Extracting prog: 36m3.570466406s Minimizing prog: 43m15.999336997s Simplifying prog options: 0s Extracting C: 2m25.739789275s Simplifying C: 9m27.187236284s extracting reproducer from 19 programs testing a last program of every proc single: executing 7 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe2-openat$ptmx-timer_create-fcntl$lock-mprotect-timer_settime-sendfile detailed listing: executing program 0: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_io_uring_setup-syz_usb_connect$printer-syz_usb_control_io$printer-syz_open_dev$char_usb-pwritev2-write$uinput_user_dev-ppoll detailed listing: executing program 0: syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-prlimit64-sched_setscheduler-getpid-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-setrlimit-io_setup detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000400)) io_setup(0x2004, &(0x7f0000000680)) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-socket$nl_generic-sendmsg$nl_generic-socket$inet6_sctp-openat$binderfs-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-openat$sequencer-writev-syz_init_net_socket$llc-getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS-connect$llc-sendmmsg-prctl$PR_SCHED_CORE-sched_setattr-mmap$dsp-madvise-clock_adjtime-ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK detailed listing: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) clock_adjtime(0x4, &(0x7f0000000e00)={0x1, 0xe2d, 0x309, 0x0, 0x8000, 0x9f69, 0xfffffffffffffffe, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x1, 0x0, 0xfffffffffffffdff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-mprotect-setsockopt$XDP_UMEM_FILL_RING-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-openat$tun-ioctl$TUNSETIFF-socket$nl_generic-socket-socket$nl_generic-semctl$IPC_STAT-sendmsg$nl_route_sched-syz_init_net_socket$nl_generic-openat$procfs-keyctl$set_timeout-read$FUSE-syz_genetlink_get_family_id$netlbl_cipso-sendmsg$NLBL_CIPSOV4_C_ADD-sendmsg$nl_route_sched-syz_usb_connect-sendmsg$nl_route_sched-syz_emit_vhci-bpf$PROG_LOAD_XDP-bpf$BPF_LINK_CREATE_XDP-bind$xdp detailed listing: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$uac3-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ncm detailed listing: executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_udp-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_open_dev$char_usb-close_range detailed listing: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) VM was preempted during syz execution: failed to run command in VM: instance is preempted, retrying program did not crash single: failed to extract reproducer bisect: bisecting 19 programs with base timeout 1m40s testing program (duration=1m44s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 5, 2, 4, 27, 25, 17, 20, 3, 2, 17, 3, 30, 14, 20, 21, 19, 7, 7] detailed listing: executing program 6: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000020000000100000f02000000040000000b00000033b39a2436340b0000000200000f0200000001000000636bb3d17f00000003000000ced200"], 0x0, 0x5c, 0x0, 0x1, 0x5}, 0x28) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0xfb69, 0x0, 0x7, 0xd8, 0x5, 0x101}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e23, @multicast1}, 'gre0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe0001"], 0x408100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x29, '\x00', @buffer={"0000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e8300", 0x20}, 0x1c}]}) socket$inet_mptcp(0x2, 0x1, 0x106) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000000c0)=0x7) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x24008800) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) executing program 1: r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x109000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) memfd_create(0x0, 0x7) timer_create(0x1, 0x0, &(0x7f0000000480)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4008081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x41) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x800) close(r0) executing program 6: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x83, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000003c0)={0x1, 0x7, 0x6, &(0x7f00000002c0)={0x3, "265cd081b200f64b5b10c3ef1022a0a095973ca9558a129ba1d4bf00a260537b88"}}) executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f07de) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x100871}) executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400007, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r1, 0x0, 0x1, 0x0, 0x0}) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) userfaultfd(0x801) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="50000000020101020000000000000000070000091c0010800800034000000005080003400000d6a82ee852498c4b664ea000020800014000000b7b14001080080002400000e30d08000140000000060c0001803f41034000030000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r7 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="6ab0bd0aa27a", @void, {@ipv4={0x8035, @igmp={{0x5, 0x4, 0x3, 0x25, 0x1c, 0x64, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1e, 0x5, 0x0, @private=0xa0100ff}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x100000000000000) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) recvmmsg(r8, &(0x7f0000000a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/57, 