996.262446][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.268916][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 21:53:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xa00}]}}) 21:53:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 996.611975][T10352] usb 6-1: new high-speed USB device number 18 using dummy_hcd 21:53:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000060000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:52 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xc00000000000000, 0x0, 0x4000091}, 0x0) 21:53:52 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xb00}]}}) 21:53:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000f400128009000100766c616e00000000e400028006000100000000000c0002000200000009000000400004800c000100ff070000070000000c000100c6f80000090000000c000100ff010000090000080c000100faffffff070a00000c000100810200003f000000340004800c00010005000000ff0000000c00010003000000020000000c000100deffffff008000000c0001008000000000000000580004800c000100ff010000000000800c00010018090000300c00000c00010003000000800000000c000100bdee0000020000000c000100ffffff7f000000000c000100ff000000000400000c000100810000000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 997.162470][T10352] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 997.171750][T10352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.179884][T10352] usb 6-1: Product: syz [ 997.184340][T10352] usb 6-1: Manufacturer: syz [ 997.189060][T10352] usb 6-1: SerialNumber: syz [ 997.386794][T10352] usb 6-1: config 0 descriptor?? [ 997.695166][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 997.719381][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.809808][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 997.817318][T10352] usb 6-1: media controller created [ 997.853125][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.798166][T10352] az6027: usb out operation failed. (-71) [ 998.804247][T10352] stb0899_attach: Driver disabled by Kconfig [ 998.810319][T10352] az6027: no front-end attached [ 998.810319][T10352] [ 998.851824][T10352] az6027: usb out operation failed. (-71) [ 998.857651][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 998.866761][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input109 [ 998.922149][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 998.929200][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 998.963913][T10352] usb 6-1: USB disconnect, device number 18 [ 999.050400][T10352] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:55 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000070000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xc00}]}}) 21:53:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:55 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf00000000000000, 0x0, 0x4000091}, 0x0) 21:53:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a000000003f0000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:55 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xd00}]}}) 21:53:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 1000.025217][T10805] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1000.498021][T28287] bridge0: port 1(vlan2) entered blocking state [ 1000.526396][T28287] bridge0: port 1(vlan2) entered disabled state 21:53:56 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x1000000000000000, 0x0, 0x4000091}, 0x0) 21:53:56 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0xe00}]}}) [ 1000.702451][T10805] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 1000.711796][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.723254][T10805] usb 6-1: Product: syz [ 1000.727530][T10805] usb 6-1: Manufacturer: syz [ 1000.732447][T10805] usb 6-1: SerialNumber: syz [ 1000.747453][T10805] usb 6-1: config 0 descriptor?? [ 1001.012334][T10805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1001.061262][T10805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1001.146861][T10805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1001.154428][T10805] usb 6-1: media controller created [ 1001.259352][T10805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.111916][T10805] az6027: usb out operation failed. (-71) [ 1002.117714][T10805] stb0899_attach: Driver disabled by Kconfig [ 1002.124021][T10805] az6027: no front-end attached [ 1002.124021][T10805] [ 1002.142688][T10805] az6027: usb out operation failed. (-71) [ 1002.150170][T10805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1002.159948][T10805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input110 [ 1002.175202][T10805] dvb-usb: schedule remote query interval to 400 msecs. [ 1002.182499][T10805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1002.195077][T10805] usb 6-1: USB disconnect, device number 19 [ 