last executing test programs: 26m36.265692986s ago: executing program 4 (id=26): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001440)=""/40, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0xceb0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 26m34.522297303s ago: executing program 4 (id=30): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x48090}, 0x20008840) 26m33.397867953s ago: executing program 4 (id=34): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26m31.435791101s ago: executing program 4 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000001d3e7a11f0fd245161021e2ecfaeeaf54fb9944618737f770c470a5c2988ef686d8d5058656430422dd96776d5fb34277"], 0x18) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 26m30.361454553s ago: executing program 4 (id=39): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/95, 0x5f}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26m27.814288973s ago: executing program 4 (id=44): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 26m12.670061047s ago: executing program 32 (id=44): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 25m11.043929823s ago: executing program 2 (id=184): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5", 0x83}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653", 0x74}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7) 24m57.362610671s ago: executing program 2 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010026bd0100000000", @ANYRES32=r1, @ANYBLOB="6b00330050100f00ffffffffffff080211000000505050505050"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 24m57.275879666s ago: executing program 2 (id=203): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x200040, 0x4a) fanotify_init(0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000580), 0x0) openat(r0, &(0x7f0000000240)='./file5\x00', 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca8a}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r1], 0x20) 24m56.818265719s ago: executing program 2 (id=205): open_tree(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) 24m56.410623451s ago: executing program 2 (id=207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) 24m46.615214211s ago: executing program 2 (id=211): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5", 0x83}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653", 0x74}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7) 24m30.733679117s ago: executing program 33 (id=211): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858", 0x92}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5", 0x83}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653", 0x74}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7) 12m6.787642871s ago: executing program 6 (id=1454): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x2080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff5, 0xcd6, 0x6, 0x1db, 0x1000002, 0x7, 0x400, 0x10002, 0xf, 0x0, 0x3fe, 0x2, 0xfff, 0x3, 0x0, 0x6, 0xc00, 0x3f, 0x8, 0x6, 0xffffffff, 0xfffffffc]}) write$UHID_CREATE2(r3, 0x0, 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0xe229, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x800, 0x121040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) 11m58.463571314s ago: executing program 6 (id=1467): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x20000021) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x40, 0x144, 0x5}, 0x18) 11m52.549943645s ago: executing program 6 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 11m49.799171689s ago: executing program 6 (id=1479): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4c080) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x20000021) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) connect$can_bcm(r0, &(0x7f0000000080), 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x40, 0x144, 0x5}, 0x18) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 11m46.891640958s ago: executing program 6 (id=1481): ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f00000000c0)={0x6, 0x5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000008e81ad80aafe942b0000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/69], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 11m38.139977856s ago: executing program 6 (id=1494): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000003, 0x48c, 0x5, 0xd, 0x20423, 0x2, 0xffffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$packet(0x11, 0x2, 0x300) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000008c0)={0x2, 0x7}, 0x2) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000004c0)=""/236, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 11m21.945623824s ago: executing program 34 (id=1494): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000003, 0x48c, 0x5, 0xd, 0x20423, 0x2, 0xffffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$packet(0x11, 0x2, 0x300) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000008c0)={0x2, 0x7}, 0x2) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000004c0)=""/236, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 13.329592832s ago: executing program 3 (id=2954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.297271777s ago: executing program 5 (id=2955): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x1c, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.141479859s ago: executing program 7 (id=2956): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) 12.977873008s ago: executing program 5 (id=2958): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.826337571s ago: executing program 7 (id=2960): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 8.597009639s ago: executing program 5 (id=2962): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.089296267s ago: executing program 7 (id=2963): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c"], 0x64}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d"]) r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 8.068376278s ago: executing program 3 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 7.840829733s ago: executing program 3 (id=2967): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)}) r5 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001380)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 6.368138032s ago: executing program 5 (id=2972): write(0xffffffffffffffff, &(0x7f0000001780)="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", 0x331) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) fanotify_init(0x4, 0x1800) ftruncate(r0, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x8000003b) 6.159726194s ago: executing program 3 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}}, 0x0) 5.911645183s ago: executing program 3 (id=2976): syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0x5, 0x2, 0x0, 0x2, 0x80000001, 0x200, 0x0, 0xffffffffffffffe7, 0x6, 0x0, 0x4, 0x2, 0x86, 0x9, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xc20, 0xfffffffffffffffc, 0x0, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0400010d20a75ca6a8a35b0b77920d4b1947fb714e26e785c680bec797d0b284376a39c31a198076694f8abf4fc5261136f9c423df769cb1a6fbcdd83427e6810901acdccc05f9bba7ff43c078a62b60108507cf2b79159a0131a857e8891b29b341641d9d8739fc2726d633563fe2bf0ebb56c5478b7ccbee51835bd1c71bf863d6a1f3802461b33b98ff67514cfe55b0d1299e524b7391afdaf06025b608c0bdbcac"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x7, 0x400080) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xac) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) fchownat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x100) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0xe}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0xac, 0x0, &(0x7f0000000880)=[@exit_looper, @release={0x40046306, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x1}, @decrefs, @increfs_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/9, 0x9, 0x1, 0x23}, @ptr={0x70742a85, 0x2, &(0x7f0000000400)=""/93, 0x5d, 0x0, 0x1a}, @fd}, &(0x7f00000005c0)={0x0, 0x28, 0x50}}}, @increfs], 0x0, 0x0, 0x0}) 5.894538373s ago: executing program 0 (id=2977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 5.491344298s ago: executing program 0 (id=2980): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 5.017632879s ago: executing program 0 (id=2982): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.007605384s ago: executing program 1 (id=2983): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)}) r5 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001380)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 4.976302325s ago: executing program 7 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') 2.475655887s ago: executing program 3 (id=2985): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="fd86920eaaab7ca504ce134eba6b81fd9d2e2e661487aea0893b559b5807b0397caa37f9f9c0db6cf1a16a30b4aa82291e486d4b600799c7226fa2f64e00393c103c700b58ac737e19632a2affcd99410e5811435ca6402ebd9c912186446d8e119d0a52ac5ea115225a8d02d675fe087a0ccc721b37b2fc31121dfee04a973f24ceb59baa0d59e61729e419af5c6d0198380139c091", @ANYBLOB="010000010000000000000c00000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_int(r3, 0x1, 0x9, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x0, r4}, &(0x7f00000000c0)={0xe, 0x70, 0x8, 0x8, 0x0, 0x6}) 1.422109794s ago: executing program 1 (id=2986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}}, 0x0) 1.400914262s ago: executing program 7 (id=2987): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000001940), 0x0}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r4, &(0x7f0000000000), &(0x7f00000005c0)=""/4}, 0x20) 1.348715784s ago: executing program 0 (id=2988): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.222567234s ago: executing program 1 (id=2989): write(0xffffffffffffffff, &(0x7f0000001780)="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", 0x331) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x8000003b) 1.154241684s ago: executing program 5 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.135054241s ago: executing program 1 (id=2991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 295.628928ms ago: executing program 0 (id=2992): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x1f, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x10, 0x1}) fcntl$dupfd(r2, 0x406, r1) close_range(r0, 0xffffffffffffffff, 0x0) 295.147491ms ago: executing program 1 (id=2993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="0304040000", @ANYRES32=0x0, @ANYBLOB="21810300000000001c0012800b00010062726964676500000c00028008001c000c000000"], 0x3c}, 0x1, 0xba01}, 0x810) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022dfe000000000009040000026bb22b000904ff38a6f86da9aa04"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x795001, 0x195) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 187.461376ms ago: executing program 1 (id=2994): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x800) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 95.145935ms ago: executing program 7 (id=2995): syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000600)={0x19b1, 0xc1bdf10000000003, 0x5, 0x2, 0x0, 0x2, 0x80000001, 0x200, 0x0, 0xffffffffffffffe7, 0x6, 0x0, 0x4, 0x2, 0x86, 0x9, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xc20, 0xfffffffffffffffc, 0x0, 0x4, 0x1}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0400010d20a75ca6a8a35b0b77920d4b1947fb714e26e785c680bec797d0b284376a39c31a198076694f8abf4fc5261136f9c423df769cb1a6fbcdd83427e6810901acdccc05f9bba7ff43c078a62b60108507cf2b79159a0131a857e8891b29b341641d9d8739fc2726d633563fe2bf0ebb56c5478b7ccbee51835bd1c71bf863d6a1f3802461b33b98ff67514cfe55b0d1299e524b7391afdaf06025b608c0bdbcac"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x7, 0x400080) getpid() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xac) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) fchownat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x100) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0xe}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x7, 0x81, 0x3, [0x0, 0x0, 0x0, 0x0], [0x3fd86826, 0xfffffffd], [0x0, 0x7, 0x9], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0xac, 0x0, &(0x7f0000000880)=[@exit_looper, @release={0x40046306, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x1}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x1}, @decrefs, @increfs_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/9, 0x9, 0x1, 0x23}, @ptr={0x70742a85, 0x2, &(0x7f0000000400)=""/93, 0x5d, 0x0, 0x1a}, @fd}, &(0x7f00000005c0)={0x0, 0x28, 0x50}}}, @increfs], 0x0, 0x0, 0x0}) 21.498737ms ago: executing program 5 (id=2996): syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[], 0x0) 0s ago: executing program 0 (id=2997): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) timer_create(0x7, &(0x7f0000000140)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)}) r5 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r7, 0x0, 0x0) socket(0x10, 0x3, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000001380)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) kernel console output (not intermixed with test programs): 7508][T16392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1540.948451][T16392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1541.381212][T16392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.461968][T16392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.526009][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.529221][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.560668][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.579035][T12403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.515228][T16392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1542.667258][T16392] veth0_vlan: entered promiscuous mode [ 1542.744494][T16392] veth1_vlan: entered promiscuous mode [ 1543.003981][T16392] veth0_macvtap: entered promiscuous mode [ 1543.090045][T16392] veth1_macvtap: entered promiscuous mode [ 1543.329671][T16392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1543.358875][T16392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1543.406948][T12406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.408679][T12406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.409887][T12406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.410161][T12406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.078710][T16512] netlink: zone id is out of range [ 1544.078775][T16512] netlink: zone id is out of range [ 1544.078809][T16512] netlink: zone id is out of range [ 1544.078850][T16512] netlink: zone id is out of range [ 1544.078885][T16512] netlink: zone id is out of range [ 1545.372658][T16520] gretap1: entered promiscuous mode [ 