0x39}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/172, 0xac}], 0x8, &(0x7f0000000a00)=""/125, 0x7d}, 0x3}], 0x1, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000d80)={r7, &(0x7f0000000c80)='tracefs\x00', 0x21e09318a7e469fd, &(0x7f0000000e00)={@_ha_fsid={[0x6, 0xfffffff8]}, {0x7, 0xffe, 0x7d, 0x8000000000020005}}, 0xa, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0x4}) linkat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', r9, &(0x7f0000000dc0)='./bus\x00', 0x400) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3703, 0x1901}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d809}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x4, 0xf}) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60a7a09600183afffe8000000000000000000000000000aaff020000000040000000000000000001000090780000e7fffe8000000000000000000000000000aa"], 0x0) executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) clock_adjtime(0x4, &(0x7f0000000e00)={0x1, 0xe2d, 0x309, 0x0, 0x8000, 0x9f69, 0xfffffffffffffffe, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x1, 0x0, 0xfffffffffffffdff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) executing program 6: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(0x0, 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000400)) io_setup(0x2004, &(0x7f0000000680)) executing program 4: syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) program crashed: memory leak in vidtv_psi_service_desc_init bisect: bisecting 19 programs bisect: split chunks (needed=false): <19> bisect: split chunk #0 of len 19 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 3, 2, 17, 3, 30, 14, 20, 21, 19, 7, 7] detailed listing: executing program 1: r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x109000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) memfd_create(0x0, 0x7) timer_create(0x1, 0x0, &(0x7f0000000480)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4008081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x41) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x800) close(r0) executing program 6: syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x83, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000003c0)={0x1, 0x7, 0x6, &(0x7f00000002c0)={0x3, "265cd081b200f64b5b10c3ef1022a0a095973ca9558a129ba1d4bf00a260537b88"}}) executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f07de) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x4, 0x100871}) executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400007, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r1, 0x0, 0x1, 0x0, 0x0}) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) userfaultfd(0x801) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="50000000020101020000000000000000070000091c0010800800034000000005080003400000d6a82ee852498c4b664ea000020800014000000b7b14001080080002400000e30d08000140000000060c0001803f41034000030000"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r7 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="6ab0bd0aa27a", @void, {@ipv4={0x8035, @igmp={{0x5, 0x4, 0x3, 0x25, 0x1c, 0x64, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1e, 0x5, 0x0, @private=0xa0100ff}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x100000000000000) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffe) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) recvmmsg(r8, &(0x7f0000000a80)=[{{&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/218, 0xda}, {&(0x7f0000000540)=""/20, 0x14}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/109, 0x6d}, {&(0x7f0000000780)=""/57, 0x39}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/172, 0xac}], 0x8, &(0x7f0000000a00)=""/125, 0x7d}, 0x3}], 0x1, 0x0, &(0x7f0000000ac0)={0x0, 0x3938700}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000d80)={r7, &(0x7f0000000c80)='tracefs\x00', 0x21e09318a7e469fd, &(0x7f0000000e00)={@_ha_fsid={[0x6, 0xfffffff8]}, {0x7, 0xffe, 0x7d, 0x8000000000020005}}, 0xa, &(0x7f0000000d00)={@_ha_fsid}, &(0x7f0000000d40)=0x4}) linkat(0xffffffffffffff9c, &(0x7f0000000c40)='./bus\x00', r9, &(0x7f0000000dc0)='./bus\x00', 0x400) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3703, 0x1901}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d809}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x4, 0xf}) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60a7a09600183afffe8000000000000000000000000000aaff020000000040000000000000000001000090780000e7fffe8000000000000000000000000000aa"], 0x0) executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) clock_adjtime(0x4, &(0x7f0000000e00)={0x1, 0xe2d, 0x309, 0x0, 0x8000, 0x9f69, 0xfffffffffffffffe, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x1, 0x0, 0xfffffffffffffdff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) executing program 6: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(0x0, 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000400)) io_setup(0x2004, &(0x7f0000000680)) executing program 4: syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 5, 2, 4, 27, 25, 17, 20, 21, 19, 7, 7] detailed listing: executing program 6: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000020000000100000f02000000040000000b00000033b39a2436340b0000000200000f0200000001000000636bb3d17f00000003000000ced200"], 0x0, 0x5c, 0x0, 0x1, 0x5}, 0x28) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0xfb69, 0x0, 0x7, 0xd8, 0x5, 