1002.275530][T10805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:53:58 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:53:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000000400000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x1100}]}}) 21:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1b2f736f855fc520be59a0641fefaf8b95bdc78272af9e5f57b390feab78657a3d4c33f4be842c9d803eeb8084ed9fde4a7826e7164f9cb5d5b6bb5626d56467150842e9d25312157f2841a4ff160b7f277e11af69607a8743e39a65bd117843100563bed0cbaf453ea6bb7491defbb5dbdb14ac9e0214aa3130bfbe5d42a8b60a38ecb5d0de116e825eef29e26cb9ad4ac47a7c0543fbc6a0292c72495ba816d1c1a8cbbc05e97ba3a4fa1cccf0d5336a12555368b23dc952b6693790ee697e9cd4f36d7488ea71871e19513f0da2d8263853e2"], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:58 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x1100000000000000, 0x0, 0x4000091}, 0x0) [ 1002.946881][T28346] bridge0: port 1(vlan2) entered blocking state [ 1002.957264][T28346] bridge0: port 1(vlan2) entered disabled state 21:53:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x1200}]}}) 21:53:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:53:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00824243440000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 1003.392114][ T7] usb 6-1: new high-speed USB device number 20 using dummy_hcd 21:53:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0xf0ffffff, 0x0, 0x4000091}, 0x0) 21:53:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00a5fcfc540000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:53:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 1003.912712][ T7] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 1003.922331][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.930526][ T7] usb 6-1: Product: syz [ 1003.935055][ T7] usb 6-1: Manufacturer: syz [ 1003.939820][ T7] usb 6-1: SerialNumber: syz [ 1004.157560][ T7] usb 6-1: config 0 descriptor?? [ 1004.414526][T28378] bridge0: port 2(vlan3) entered blocking state [ 1004.423460][T28378] bridge0: port 2(vlan3) entered disabled state [ 1004.472552][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1004.534305][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1004.563049][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1004.570436][ T7] usb 6-1: media controller created [ 1004.623890][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.491780][ T7] az6027: usb out operation failed. (-71) [ 1005.497708][ T7] stb0899_attach: Driver disabled by Kconfig [ 1005.504144][ T7] az6027: no front-end attached [ 1005.504144][ T7] [ 1005.532706][ T7] az6027: usb out operation failed. (-71) [ 1005.538642][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1005.547796][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input111 [ 1005.562457][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 1005.569600][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1005.587771][ T7] usb 6-1: USB disconnect, device number 20 [ 1005.658079][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. 21:54:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:54:01 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x2500}]}}) 21:54:01 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6000000000000000, 0x0, 0x4000091}, 0x0) 21:54:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00000005590000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:54:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x60, 0x3, 0xe5, {0xe5, 0xa, "12001e59187bfc60b6cb16ccc393bb35d4f384d57e6ec51c05143e078d6232ebff257a9ddff3bbd7c5bd87f1a4c0dbb4eebdd7545df0fa6b6e172abf6f022bedf99c6fb1bb82b34f28bfa3e55c32b6ebfe3ca816a7a5c0d239624d1123ac31127ba4b4801daa68f55c6a75298c11164f175e549d919f846dafc7723c66a90c59ca3eb3827ee5bf8436609b1c17855c45601eab818d6b8362cb5980c7b5f14045e84668a37e9682dd924c5b5401e258e50f2b6206ca2160a7add0fc3067c1fafd034e15c497c66d12fdc3228322589bc05b3c48d385812ce844229eac883efdbe78ba15"}}, &(0x7f0000000100)={0x0, 0x3, 0x76, @string={0x76, 0x3, "f3cb8675c2e2b3ac25424a661ca7f465501881d881609e8f4197bc8ac9bae6ba962b282932d4e421a7e92ee76e06a7bc975c6256251f0b03225b3ecf4aa71392824d16aa74bc3fbb9499cee67d39cb7cdcfd2edca9f74cdf7dcd6d6ff4dc4fae8ad10079a262971dd6f213ca8bee3167606bb9cb"}}, &(0x7f0000000180)={0x0, 0xf, 0x95, {0x5, 0xf, 0x95, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1ff, 0xf00f, 0x2, [0xc0, 0xc000, 0x3f00, 0xc0c0, 0x3f30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xf9, 0x2, 0x1000}, @generic={0x59, 0x10, 0x1, "35be9b52288181e2c1927678d3de124e60cf12c4484ba269f060119ce786fdf69de08c5a9873e183e84dc9e4b8fcb2bf1c226d3c5147c55b5a69e03987a206bdffc765d1f4d9d4568c6714fbcc3f05f1e535b48a00bf"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x8}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x7f, 