1545.552130][T12415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.552154][T12415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.807788][T12415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1545.807807][T12415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.278987][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.279060][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.776884][T16507] syz.5.2510 (16507): drop_caches: 1 [ 1547.973146][T16555] netlink: 'syz.7.2522': attribute type 5 has an invalid length. [ 1549.301127][T16576] trusted_key: encrypted_key: insufficient parameters specified [ 1552.267287][T16562] syz.1.2524 (16562): drop_caches: 1 [ 1552.748846][T16597] binder: 16596:16597 ioctl c0306201 200000000040 returned -14 [ 1553.266280][T16589] syz.5.2530 (16589): drop_caches: 1 [ 1553.324061][ T8039] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1553.497472][ T8039] usb 8-1: Using ep0 maxpacket: 16 [ 1553.502048][ T8039] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 1553.502079][ T8039] usb 8-1: config 0 has no interface number 0 [ 1553.502131][ T8039] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1553.502150][ T8039] usb 8-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1553.502169][ T8039] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1553.505161][ T8039] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1553.505193][ T8039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.505222][ T8039] usb 8-1: Product: syz [ 1553.505234][ T8039] usb 8-1: Manufacturer: syz [ 1553.505245][ T8039] usb 8-1: SerialNumber: syz [ 1553.598464][ T8039] usb 8-1: config 0 descriptor?? [ 1553.599316][T16606] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1553.599448][T16606] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1553.822290][ T8039] qcserial 8-1:0.49: Qualcomm USB modem converter detected [ 1553.848291][ T8039] usb 8-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1553.875941][ T8039] usb 8-1: USB disconnect, device number 25 [ 1553.903354][ T8039] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1553.917267][ T8039] qcserial 8-1:0.49: device disconnected [ 1553.964376][T14356] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1554.134946][T14356] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1554.135113][T14356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.135269][T14356] usb 6-1: Product: syz [ 1554.135390][T14356] usb 6-1: Manufacturer: syz [ 1554.135591][T14356] usb 6-1: SerialNumber: syz [ 1554.159840][T14356] usb 6-1: config 0 descriptor?? [ 1554.481981][T14356] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1555.086077][T14356] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1555.103596][ T5796] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1555.264171][ T5796] usb 8-1: Using ep0 maxpacket: 32 [ 1555.270732][ T5796] usb 8-1: config 0 has no interfaces? [ 1555.289544][ T5796] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1555.289568][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.289582][ T5796] usb 8-1: Product: syz [ 1555.289593][ T5796] usb 8-1: Manufacturer: syz [ 1555.289604][ T5796] usb 8-1: SerialNumber: syz [ 1555.293341][ T5796] usb 8-1: config 0 descriptor?? [ 1555.797142][T16640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 1556.898942][ T5878] usb 8-1: USB disconnect, device number 26 [ 1556.973988][ T8039] usb 6-1: USB disconnect, device number 34 [ 1557.624036][ T8039] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1557.824237][ T8039] usb 6-1: Using ep0 maxpacket: 16 [ 1557.825987][ T8039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.826026][ T8039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1557.826046][ T8039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1557.826062][ T8039] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1557.826079][ T8039] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1557.827054][ T8039] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1557.827074][ T8039] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1557.827089][ T8039] usb 6-1: Manufacturer: syz [ 1557.839174][ T8039] usb 6-1: config 0 descriptor?? [ 1557.874058][ T37] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1558.024060][ T37] usb 8-1: Using ep0 maxpacket: 16 [ 1558.042408][ T37] usb 8-1: config 0 has an invalid interface number: 49 but max is 0 [ 1558.042436][ T37] usb 8-1: config 0 has no interface number 0 [ 1558.042481][ T37] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1558.042499][ T37] usb 8-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1558.042556][ T37] usb 8-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1558.069152][ T37] usb 8-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1558.069365][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.069426][ T37] usb 8-1: Product: syz [ 1558.069593][ T37] usb 8-1: Manufacturer: syz [ 1558.069635][ T37] usb 8-1: SerialNumber: syz [ 1558.140870][ T37] usb 8-1: config 0 descriptor?? [ 1558.141599][T16654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1558.141734][T16654] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1558.416918][ T37] qcserial 8-1:0.49: Qualcomm USB modem converter detected [ 1558.467612][ T37] usb 8-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1558.488752][ T37] usb 8-1: USB disconnect, device number 27 [ 1558.520937][ T37] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1558.521570][ T37] qcserial 8-1:0.49: device disconnected [ 1558.823991][ T8039] rc_core: IR keymap rc-hauppauge not found [ 1558.824014][ T8039] Registered IR keymap rc-empty [ 1558.824147][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.844378][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.866606][ T8039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1558.869690][ T8039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 1558.914944][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.934239][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.956047][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.974020][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1558.994163][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.013976][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.035373][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.053984][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.076217][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.094071][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1559.133522][ T8039] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1559.133542][ T8039] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1559.210245][ T8039] usb 6-1: USB disconnect, device number 35 [ 1560.065228][T16669] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 1560.883267][ T8039] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1561.100893][ T8039] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1561.100917][ T8039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.100933][ T8039] usb 2-1: Product: syz [ 1561.100944][ T8039] usb 2-1: Manufacturer: syz [ 1561.100956][ T8039] usb 2-1: SerialNumber: syz [ 1561.207203][ T8039] usb 2-1: config 0 descriptor?? [ 1561.429197][ T8039] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1562.044099][ T8039] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1562.153974][ T37] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1562.303934][ T37] usb 1-1: Using ep0 maxpacket: 16 [ 1562.305832][ T37] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 1562.305851][ T37] usb 1-1: config 0 has no interface number 0 [ 1562.305882][ T37] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1562.305900][ T37] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1562.305918][ T37] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1562.307850][ T37] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1562.307871][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.307885][ T37] usb 1-1: Product: syz [ 1562.307896][ T37] usb 1-1: Manufacturer: syz [ 1562.307907][ T37] usb 1-1: SerialNumber: syz [ 1562.316565][ T37] usb 1-1: config 0 descriptor?? [ 1562.374680][T16687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1562.374816][T16687] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1562.938063][ T8814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1562.959516][ T8814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1562.971715][ T8814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1562.987220][ T8814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1562.990275][ T8814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1563.152992][ T5794] syz_tun (unregistering): left allmulticast mode [ 1563.778394][T10796] usb 2-1: USB disconnect, device number 67 [ 1564.801569][ T37] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 1564.859890][ T37] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1564.875484][ T37] usb 1-1: USB disconnect, device number 72 [ 1564.973362][ T37] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1564.997583][ T37] qcserial 1-1:0.49: device disconnected [ 1565.043988][T10796] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1565.154577][T12774] Bluetooth: hci0: command tx timeout [ 1565.223938][T10796] usb 8-1: Using ep0 maxpacket: 16 [ 1565.226265][T10796] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.226325][T10796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1565.226346][T10796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1565.226362][T10796] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1565.226379][T10796] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1565.227378][T10796] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1565.227405][T10796] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1565.227426][T10796] usb 8-1: Manufacturer: syz [ 1565.232365][T10796] usb 8-1: config 0 descriptor?? [ 1565.585282][T10796] rc_core: IR keymap rc-hauppauge not found [ 1565.585299][T10796] Registered IR keymap rc-empty [ 1565.585413][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.625411][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.646625][T10796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1565.689612][T10796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input75 [ 1565.718271][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.735933][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.754212][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.807513][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.831717][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.846587][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.865563][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.884215][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.908279][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.924032][T10796] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1565.986793][T10796] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1565.986813][T10796] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1566.015061][T12406] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1566.109036][T10796] usb 8-1: USB disconnect, device number 28 [ 1566.714025][ T8039] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1566.724271][T14356] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1566.880857][ T8039] usb 6-1: Using ep0 maxpacket: 16 [ 1566.891431][ T8039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.891491][ T8039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1566.891522][ T8039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1566.891546][ T8039] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1566.891570][ T8039] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1566.893695][ T8039] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1566.893726][ T8039] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1566.893749][ T8039] usb 6-1: Manufacturer: syz [ 1566.899810][T14356] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1566.899843][T14356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.899864][T14356] usb 2-1: Product: syz [ 1566.899879][T14356] usb 2-1: Manufacturer: syz [ 1566.899894][T14356] usb 2-1: SerialNumber: syz [ 1567.069144][T14356] usb 2-1: config 0 descriptor?? [ 1567.211794][ T8039] usb 6-1: config 0 descriptor?? [ 1567.234407][T12774] Bluetooth: hci0: command tx timeout [ 1567.607332][T14356] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1567.812270][T16690] chnl_net:caif_netlink_parms(): no params data found [ 1567.984086][ T8039] rc_core: IR keymap rc-hauppauge not found [ 1567.984110][ T8039] Registered IR keymap rc-empty [ 1567.984286][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.008399][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.029274][ T8039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1568.076157][ T8039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input76 [ 1568.115427][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.136560][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.163248][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.174146][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.196274][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.214713][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.219325][T14356] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1568.236348][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.255307][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.274642][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.300535][ T8039] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1568.390607][ T8039] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1568.390638][ T8039] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1568.466905][ T8039] usb 6-1: USB disconnect, device number 36 [ 1568.789918][T16737] binder: BINDER_SET_CONTEXT_MGR already set [ 1568.789931][T16737] binder: 16736:16737 ioctl 4018620d 200000004a80 returned -16 [ 1569.191131][T12406] bridge_slave_1: left allmulticast mode [ 1569.191164][T12406] bridge_slave_1: left promiscuous mode [ 1569.191507][T12406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.314265][T12774] Bluetooth: hci0: command tx timeout [ 1569.319000][T12406] bridge_slave_0: left allmulticast mode [ 1569.319022][T12406] bridge_slave_0: left promiscuous mode [ 1569.319213][T12406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.493923][T10796] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1569.633520][ T5974] usb 2-1: USB disconnect, device number 68 [ 1569.694015][T10796] usb 6-1: Using ep0 maxpacket: 16 [ 1569.697574][T10796] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1569.697606][T10796] usb 6-1: config 0 has no interface number 0 [ 1569.697653][T10796] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1569.697681][T10796] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1569.697708][T10796] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1569.702011][T10796] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1569.702043][T10796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.702064][T10796] usb 