0x101}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e23, @multicast1}, 'gre0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe0001"], 0x408100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x29, '\x00', @buffer={"0000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e8300", 0x20}, 0x1c}]}) socket$inet_mptcp(0x2, 0x1, 0x106) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000000c0)=0x7) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x24008800) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x355737d6d65d287a, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) clock_adjtime(0x4, &(0x7f0000000e00)={0x1, 0xe2d, 0x309, 0x0, 0x8000, 0x9f69, 0xfffffffffffffffe, 0x200000000001ffe, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x0, 0x6, 0x5, 0x1, 0x0, 0xfffffffffffffdff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33}) executing program 6: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(0x0, 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB], 0x17) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x61780, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba919736d34"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x44000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000400)) io_setup(0x2004, &(0x7f0000000680)) executing program 4: syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) executing program 1: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) program crashed: memory leak in vidtv_psi_service_desc_init bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [24, 5, 2, 4, 27, 25, 17] detailed listing: executing program 6: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000020000000100000f02000000040000000b00000033b39a2436340b0000000200000f0200000001000000636bb3d17f00000003000000ced200"], 0x0, 0x5c, 0x0, 0x1, 0x5}, 0x28) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x22000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x0, 0xfb69, 0x0, 0x7, 0xd8, 0x5, 0x101}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x54}, 0x4044005) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000340)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x306}, 0x2, {0x2, 0x4e23, @multicast1}, 'gre0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe0001"], 0x408100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x3e, '\x00', @data=0x8, 0x8}, {0x29, '\x00', @buffer={"0000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e8300", 0x20}, 0x1c}]}) socket$inet_mptcp(0x2, 0x1, 0x106) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) executing program 1: ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000000c0)=0x7) executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x24008800) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) program crashed: memory leak in vidtv_psi_service_desc_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <7> bisect: split chunk #0 of len 7 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 25, 17] detailed listing: executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x24008800) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) program crashed: memory leak in vidtv_psi_service_desc_init bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$nl_generic-openat$binderfs-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-openat$sequencer-syz_open_dev$sndmidi-writev-syz_init_net_socket$nl_rdma-socket$inet_udp-connect$unix-socket$nl_netfilter-sendmsg$NFT_BATCH-sendmsg$NFT_BATCH-pread64-sendmsg$nl_generic-connect$inet detailed listing: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x24008800) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [27, 25] detailed listing: executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) program crashed: memory leak in vidtv_psi_service_desc_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$xdp-mprotect-setsockopt$XDP_UMEM_FILL_RING-socket$nl_generic-ioctl$sock_SIOCGIFINDEX-openat$tun-ioctl$TUNSETIFF-socket$nl_generic-socket-socket$nl_generic-semctl$IPC_STAT-sendmsg$nl_route_sched-syz_init_net_socket$nl_generic-openat$procfs-keyctl$set_timeout-read$FUSE-syz_genetlink_get_family_id$netlbl_cipso-sendmsg$NLBL_CIPSOV4_C_ADD-sendmsg$nl_route_sched-syz_usb_connect-sendmsg$nl_route_sched-syz_emit_vhci-bpf$PROG_LOAD_XDP-bpf$BPF_LINK_CREATE_XDP-bind$xdp detailed listing: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2000009) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/187) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r6, &(0x7f0000001580)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300050000000500030080ff00000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000225708140d8131000728f010203010902120001000110040904"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_emit_vhci(0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, r2, 0x25, 0x8, @void}, 0x10) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xd, r2, 0x33, r0}, 0x10) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$sock_int-setsockopt$inet6_tcp_TCP_ULP detailed listing: executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) program crashed: memory leak in vidtv_psi_service_desc_init bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 1: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$sock_int-setsockopt$inet6_tcp_TCP_ULP detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) program crashed: memory leak in vidtv_psi_service_desc_init bisect: concatenation