0x0, "df46d859", "c30ca0c8"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x20, 0x80, 0xfc, 0xd3, 0x6, 0x1, 0x8}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x5, 0x8a, "cf2ac38a803383b15fc5929212dc88096225db81e2269217625ba3f29f7774ea031d118009d1c53d47c96a9bf978b8a3b063e9dd84fb6cff8e89d906aaff66a245c9d613f0f697aaa62f316fc9d90dec522c6a1dae3cee36e3c8d2c33cf27806c5df15400dfd94180131999f5712e6bb0117b136b70ac8b8fccab3e7b8719ac39e65d71d50615e8ca690"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf01e]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "d4ea"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, 'BE'}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x2a}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1b}}) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x40, 0x23, 0xdc, {0xdc, 0x10, "961697e1c8b4c6886fa2531ce08d82399fdbd2485500210212a6e3e9811580367f68a72b64ad63eb6a5e00902b66521369f96486fd6d03948dcf3420e72d8dbe0038add1c05bf533f54624488d81b876549add6c5f45f9aa3f86534ff335689b332d391638b6309ec22d9f6ad93d753c35cb6f5b7a6a2e5b31c115cf9866fab346bb9445d319a504331e096bd3f58bf879e7f18539dc142b27fb070a2b7dd08b8e01418ebce37e00dc1639737353360d8f80aed7a05038581223a3642e9b0519dc2131e7102feed161a63daa392d119b3ce6d02d670b6c44ee35"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000ac0)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x40, 0x5, "5df65cdb", "1c3e9f71"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x4, 0x40, 0xe8, 0x100, 0x1000}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000bc0)={0x60, 0xf, 0x20, "86a502a80355bf51c92cba713d108fe386fa701a05fec649e34165aace102c55"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000c40)={0x0, 0x8, 0x1}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x4, 0x4}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x82}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "e324"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="ab0c45dc8d82"}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "19e2"}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0xee3}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:54:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 1006.211223][T28422] bridge0: port 2(vlan3) entered blocking state [ 1006.219527][T28422] bridge0: port 2(vlan3) entered disabled state 21:54:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00ffff845a0000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:54:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x5c00}]}}) [ 1006.472361][T10352] usb 2-1: new high-speed USB device number 50 using dummy_hcd 21:54:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00cddbcd5c0000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) [ 1006.671744][T12746] usb 6-1: new high-speed USB device number 21 using dummy_hcd 21:54:02 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x80000}]}}) 21:54:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) 21:54:02 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x12801, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x80005) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) fallocate(r2, 0x53, 0x1, 0x7fffffff) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) listxattr(0x0, &(0x7f0000000080)=""/26, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0xfffffffd, 0x25dfdbfc, {0xa, 0x0, 0x3a, 0x2, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x80, 0x3, 0xffffffff}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x54}, 0x1, 0x6558000000000000, 0x0, 0x4000091}, 0x0) [ 1007.012344][T10352] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 1007.021798][T10352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.029927][T10352] usb 2-1: Product: syz [ 1007.034451][T10352] usb 2-1: Manufacturer: syz [ 1007.039166][T10352] usb 2-1: SerialNumber: syz [ 1007.187450][T10352] usb 2-1: config 0 descriptor?? [ 1007.192948][T12746] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002a, bcdDevice=d3.73 [ 1007.202330][T12746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.210449][T12746] usb 6-1: Product: syz [ 1007.214926][T12746] usb 6-1: Manufacturer: syz [ 1007.219632][T12746] usb 6-1: SerialNumber: syz [ 1007.327273][T12746] usb 6-1: config 0 descriptor?? [ 1007.462874][T10352] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1007.571240][T10352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1007.692032][T10352] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1007.699425][T10352] usb 2-1: media controller created [ 1007.722817][T12746] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1007.763110][T12746] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1007.846556][T10352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1007.859606][T12746] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1007.867176][T12746] usb 