6-1: Product: syz [ 1569.702079][T10796] usb 6-1: Manufacturer: syz [ 1569.702095][T10796] usb 6-1: SerialNumber: syz [ 1569.821148][T10796] usb 6-1: config 0 descriptor?? [ 1569.823347][T16743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1569.823704][T16743] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1571.187121][T16774] netlink: 'syz.0.2581': attribute type 5 has an invalid length. [ 1571.394360][T12774] Bluetooth: hci0: command tx timeout [ 1571.645105][T12406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.710795][T12406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.746151][T12406] bond0 (unregistering): Released all slaves [ 1572.430000][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.430248][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.430624][T16690] bridge_slave_0: entered allmulticast mode [ 1572.468100][T16690] bridge_slave_0: entered promiscuous mode [ 1572.572596][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.572723][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.572946][T16690] bridge_slave_1: entered allmulticast mode [ 1572.625937][T16690] bridge_slave_1: entered promiscuous mode [ 1572.647084][T10796] qcserial 6-1:0.49: Qualcomm USB modem converter detected [ 1572.733564][T10796] usb 6-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1572.815482][T10796] usb 6-1: USB disconnect, device number 37 [ 1572.978986][T10796] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1572.979579][T10796] qcserial 6-1:0.49: device disconnected [ 1573.243968][ T8039] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1573.466863][ T8039] usb 8-1: Using ep0 maxpacket: 16 [ 1573.468957][ T8039] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.468996][ T8039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1573.469016][ T8039] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1573.469032][ T8039] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1573.469049][ T8039] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1573.470233][ T8039] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1573.470254][ T8039] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1573.470269][ T8039] usb 8-1: Manufacturer: syz [ 1573.536923][ T8039] usb 8-1: config 0 descriptor?? [ 1573.592295][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.871843][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.167929][ T8039] rc_core: IR keymap rc-hauppauge not found [ 1574.167946][ T8039] Registered IR keymap rc-empty [ 1574.168725][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.194802][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.215906][ T8039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1574.218479][ T8039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input77 [ 1574.264319][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.299143][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.314057][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.328977][ C1] rc rc0: IR event FIFO is full! [ 1574.329288][ C1] rc rc0: IR event FIFO is full! [ 1574.329311][ C1] rc rc0: IR event FIFO is full! [ 1574.329325][ C1] rc rc0: IR event FIFO is full! [ 1574.329338][ C1] rc rc0: IR event FIFO is full! [ 1574.329353][ C1] rc rc0: IR event FIFO is full! [ 1574.329377][ C1] rc rc0: IR event FIFO is full! [ 1574.329416][ C1] rc rc0: IR event FIFO is full! [ 1574.329449][ C1] rc rc0: IR event FIFO is full! [ 1574.329855][ C1] rc rc0: IR event FIFO is full! [ 1574.329902][ C1] rc rc0: IR event FIFO is full! [ 1574.329942][ C1] rc rc0: IR event FIFO is full! [ 1574.329980][ C1] rc rc0: IR event FIFO is full! [ 1574.330021][ C1] rc rc0: IR event FIFO is full! [ 1574.330054][ C1] rc rc0: IR event FIFO is full! [ 1574.330425][ C1] rc rc0: IR event FIFO is full! [ 1574.330465][ C1] rc rc0: IR event FIFO is full! [ 1574.330498][ C1] rc rc0: IR event FIFO is full! [ 1574.330548][ C1] rc rc0: IR event FIFO is full! [ 1574.330581][ C1] rc rc0: IR event FIFO is full! [ 1574.330628][ C1] rc rc0: IR event FIFO is full! [ 1574.330662][ C1] rc rc0: IR event FIFO is full! [ 1574.331035][ C1] rc rc0: IR event FIFO is full! [ 1574.331065][ C1] rc rc0: IR event FIFO is full! [ 1574.331091][ C1] rc rc0: IR event FIFO is full! [ 1574.331104][ C1] rc rc0: IR event FIFO is full! [ 1574.331120][ C1] rc rc0: IR event FIFO is full! [ 1574.331156][ C1] rc rc0: IR event FIFO is full! [ 1574.331940][ C1] rc rc0: IR event FIFO is full! [ 1574.331982][ C1] rc rc0: IR event FIFO is full! [ 1574.332021][ C1] rc rc0: IR event FIFO is full! [ 1574.332065][ C1] rc rc0: IR event FIFO is full! [ 1574.332099][ C1] rc rc0: IR event FIFO is full! [ 1574.332139][ C1] rc rc0: IR event FIFO is full! [ 1574.332172][ C1] rc rc0: IR event FIFO is full! [ 1574.332894][ C1] rc rc0: IR event FIFO is full! [ 1574.332935][ C1] rc rc0: IR event FIFO is full! [ 1574.332975][ C1] rc rc0: IR event FIFO is full! [ 1574.333014][ C1] rc rc0: IR event FIFO is full! [ 1574.333047][ C1] rc rc0: IR event FIFO is full! [ 1574.333425][ C1] rc rc0: IR event FIFO is full! [ 1574.333464][ C1] rc rc0: IR event FIFO is full! [ 1574.333503][ C1] rc rc0: IR event FIFO is full! [ 1574.333537][ C1] rc rc0: IR event FIFO is full! [ 1574.333584][ C1] rc rc0: IR event FIFO is full! [ 1574.334093][ C1] rc rc0: IR event FIFO is full! [ 1574.334152][ C1] rc rc0: IR event FIFO is full! [ 1574.334193][ C1] rc rc0: IR event FIFO is full! [ 1574.334225][ C1] rc rc0: IR event FIFO is full! [ 1574.334265][ C1] rc rc0: IR event FIFO is full! [ 1574.334681][ C1] rc rc0: IR event FIFO is full! [ 1574.334723][ C1] rc rc0: IR event FIFO is full! [ 1574.334776][ C1] rc rc0: IR event FIFO is full! [ 1574.334811][ C1] rc rc0: IR event FIFO is full! [ 1574.334851][ C1] rc rc0: IR event FIFO is full! [ 1574.334885][ C1] rc rc0: IR event FIFO is full! [ 1574.334926][ C1] rc rc0: IR event FIFO is full! [ 1574.334966][ C1] rc rc0: IR event FIFO is full! [ 1574.335371][ C1] rc rc0: IR event FIFO is full! [ 1574.335426][ C1] rc rc0: IR event FIFO is full! [ 1574.335461][ C1] rc rc0: IR event FIFO is full! [ 1574.335515][ C1] rc rc0: IR event FIFO is full! [ 1574.335550][ C1] rc rc0: IR event FIFO is full! [ 1574.335584][ C1] rc rc0: IR event FIFO is full! [ 1574.335625][ C1] rc rc0: IR event FIFO is full! [ 1574.336006][ C1] rc rc0: IR event FIFO is full! [ 1574.336106][ C1] rc rc0: IR event FIFO is full! [ 1574.336119][ C1] rc rc0: IR event FIFO is full! [ 1574.336133][ C1] rc rc0: IR event FIFO is full! [ 1574.336149][ C1] rc rc0: IR event FIFO is full! [ 1574.336200][ C1] rc rc0: IR event FIFO is full! [ 1574.336252][ C1] rc rc0: IR event FIFO is full! [ 1574.336313][ C1] rc rc0: IR event FIFO is full! [ 1574.336697][ C1] rc rc0: IR event FIFO is full! [ 1574.336744][ C1] rc rc0: IR event FIFO is full! [ 1574.336786][ C1] rc rc0: IR event FIFO is full! [ 1574.336826][ C1] rc rc0: IR event FIFO is full! [ 1574.336859][ C1] rc rc0: IR event FIFO is full! [ 1574.337220][ C1] rc rc0: IR event FIFO is full! [ 1574.337477][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.337713][ C1] rc rc0: IR event FIFO is full! [ 1574.337763][ C1] rc rc0: IR event FIFO is full! [ 1574.337803][ C1] rc rc0: IR event FIFO is full! [ 1574.337835][ C1] rc rc0: IR event FIFO is full! [ 1574.337869][ C1] rc rc0: IR event FIFO is full! [ 1574.337909][ C1] rc rc0: IR event FIFO is full! [ 1574.337947][ C1] rc rc0: IR event FIFO is full! [ 1574.337985][ C1] rc rc0: IR event FIFO is full! [ 1574.338018][ C1] rc rc0: IR event FIFO is full! [ 1574.338401][ C1] rc rc0: IR event FIFO is full! [ 1574.338440][ C1] rc rc0: IR event FIFO is full! [ 1574.338479][ C1] rc rc0: IR event FIFO is full! [ 1574.338527][ C1] rc rc0: IR event FIFO is full! [ 1574.338898][ C1] rc rc0: IR event FIFO is full! [ 1574.338938][ C1] rc rc0: IR event FIFO is full! [ 1574.338971][ C1] rc rc0: IR event FIFO is full! [ 1574.339016][ C1] rc rc0: IR event FIFO is full! [ 1574.339062][ C1] rc rc0: IR event FIFO is full! [ 1574.339107][ C1] rc rc0: IR event FIFO is full! [ 1574.339147][ C1] rc rc0: IR event FIFO is full! [ 1574.339185][ C1] rc rc0: IR event FIFO is full! [ 1574.339466][ C1] rc rc0: IR event FIFO is full! [ 1574.339481][ C1] rc rc0: IR event FIFO is full! [ 1574.339493][ C1] rc rc0: IR event FIFO is full! [ 1574.339832][ C1] rc rc0: IR event FIFO is full! [ 1574.339866][ C1] rc rc0: IR event FIFO is full! [ 1574.339905][ C1] rc rc0: IR event FIFO is full! [ 1574.339946][ C1] rc rc0: IR event FIFO is full! [ 1574.339977][ C1] rc rc0: IR event FIFO is full! [ 1574.340017][ C1] rc rc0: IR event FIFO is full! [ 1574.340050][ C1] rc rc0: IR event FIFO is full! [ 1574.340083][ C1] rc rc0: IR event FIFO is full! [ 1574.340116][ C1] rc rc0: IR event FIFO is full! [ 1574.340504][ C1] rc rc0: IR event FIFO is full! [ 1574.340545][ C1] rc rc0: IR event FIFO is full! [ 1574.340583][ C1] rc rc0: IR event FIFO is full! [ 1574.340623][ C1] rc rc0: IR event FIFO is full! [ 1574.340655][ C1] rc rc0: IR event FIFO is full! [ 1574.340694][ C1] rc rc0: IR event FIFO is full! [ 1574.340733][ C1] rc rc0: IR event FIFO is full! [ 1574.340771][ C1] rc rc0: IR event FIFO is full! [ 1574.340842][ C1] rc rc0: IR event FIFO is full! [ 1574.341211][ C1] rc rc0: IR event FIFO is full! [ 1574.341273][ C1] rc rc0: IR event FIFO is full! [ 1574.341328][ C1] rc rc0: IR event FIFO is full! [ 1574.341369][ C1] rc rc0: IR event FIFO is full! [ 1574.341404][ C1] rc rc0: IR event FIFO is full! [ 1574.341445][ C1] rc rc0: IR event FIFO is full! [ 1574.341480][ C1] rc rc0: IR event FIFO is full! [ 1574.341893][ C1] rc rc0: IR event FIFO is full! [ 1574.341935][ C1] rc rc0: IR event FIFO is full! [ 1574.341977][ C1] rc rc0: IR event FIFO is full! [ 1574.342011][ C1] rc rc0: IR event FIFO is full! [ 1574.342058][ C1] rc rc0: IR event FIFO is full! [ 1574.342782][ C1] rc rc0: IR event FIFO is full! [ 1574.342847][ C1] rc rc0: IR event FIFO is full! [ 1574.342881][ C1] rc rc0: IR event FIFO is full! [ 1574.342922][ C1] rc rc0: IR event FIFO is full! [ 1574.342963][ C1] rc rc0: IR event FIFO is full! [ 1574.342998][ C1] rc rc0: IR event FIFO is full! [ 1574.343040][ C1] rc rc0: IR event FIFO is full! [ 1574.343093][ C1] rc rc0: IR event FIFO is full! [ 1574.343442][ C1] rc rc0: IR event FIFO is full! [ 1574.343484][ C1] rc rc0: IR event FIFO is full! [ 1574.343523][ C1] rc rc0: IR event FIFO is full! [ 1574.343556][ C1] rc rc0: IR event FIFO is full! [ 1574.343596][ C1] rc rc0: IR event FIFO is full! [ 1574.343635][ C1] rc rc0: IR event FIFO is full! [ 1574.343667][ C1] rc rc0: IR event FIFO is full! [ 1574.343706][ C1] rc rc0: IR event FIFO is full! [ 1574.344032][ C1] rc rc0: IR event FIFO is full! [ 1574.344056][ C1] rc rc0: IR event FIFO is full! [ 1574.344113][ C1] rc rc0: IR event FIFO is full! [ 1574.344165][ C1] rc rc0: IR event FIFO is full! [ 1574.344222][ C1] rc rc0: IR event FIFO is full! [ 1574.345069][ C1] rc rc0: IR event FIFO is full! [ 1574.345120][ C1] rc rc0: IR event FIFO is full! [ 1574.345154][ C1] rc rc0: IR event FIFO is full! [ 1574.345194][ C1] rc rc0: IR event FIFO is full! [ 1574.345235][ C1] rc rc0: IR event FIFO is full! [ 1574.345276][ C1] rc rc0: IR event FIFO is full! [ 1574.345312][ C1] rc rc0: IR event FIFO is full! [ 1574.345668][ C1] rc rc0: IR event FIFO is full! [ 1574.345708][ C1] rc rc0: IR event FIFO is full! [ 1574.345757][ C1] rc rc0: IR event FIFO is full! [ 1574.345797][ C1] rc rc0: IR event FIFO is full! [ 1574.345831][ C1] rc rc0: IR event FIFO is full! [ 1574.345872][ C1] rc rc0: IR event FIFO is full! [ 1574.345913][ C1] rc rc0: IR event FIFO is full! [ 1574.345953][ C1] rc rc0: IR event FIFO is full! [ 1574.346292][ C1] rc rc0: IR event FIFO is full! [ 1574.346348][ C1] rc rc0: IR event FIFO is full! [ 1574.346716][ C1] rc rc0: IR event FIFO is full! [ 1574.346758][ C1] rc rc0: IR event FIFO is full! [ 1574.347066][ C1] rc rc0: IR event FIFO is full! [ 1574.347106][ C1] rc rc0: IR event FIFO is full! [ 1574.347147][ C1] rc rc0: IR event FIFO is full! [ 1574.347820][ C1] rc rc0: IR event FIFO is full! [ 1574.347876][ C1] rc rc0: IR event FIFO is full! [ 1574.347919][ C1] rc rc0: IR event FIFO is full! [ 1574.347959][ C1] rc rc0: IR event FIFO is full! [ 1574.347991][ C1] rc rc0: IR event FIFO is full! [ 1574.348033][ C1] rc rc0: IR event FIFO is full! [ 1574.348369][ C1] rc rc0: IR event FIFO is full! [ 1574.348409][ C1] rc rc0: IR event FIFO is full! [ 1574.348449][ C1] rc rc0: IR event FIFO is full! [ 1574.348483][ C1] rc rc0: IR event FIFO is full! [ 1574.348523][ C1] rc rc0: IR event FIFO is full! [ 1574.348563][ C1] rc rc0: IR event FIFO is full! [ 1574.348604][ C1] rc rc0: IR event FIFO is full! [ 1574.348926][ C1] rc rc0: IR event FIFO is full! [ 1574.348960][ C1] rc rc0: IR event FIFO is full! [ 1574.349000][ C1] rc rc0: IR event FIFO is full! [ 1574.349039][ C1] rc rc0: IR event FIFO is full! [ 1574.349082][ C1] rc rc0: IR event FIFO is full! [ 1574.349123][ C1] rc rc0: IR event FIFO is full! [ 1574.349467][ C1] rc rc0: IR event FIFO is full! [ 1574.349509][ C1] rc rc0: IR event FIFO is full! [ 1574.349548][ C1] rc rc0: IR event FIFO is full! [ 1574.349582][ C1] rc rc0: IR event FIFO is full! [ 1574.349596][ C1] rc rc0: IR event FIFO is full! [ 1574.349611][ C1] rc rc0: IR event FIFO is full! [ 1574.349623][ C1] rc rc0: IR event FIFO is full! [ 1574.349871][ C1] rc rc0: IR event FIFO is full! [ 1574.349886][ C1] rc rc0: IR event FIFO is full! [ 1574.349900][ C1] rc rc0: IR event FIFO is full! [ 1574.349937][ C1] rc rc0: IR event FIFO is full! [ 1574.349976][ C1] rc rc0: IR event FIFO is full! [ 1574.350017][ C1] rc rc0: IR event FIFO is full! [ 1574.350050][ C1] rc rc0: IR event FIFO is full! [ 1574.350078][ C1] rc rc0: IR event FIFO is full! [ 1574.350413][ C1] rc rc0: IR event FIFO is full! [ 1574.350453][ C1] rc rc0: IR event FIFO is full! [ 1574.350486][ C1] rc rc0: IR event FIFO is full! [ 1574.350526][ C1] rc rc0: IR event FIFO is full! [ 1574.350573][ C1] rc rc0: IR event FIFO is full! [ 1574.350919][ C1] rc rc0: IR event FIFO is full! [ 1574.350961][ C1] rc rc0: IR event FIFO is full! [ 1574.350996][ C1] rc rc0: IR event FIFO is full! [ 1574.351035][ C1] rc rc0: IR event FIFO is full! [ 1574.351064][ C1] rc rc0: IR event FIFO is full! [ 1574.351104][ C1] rc rc0: IR event FIFO is full! [ 1574.351453][ C1] rc rc0: IR event FIFO is full! [ 1574.351507][ C1] rc rc0: IR event FIFO is full! [ 1574.351565][ C1] rc rc0: IR event FIFO is full! [ 1574.351604][ C1] rc rc0: IR event FIFO is full! [ 1574.351644][ C1] rc rc0: IR event FIFO is full! [ 1574.351676][ C1] rc rc0: IR event FIFO is full! [ 1574.351716][ C1] rc rc0: IR event FIFO is full! [ 1574.351748][ C1] rc rc0: IR event FIFO is full! [ 1574.351787][ C1] rc rc0: IR