succeeded found reproducer with 27 syscalls minimizing guilty program testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START-socket$inet6_tcp-setsockopt$inet6_tcp_int-setsockopt$sock_int detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START-socket$inet6_tcp-setsockopt$inet6_tcp_int detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) program crashed: memory leak in vidtv_psi_short_event_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START-socket$inet6_tcp detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) socket$inet6_tcp(0xa, 0x1, 0x0) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-gettid-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-read$msr-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$MSR-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-sched_setscheduler-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-prlimit64-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-socket$nl_generic-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-mount$fuse-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0]) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-bpf$MAP_CREATE_CONST_STR-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x40, '\x00', 0x0, r2, 0x4, 0x0, 0x2}, 0x50) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-ioctl$FICLONERANGE-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r3 = openat2(r1, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r0}, 0x4abf, 0x3, 0x8}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-openat2-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) openat2(r0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-write$FUSE_INIT-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-pipe-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-bpf$MAP_UPDATE_CONST_STR-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-socketpair$unix-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-setsockopt$inet_int-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-futex-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): semget$private-syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: semget$private(0x0, 0x4000000009, 0x668) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program did not crash testing program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program did not crash extracting C reproducer testing compiled C program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START VM was preempted during C execution: failed to run command in VM: instance is preempted, retrying testing compiled C program (duration=1m31.483222808s, {Threaded:true Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_service_desc_init simplifying C reproducer testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:7 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_service_desc_init testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:true NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_service_desc_init testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_short_event_desc_init testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_service_list_desc_init a never seen crash title: memory leak in vidtv_psi_service_list_desc_init, ignore testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_short_event_desc_init testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_short_event_desc_init testing compiled C program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START program crashed: memory leak in vidtv_psi_short_event_desc_init testing program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init validation run: crashed=true testing program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init validation run: crashed=true testing program (duration=1m31.483222808s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:true NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$dvb_demux-ioctl$DVB_DEMUX_DMX_SET_PES_FILTER-ioctl$DVB_DEMUX_DMX_ADD_PID-ioctl$DVB_DEMUX_DMX_START detailed listing: executing program 0: r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) program crashed: memory leak in vidtv_psi_service_desc_init validation run: crashed=true reproducing took 1h36m52.354449717s repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888114afc080 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 48 19 02 0c 10 68 8d 14 ........H....h.. 81 88 ff ff 0a 00 28 e7 0d 81 88 ff ff 00 00 00 ......(......... backtrace (crc 6b1562a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_service_desc_init+0x74/0x1b0 drivers/media/test-drivers/vidtv/vidtv_psi.c:233 vidtv_channel_s302m_init+0xb1/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:83 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888114afc060 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 05 04 42 53 53 44 00 00 ..........BSSD.. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 168dca61): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_registration_desc_init+0x2d/0xd0 drivers/media/test-drivers/vidtv/vidtv_psi.c:282 vidtv_channel_s302m_init+0x132/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:107 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888112c51b00 (size 64): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 4d 8b b0 27 13 10 81 88 ........M..'.... ff ff 20 c0 98 3d 14 81 88 ff ff 66 00 98 a4 11 .. ..