6-1: media controller created [ 1008.042196][T12746] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.791770][T12746] az6027: usb out operation failed. (-71) [ 1008.791815][T12746] stb0899_attach: Driver disabled by Kconfig [ 1008.791851][T12746] az6027: no front-end attached [ 1008.791851][T12746] [ 1008.813252][T12746] az6027: usb out operation failed. (-71) [ 1008.819071][T12746] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1008.828651][T12746] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input112 [ 1008.845629][T12746] dvb-usb: schedule remote query interval to 400 msecs. [ 1008.853112][T12746] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1008.869425][T12746] usb 6-1: USB disconnect, device number 21 [ 1008.936143][T12746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1008.962037][T10352] stb0899_attach: Driver disabled by Kconfig [ 1008.968192][T10352] az6027: no front-end attached [ 1008.968192][T10352] [ 1009.014885][T10352] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1009.024049][T10352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113 [ 1009.072416][T10352] dvb-usb: schedule remote query interval to 400 msecs. [ 1009.079478][T10352] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. 21:54:05 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120104000f886b40d90f2a0073d3010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0000df0200000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 21:54:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8a, &(0x7f0000000800)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x12, 0xf989, "5ab971d14f73e13277c8d2c03afe"}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a009b1e4b790000000000000000"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @private}]}}}}}}}}, 0x0) 21:54:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7b}, {}, {}, {}, {0x1000000}]}}) 21:54:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2401000010000305003a0000713e000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x124}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x44, 0x66, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0xfff2, 0x3}, {0xe, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfffff800}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048871}, 0x880) [ 1009.481914][T10352] ===================================================== [ 1009.488993][T10352] BUG: KMSAN: uninit-value in legacy_dvb_usb_read_remote_control+0x396/0x700 [ 1009.497786][T10352] legacy_dvb_usb_read_remote_control+0x396/0x700 [ 1009.504254][T10352] process_one_work+0xdc7/0x1760 [ 1009.509317][T10352] worker_thread+0x1101/0x22b0 [ 1009.514103][T10352] kthread+0x66b/0x780 [ 1009.518186][T10352] ret_from_fork+0x1f/0x30 [ 1009.522695][T10352] [ 1009.525025][T10352] Local variable state created at: [ 1009.530134][T10352] legacy_dvb_usb_read_remote_control+0x69/0x700 [ 1009.536566][T10352] process_one_work+0xdc7/0x1760 [ 1009.541532][T10352] ===================================================== [ 1009.548461][T10352] Disabling lock debugging due to kernel taint [ 1009.554769][T10352] Kernel panic - not syncing: panic_on_kmsan set ... [ 1009.561624][T10352] CPU: 1 PID: 10352 Comm: kworker/1:5 Tainted: G B W 5.15.0-rc7-syzkaller #0 [ 1009.571533][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.581599][T10352] Workqueue: events legacy_dvb_usb_read_remote_control [ 1009.588478][T10352] Call Trace: [ 1009.591759][T10352] dump_stack_lvl+0x1ff/0x28e [ 1009.596460][T10352] dump_stack+0x25/0x28 [ 1009.600631][T10352] panic+0x44f/0xdeb [ 1009.604617][T10352] ? add_taint+0x187/0x210 [ 1009.609107][T10352] ? add_taint+0x187/0x210 [ 1009.613544][T10352] kmsan_report+0x2ee/0x300 [ 1009.618069][T10352] ? __msan_warning+0xb4/0x100 [ 1009.622852][T10352] ? legacy_dvb_usb_read_remote_control+0x396/0x700 [ 1009.629461][T10352] ? process_one_work+0xdc7/0x1760 [ 1009.634595][T10352] ? worker_thread+0x1101/0x22b0 [ 1009.639554][T10352] ? kthread+0x66b/0x780 [ 1009.643812][T10352] ? ret_from_fork+0x1f/0x30 [ 1009.648433][T10352] ? kmsan_get_metadata+0x11b/0x180 [ 1009.653665][T10352] __msan_warning+0xb4/0x100 [ 1009.658276][T10352] legacy_dvb_usb_read_remote_control+0x396/0x700 [ 1009.664704][T10352] ? kmsan_get_metadata+0x11b/0x180 [ 1009.669908][T10352] ? legacy_dvb_usb_setkeycode+0x9e0/0x9e0 [ 1009.675719][T10352] process_one_work+0xdc7/0x1760 [ 1009.680675][T10352] worker_thread+0x1101/0x22b0 [ 1009.685459][T10352] kthread+0x66b/0x780 [ 1009.689541][T10352] ? worker_clr_flags+0x370/0x370 [ 1009.694579][T10352] ? kthread_blkcg+0x120/0x120 [ 1009.699356][T10352] ret_from_fork+0x1f/0x30 [ 1009.704104][T10352] Kernel Offset: disabled [ 1009.708414][T10352] Rebooting in 86400 seconds..