event FIFO is full! [ 1574.351826][ C1] rc rc0: IR event FIFO is full! [ 1574.352471][ C1] rc rc0: IR event FIFO is full! [ 1574.353816][ C1] rc rc0: IR event FIFO is full! [ 1574.353832][ C1] rc rc0: IR event FIFO is full! [ 1574.353847][ C1] rc rc0: IR event FIFO is full! [ 1574.353862][ C1] rc rc0: IR event FIFO is full! [ 1574.353875][ C1] rc rc0: IR event FIFO is full! [ 1574.353889][ C1] rc rc0: IR event FIFO is full! [ 1574.353904][ C1] rc rc0: IR event FIFO is full! [ 1574.353918][ C1] rc rc0: IR event FIFO is full! [ 1574.354278][ C1] rc rc0: IR event FIFO is full! [ 1574.354357][ C1] rc rc0: IR event FIFO is full! [ 1574.354403][ C1] rc rc0: IR event FIFO is full! [ 1574.354834][ C1] rc rc0: IR event FIFO is full! [ 1574.354884][ C1] rc rc0: IR event FIFO is full! [ 1574.354927][ C1] rc rc0: IR event FIFO is full! [ 1574.354967][ C1] rc rc0: IR event FIFO is full! [ 1574.355379][ C1] rc rc0: IR event FIFO is full! [ 1574.355420][ C1] rc rc0: IR event FIFO is full! [ 1574.355462][ C1] rc rc0: IR event FIFO is full! [ 1574.355504][ C1] rc rc0: IR event FIFO is full! [ 1574.355546][ C1] rc rc0: IR event FIFO is full! [ 1574.355581][ C1] rc rc0: IR event FIFO is full! [ 1574.355990][ C1] rc rc0: IR event FIFO is full! [ 1574.356349][ C1] rc rc0: IR event FIFO is full! [ 1574.356366][ C1] rc rc0: IR event FIFO is full! [ 1574.356404][ C1] rc rc0: IR event FIFO is full! [ 1574.356457][ C1] rc rc0: IR event FIFO is full! [ 1574.356516][ C1] rc rc0: IR event FIFO is full! [ 1574.356562][ C1] rc rc0: IR event FIFO is full! [ 1574.356595][ C1] rc rc0: IR event FIFO is full! [ 1574.356978][ C1] rc rc0: IR event FIFO is full! [ 1574.357051][ C1] rc rc0: IR event FIFO is full! [ 1574.357086][ C1] rc rc0: IR event FIFO is full! [ 1574.357121][ C1] rc rc0: IR event FIFO is full! [ 1574.357603][ C1] rc rc0: IR event FIFO is full! [ 1574.358315][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.376210][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.499397][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.529236][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.590355][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1574.619532][ T8039] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1575.031579][ T8039] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1575.031649][ T8039] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1575.520131][ T8039] usb 8-1: USB disconnect, device number 29 [ 1576.351401][T16690] team0: Port device team_slave_0 added [ 1576.374711][T16690] team0: Port device team_slave_1 added [ 1576.410269][T16794] binder: BINDER_SET_CONTEXT_MGR already set [ 1576.410281][T16794] binder: 16793:16794 ioctl 4018620d 200000004a80 returned -16 [ 1577.014096][T12406] hsr_slave_0: left promiscuous mode [ 1577.054013][T12406] hsr_slave_1: left promiscuous mode [ 1577.055117][T12406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.124931][T12406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.135178][ T5974] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1577.356025][ T5974] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1577.356059][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.356081][ T5974] usb 1-1: Product: syz [ 1577.356096][ T5974] usb 1-1: Manufacturer: syz [ 1577.356113][ T5974] usb 1-1: SerialNumber: syz [ 1577.389623][ T5974] usb 1-1: config 0 descriptor?? [ 1577.650081][ T5974] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1578.279269][ T5974] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1578.644764][T12406] team0 (unregistering): Port device team_slave_1 removed [ 1578.725496][T12406] team0 (unregistering): Port device team_slave_0 removed [ 1579.274083][T14356] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1579.292646][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.292660][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.292680][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.347907][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.347923][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.347948][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.433951][T14356] usb 6-1: Using ep0 maxpacket: 32 [ 1579.436018][T14356] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1579.436056][T14356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.471359][T14356] usb 6-1: config 0 descriptor?? [ 1579.584328][T16690] hsr_slave_0: entered promiscuous mode [ 1579.586512][T16690] hsr_slave_1: entered promiscuous mode [ 1579.587509][T16690] debugfs: 'hsr0' already exists in 'hsr' [ 1579.587529][T16690] Cannot create hsr debugfs directory [ 1579.680647][T14356] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1579.740494][T14356] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1579.740549][T14356] dib0700: firmware download failed at 7 with -22 [ 1580.010727][T14356] usb 1-1: USB disconnect, device number 73 [ 1580.129982][T16822] binder: BINDER_SET_CONTEXT_MGR already set [ 1580.130000][T16822] binder: 16819:16822 ioctl 4018620d 200000004a80 returned -16 [ 1580.817016][T12406] IPVS: stop unused estimator thread 0... [ 1582.100435][ T5853] usb 6-1: USB disconnect, device number 38 [ 1582.129804][T16823] syz.1.2595 (16823): drop_caches: 1 [ 1582.652237][T16853] sctp: [Deprecated]: syz.0.2602 (pid 16853) Use of int in max_burst socket option. [ 1582.652237][T16853] Use struct sctp_assoc_value instead [ 1583.459032][T16690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1583.564304][ T5796] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1583.631748][T16690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1583.751590][ T5796] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1583.751624][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.751644][ T5796] usb 2-1: Product: syz [ 1583.751658][ T5796] usb 2-1: Manufacturer: syz [ 1583.751672][ T5796] usb 2-1: SerialNumber: syz [ 1583.787137][ T5796] usb 2-1: config 0 descriptor?? [ 1583.788365][T16690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1583.936999][T16690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1583.993984][ T5796] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1584.611234][ T5796] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1584.691585][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1584.778596][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.819645][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.819784][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.888718][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.889395][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.096525][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.779273][T16908] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1586.784885][T14356] usb 2-1: USB disconnect, device number 69 [ 1587.020490][T16690] veth0_vlan: entered promiscuous mode [ 1587.226564][T16690] veth1_vlan: entered promiscuous mode [ 1587.310308][T16878] syz.5.2608 (16878): drop_caches: 1 [ 1587.507608][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1587.534667][T16690] veth0_macvtap: entered promiscuous mode [ 1587.561532][T16690] veth1_macvtap: entered promiscuous mode [ 1587.688057][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.720078][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.751244][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.751507][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.751566][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.751604][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.495206][T12444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.495230][T12444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.817918][T12446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.817949][T12446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.294013][T14356] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1590.454282][T14356] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1590.454306][T14356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.454320][T14356] usb 6-1: Product: syz [ 1590.454331][T14356] usb 6-1: Manufacturer: syz [ 1590.454342][T14356] usb 6-1: SerialNumber: syz [ 1590.518225][T14356] usb 6-1: config 0 descriptor?? [ 1590.777052][T14356] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1591.384045][T14356] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1591.562796][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2623'. [ 1591.939889][T16922] syz.0.2614 (16922): drop_caches: 1 [ 1592.337606][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2626'. [ 1592.686099][T16992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2627'. [ 1593.376919][ T5974] usb 6-1: USB disconnect, device number 39 [ 1593.904098][ T5878] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1594.081547][ T5878] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 1594.081577][ T5878] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1594.081598][ T5878] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1594.081619][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.081638][ T5878] usb 4-1: config 0 has no interfaces? [ 1594.081671][ T5878] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1594.081696][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.090207][ T5878] usb 4-1: config 0 descriptor?? [ 1594.362300][T17014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2634'. [ 1594.406412][ T38] audit: type=1326 audit(1774848388.469:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.413724][ T38] audit: type=1326 audit(1774848388.469:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.461888][ T38] audit: type=1326 audit(1774848388.469:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.461951][ T38] audit: type=1326 audit(1774848388.499:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.461996][ T38] audit: type=1326 audit(1774848388.519:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.462796][ T38] audit: type=1326 audit(1774848388.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1594.573891][ T38] audit: type=1326 audit(1774848388.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96a3856517 code=0x7ffc0000 [ 1594.574275][ T38] audit: type=1326 audit(1774848388.639:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96a37fdb19 code=0x7ffc0000 [ 1594.574464][ T38] audit: type=1326 audit(1774848388.639:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96a3856517 code=0x7ffc0000 [ 1594.574635][ T38] audit: type=1326 audit(1774848388.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17002 comm="syz.3.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96a37fdb19 code=0x7ffc0000 [ 1594.614853][ T5878] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1594.758608][T17016] fuse: Bad value for 'fd' [ 1594.795837][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 1594.799613][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.799641][ T5878] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1594.799677][ T5878] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1594.799702][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.851337][ T5878] usb 2-1: config 0 descriptor?? [ 1594.958035][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2635'. [ 1594.958101][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2635'. [ 1595.252066][ T5878] usb 2-1: USB disconnect, device number 70 [ 1597.213983][ T5989] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1597.390560][ T5989] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1597.390594][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.390616][ T5989] usb 1-1: Product: syz [ 1597.390633][ T5989] usb 1-1: Manufacturer: syz [ 1597.390648][ T5989] usb 1-1: SerialNumber: syz [ 1597.458220][ T5989] usb 1-1: config 0 descriptor?? [ 1597.680258][ T5989] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1597.847522][ T5974] usb 4-1: USB disconnect, device number 48 [ 1597.966982][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2645'. [ 1599.285354][T17065] binder_alloc: 17060: binder_alloc_buf, no vma [ 1599.449431][ T5989] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1599.517299][ T5989] usb 1-1: USB disconnect, device number 74 [ 1600.183956][ T5989] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1600.406557][ T5989] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1600.406589][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.442770][ T5989] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1600.634805][T17085] binder: 17084:17085 ioctl 4018620d 0 returned -22 [ 1600.695337][ T5878] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1600.853945][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 1600.859148][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.859178][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1600.859251][ T5878] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1600.859269][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.910146][ T5878] usb 1-1: config 0 descriptor?? [ 1600.911719][ T5989] gspca_sn9c20x: Write register 1001 failed -71 [ 1600.911767][ T5989] gspca_sn9c20x: Device initialization failed [ 1600.911978][ T5989] gspca_sn9c20x 2-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1600.961525][ T5989] usb 2-1: USB disconnect, device number 71 [ 1601.122865][T10796] usb 1-1: USB disconnect, device number 75 [ 1601.305570][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2658'. [ 1601.603940][ T5989] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1601.778565][ T5989] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1601.778596][ T5989] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1601.778617][ T5989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1601.778670][ T5989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1601.778758][ T5989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1601.782387][ T5989] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1601.782420][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1601.782442][ T5989] usb 4-1: Product: syz [ 1601.782457][ T5989] usb 4-1: Manufacturer: syz [ 1601.922863][ T5989] cdc_wdm 4-1:1.0: skipping garbage [ 1601.922885][ T5989] cdc_wdm 4-1:1.0: skipping garbage [ 1602.053567][ T5989] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1602.053592][ T5989] cdc_wdm 4-1:1.0: Unknown control protocol [ 1602.420994][T10796] usb 4-1: USB disconnect, device number 49 [ 1603.353974][T10796] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1603.505051][T10796] usb 4-1: Using ep0 maxpacket: 16 [ 1603.507138][T10796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1603.515773][T10796] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1603.515852][T10796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.515911][T10796] usb 4-1: Product: syz [ 1603.515941][T10796] usb 4-1: Manufacturer: syz [ 1603.515996][T10796] usb 4-1: SerialNumber: syz [ 1603.577613][T10796] usb 4-1: config 0 descriptor?? [ 1603.613161][T10796] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1603.613189][T10796] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1604.070004][T17135] binder: 17134:17135 ioctl 4018620d 0 returned -22 [ 1604.245329][T10796] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1604.817852][T10796] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1604.817888][T10796] em28xx 4-1:0.0: board has no eeprom [ 1604.874164][ T5989] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1604.898718][T17116] syz.5.2666 (17116): drop_caches: 1 [ 1605.027390][ T5989] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1605.027422][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.078351][ T5989] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1605.104022][T10796] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1605.104054][T10796] em28xx 4-1:0.0: dvb set to bulk mode. [ 1605.108835][ T8039] em28xx 4-1:0.0: Binding DVB extension [ 1605.237746][T10796] usb 4-1: USB disconnect, device number 50 [ 1605.240200][T10796] em28xx 4-1:0.0: Disconnecting em28xx [ 1605.459112][ T8039] em28xx 4-1:0.0: Registering input extension [ 1605.459452][T10796] em28xx 4-1:0.0: Closing input extension [ 1605.526256][T10796] em28xx 4-1:0.0: Freeing device [ 1605.568863][ T5989] gspca_sn9c20x: Write register 1001 failed -71 [ 1605.568886][ T5989] gspca_sn9c20x: Device initialization failed [ 1605.568979][ T5989] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1605.608688][ T5989] usb 1-1: USB disconnect, device number 76 [ 1607.385464][T17179] binder: 17178:17179 ioctl 4018620d 0 returned -22 [ 1607.751466][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.751520][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.620323][T17228] binder: 17226:17228 ioctl c0306201 0 returned -14 [ 1616.291677][T17258] binder: 17257:17258 ioctl c0306201 0 returned -14 [ 1616.632805][T17266] trusted_key: encrypted_key: insufficient parameters specified [ 1620.211376][T17295] kvm: kvm [17294]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1620.211439][T17295] kvm: kvm [17294]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1624.196678][T17345] fuse: Bad value for 'fd' [ 1624.199402][T17339] kvm: kvm [17337]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1624.199489][T17339] kvm: kvm [17337]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1625.763613][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1627.007654][T17375] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2744'. [ 1628.385253][T17398] binder: BINDER_SET_CONTEXT_MGR already set [ 1628.385272][T17398] binder: 17397:17398 ioctl 4018620d 200000004a80 returned -16 [ 1628.575574][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1628.738305][ T9] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 1628.738340][ T9] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1628.738355][ T9] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1628.738370][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.738383][ T9] usb 6-1: config 0 has no interfaces? [ 1628.738409][ T9] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1628.738426][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.830635][ T9] usb 6-1: config 0 descriptor?? [ 1629.040930][ T38] kauditd_printk_skb: 320 callbacks suppressed [ 1629.040951][ T38] audit: type=1326 audit(1774848423.099:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.041187][ T38] audit: type=1326 audit(1774848423.099:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.041387][ T38] audit: type=1326 audit(1774848423.099:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.041617][ T38] audit: type=1326 audit(1774848423.099:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.041927][ T38] audit: type=1326 audit(1774848423.099:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.042154][ T38] audit: type=1326 audit(1774848423.099:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.042372][ T38] audit: type=1326 audit(1774848423.099:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.042606][ T38] audit: type=1326 audit(1774848423.099:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.042882][ T38] audit: type=1326 audit(1774848423.099:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.043109][ T38] audit: type=1326 audit(1774848423.099:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17395 comm="syz.5.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1629.304800][T17406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2756'. [ 1629.361332][T17408] fuse: Bad value for 'fd' [ 1630.125823][T17416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1631.224066][ T8039] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1631.373921][ T8039] usb 4-1: Using ep0 maxpacket: 16 [ 1631.377701][ T8039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1631.380902][ T8039] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1631.380996][ T8039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.381019][ T8039] usb 4-1: Product: syz [ 1631.381035][ T8039] usb 4-1: Manufacturer: syz [ 1631.381051][ T8039] usb 4-1: SerialNumber: syz [ 1631.458881][ T8039] usb 4-1: config 0 descriptor?? [ 1631.471127][ T8039] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1631.471165][ T8039] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1631.791606][ T9] usb 6-1: USB disconnect, device number 40 [ 1632.066116][T17449] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2769'. [ 1632.095938][ T8039] em28xx 4-1:0.0: chip ID is em2765 [ 1632.709608][ T8039] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1632.709641][ T8039] em28xx 4-1:0.0: board has no eeprom [ 1633.003926][ T8039] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1633.003956][ T8039] em28xx 4-1:0.0: dvb set to bulk mode. [ 1633.005170][T10796] em28xx 4-1:0.0: Binding DVB extension [ 1633.075531][ T8039] usb 4-1: USB disconnect, device number 51 [ 1633.080331][ T8039] em28xx 4-1:0.0: Disconnecting em28xx [ 1633.325869][T10796] em28xx 4-1:0.0: Registering input extension [ 1633.343969][ T8039] em28xx 4-1:0.0: Closing input extension [ 1633.457676][ T8039] em28xx 4-1:0.0: Freeing device [ 1633.916767][ T8039] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1633.943936][ T5989] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1633.984001][ T5796] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1634.042627][T17463] syz.0.2775 (17463): drop_caches: 1 [ 1634.067822][ T8039] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 1634.067854][ T8039] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1634.067876][ T8039] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1634.067898][ T8039] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.067919][ T8039] usb 4-1: config 0 has no interfaces? [ 1634.067950][ T8039] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1634.067975][ T8039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.073522][ T8039] usb 4-1: config 0 descriptor?? [ 1634.131401][ T5989] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 1634.131434][ T5989] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1634.131457][ T5989] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1634.131479][ T5989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.131535][ T5989] usb 2-1: config 0 has no interfaces? [ 1634.131586][ T5989] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1634.131612][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.137326][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 1634.161282][ T5796] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 1634.161362][ T5796] usb 6-1: config 0 has no interface number 0 [ 1634.161484][ T5796] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1634.161562][ T5796] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1634.161632][ T5796] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1634.183341][ T5796] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1634.183643][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.183697][ T5796] usb 6-1: Product: syz [ 1634.183739][ T5796] usb 6-1: Manufacturer: syz [ 1634.187106][ T5796] usb 6-1: SerialNumber: syz [ 1634.321533][ T38] kauditd_printk_skb: 289 callbacks suppressed [ 1634.321553][ T38] audit: type=1326 audit(1774848428.379:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.321936][ T38] audit: type=1326 audit(1774848428.379:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.322262][ T38] audit: type=1326 audit(1774848428.379:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.322636][ T38] audit: type=1326 audit(1774848428.379:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.323164][ T38] audit: type=1326 audit(1774848428.379:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.333171][ T38] audit: type=1326 audit(1774848428.389:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.340229][ T38] audit: type=1326 audit(1774848428.399:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.345495][ T38] audit: type=1326 audit(1774848428.409:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.352148][ T38] audit: type=1326 audit(1774848428.409:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.366283][ T38] audit: type=1326 audit(1774848428.409:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17472 comm="syz.3.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a385c799 code=0x7ffc0000 [ 1634.523575][ T5989] usb 2-1: config 0 descriptor?? [ 1634.523588][ T5796] usb 6-1: config 0 descriptor?? [ 1634.525355][T17477] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1634.526374][T17477] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1634.577413][T17480] fuse: Bad value for 'fd' [ 1634.796053][ T5796] qcserial 6-1:0.49: Qualcomm USB modem converter detected [ 1634.826777][ T5796] usb 6-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1634.849724][ T5796] usb 6-1: USB disconnect, device number 41 [ 1634.876793][ T5796] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1634.877747][ T5796] qcserial 6-1:0.49: device disconnected [ 1634.953664][T17484] fuse: Bad value for 'fd' [ 1635.311172][T17463] syz.0.2775 (17463): drop_caches: 1 [ 1636.745221][ T9] usb 4-1: USB disconnect, device number 52 [ 1636.895536][ T5796] usb 2-1: USB disconnect, device number 72 [ 1637.664493][ T9] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1637.838469][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1637.856407][ T9] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1637.861423][ T9] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1637.861453][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.861477][ T9] usb 8-1: Product: syz [ 1637.861488][ T9] usb 8-1: Manufacturer: syz [ 1637.861500][ T9] usb 8-1: SerialNumber: syz [ 1637.915001][ T9] usb 8-1: config 0 descriptor?? [ 1637.934030][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1637.934102][ T9] usb 8-1: setting power ON [ 1637.937678][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1638.014733][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1638.015964][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1638.016038][ T9] usb 8-1: media controller created [ 1638.061011][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1638.135069][ T9] usb 8-1: selecting invalid altsetting 6 [ 1638.135096][ T9] usb 8-1: digital interface selection failed (-22) [ 1638.135113][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1638.136424][ T9] usb 8-1: setting power OFF [ 1638.136742][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 1638.136763][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1638.136777][ T9] (NULL device *): no alternate interface [ 1638.222027][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1638.242974][ T9] usb 8-1: USB disconnect, device number 30 [ 1638.398005][T17523] binder: BINDER_SET_CONTEXT_MGR already set [ 1638.398023][T17523] binder: 17521:17523 ioctl 4018620d 200000004a80 returned -16 [ 1639.054019][ T5989] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1639.217783][ T5989] usb 8-1: Using ep0 maxpacket: 8 [ 1639.232060][ T5989] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1639.252599][ T5989] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1639.252631][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.252652][ T5989] usb 8-1: Product: syz [ 1639.252667][ T5989] usb 8-1: Manufacturer: syz [ 1639.252682][ T5989] usb 8-1: SerialNumber: syz [ 1639.309186][ T5989] usb 8-1: config 0 descriptor?? [ 1639.355081][ T5989] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1639.355141][ T5989] usb 8-1: setting power ON [ 1639.355163][ T5989] dvb-usb: bulk message failed: -22 (2/0) [ 1639.360959][ T5989] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1639.361810][ T5989] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1639.361867][ T5989] usb 8-1: media controller created [ 1639.429038][ T5989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1639.453280][ T5989] usb 8-1: selecting invalid altsetting 6 [ 1639.453304][ T5989] usb 8-1: digital interface selection failed (-22) [ 1639.453319][ T5989] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1639.475812][ T5989] usb 8-1: setting power OFF [ 1639.475836][ T5989] dvb-usb: bulk message failed: -22 (2/0) [ 1639.475854][ T5989] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1639.475867][ T5989] (NULL device *): no alternate interface [ 1639.536064][ T5989] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1639.830596][ T5989] usb 8-1: USB disconnect, device number 31 [ 1639.903963][ T8039] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1640.101754][ T8039] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 1640.101777][ T8039] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1640.101793][ T8039] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1640.101808][ T8039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.101822][ T8039] usb 6-1: config 0 has no interfaces? [ 1640.101844][ T8039] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1640.101874][ T8039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.132151][ T8039] usb 6-1: config 0 descriptor?? [ 1640.346078][ T38] kauditd_printk_skb: 669 callbacks suppressed [ 1640.346094][ T38] audit: type=1326 audit(1774848434.399:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346137][ T38] audit: type=1326 audit(1774848434.399:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346170][ T38] audit: type=1326 audit(1774848434.399:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346202][ T38] audit: type=1326 audit(1774848434.399:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346234][ T38] audit: type=1326 audit(1774848434.399:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346268][ T38] audit: type=1326 audit(1774848434.399:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346302][ T38] audit: type=1326 audit(1774848434.399:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346334][ T38] audit: type=1326 audit(1774848434.399:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346365][ T38] audit: type=1326 audit(1774848434.399:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.346397][ T38] audit: type=1326 audit(1774848434.399:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17539 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1640.411788][T17550] fuse: Bad value for 'fd' [ 1642.040451][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 1642.138319][T17553] syz.7.2800 (17553): drop_caches: 1 [ 1642.551848][ T5878] usb 6-1: USB disconnect, device number 42 [ 1642.708415][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2805'. [ 1642.726428][ T5796] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1642.887190][ T5796] usb 8-1: Using ep0 maxpacket: 16 [ 1642.892621][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1642.911047][ T5796] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1642.911080][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.911101][ T5796] usb 8-1: Product: syz [ 1642.911116][ T5796] usb 8-1: Manufacturer: syz [ 1642.911132][ T5796] usb 8-1: SerialNumber: syz [ 1642.952075][ T5796] usb 8-1: config 0 descriptor?? [ 1643.005897][ T5796] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1643.005924][ T5796] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1643.924558][ T5796] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1644.357384][ T5796] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1644.357415][ T5796] em28xx 8-1:0.0: board has no eeprom [ 1644.416792][ T5796] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1644.416825][ T5796] em28xx 8-1:0.0: dvb set to bulk mode. [ 1644.422143][ T37] em28xx 8-1:0.0: Binding DVB extension [ 1644.473416][ T5796] usb 8-1: USB disconnect, device number 32 [ 1644.512950][ T5796] em28xx 8-1:0.0: Disconnecting em28xx [ 1644.856836][ T8039] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1644.982752][ T37] em28xx 8-1:0.0: Registering input extension [ 1644.982999][ T5796] em28xx 8-1:0.0: Closing input extension [ 1645.049507][ T5796] em28xx 8-1:0.0: Freeing device [ 1645.053954][ T8039] usb 4-1: Using ep0 maxpacket: 16 [ 1645.056577][ T8039] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 1645.056650][ T8039] usb 4-1: config 0 has no interface number 0 [ 1645.056777][ T8039] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1645.056844][ T8039] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 1645.056925][ T8039] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0xE has invalid maxpacket 92 [ 1645.082145][ T8039] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1645.082216][ T8039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.082269][ T8039] usb 4-1: Product: syz [ 1645.082326][ T8039] usb 4-1: Manufacturer: syz [ 1645.082367][ T8039] usb 4-1: SerialNumber: syz [ 1645.244731][ T8039] usb 4-1: config 0 descriptor?? [ 1645.248766][T17592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.248886][T17592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.496144][ T8039] qcserial 4-1:0.49: Qualcomm USB modem converter detected [ 1645.514840][ T8039] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1645.535489][ T8039] usb 4-1: USB disconnect, device number 53 [ 1645.567973][ T8039] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1645.569929][ T8039] qcserial 4-1:0.49: device disconnected [ 1645.584792][ T5796] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1645.764398][ T5796] usb 8-1: Using ep0 maxpacket: 8 [ 1645.767014][ T5796] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1645.769936][ T5796] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1645.769967][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.769989][ T5796] usb 8-1: Product: syz [ 1645.770005][ T5796] usb 8-1: Manufacturer: syz [ 1645.770022][ T5796] usb 8-1: SerialNumber: syz [ 1645.850112][ T5796] usb 8-1: config 0 descriptor?? [ 1645.888732][ T5796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1645.888786][ T5796] usb 8-1: setting power ON [ 1645.888807][ T5796] dvb-usb: bulk message failed: -22 (2/0) [ 1645.926975][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1645.940537][ T5796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1645.940691][ T5796] usb 8-1: media controller created [ 1645.978540][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1646.010467][ T5796] usb 8-1: selecting invalid altsetting 6 [ 1646.010513][ T5796] usb 8-1: digital interface selection failed (-22) [ 1646.010544][ T5796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1646.011356][ T5796] usb 8-1: setting power OFF [ 1646.011386][ T5796] dvb-usb: bulk message failed: -22 (2/0) [ 1646.011408][ T5796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1646.011418][ T5796] (NULL device *): no alternate interface [ 1646.041051][ T5878] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1646.153915][ T8039] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1646.160594][ T5796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1646.190255][ T5796] usb 8-1: USB disconnect, device number 33 [ 1646.219732][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 1646.229220][ T5878] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1646.229252][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.260366][ T5878] usb 1-1: config 0 descriptor?? [ 1646.322229][ T8039] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 1646.322259][ T8039] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1646.322274][ T8039] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1646.322308][ T8039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.322328][ T8039] usb 6-1: config 0 has no interfaces? [ 1646.322364][ T8039] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1646.322387][ T8039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.353657][ T8039] usb 6-1: config 0 descriptor?? [ 1646.479458][ T5878] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1646.500108][ T5878] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1646.500161][ T5878] dib0700: firmware download failed at 7 with -22 [ 1646.619910][ T38] kauditd_printk_skb: 405 callbacks suppressed [ 1646.619930][ T38] audit: type=1326 audit(1774848440.669:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.619980][ T38] audit: type=1326 audit(1774848440.679:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620028][ T38] audit: type=1326 audit(1774848440.679:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620076][ T38] audit: type=1326 audit(1774848440.679:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620120][ T38] audit: type=1326 audit(1774848440.679:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620163][ T38] audit: type=1326 audit(1774848440.679:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620207][ T38] audit: type=1326 audit(1774848440.679:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620249][ T38] audit: type=1326 audit(1774848440.679:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620295][ T38] audit: type=1326 audit(1774848440.679:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.620343][ T38] audit: type=1326 audit(1774848440.679:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17602 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1646.694442][T17611] fuse: Bad value for 'fd' [ 1648.643900][T10796] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1648.794024][T10796] usb 2-1: Using ep0 maxpacket: 16 [ 1648.796585][T10796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1648.802701][T10796] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1648.802732][T10796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.802754][T10796] usb 2-1: Product: syz [ 1648.802770][T10796] usb 2-1: Manufacturer: syz [ 1648.802786][T10796] usb 2-1: SerialNumber: syz [ 1648.878806][T10796] usb 2-1: config 0 descriptor?? [ 1648.909339][ T5974] usb 1-1: USB disconnect, device number 77 [ 1648.967575][T10796] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1648.967614][T10796] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1649.015309][ T5989] usb 6-1: USB disconnect, device number 43 [ 1649.276509][T17643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2829'. [ 1649.532465][T10796] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1649.696876][T17633] syz.3.2825 (17633): drop_caches: 1 [ 1649.952758][T10796] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1649.952791][T10796] em28xx 2-1:0.0: board has no eeprom [ 1649.998401][T17633] syz.3.2825 (17633): drop_caches: 1 [ 1650.023936][T10796] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1650.023967][T10796] em28xx 2-1:0.0: dvb set to bulk mode. [ 1650.027464][ T8039] em28xx 2-1:0.0: Binding DVB extension [ 1650.086564][T10796] usb 2-1: USB disconnect, device number 73 [ 1650.089035][T10796] em28xx 2-1:0.0: Disconnecting em28xx [ 1650.353227][ T8039] em28xx 2-1:0.0: Registering input extension [ 1650.353474][T10796] em28xx 2-1:0.0: Closing input extension [ 1650.426075][T10796] em28xx 2-1:0.0: Freeing device [ 1652.463975][T10796] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1652.618397][T10796] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 1652.618427][T10796] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1652.618451][T10796] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1652.618471][T10796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.618490][T10796] usb 2-1: config 0 has no interfaces? [ 1652.618525][T10796] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1652.618542][T10796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.665938][T10796] usb 2-1: config 0 descriptor?? [ 1652.727020][ T5796] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1652.903995][ T5796] usb 8-1: Using ep0 maxpacket: 16 [ 1652.909461][ T5796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1652.912984][ T5796] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1652.913014][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.913036][ T5796] usb 8-1: Product: syz [ 1652.913051][ T5796] usb 8-1: Manufacturer: syz [ 1652.913067][ T5796] usb 8-1: SerialNumber: syz [ 1652.972636][ T5796] usb 8-1: config 0 descriptor?? [ 1652.989477][ T38] kauditd_printk_skb: 367 callbacks suppressed [ 1652.989497][ T38] audit: type=1326 audit(1774848447.049:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.989651][ T38] audit: type=1326 audit(1774848447.049:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.989923][ T38] audit: type=1326 audit(1774848447.049:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.990126][ T38] audit: type=1326 audit(1774848447.049:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.990398][ T38] audit: type=1326 audit(1774848447.049:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.990687][ T38] audit: type=1326 audit(1774848447.049:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.990925][ T38] audit: type=1326 audit(1774848447.049:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.991144][ T38] audit: type=1326 audit(1774848447.049:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.991362][ T38] audit: type=1326 audit(1774848447.049:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.991630][ T38] audit: type=1326 audit(1774848447.049:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17682 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1652.997096][ T5796] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1652.997129][ T5796] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1653.506448][T10796] usb 2-1: USB disconnect, device number 74 [ 1653.735985][ T5796] em28xx 8-1:0.0: chip ID is em2765 [ 1654.342554][ T5796] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1654.342577][ T5796] em28xx 8-1:0.0: board has no eeprom [ 1654.613993][ T5796] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1654.614031][ T5796] em28xx 8-1:0.0: dvb set to bulk mode. [ 1654.615865][T10796] em28xx 8-1:0.0: Binding DVB extension [ 1654.621733][ T5796] usb 8-1: USB disconnect, device number 34 [ 1654.658429][ T5796] em28xx 8-1:0.0: Disconnecting em28xx [ 1654.782855][T10796] em28xx 8-1:0.0: Registering input extension [ 1654.791807][ T5796] em28xx 8-1:0.0: Closing input extension [ 1654.840645][ T5796] em28xx 8-1:0.0: Freeing device [ 1655.283978][ T5974] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1655.434064][ T5974] usb 4-1: Using ep0 maxpacket: 16 [ 1655.439710][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1655.442303][ T5974] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1655.442340][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.442355][ T5974] usb 4-1: Product: syz [ 1655.442366][ T5974] usb 4-1: Manufacturer: syz [ 1655.442376][ T5974] usb 4-1: SerialNumber: syz [ 1655.480400][ T5974] usb 4-1: config 0 descriptor?? [ 1655.509903][ T5974] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1655.509930][ T5974] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1655.514582][ T5796] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1656.033639][T12774] Bluetooth: hci1: command 0x0406 tx timeout [ 1656.190652][ T5796] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1656.190676][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.239479][ T5796] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1656.642590][ T5974] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1656.710136][ T5796] gspca_sn9c20x: Write register 1001 failed -71 [ 1656.710158][ T5796] gspca_sn9c20x: Device initialization failed [ 1656.710328][ T5796] gspca_sn9c20x 2-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1656.753530][ T5796] usb 2-1: USB disconnect, device number 75 [ 1656.783954][T10796] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1656.946282][T10796] usb 8-1: config index 0 descriptor too short (expected 65069, got 45) [ 1656.946314][T10796] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1656.946337][T10796] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1656.946414][T10796] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.946435][T10796] usb 8-1: config 0 has no interfaces? [ 1656.946467][T10796] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1656.946498][T10796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.042026][T10796] usb 8-1: config 0 descriptor?? [ 1657.174441][ T5974] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1657.174467][ T5974] em28xx 4-1:0.0: board has no eeprom [ 1657.225365][T17730] binder: 17729:17730 ioctl c0306201 2000000004c0 returned -14 [ 1657.235646][ T5974] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1657.235755][ T5974] em28xx 4-1:0.0: dvb set to bulk mode. [ 1657.279699][ T5974] usb 4-1: USB disconnect, device number 54 [ 1657.290537][ T5974] em28xx 4-1:0.0: Disconnecting em28xx [ 1657.315335][T10796] em28xx 4-1:0.0: Binding DVB extension [ 1657.447398][T10796] em28xx 4-1:0.0: Registering input extension [ 1657.449216][ T5974] em28xx 4-1:0.0: Closing input extension [ 1657.505651][ T5974] em28xx 4-1:0.0: Freeing device [ 1657.519287][T17737] fuse: Bad value for 'fd' [ 1657.536028][T17734] netlink: 'syz.0.2856': attribute type 5 has an invalid length. [ 1658.034550][ T38] kauditd_printk_skb: 58 callbacks suppressed [ 1658.034571][ T38] audit: type=1326 audit(1774848452.099:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ff5fb6517 code=0x7ffc0000 [ 1658.035660][ T38] audit: type=1326 audit(1774848452.099:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ff5f5db19 code=0x7ffc0000 [ 1658.035726][ T38] audit: type=1326 audit(1774848452.099:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2ff5fbc799 code=0x7ffc0000 [ 1658.038159][ T38] audit: type=1326 audit(1774848452.099:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ff5fb6517 code=0x7ffc0000 [ 1658.038216][ T38] audit: type=1326 audit(1774848452.099:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ff5f5db19 code=0x7ffc0000 [ 1658.038262][ T38] audit: type=1326 audit(1774848452.099:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2ff5fbc799 code=0x7ffc0000 [ 1658.052923][ T38] audit: type=1326 audit(1774848452.109:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ff5fb6517 code=0x7ffc0000 [ 1658.052983][ T38] audit: type=1326 audit(1774848452.109:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ff5f5db19 code=0x7ffc0000 [ 1658.053034][ T38] audit: type=1326 audit(1774848452.109:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2ff5fbc799 code=0x7ffc0000 [ 1658.237445][ T38] audit: type=1326 audit(1774848452.299:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.7.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ff5fb6517 code=0x7ffc0000 [ 1660.031927][T14356] usb 8-1: USB disconnect, device number 35 [ 1660.201470][T17760] netlink: zone id is out of range [ 1660.201487][T17760] netlink: zone id is out of range [ 1660.201524][T17760] netlink: zone id is out of range [ 1660.201558][T17760] netlink: zone id is out of range [ 1660.201592][T17760] netlink: zone id is out of range [ 1662.028996][T17777] loop2: detected capacity change from 0 to 7 [ 1662.030603][T17777] loop2: p1 [ 1662.030628][T17777] loop2: partition table partially beyond EOD, truncated [ 1662.030803][T17777] loop2: p1 size 1952408940 extends beyond EOD, truncated [ 1662.268912][T13405] udevd[13405]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1664.413992][ T5974] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1664.572288][ T5974] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 1664.572310][ T5974] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1664.572325][ T5974] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1664.572340][ T5974] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.572353][ T5974] usb 2-1: config 0 has no interfaces? [ 1664.572375][ T5974] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1664.572392][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.580136][ T5974] usb 2-1: config 0 descriptor?? [ 1664.819504][ T38] kauditd_printk_skb: 66 callbacks suppressed [ 1664.819525][ T38] audit: type=1326 audit(1774848458.879:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819575][ T38] audit: type=1326 audit(1774848458.879:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819624][ T38] audit: type=1326 audit(1774848458.879:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819672][ T38] audit: type=1326 audit(1774848458.879:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819717][ T38] audit: type=1326 audit(1774848458.879:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819761][ T38] audit: type=1326 audit(1774848458.879:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819806][ T38] audit: type=1326 audit(1774848458.879:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819849][ T38] audit: type=1326 audit(1774848458.879:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819894][ T38] audit: type=1326 audit(1774848458.879:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.819938][ T38] audit: type=1326 audit(1774848458.879:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17804 comm="syz.1.2874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff96d4ec799 code=0x7ffc0000 [ 1664.916339][T17806] fuse: Bad value for 'fd' [ 1665.439639][T17811] netlink: zone id is out of range [ 1665.439681][T17811] netlink: zone id is out of range [ 1665.439704][T17811] netlink: zone id is out of range [ 1665.439714][T17811] netlink: zone id is out of range [ 1665.439749][T17811] netlink: zone id is out of range [ 1667.231766][ T5878] usb 2-1: USB disconnect, device number 76 [ 1669.178823][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.178895][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.835601][T17849] netlink: zone id is out of range [ 1669.835644][T17849] netlink: zone id is out of range [ 1669.835680][T17849] netlink: zone id is out of range [ 1669.835715][T17849] netlink: zone id is out of range [ 1669.835762][T17849] netlink: zone id is out of range [ 1672.014036][T10796] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1672.170486][T10796] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 1672.170518][T10796] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1672.170541][T10796] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1672.170563][T10796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.170583][T10796] usb 1-1: config 0 has no interfaces? [ 1672.170618][T10796] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1672.170643][T10796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.272155][T10796] usb 1-1: config 0 descriptor?? [ 1672.526942][ T38] kauditd_printk_skb: 212 callbacks suppressed [ 1672.526957][ T38] audit: type=1326 audit(1774848466.589:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.531581][ T38] audit: type=1326 audit(1774848466.589:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.531646][ T38] audit: type=1326 audit(1774848466.589:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.531679][ T38] audit: type=1326 audit(1774848466.589:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.531713][ T38] audit: type=1326 audit(1774848466.589:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.531745][ T38] audit: type=1326 audit(1774848466.589:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.714894][ T38] audit: type=1326 audit(1774848466.589:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.714960][ T38] audit: type=1326 audit(1774848466.589:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.715010][ T38] audit: type=1326 audit(1774848466.589:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1672.715059][ T38] audit: type=1326 audit(1774848466.649:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17865 comm="syz.0.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84d6616517 code=0x7ffc0000 [ 1672.855190][T17866] fuse: Bad value for 'fd' [ 1672.894784][T10796] usb 1-1: USB disconnect, device number 78 [ 1673.645460][T17883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2896'. [ 1674.020441][T17890] netlink: zone id is out of range [ 1674.020466][T17890] netlink: zone id is out of range [ 1674.020475][T17890] netlink: zone id is out of range [ 1674.020485][T17890] netlink: zone id is out of range [ 1674.020522][T17890] netlink: zone id is out of range [ 1675.283918][ T31] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1675.466881][ T31] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1675.466905][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.466919][ T31] usb 1-1: Product: syz [ 1675.466930][ T31] usb 1-1: Manufacturer: syz [ 1675.466941][ T31] usb 1-1: SerialNumber: syz [ 1675.479614][ T31] usb 1-1: config 0 descriptor?? [ 1677.135530][ T5974] usb 1-1: USB disconnect, device number 79 [ 1678.343932][T14356] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1678.498194][T14356] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 1678.498288][T14356] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1678.498305][T14356] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1678.498320][T14356] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.498334][T14356] usb 6-1: config 0 has no interfaces? [ 1678.498356][T14356] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1678.498374][T14356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.502039][T14356] usb 6-1: config 0 descriptor?? [ 1678.719282][ T38] kauditd_printk_skb: 153 callbacks suppressed [ 1678.719303][ T38] audit: type=1326 audit(1774848447.774:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719354][ T38] audit: type=1326 audit(1774848447.774:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719399][ T38] audit: type=1326 audit(1774848447.774:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719453][ T38] audit: type=1326 audit(1774848447.774:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719498][ T38] audit: type=1326 audit(1774848447.774:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719542][ T38] audit: type=1326 audit(1774848447.774:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719587][ T38] audit: type=1326 audit(1774848447.774:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719638][ T38] audit: type=1326 audit(1774848447.774:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719682][ T38] audit: type=1326 audit(1774848447.774:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.719731][ T38] audit: type=1326 audit(1774848447.774:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17914 comm="syz.5.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1678.806805][T17917] fuse: Bad value for 'fd' [ 1680.977662][ T5974] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1681.259409][T14356] usb 6-1: USB disconnect, device number 44 [ 1683.763935][T14356] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1683.938436][T14356] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1683.938460][T14356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.938475][T14356] usb 8-1: Product: syz [ 1683.938486][T14356] usb 8-1: Manufacturer: syz [ 1683.938496][T14356] usb 8-1: SerialNumber: syz [ 1684.004064][T14356] usb 8-1: config 0 descriptor?? [ 1688.047770][T10796] usb 8-1: USB disconnect, device number 36 [ 1688.443899][T10796] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1688.544014][ T5796] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1688.594050][T10796] usb 8-1: Using ep0 maxpacket: 32 [ 1688.599871][T10796] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1688.599902][T10796] usb 8-1: config 0 has no interface number 0 [ 1688.599953][T10796] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1688.603910][T14356] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1688.606304][T10796] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1688.606335][T10796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.606356][T10796] usb 8-1: Product: syz [ 1688.606373][T10796] usb 8-1: Manufacturer: syz [ 1688.606391][T10796] usb 8-1: SerialNumber: syz [ 1688.687609][T10796] usb 8-1: config 0 descriptor?? [ 1688.763969][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 1688.767253][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1688.772252][ T5796] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1688.772276][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.772291][ T5796] usb 2-1: Product: syz [ 1688.772301][ T5796] usb 2-1: Manufacturer: syz [ 1688.772352][ T5796] usb 2-1: SerialNumber: syz [ 1688.779524][T14356] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 1688.779620][T14356] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1688.779643][T14356] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1688.779664][T14356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.779685][T14356] usb 1-1: config 0 has no interfaces? [ 1688.779797][T14356] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1688.779822][T14356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.908503][ T5796] usb 2-1: config 0 descriptor?? [ 1688.921441][ T5796] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1688.921469][ T5796] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1688.948636][T14356] usb 1-1: config 0 descriptor?? [ 1689.180920][ T38] kauditd_printk_skb: 102 callbacks suppressed [ 1689.180939][ T38] audit: type=1326 audit(1774848433.235:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.182730][ T38] audit: type=1326 audit(1774848433.235:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.183116][ T38] audit: type=1326 audit(1774848433.235:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.184948][ T38] audit: type=1326 audit(1774848433.235:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.203969][ T38] audit: type=1326 audit(1774848433.245:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.208942][ T38] audit: type=1326 audit(1774848433.265:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.209019][ T38] audit: type=1326 audit(1774848433.265:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.209138][ T38] audit: type=1326 audit(1774848433.265:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.213000][ T38] audit: type=1326 audit(1774848433.265:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.213068][ T38] audit: type=1326 audit(1774848433.265:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17964 comm="syz.0.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d661c799 code=0x7ffc0000 [ 1689.420097][T10796] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1689.420129][T10796] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1689.425801][T17968] fuse: Bad value for 'fd' [ 1689.536040][ T5796] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1689.994890][ T5796] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1689.994925][ T5796] em28xx 2-1:0.0: board has no eeprom [ 1690.135634][ T5796] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1690.135663][ T5796] em28xx 2-1:0.0: dvb set to bulk mode. [ 1690.141976][ T37] em28xx 2-1:0.0: Binding DVB extension [ 1690.231490][T10796] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1690.231524][T10796] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1690.231545][T10796] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1690.231850][T10796] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1690.303410][T10796] usb 8-1: USB disconnect, device number 37 [ 1690.354895][ T5796] usb 2-1: USB disconnect, device number 77 [ 1690.400228][ T37] em28xx 2-1:0.0: Registering input extension [ 1690.436691][ T5796] em28xx 2-1:0.0: Disconnecting em28xx [ 1690.436727][ T5796] em28xx 2-1:0.0: Closing input extension [ 1690.616144][ T5796] em28xx 2-1:0.0: Freeing device [ 1690.994065][ T5796] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1691.163952][ T5796] usb 2-1: Using ep0 maxpacket: 8 [ 1691.166375][ T5796] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1691.227981][ T5796] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1691.228013][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.228036][ T5796] usb 2-1: Product: syz [ 1691.228051][ T5796] usb 2-1: Manufacturer: syz [ 1691.228066][ T5796] usb 2-1: SerialNumber: syz [ 1691.439116][ T5796] usb 2-1: config 0 descriptor?? [ 1692.151661][ T5796] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1692.151727][ T5796] usb 2-1: setting power ON [ 1692.151748][ T5796] dvb-usb: bulk message failed: -22 (2/0) [ 1692.198789][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1692.200829][ T5796] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1692.200873][ T5796] usb 2-1: media controller created [ 1692.368635][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1692.411372][ T37] usb 1-1: USB disconnect, device number 80 [ 1692.419963][ T5796] usb 2-1: selecting invalid altsetting 6 [ 1692.419987][ T5796] usb 2-1: digital interface selection failed (-22) [ 1692.420005][ T5796] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1692.421834][ T5796] usb 2-1: setting power OFF [ 1692.421859][ T5796] dvb-usb: bulk message failed: -22 (2/0) [ 1692.421878][ T5796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1692.421893][ T5796] (NULL device *): no alternate interface [ 1692.518785][ T5796] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1693.924690][T17984] loop2: detected capacity change from 0 to 7 [ 1693.941723][T17984] Dev loop2: unable to read RDB block 7 [ 1693.941779][T17984] loop2: unable to read partition table [ 1693.942000][T17984] loop2: partition table beyond EOD, truncated [ 1693.942109][T17984] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1694.022119][ T5796] usb 2-1: USB disconnect, device number 78 [ 1694.754016][T14356] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1694.930571][T14356] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1694.930594][T14356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.930609][T14356] usb 8-1: Product: syz [ 1694.930619][T14356] usb 8-1: Manufacturer: syz [ 1694.930630][T14356] usb 8-1: SerialNumber: syz [ 1694.946202][T14356] usb 8-1: config 0 descriptor?? [ 1695.823952][T10796] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1695.824367][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1695.974292][T10796] usb 2-1: device descriptor read/64, error -32 [ 1698.944731][ T37] usb 8-1: USB disconnect, device number 38 [ 1699.003907][T10796] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1699.774048][T14356] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1700.830740][T14356] usb 6-1: config index 0 descriptor too short (expected 65069, got 45) [ 1700.830963][T14356] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1700.830987][T14356] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1700.831009][T14356] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.831029][T14356] usb 6-1: config 0 has no interfaces? [ 1700.831061][T14356] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1700.831085][T14356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.877324][T14356] usb 6-1: config 0 descriptor?? [ 1701.114324][ T38] kauditd_printk_skb: 361 callbacks suppressed [ 1701.114345][ T38] audit: type=1326 audit(1774848420.161:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114407][ T38] audit: type=1326 audit(1774848420.161:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114456][ T38] audit: type=1326 audit(1774848420.161:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114503][ T38] audit: type=1326 audit(1774848420.161:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114551][ T38] audit: type=1326 audit(1774848420.161:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114618][ T38] audit: type=1326 audit(1774848420.161:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114666][ T38] audit: type=1326 audit(1774848420.161:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114715][ T38] audit: type=1326 audit(1774848420.161:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114764][ T38] audit: type=1326 audit(1774848420.161:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1701.114813][ T38] audit: type=1326 audit(1774848420.161:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18010 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfcda5c799 code=0x7ffc0000 [ 1703.403947][T10796] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1703.538910][ T9] usb 6-1: USB disconnect, device number 45 [ 1703.607871][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2952'. [ 1703.682422][T10796] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1703.682458][T10796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.682482][T10796] usb 1-1: Product: syz [ 1703.682498][T10796] usb 1-1: Manufacturer: syz [ 1703.682514][T10796] usb 1-1: SerialNumber: syz [ 1703.724928][T10796] usb 1-1: config 0 descriptor?? [ 1708.260314][ T5878] usb 1-1: USB disconnect, device number 81 [ 1709.120397][T18092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 1709.154015][T14356] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1709.313877][T14356] usb 8-1: Using ep0 maxpacket: 16 [ 1709.316240][T14356] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.316316][T14356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1709.316347][T14356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1709.316371][T14356] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1709.316396][T14356] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1709.318070][T14356] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1709.318100][T14356] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1709.318122][T14356] usb 8-1: Manufacturer: syz [ 1709.422383][T18099] loop2: detected capacity change from 0 to 7 [ 1709.434825][T18099] Dev loop2: unable to read RDB block 7 [ 1709.434875][T18099] loop2: unable to read partition table [ 1709.436073][T18099] loop2: partition table beyond EOD, truncated [ 1709.436097][T18099] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1709.539159][T14356] usb 8-1: config 0 descriptor?? [ 1710.905530][T14356] rc_core: IR keymap rc-hauppauge not found [ 1710.905554][T14356] Registered IR keymap rc-empty [ 1710.905718][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1710.925458][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1710.956459][T14356] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1710.977822][T14356] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input86 [ 1711.004791][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.034266][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.054671][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.074932][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.094108][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.114222][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.133968][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.164620][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.195153][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.213906][T14356] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1711.280969][T14356] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1711.280997][T14356] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1711.321430][T14356] usb 8-1: USB disconnect, device number 39 [ 1711.404042][T10796] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1711.573113][T10796] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1711.573144][T10796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.573166][T10796] usb 4-1: Product: syz [ 1711.573181][T10796] usb 4-1: Manufacturer: syz [ 1711.573197][T10796] usb 4-1: SerialNumber: syz [ 1711.673285][T18130] loop2: detected capacity change from 0 to 7 [ 1711.686663][T10796] usb 4-1: config 0 descriptor?? [ 1711.691747][T18130] Dev loop2: unable to read RDB block 7 [ 1711.691790][T18130] loop2: unable to read partition table [ 1711.692001][T18130] loop2: partition table beyond EOD, truncated [ 1711.692020][T18130] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1714.447323][ T5878] usb 4-1: USB disconnect, device number 56 [ 1716.984405][ T31] ------------[ cut here ]------------ [ 1716.984422][ T31] in_task() && kcov_mode_enabled(mode) [ 1716.984440][ T31] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/1:0/31 [ 1716.984599][ T31] Modules linked in: [ 1716.984635][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.984666][ T31] Tainted: [L]=SOFTLOCKUP [ 1716.984676][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1716.984693][ T31] Workqueue: usb_hub_wq hub_event [ 1716.984823][ T31] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1716.984853][ T31] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 e3 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 8a 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 1716.984875][ T31] RSP: 0018:ffffc90000a5f7c8 EFLAGS: 00010202 [ 1716.984896][ T31] RAX: 0000000000000002 RBX: ffff88801d2a8000 RCX: 0000000000000000 [ 1716.984912][ T31] RDX: 0000000000000000 RSI: ffffffff8ba67560 RDI: ffffffff8ba67520 [ 1716.984929][ T31] RBP: ffffc90000a5fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 1716.984948][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4cf7 R12: ffff888029302000 [ 1716.984973][ T31] R13: dffffc0000000000 R14: 0100000000000008 R15: ffff8880292ee000 [ 1716.984992][ T31] FS: 0000000000000000(0000) GS:ffff888126436000(0000) knlGS:0000000000000000 [ 1716.985011][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1716.985029][ T31] CR2: 00007fcfcdcd7dac CR3: 0000000030368000 CR4: 00000000003526f0 [ 1716.985053][ T31] Call Trace: [ 1716.985064][ T31] [ 1716.985080][ T31] hub_event+0x150/0x4f60 [ 1716.985119][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1716.985172][ T31] ? look_up_lock_class+0x57/0x110 [ 1716.985269][ T31] ? register_lock_class+0x31/0x2e0 [ 1716.985291][ T31] ? update_load_avg+0x1b0/0x1ec0 [ 1716.985325][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1716.985365][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1716.985402][ T31] ? __pfx_hub_event+0x10/0x10 [ 1716.985442][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1716.985482][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1716.985517][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1716.985587][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1716.985627][ T31] ? assign_work+0x3d5/0x5e0 [ 1716.985666][ T31] worker_thread+0xa53/0xfc0 [ 1716.985732][ T31] kthread+0x388/0x470 [ 1716.985770][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1716.985800][ T31] ? __pfx_kthread+0x10/0x10 [ 1716.985826][ T31] ret_from_fork+0x51e/0xb90 [ 1716.985880][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.985912][ T31] ? __switch_to+0xc7d/0x1450 [ 1716.985970][ T31] ? __pfx_kthread+0x10/0x10 [ 1716.985997][ T31] ret_from_fork_asm+0x1a/0x30 [ 1716.986049][ T31] [ 1716.986070][ T31] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1716.986090][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1716.986120][ T31] Tainted: [L]=SOFTLOCKUP [ 1716.986129][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1716.986145][ T31] Workqueue: usb_hub_wq hub_event [ 1716.986172][ T31] Call Trace: [ 1716.986181][ T31] [ 1716.986191][ T31] vpanic+0x56c/0xa60 [ 1716.986237][ T31] ? __pfx__printk+0x10/0x10 [ 1716.986262][ T31] ? __pfx_vpanic+0x10/0x10 [ 1716.986293][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 1716.986338][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1716.986380][ T31] panic+0xc5/0xd0 [ 1716.986412][ T31] ? __pfx_panic+0x10/0x10 [ 1716.986457][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1716.986484][ T31] __warn+0x315/0x4f0 [ 1716.986516][ T31] ? kcov_remote_start+0x5d8/0x710 [ 1716.986546][ T31] ? kcov_remote_start+0x5d8/0x710 [ 1716.986575][ T31] __report_bug+0x29a/0x540 [ 1716.986634][ T31] ? kcov_remote_start+0x5d8/0x710 [ 1716.986663][ T31] ? __pfx___report_bug+0x10/0x10 [ 1716.986684][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1716.986713][ T31] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1716.986782][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1716.986822][ T31] ? kcov_remote_start+0x5d8/0x710 [ 1716.986849][ T31] report_bug+0x16a/0x220 [ 1716.986873][ T31] ? kcov_remote_start+0x5d8/0x710 [ 1716.986899][ T31] ? kcov_remote_start+0x5da/0x710 [ 1716.986925][ T31] handle_bug+0x9c/0x200 [ 1716.986984][ T31] exc_invalid_op+0x1a/0x50 [ 1716.987011][ T31] asm_exc_invalid_op+0x1a/0x20 [ 1716.987055][ T31] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1716.987083][ T31] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 e3 d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 8a 3c 5f 09 89 c0 48 c7 c7 a8 33 4f [ 1716.987103][ T31] RSP: 0018:ffffc90000a5f7c8 EFLAGS: 00010202 [ 1716.987123][ T31] RAX: 0000000000000002 RBX: ffff88801d2a8000 RCX: 0000000000000000 [ 1716.987139][ T31] RDX: 0000000000000000 RSI: ffffffff8ba67560 RDI: ffffffff8ba67520 [ 1716.987155][ T31] RBP: ffffc90000a5fad0 R08: ffffffff8b2601d0 R09: ffffffff8ddcb9c0 [ 1716.987172][ T31] R10: dffffc0000000000 R11: fffffbfff1ed4cf7 R12: ffff888029302000 [ 1716.987191][ T31] R13: dffffc0000000000 R14: 0100000000000008 R15: ffff8880292ee000 [ 1716.987217][ T31] ? rt_spin_lock+0x1e0/0x400 [ 1716.987256][ T31] ? kcov_remote_start+0xe0/0x710 [ 1716.987287][ T31] hub_event+0x150/0x4f60 [ 1716.987322][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1716.987351][ T31] ? look_up_lock_class+0x57/0x110 [ 1716.987375][ T31] ? register_lock_class+0x31/0x2e0 [ 1716.987395][ T31] ? update_load_avg+0x1b0/0x1ec0 [ 1716.987421][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1716.987460][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1716.987497][ T31] ? __pfx_hub_event+0x10/0x10 [ 1716.987535][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1716.987565][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1716.987598][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1716.987665][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1716.987706][ T31] ? assign_work+0x3d5/0x5e0 [ 1716.987743][ T31] worker_thread+0xa53/0xfc0 [ 1716.987804][ T31] kthread+0x388/0x470 [ 1716.987829][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1716.987859][ T31] ? __pfx_kthread+0x10/0x10 [ 1716.987885][ T31] ret_from_fork+0x51e/0xb90 [ 1716.987922][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1716.987960][ T31] ? __switch_to+0xc7d/0x1450 [ 1716.987993][ T31] ? __pfx_kthread+0x10/0x10 [ 1716.988019][ T31] ret_from_fork_asm+0x1a/0x30 [ 1716.988060][ T31] [ 1716.988649][ T31] Kernel Offset: disabled