=.....f.... backtrace (crc b3704df0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_short_event_desc_init+0x9e/0x220 drivers/media/test-drivers/vidtv/vidtv_psi.c:389 vidtv_channel_s302m_init+0x1c2/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:124 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8881101327b0 (size 8): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 8 bytes): 65 6e 67 00 00 00 00 00 eng..... backtrace (crc 5673a685): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_node_track_caller_noprof+0x3d3/0x570 mm/slub.c:5497 __kmemdup_nul mm/util.c:64 [inline] kstrdup+0x3c/0x80 mm/util.c:84 vidtv_psi_short_event_desc_init+0xf3/0x220 drivers/media/test-drivers/vidtv/vidtv_psi.c:407 vidtv_channel_s302m_init+0x1c2/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:124 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810a953320 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 08 80 fd 80 1b c0 3e 95 0a 81 88 ff ff 00 00 00 ......>......... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 72dd49b0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_sdt_service_init+0x32/0xa0 drivers/media/test-drivers/vidtv/vidtv_psi.c:1386 vidtv_channel_sdt_serv_cat_into_new drivers/media/test-drivers/vidtv/vidtv_channel.c:229 [inline] vidtv_channel_si_init+0x22f/0x770 drivers/media/test-drivers/vidtv/vidtv_channel.c:439 vidtv_mux_init+0x115/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:525 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF final repro crashed as (corrupted=false): BUG: memory leak unreferenced object 0xffff888114afc080 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 48 19 02 0c 10 68 8d 14 ........H....h.. 81 88 ff ff 0a 00 28 e7 0d 81 88 ff ff 00 00 00 ......(......... backtrace (crc 6b1562a): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_service_desc_init+0x74/0x1b0 drivers/media/test-drivers/vidtv/vidtv_psi.c:233 vidtv_channel_s302m_init+0xb1/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:83 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888114afc060 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 05 04 42 53 53 44 00 00 ..........BSSD.. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 168dca61): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_noprof+0x3bf/0x550 mm/slub.c:5387 _kmalloc_noprof include/linux/slab.h:973 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_registration_desc_init+0x2d/0xd0 drivers/media/test-drivers/vidtv/vidtv_psi.c:282 vidtv_channel_s302m_init+0x132/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:107 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888112c51b00 (size 64): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 4d 8b b0 27 13 10 81 88 ........M..'.... ff ff 20 c0 98 3d 14 81 88 ff ff 66 00 98 a4 11 .. ..=.....f.... backtrace (crc b3704df0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_short_event_desc_init+0x9e/0x220 drivers/media/test-drivers/vidtv/vidtv_psi.c:389 vidtv_channel_s302m_init+0x1c2/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:124 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8881101327b0 (size 8): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 8 bytes): 65 6e 67 00 00 00 00 00 eng..... backtrace (crc 5673a685): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __do_kmalloc_node mm/slub.c:5361 [inline] __kmalloc_node_track_caller_noprof+0x3d3/0x570 mm/slub.c:5497 __kmemdup_nul mm/util.c:64 [inline] kstrdup+0x3c/0x80 mm/util.c:84 vidtv_psi_short_event_desc_init+0xf3/0x220 drivers/media/test-drivers/vidtv/vidtv_psi.c:407 vidtv_channel_s302m_init+0x1c2/0x2a0 drivers/media/test-drivers/vidtv/vidtv_channel.c:124 vidtv_channels_init+0x1b/0x40 drivers/media/test-drivers/vidtv/vidtv_channel.c:528 vidtv_mux_init+0x377/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:521 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88810a953320 (size 32): comm "syz.0.17", pid 5929, jiffies 4294943847 hex dump (first 32 bytes): 08 80 fd 80 1b c0 3e 95 0a 81 88 ff ff 00 00 00 ......>......... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 72dd49b0): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4625 [inline] slab_alloc_node mm/slub.c:4945 [inline] __kmalloc_cache_noprof+0x356/0x440 mm/slub.c:5511 _kmalloc_noprof include/linux/slab.h:969 [inline] _kzalloc_noprof include/linux/slab.h:1290 [inline] vidtv_psi_sdt_service_init+0x32/0xa0 drivers/media/test-drivers/vidtv/vidtv_psi.c:1386 vidtv_channel_sdt_serv_cat_into_new drivers/media/test-drivers/vidtv/vidtv_channel.c:229 [inline] vidtv_channel_si_init+0x22f/0x770 drivers/media/test-drivers/vidtv/vidtv_channel.c:439 vidtv_mux_init+0x115/0x390 drivers/media/test-drivers/vidtv/vidtv_mux.c:525 vidtv_start_streaming drivers/media/test-drivers/vidtv/vidtv_bridge.c:194 [inline] vidtv_start_feed+0x1d4/0x260 drivers/media/test-drivers/vidtv/vidtv_bridge.c:239 dmx_ts_feed_start_filtering+0x8e/0x130 drivers/media/dvb-core/dvb_demux.c:747 dvb_dmxdev_start_feed+0x11c/0x170 drivers/media/dvb-core/dmxdev.c:658 dvb_dmxdev_filter_start+0xd8/0x440 drivers/media/dvb-core/dmxdev.c:769 dvb_demux_do_ioctl+0x297/0x7d0 drivers/media/dvb-core/dmxdev.c:1065 dvb_usercopy+0x116/0x2d0 drivers/media/dvb-core/dvbdev.c:996 dvb_demux_ioctl+0x29/0x40 drivers/media/dvb-core/dmxdev.c:1201 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0xf4/0x140 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf8/0x610 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF